NVD公開月 2026-10
13,798 件。全詳細JSONは data/nvd/、個別Markdownは重点対象のみ（全件生成も可能）。
| CVE | 状態 | KEV | CWE | 概要（先頭180文字） |
|---|---|---|---|---|
| CVE-2012-20002 | Deferred | 未確認 | CWE-22 | TinyMCE Thumbnail Gallery plugin for WordPress before 1.1.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the href param |
| CVE-2012-20003 | Deferred | 未確認 | CWE-79 | Custom Tables plugin for WordPress before 3.4.6 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the unsaniti |
| CVE-2012-20004 | Deferred | 未確認 | CWE-79 | K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized inp |
| CVE-2012-20005 | Deferred | 未確認 | CWE-79 | SocialFit plugin for WordPress through 1.2.2 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the unsanitized msg |
| CVE-2013-10076 | Deferred | 未確認 | CWE-191 | ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this und |
| CVE-2014-125130 | Deferred | 未確認 | CWE-22 | CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability that allows remote attac |
| CVE-2014-125131 | Deferred | 未確認 | CWE-79 | DedeCMS 5.6 and 5.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input to the adminDirHan |
| CVE-2014-125132 | Deferred | 未確認 | CWE-79 | Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' param |
| CVE-2014-125133 | Deferred | 未確認 | CWE-22 | NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter o |
| CVE-2014-125134 | Deferred | 未確認 | CWE-22 | ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of / |
| CVE-2015-20123 | Deferred | 未確認 | CWE-22 | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by passing unsanitized |
| CVE-2015-20124 | Deferred | 未確認 | CWE-22 | Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the unsanit |
| CVE-2015-20125 | Deferred | 未確認 | CWE-22 | Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated attackers to download files through the unsanitized 'file' p |
| CVE-2015-20128 | Deferred | 未確認 | CWE-89 | FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries through the CityId parameter. Attackers can s |
| CVE-2016-15060 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The |
| CVE-2016-20098 | Awaiting Analysis | 未確認 | CWE-79 | Moderator Toolbox (reddit-moderator-toolbox) before 4.0.14 contains a stored cross-site scripting vulnerability in the removalreasons module, which inserts subreddit toolbox wiki f |
| CVE-2016-20099 | Deferred | 未確認 | CWE-835 | L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c that allows attackers to hang applications via crafted input files. Att |
| CVE-2016-20100 | Deferred | 未確認 | CWE-22 | Memphis Documents Library plugin for WordPress before 3.1.6 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the mdocs-img- |
| CVE-2016-20101 | Deferred | 未確認 | CWE-98 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspat |
| CVE-2016-20102 | Deferred | 未確認 | CWE-79 | JavaMelody before 1.60.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted values in the graph par |
| CVE-2016-20103 | Deferred | 未確認 | CWE-22 | Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files via the 'file' parameter. Attacke |
| CVE-2016-20104 | Deferred | 未確認 | CWE-22 | EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' pa |
| CVE-2017-20283 | Awaiting Analysis | 未確認 | CWE-787 | NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer |
| CVE-2017-20285 | Deferred | 未確認 | CWE-470, CWE-502 | YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes. A perl/hash:Class tag blesses a hash into the class it names. The do |
| CVE-2017-20286 | Deferred | 未確認 | CWE-787 | DevIL through 1.8.0 contains a heap-based buffer overflow in iGetPalette() in il_gif.cpp that allows attackers to write beyond a 768-byte palette buffer when loading GIF images. At |
| CVE-2017-20287 | Deferred | 未確認 | CWE-22 | Javo Spot theme for WordPress before 3.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the fn parameter of the jvfrm_s |
| CVE-2017-20288 | Deferred | 未確認 | CWE-79 | QCubed 2.2.0 through 3.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the installation_path parameter. |
| CVE-2017-20289 | Deferred | 未確認 | CWE-98 | Broadstreet Ad Widget plugin for WordPress 2.2.0 before 2.12.0 contains a local file inclusion vulnerability that allows authenticated users to execute attacker-chosen PHP files by |
| CVE-2017-20290 | Deferred | 未確認 | CWE-79 | Discourse 1.9.0.beta2 before 1.9.0.beta13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the email paramete |
| CVE-2018-25438 | Deferred | 未確認 | CWE-22 | Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulat |
| CVE-2018-25439 | Deferred | 未確認 | CWE-22 | MetInfo CMS 6.0.0 before 6.1.1 contains a path traversal vulnerability in /include/thumb.php that allows unauthenticated attackers to read arbitrary files via the dir parameter. At |
| CVE-2019-25777 | Deferred | 未確認 | CWE-502, CWE-914 | YAML versions before 1.27_001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a |
| CVE-2019-25778 | Deferred | 未確認 | CWE-89 | SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist[] array pa |
| CVE-2019-25779 | Deferred | 未確認 | CWE-22 | WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Att |
| CVE-2020-37278 | Deferred | 未確認 | CWE-918 | Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL to |
| CVE-2020-37279 | Deferred | 未確認 | CWE-78 | easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting shell metacharacters into source paths, des |
| CVE-2020-37280 | Deferred | 未確認 | CWE-789 | cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array and map lengths without checking remaining input. Remote attackers ca |
| CVE-2020-37281 | Deferred | 未確認 | CWE-1394 | Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs signed |
| CVE-2020-37282 | Deferred | 未確認 | CWE-78 | office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a crafted fileName to generatePdf() or generate |
| CVE-2020-37284 | Deferred | 未確認 | CWE-79 | Sickbeard through build-507 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the pattern parameter of /config |
| CVE-2020-37286 | Deferred | 未確認 | CWE-787 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls appear inside tuples or nested call |
| CVE-2020-37287 | Deferred | 未確認 | CWE-131 | Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex types with non-base members are passed as arguments. Contracts |
| CVE-2020-37288 | Awaiting Analysis | 未確認 | CWE-670 | Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal function called two or more internal calls deep, producing an inva |
| CVE-2020-37289 | Deferred | 未確認 | CWE-20 | Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to be stored in uint256 variables without bounds checking. Mali |
| CVE-2021-48009 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2021-48011 | Deferred | 未確認 | CWE-22 | Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments. Attac |
| CVE-2021-48012 | Deferred | 未確認 | CWE-1321 | fast-toml through 0.5.4 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying TOML containing __proto__, constructor or prototy |
| CVE-2021-48013 | Deferred | 未確認 | CWE-22 | Weaver E-cology 8.0 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files through the fpath parameter of the /weaver/ln.FileDownload |
| CVE-2021-48014 | Deferred | 未確認 | CWE-22 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_svg operation that allows unauthenticated attackers to write arbitrary files via t |
| CVE-2021-48015 | Deferred | 未確認 | CWE-22 | JeeWMS before commit 0a610e8 contains an unauthenticated path traversal vulnerability that allows remote attackers to read arbitrary files via the dbPath parameter. Attackers can s |
| CVE-2021-48016 | Deferred | 未確認 | CWE-94 | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where the HTTP Referer header is written into a DedeTemplate string and included. Unauthenticate |
| CVE-2021-48017 | Deferred | 未確認 | CWE-22 | OrbiTeam BSCW Server 5.x before 5.2.5 and 7.x before 7.4.4 contains an unauthenticated path traversal vulnerability in the style_name parameter of the theme operation. Attackers ca |
| CVE-2021-48018 | Deferred | 未確認 | CWE-787 | Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as contract storage variables. When a function using @nonreentrant |
| CVE-2021-48019 | Deferred | 未確認 | CWE-805 | Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed 4096-byte RETURNDATASIZE rather than the actual return data size. |
| CVE-2021-48020 | Deferred | 未確認 | CWE-787 | Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are performed inside arrays. Contra |
| CVE-2022-51020 | Deferred | 未確認 | CWE-352 | Flower before 2.2.0 contains a cross-site request forgery vulnerability because Tornado xsrf_cookies is disabled and the OAuth session cookie lacks SameSite. Attackers can lure aut |
| CVE-2022-51021 | Deferred | 未確認 | CWE-89 | NotificationX plugin for WordPress 2.0.0 before 2.3.12 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by supply |
| CVE-2022-51022 | Deferred | 未確認 | CWE-22 | YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read |
| CVE-2022-51023 | Deferred | 未確認 | CWE-89 | PHPOK 4.5.000 before 5.4.081 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate ORDER BY clauses via the sort parameter. Attackers can send |
| CVE-2022-51024 | Deferred | 未確認 | CWE-22 | Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename param |
| CVE-2022-51025 | Deferred | 未確認 | CWE-22 | Penta Security WAPPLES 4.0.54.1, 5.0, and 6.0 contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files via the name parameter of /web |
| CVE-2022-51026 | Deferred | 未確認 | CWE-290 | Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-suppli |
| CVE-2023-25996 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows Retrieve Embedded Sensitive Data |
| CVE-2023-32198 | Awaiting Analysis | 未確認 | CWE-295 | A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing |
| CVE-2023-38375 | Awaiting Analysis | 未確認 | CWE-79 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the |
| CVE-2023-42990 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42991 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42992 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42993 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42994 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42995 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42996 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42997 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42998 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-42999 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2023-54404 | Awaiting Analysis | 未確認 | CWE-1188, CWE-770 | Zod schema-validation library contains an uncontrolled resource consumption vulnerability that allows attackers to exhaust memory by submitting a large array, set or map to an appl |
| CVE-2023-54405 | Deferred | 未確認 | CWE-434 | H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an unauthenticated arbitrary file upload vulnerability in the /cas/fileUpload/upload |
| CVE-2023-54406 | Deferred | 未確認 | CWE-372 | Frappe before 14.59.0 and 15.x before 15.5.0 contains a sandbox flaw where the frappe.flags.in_safe_exec global flag can become False during Server Script execution when one server |
| CVE-2023-54407 | Deferred | 未確認 | CWE-532 | Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log access to view secrets stored in local variables captured in tracebacks |
| CVE-2023-54408 | Deferred | 未確認 | CWE-79 | Frappe before 13.52.0 and 14.x before 14.31.0 contains an HTML injection vulnerability caused by weak escaping of user-supplied content rendered in pages. Attackers can submit craf |
| CVE-2023-54409 | Deferred | 未確認 | CWE-80 | Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2text function weakly sanitizes user input. Authenticated attackers can |
| CVE-2023-54410 | Deferred | 未確認 | CWE-285 | Frappe before 13.22.0 contains an improper authorization vulnerability that allows authenticated users to rename documents by exploiting a missing permission check. Attackers can i |
| CVE-2023-54411 | Deferred | 未確認 | CWE-290 | Frappe framework before 13.32.0 uses weak authentication for print view access, because the print view key can be derived from data exposed by other whitelisted API endpoints. Atta |
| CVE-2023-54412 | Deferred | 未確認 | CWE-284 | Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest user to create |
| CVE-2023-54413 | Deferred | 未確認 | CWE-79 | WPML Multilingual CMS plugin for WordPress before 4.6.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying |
| CVE-2023-5648 | Analyzed | 未確認 | CWE-79 | In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks |
| CVE-2023-5649 | Analyzed | 未確認 | CWE-20 | An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like spe |
| CVE-2023-7356 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Copy the content of a Periodic Advertis | |
| CVE-2024-22031 | Awaiting Analysis | 未確認 | CWE-863 | A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing p |
| CVE-2024-2323 | Awaiting Analysis | 未確認 | CWE-307 | The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. This oversight allows an attacker |
| CVE-2024-34319 | Deferred | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application server to make unintended DNS and |
| CVE-2024-34320 | Deferred | 未確認 | CWE-284 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints. |
| CVE-2024-34321 | Deferred | 未確認 | CWE-79 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Notes parameter in the Notes.aspx endpoint. |
| CVE-2024-34323 | Deferred | 未確認 | CWE-639 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to |
| CVE-2024-34324 | Deferred | 未確認 | CWE-384 | An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-character string into the ASP.NET_SessionId cookie |
| CVE-2024-34326 | Deferred | 未確認 | CWE-79 | ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the PageTitle/Alert/MsgType parameter in the errorHandler.asp |
| CVE-2024-4412 | Awaiting Analysis | 未確認 | CWE-94 | The software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This can lead to the execution of arbi |
| CVE-2024-4457 | Awaiting Analysis | 未確認 | CWE-78 | The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that ca |
| CVE-2024-4989 | Awaiting Analysis | 未確認 | CWE-601 | The callback URL parameter in WSO2 API Manager fails to validate user-supplied input, allowing it to be controlled by malicious actors. Exploitation of this vulnerability could le |
| CVE-2024-5139 | Awaiting Analysis | 未確認 | CWE-79 | The Authentication Endpoint accepts user-supplied input without sufficient encoding, allowing for the injection of malicious JavaScript payloads. This vulnerability can be triggere |
| CVE-2024-54581 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54582 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54583 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54584 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54585 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54586 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54587 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54588 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54589 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54590 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54591 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54592 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54593 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54594 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54595 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54596 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54597 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54598 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54599 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54600 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54601 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54602 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54603 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54604 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54605 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54606 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54607 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54608 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54609 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54610 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54611 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54612 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54613 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54614 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54615 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54616 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54617 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54618 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54619 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54620 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54621 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54622 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54623 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54624 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54625 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54626 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54627 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54628 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54629 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54630 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54631 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54632 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54633 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54634 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54635 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54636 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54637 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54638 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54639 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54640 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54641 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54642 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54643 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54644 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54645 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54646 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54647 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54648 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54649 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54650 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54651 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54652 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54653 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54654 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54655 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54656 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-54657 | Rejected | 未確認 | Rejected reason: This candidate was in a CNA pool that was not assigned to any issues. | |
| CVE-2024-5563 | Deferred | 未確認 | CWE-306 | Due to an incomplete implementation, reCaptcha is not applied to certain authentication flows even when the reCaptcha option is enabled. This oversight permits attackers to bypass |
| CVE-2024-58388 | Awaiting Analysis | 未確認 | CWE-22 | Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by manip |
| CVE-2024-58389 | Deferred | 未確認 | CWE-601 | HoloViz Panel from 1.2.2 before 1.9.0 contains an open redirect vulnerability in panel/auth.py that allows remote attackers to redirect users by supplying an unvalidated next query |
| CVE-2024-58390 | Deferred | 未確認 | CWE-269 | Frappe before 14.81.4 and 15.x before 15.41.0 contains an improper privilege management vulnerability involving a certain document action that permits escalation from the Website U |
| CVE-2024-58391 | Deferred | 未確認 | CWE-79 | Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. Remote a |
| CVE-2024-58392 | Deferred | 未確認 | CWE-125 | PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on |
| CVE-2024-58393 | Deferred | 未確認 | CWE-89 | i-Netsolution Readymade Unilevel Ecommerce MLM (2024-03-15 build) contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries throu |
| CVE-2024-58394 | Deferred | 未確認 | CWE-79 | Retool before 3.88.0 contains a cross-site scripting vulnerability that allows unauthenticated attackers to execute scripts by proxying malicious SVG files through /api/imageProxy. |
| CVE-2024-58396 | Deferred | 未確認 | CWE-22 | YouDataSum CPAS Audit Management System V4 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the fileId paramete |
| CVE-2024-58397 | Deferred | 未確認 | CWE-125 | MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters() that allows attackers to read past heap allocations via crafted QuickTime chapter samples. At |
| CVE-2024-58398 | Awaiting Analysis | 未確認 | CWE-601 | Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improper |
| CVE-2024-6423 | Awaiting Analysis | 未確認 | CWE-20 | The product failed to enforce validation constraints on user-supplied input in URL parameters, allowing sensitive data to be passed to flows where it was not intended to be process |
| CVE-2024-7478 | Awaiting Analysis | 未確認 | CWE-204 | When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the existence or validity of usernames during authentication attempts. This |
| CVE-2024-8122 | Deferred | 未確認 | CWE-613 | The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid |
| CVE-2025-0326 | Awaiting Analysis | 未確認 | CWE-613 | The system fails to invalidate existing access tokens associated with sub-organization users during sensitive account management operations such as password reset, role change, or |
| CVE-2025-10149 | Awaiting Analysis | 未確認 | CWE-281, CWE-668 | The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated |
| CVE-2025-12828 | Deferred | 未確認 | CWE-79 | The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3.2 due to ins |
| CVE-2025-13173 | Awaiting Analysis | 未確認 | CWE-613 | Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initiated. This occurs when the session-bound |
| CVE-2025-13591 | Awaiting Analysis | 未確認 | CWE-203 | The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers to differentiate |
| CVE-2025-14123 | Deferred | 未確認 | CWE-269 | The Redux Framework plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.5.11. This is due to the plugin saving arbitrary meta keys un |
| CVE-2025-15591 | Awaiting Analysis | 未確認 | CWE-79 | Cross-site Scripting (XSS) in the Forums feature of OpenText Content Management Content Server could allow a bad actor to inject malicious code into a Forums web page. |
| CVE-2025-15643 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Fernandez Adsmonetizer adsensei-b30 allows Reflected XSS.This issue affec |
| CVE-2025-15700 | Deferred | 未確認 | CWE-434 | The AWP Classifieds WordPress plugin before 4.4.9 does not validate the type of files extracted from an uploaded ZIP archive during its listing-import feature, allowing users with |
| CVE-2025-15703 | Deferred | 未確認 | CWE-79 | The HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an admin-area settings page, allowin |
| CVE-2025-23390 | Awaiting Analysis | 未確認 | CWE-295 | A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’ |
| CVE-2025-27895 | Awaiting Analysis | 未確認 | CWE-79 | IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScr |
| CVE-2025-27896 | Awaiting Analysis | 未確認 | CWE-79 | IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScr |
| CVE-2025-27897 | Awaiting Analysis | 未確認 | CWE-79 | IBM Db2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScr |
| CVE-2025-27902 | Awaiting Analysis | 未確認 | CWE-1022 | IBM DB2 Recovery Expert for Linux, UNIX and Windows 5.5 IF 2 uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to ex |
| CVE-2025-29895 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-29896 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a d |
| CVE-2025-29897 | Awaiting Analysis | 未確認 | CWE-120, CWE-121 | A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerabi |
| CVE-2025-30043 | Deferred | 未確認 | CWE-306 | CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated |
| CVE-2025-30045 | Deferred | 未確認 | CWE-94 | CGM CLININET is vulnerable to Code Injection in the ConvExpr function, which processes Perl expressions into RTF document content. Due to improper control of the code evaluated fro |
| CVE-2025-30046 | Deferred | 未確認 | CWE-250 | In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data received |
| CVE-2025-30047 | Deferred | 未確認 | CWE-502 | CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted data. The server exposes an HTTP-based API, used by the administrative module, that excha |
| CVE-2025-30049 | Deferred | 未確認 | CWE-916 | The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3 |
| CVE-2025-30050 | Deferred | 未確認 | CWE-94 | CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically imports the module specified as a query parameter and executes code from untrusted data p |
| CVE-2025-30051 | Deferred | 未確認 | CWE-732 | The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permission |
| CVE-2025-30052 | Deferred | 未確認 | CWE-290 | The rsyncd service of the CGM CLININET is vulnerable to Authentication Bypass via IP spoofing. Access is granted based solely on the client's source IP address. An attacker able to |
| CVE-2025-30053 | Deferred | 未確認 | CWE-306 | The CGM CLININET application runs the cgm-updater process listening on an open network port without any authentication. The vulnerability was confirmed to affect versions up to |
| CVE-2025-30054 | Deferred | 未確認 | CWE-732 | CGM CLININET is vulnerable to local privilege escalation. The service that processes incoming HL7 messages runs with root privileges, but due to incorrect permissions, its scripts |
| CVE-2025-31699 | Awaiting Analysis | 未確認 | CWE-444 | Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully sent, including whe |
| CVE-2025-31980 | Analyzed | 未確認 | CWE-20 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, e |
| CVE-2025-36061 | Awaiting Analysis | 未確認 | CWE-770 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using |
| CVE-2025-36069 | Awaiting Analysis | 未確認 | CWE-613 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system. |
| CVE-2025-36252 | Awaiting Analysis | 未確認 | CWE-613 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to imperson |
| CVE-2025-3778 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-41753 | Awaiting Analysis | 未確認 | CWE-22 | The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended dire |
| CVE-2025-45528 | Awaiting Analysis | 未確認 | An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF | |
| CVE-2025-45871 | Deferred | 未確認 | CWE-89 | LogicalDOC Enterprise up to and for 9.1.1 is vulnerable to blind SQL injection in the WorkflowsDataServlet component, allowing authenticated user to manipulate SQL queries via craf |
| CVE-2025-46773 | Awaiting Analysis | 未確認 | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAna |
| CVE-2025-52097 | Deferred | 未確認 | Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string para | |
| CVE-2025-52290 | Awaiting Analysis | 未確認 | CWE-400 | A NULL pointer dereference in the avpriv_h264_has_num_reorder_frames function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service (DoS) via process |
| CVE-2025-55640 | Deferred | 未確認 | A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file | |
| CVE-2025-55653 | Deferred | 未確認 | CWE-369 | GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c). Processing a crafted MP4 file containing a zero-denominator fr |
| CVE-2025-55654 | Deferred | 未確認 | CWE-416 | A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted |
| CVE-2025-55667 | Deferred | 未確認 | CWE-119 | A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) vi |
| CVE-2025-55702 | Awaiting Analysis | 未確認 | CWE-444 | When a client sends a POST with Expect: 100-continue and the origin answers before reading the body, Apache Traffic Server parses the unread body left on the client connection as t |
| CVE-2025-57739 | Awaiting Analysis | 未確認 | CWE-89 | An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7. |
| CVE-2025-58403 | Deferred | 未確認 | CWE-79 | CGM CLININET is vulnerable to Reflected Cross-Site Scripting (XSS) due to improper neutralization of user-supplied data. A remote unauthenticated attacker can craft a malicious URL |
| CVE-2025-58771 | Awaiting Analysis | 未確認 | CWE-190 | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerability could lead to buff |
| CVE-2025-58772 | Awaiting Analysis | 未確認 | CWE-120 | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this vulnerability could lead to buffer ove |
| CVE-2025-58773 | Awaiting Analysis | 未確認 | CWE-787 | AMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this vulnerability could lead to buffer overflo |
| CVE-2025-58774 | Awaiting Analysis | 未確認 | CWE-805 | AMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful exploitation of this vulnerability could l |
| CVE-2025-60469 | Awaiting Analysis | 未確認 | A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service ( | |
| CVE-2025-60475 | Awaiting Analysis | 未確認 | A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a | |
| CVE-2025-60476 | Awaiting Analysis | 未確認 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via suppl | |
| CVE-2025-60478 | Awaiting Analysis | 未確認 | A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supp | |
| CVE-2025-60479 | Awaiting Analysis | 未確認 | A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supp | |
| CVE-2025-60480 | Deferred | 未確認 | CWE-122 | A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Den |
| CVE-2025-60482 | Deferred | 未確認 | A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of | |
| CVE-2025-60487 | Awaiting Analysis | 未確認 | A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying | |
| CVE-2025-60489 | Awaiting Analysis | 未確認 | A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) vi | |
| CVE-2025-60490 | Awaiting Analysis | 未確認 | A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Servic | |
| CVE-2025-60491 | Awaiting Analysis | 未確認 | A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a | |
| CVE-2025-60492 | Awaiting Analysis | 未確認 | CWE-121 | A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a craft |
| CVE-2025-60493 | Awaiting Analysis | 未確認 | A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying | |
| CVE-2025-60494 | Awaiting Analysis | 未確認 | A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) | |
| CVE-2025-60496 | Awaiting Analysis | 未確認 | A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) vi | |
| CVE-2025-60497 | Awaiting Analysis | 未確認 | CWE-119 | A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP |
| CVE-2025-61560 | Awaiting Analysis | 未確認 | CWE-362 | A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force at |
| CVE-2025-64391 | Awaiting Analysis | 未確認 | CWE-1386 | This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it. |
| CVE-2025-64392 | Awaiting Analysis | 未確認 | CWE-79 | This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link. |
| CVE-2025-64393 | Awaiting Analysis | 未確認 | CWE-502 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server. |
| CVE-2025-65200 | Awaiting Analysis | 未確認 | An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the temp | |
| CVE-2025-6623 | Awaiting Analysis | 未確認 | CWE-79 | The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts. Successful exploi |
| CVE-2025-66272 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of |
| CVE-2025-66275 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of |
| CVE-2025-66969 | Deferred | 未確認 | CWE-190 | Integer overflow in OpenModSim (<=1.11.0), leading to denial of service |
| CVE-2025-68403 | Awaiting Analysis | 未確認 | CWE-15 | An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit |
| CVE-2025-68404 | Awaiting Analysis | 未確認 | CWE-367 | A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise t |
| CVE-2025-69723 | Deferred | 未確認 | A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL. | |
| CVE-2025-7043 | Awaiting Analysis | 未確認 | CWE-862 | The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use for consuming protected resourc |
| CVE-2025-70515 | Deferred | 未確認 | CWE-79 | The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied data. The lack of sanitization allows for the inject |
| CVE-2025-70516 | Deferred | 未確認 | CWE-306 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyon |
| CVE-2025-70517 | Deferred | 未確認 | CWE-352 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the application |
| CVE-2025-70518 | Deferred | 未確認 | CWE-77 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows a |
| CVE-2025-70519 | Deferred | 未確認 | CWE-79 | The device log component of Fanvil x7a firmware version 2.6.0.1182 does not properly sanitize or encode reflected user supplied data. The lack of sanitization allows for the inject |
| CVE-2025-70520 | Deferred | 未確認 | CWE-306 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless users. The lack of restrictions grants anyon |
| CVE-2025-70521 | Deferred | 未確認 | CWE-77 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely. The lack of secure user input handling allows a |
| CVE-2025-70522 | Deferred | 未確認 | CWE-352 | The request handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce any cross-origin resource protection for any state-changing request performed against the application |
| CVE-2025-71383 | Deferred | 未確認 | CWE-20 | Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field. This occ |
| CVE-2025-71384 | Deferred | 未確認 | CWE-121 | Dbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP com |
| CVE-2025-71427 | Deferred | 未確認 | CWE-22 | Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolu |
| CVE-2025-71428 | Deferred | 未確認 | CWE-89 | Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the username paramete |
| CVE-2025-71429 | Deferred | 未確認 | CWE-78 | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in tools/uvr5/vr.py that allows unauthenticated attackers to execute commands via output folder path |
| CVE-2025-71430 | Deferred | 未確認 | CWE-79 | Frappe before 14.99.10 and 15.x before 15.91.1 contains a stored cross-site scripting vulnerability in the leaderboard page because user names are rendered without proper neutraliz |
| CVE-2025-71431 | Deferred | 未確認 | CWE-90 | Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoints do not sanitize user-supplied parameters before using them in LDAP |
| CVE-2025-71432 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 14.92.1 and 15.x before 15.83.0 contains a reflected cross-site scripting vulnerability due to missing input validation on a certain page, allowing arbitrary |
| CVE-2025-71433 | Deferred | 未確認 | CWE-862 | Kaneo before 2.1.6 contains a missing authorization vulnerability that allows authenticated users to access other workspaces by supplying project, task, label or workspace identifi |
| CVE-2025-71434 | Deferred | 未確認 | CWE-89 | Weaver E-cology 8.0, 9.0, and 10.0 prior to 10.76 contains an unauthenticated SQL injection vulnerability in the /api/doc/out/more/list endpoint via the elementmore parameter with |
| CVE-2025-71435 | Awaiting Analysis | 未確認 | CWE-613 | Coder before 2.23.0 contains a session expiration bypass vulnerability that allows authenticated users to retain access after OIDC token expiry when no refresh token is issued. Use |
| CVE-2025-71436 | Awaiting Analysis | 未確認 | CWE-122 | Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag |
| CVE-2025-71437 | Awaiting Analysis | 未確認 | CWE-22 | Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that allows a specially crafted sequence of symlinks to redirect file |
| CVE-2025-71438 | Awaiting Analysis | 未確認 | An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS) via supplying a craft | |
| CVE-2025-7203 | Awaiting Analysis | 未確認 | CWE-312 | The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs be |
| CVE-2025-8352 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption (CPU and RAM), leading to conditions for a Denial-of-Servi |
| CVE-2025-8457 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2025-9373 | Deferred | 未確認 | CWE-79 | The PeproDev Branches Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 3.0.1 due to insufficient input sanitization and o |
| CVE-2026-0198 | Awaiting Analysis | 未確認 | CWE-862 | In is_pd_allowed of gem_msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privil |
| CVE-2026-0311 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to i |
| CVE-2026-0312 | Awaiting Analysis | 未確認 | CWE-22 | Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem. |
| CVE-2026-0313 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands |
| CVE-2026-0314 | Awaiting Analysis | 未確認 | CWE-843 | A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The Globa |
| CVE-2026-0315 | Awaiting Analysis | 未確認 | CWE-426 | A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-admin |
| CVE-2026-0316 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious authenticated administrator to store or execute a JavaScript payload us |
| CVE-2026-0317 | Awaiting Analysis | 未確認 | CWE-754 | A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only administrator role to cause a denial of service (DoS) conditi |
| CVE-2026-0318 | Awaiting Analysis | 未確認 | CWE-754 | A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software on Panorama enables an attacker to cause a denial of service |
| CVE-2026-0319 | Awaiting Analysis | 未確認 | CWE-754 | An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session usin |
| CVE-2026-0320 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability in Palo Alto Networks PAN-OS® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root u |
| CVE-2026-0321 | Awaiting Analysis | 未確認 | CWE-754 | Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sendi |
| CVE-2026-0322 | Analyzed | 掲載 | CWE-94 | A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with network access to execute arbi |
| CVE-2026-0461 | Awaiting Analysis | 未確認 | CWE-787 | Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade (DFU) download r |
| CVE-2026-0482 | Awaiting Analysis | 未確認 | CWE-787 | In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow |
| CVE-2026-0893 | Awaiting Analysis | 未確認 | CWE-213 | AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of thi |
| CVE-2026-0993 | Deferred | 未確認 | CWE-120 | SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an ov |
| CVE-2026-100102 | Awaiting Analysis | 未確認 | CWE-489 | Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to this interface can execute arbitrary code a |
| CVE-2026-100103 | Awaiting Analysis | 未確認 | CWE-1392 | Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access |
| CVE-2026-100104 | Analyzed | 未確認 | CWE-918 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-100106 | Deferred | 未確認 | CWE-79 | The FiboSearch – Ajax Search for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'purchased_plan' parameter in all versions up to, and includi |
| CVE-2026-100107 | Deferred | 未確認 | CWE-79 | The Kubio AI Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.9.2 due to insuffici |
| CVE-2026-100108 | Deferred | 未確認 | CWE-79 | The Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form (containing share_url)' parameter in all versions up to, and including, 1.3 |
| CVE-2026-100111 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-100112 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-100113 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-100114 | Analyzed | 未確認 | CWE-284 | CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to byp |
| CVE-2026-100115 | Analyzed | 未確認 | CWE-284 | CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to byp |
| CVE-2026-100116 | Analyzed | 未確認 | CWE-295 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabilit |
| CVE-2026-100117 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-100118 | Analyzed | 未確認 | CWE-295 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabilit |
| CVE-2026-100119 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-100120 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-100121 | Analyzed | 未確認 | CWE-295 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabilit |
| CVE-2026-100122 | Analyzed | 未確認 | CWE-295 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabilit |
| CVE-2026-100123 | Analyzed | 未確認 | CWE-295 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabilit |
| CVE-2026-100124 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-100125 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-100126 | Awaiting Analysis | 未確認 | CWE-125 | Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive inf |
| CVE-2026-100127 | Awaiting Analysis | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-100128 | Awaiting Analysis | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-100129 | Awaiting Analysis | 未確認 | CWE-787 | Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires use |
| CVE-2026-100130 | Awaiting Analysis | 未確認 | CWE-125 | Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos |
| CVE-2026-100131 | Awaiting Analysis | 未確認 | CWE-125 | Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclos |
| CVE-2026-100132 | Awaiting Analysis | 未確認 | CWE-125 | Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sen |
| CVE-2026-100133 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicio |
| CVE-2026-100134 | Awaiting Analysis | 未確認 | CWE-787 | Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re |
| CVE-2026-100135 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-100136 | Analyzed | 未確認 | CWE-190 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera |
| CVE-2026-100137 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-100138 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-100139 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-100142 | Deferred | 未確認 | CWE-639 | The FluentCart A New Era of eCommerce WordPress plugin before 2.2.0 does not verify that a stored customer address selected during checkout belongs to the requester, allowing unau |
| CVE-2026-100145 | Deferred | 未確認 | CWE-863 | The Synchrony Financing WordPress plugin before 1.1.2 does not properly authorise requests to one of its REST routes that modifies WooCommerce orders, allowing unauthenticated atta |
| CVE-2026-100147 | Deferred | 未確認 | CWE-79 | The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'shipping_first_name' parameter in all versions up |
| CVE-2026-100148 | Deferred | 未確認 | CWE-79 | The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'reviews[].text' parameter in all versions up to, and including, 7.1. |
| CVE-2026-100149 | Deferred | 未確認 | CWE-200 | The WPZOOM Connect: AI Chat, Click to Chat, Social Icons & Share Buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, |
| CVE-2026-100152 | Deferred | 未確認 | CWE-94 | The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to arbitrary shortcode executi |
| CVE-2026-100153 | Deferred | 未確認 | CWE-79 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY_STRING / REQUEST_URI' parameter in all versions up to, and including, 1.4.5 due to |
| CVE-2026-100157 | Deferred | 未確認 | CWE-94 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing use |
| CVE-2026-100158 | Deferred | 未確認 | CWE-79 | The SQL Chart Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'X-axis column value ($value->$xarg_s from $wpdb->get_results())' parameter in all v |
| CVE-2026-100159 | Deferred | 未確認 | CWE-94 | The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is due to the ays_popup_get_user_ip() function reading the client |
| CVE-2026-100161 | Deferred | 未確認 | CWE-79 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'wcpr_image_upload_id' parameter in all versions up to, and in |
| CVE-2026-100163 | Deferred | 未確認 | CWE-287 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.7.2 |
| CVE-2026-100169 | Deferred | 未確認 | CWE-287 | Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent acce |
| CVE-2026-100178 | Deferred | 未確認 | CWE-79 | The WPAdverts – Classifieds Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'adverts_location' parameter in all versions up to, and including, 2.3. |
| CVE-2026-100179 | Deferred | 未確認 | CWE-79 | The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via |
| CVE-2026-100180 | Deferred | 未確認 | CWE-79 | The Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all ve |
| CVE-2026-100182 | Deferred | 未確認 | CWE-79 | The Download Monitor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Origin postMessage to Admin Editor in all versions up to, and including, 5.2.10 due |
| CVE-2026-100184 | Deferred | 未確認 | CWE-79 | The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via |
| CVE-2026-100185 | Deferred | 未確認 | CWE-79 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'phone' Listing Field in all version |
| CVE-2026-100186 | Deferred | 未確認 | CWE-79 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via First Name Fiel |
| CVE-2026-100193 | Deferred | 未確認 | CWE-79 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and includi |
| CVE-2026-100196 | Deferred | 未確認 | CWE-79 | The LazyLoad Plugin – Lazy Load Images, Videos, and Iframes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment_content (rendered inline into the pag |
| CVE-2026-100197 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-100200 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100201 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100202 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100203 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100205 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100207 | Undergoing Analysis | 未確認 | CWE-78 | Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to execute code locally. |
| CVE-2026-100209 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100210 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100211 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100212 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100214 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in Dynamics Business Central allows an authorized attacker to execute code over a network. |
| CVE-2026-100215 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally. |
| CVE-2026-100216 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100217 | Analyzed | 未確認 | CWE-862 | Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100218 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100219 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100220 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media Video Decoder allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100222 | Analyzed | 未確認 | CWE-122, CWE-191 | Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-100225 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-100227 | Analyzed | 未確認 | CWE-362 | Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The JAX-RS XML Signature interceptors (XmlSigInHandler, XmlSigInIntercept |
| CVE-2026-100229 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in GStreamer's H.266 codec parser library (libgstcodecparsers). An out-of-bounds write vulnerability exists in the DCI parsing function, where a reserved field val |
| CVE-2026-100231 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in the GStreamer multimedia framework's ASF muxer plugin (asfmux). When writing string metadata tags containing Unicode characters outside the Basic Multilingual P |
| CVE-2026-100232 | Awaiting Analysis | 未確認 | CWE-78 | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SonicWall Network Security M |
| CVE-2026-100236 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first segment or in the dest |
| CVE-2026-100251 | Deferred | 未確認 | CWE-918 | Wormhole.app as deployed before 2026-08-22 misconfigures the coturn TURN server and does not properly restrict TCP relay peers, allowing an unauthenticated attacker to access insta |
| CVE-2026-10026 | Deferred | 未確認 | CWE-94 | The CTX Feed Pro plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 7.6.12. This is due to insufficient input validation on the 'Feed Config |
| CVE-2026-100316 | Deferred | 未確認 | CWE-79 | The European VAT Compliance Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CF-IPCountry Header in all versions up to, and including |
| CVE-2026-100347 | Deferred | 未確認 | CWE-20, CWE-248 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3filter.ValidationHandler uses the routers/legacy router, which passes an unsupported or non-canoni |
| CVE-2026-100348 | Deferred | 未確認 | CWE-476 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referential additionalPropert |
| CVE-2026-100349 | Deferred | 未確認 | CWE-476 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateResponse passes a nil response header schema to decodeValue when an OpenAPI documen |
| CVE-2026-100350 | Deferred | 未確認 | CWE-1050, CWE-400, CWE-770 | kin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter repeatedly calls regexp.MustCompile for the same parameter-name regular expressio |
| CVE-2026-100351 | Deferred | 未確認 | CWE-289, CWE-436 | kin-openapi is a Go project for handling OpenAPI files. From 0.144.0 until 0.147.0, openapi3filter.ValidationHandler validates an operation selected from decoded URL.Path while a d |
| CVE-2026-100352 | Deferred | 未確認 | CWE-754 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path passes YAML NaN and infinity numeric values to santhosh-tekuri/jsonschema |
| CVE-2026-100353 | Deferred | 未確認 | CWE-476 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths that were missed by the fix for GHSA-p6wj-qrr4-pgh5 lack a ni |
| CVE-2026-100354 | Deferred | 未確認 | CWE-674 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.149.0, runtime request, response, and direct schema validation lacks cycle detection when an allOf, anyOf, or one |
| CVE-2026-100394 | Deferred | 未確認 | CWE-362, CWE-476 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel |
| CVE-2026-100404 | Awaiting Analysis | 未確認 | CWE-862 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, guest users can receive new message events for public channels outside their subscriptions. |
| CVE-2026-100406 | Awaiting Analysis | 未確認 | CWE-200, CWE-22, CWE-306 | dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From 2.0.0-alpha.0 until 2.0.0-alpha.5, |
| CVE-2026-100409 | Deferred | 未確認 | CWE-177, CWE-180 | OpenNext Cloudflare is an open Next.js adapter for Cloudflare. From 0.3.0 until 1.20.2, applications that enable enableCacheInterception, rely on middleware for access control, and |
| CVE-2026-100413 | Awaiting Analysis | 未確認 | CWE-321 | SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedf |
| CVE-2026-100420 | Deferred | 未確認 | CWE-202 | A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers to retrieve the plaintext TP-Link ID account password. Suc |
| CVE-2026-100506 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a through 12.1. |
| CVE-2026-100509 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Stored XSS.This issue |
| CVE-2026-100511 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Object Injection.This issue affects VK Google Job |
| CVE-2026-100514 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in REST API Log <= 1.7.2 versions. |
| CVE-2026-100515 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo Reviews for WooCommerce woo-photo-reviews allows Reflected XS |
| CVE-2026-100517 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Photo Reviews for WooCommerce <= 1.2.30 versions. |
| CVE-2026-100518 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in Advanced Google reCAPTCHA <= 5.40 versions. |
| CVE-2026-100727 | Deferred | 未確認 | CWE-552 | An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file |
| CVE-2026-100730 | Awaiting Analysis | 未確認 | CWE-502 | A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authent |
| CVE-2026-100737 | Deferred | 未確認 | CWE-912 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privi |
| CVE-2026-100755 | Analyzed | 未確認 | CWE-349 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain deployment configurati |
| CVE-2026-101019 | Awaiting Analysis | 未確認 | CWE-436 | Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the built |
| CVE-2026-101020 | Deferred | 未確認 | CWE-732 | An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited, a local authenticate |
| CVE-2026-101021 | Deferred | 未確認 | CWE-407 | MultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary comparisons and repeated copying. |
| CVE-2026-101022 | Awaiting Analysis | 未確認 | CWE-918 | A Modbus connection feature on openPDC accepts a caller-specified destination address and port with no restriction on which internal hosts may be targeted. An authenticated user ca |
| CVE-2026-101023 | Analyzed | 未確認 | CWE-287 | Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the `refresh_token` grant type, but not that the token was a refresh token. An unexpired ac |
| CVE-2026-101024 | Awaiting Analysis | 未確認 | CWE-23 | Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could wr |
| CVE-2026-101025 | Awaiting Analysis | 未確認 | CWE-401 | Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register clea |
| CVE-2026-101027 | Analyzed | 未確認 | CWE-346 | When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions. A |
| CVE-2026-101028 | Deferred | 未確認 | CWE-863 | Incorrect Authorization vulnerability in ash-project ash allows an actor to infer data in related records they cannot read via Ash.count/2, Ash.exists/2 and Ash.aggregate/3. Ash.A |
| CVE-2026-101029 | Analyzed | 未確認 | CWE-209, CWE-367, CWE-918 | Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address that was validated was not neces |
| CVE-2026-101094 | Awaiting Analysis | 未確認 | CWE-126 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not correctly handle incomplete UTF-8 character sequences when parsing text in Affinity document files, le |
| CVE-2026-101103 | Awaiting Analysis | 未確認 | CWE-120 | The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold the output record. |
| CVE-2026-101104 | Deferred | 未確認 | CWE-862 | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to manipulate the configurations of devices they do not own. Thi |
| CVE-2026-101130 | Awaiting Analysis | 未確認 | CWE-126 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing arrays of strings in Affinity document files, leading to |
| CVE-2026-101138 | Deferred | 未確認 | CWE-284 | The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.21 does not correctly apply maintenance mode to pages added to its page whitelist by manually entered URL pattern, a |
| CVE-2026-101147 | Deferred | 未確認 | CWE-352 | The Featured Image from URL (FIFU) WordPress plugin before 6.0.8, Featured Image from URL (FIFU) Premium WordPress plugin before 8.2.8 do not correctly enforce the REST API nonce, |
| CVE-2026-101148 | Deferred | 未確認 | CWE-73 | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthent |
| CVE-2026-101149 | Awaiting Analysis | 未確認 | CWE-918 | Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinations. |
| CVE-2026-101150 | Awaiting Analysis | 未確認 | CWE-918 | Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations. |
| CVE-2026-101151 | Awaiting Analysis | 未確認 | CWE-601 | Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbi |
| CVE-2026-101152 | Awaiting Analysis | 未確認 | CWE-601 | Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provi |
| CVE-2026-101153 | Awaiting Analysis | 未確認 | CWE-22 | On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could e |
| CVE-2026-101154 | Awaiting Analysis | 未確認 | CWE-22 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or cr |
| CVE-2026-101155 | Awaiting Analysis | 未確認 | CWE-22 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or cr |
| CVE-2026-101156 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in |
| CVE-2026-101157 | Awaiting Analysis | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated |
| CVE-2026-101158 | Awaiting Analysis | 未確認 | CWE-79 | A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Suc |
| CVE-2026-101159 | Deferred | 未確認 | CWE-79 | The WP Ultimate Review WordPress plugin before 2.4.4 does not properly sanitise and escape reviews submitted through its public review form, which is available to unauthenticated v |
| CVE-2026-101160 | Deferred | 未確認 | CWE-400 | The WP Ultimate Review WordPress plugin before 2.4.4 does not validate that a submitted review rating is numeric before storing it and later using it in numeric operations when ren |
| CVE-2026-101161 | Deferred | 未確認 | CWE-400 | The WP Ultimate Review WordPress plugin before 2.4.4 does not prevent unauthenticated users from storing crafted review content that makes the reviewed page fail with a fatal error |
| CVE-2026-101162 | Deferred | 未確認 | CWE-79 | The WP Ultimate Review WordPress plugin before 2.4.4 does not escape some of its review overview settings before outputting them in posts, which could allow users with a role as lo |
| CVE-2026-101168 | Analyzed | 未確認 | CWE-532 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-101201 | Awaiting Analysis | 未確認 | CWE-125, CWE-190 | A malformed header in the binary file fed to QBinaryJson::fromBinaryData() can cause undefined behaviour because of out-of-bounds read. |
| CVE-2026-101207 | Awaiting Analysis | 未確認 | CWE-78 | Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command |
| CVE-2026-101215 | Awaiting Analysis | 未確認 | CWE-78 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high |
| CVE-2026-101216 | Awaiting Analysis | 未確認 | CWE-77 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privil |
| CVE-2026-101217 | Awaiting Analysis | 未確認 | CWE-22 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged a |
| CVE-2026-101258 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in Ghostscript. When Ghostscript renders a crafted PostScript or EPS document, it can bypass the -dSAFER sandbox and execute arbitrary shell commands in the contex |
| CVE-2026-101287 | Deferred | 未確認 | CWE-565 | Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity. The application stores the |
| CVE-2026-101290 | Deferred | 未確認 | CWE-125 | A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet |
| CVE-2026-101294 | Awaiting Analysis | 未確認 | CWE-325 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signat |
| CVE-2026-101296 | Awaiting Analysis | 未確認 | CWE-304 | A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers t |
| CVE-2026-101300 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) reported in the ticket sales chart PDF export functionality of Wegow. According to the report, an authenticated user with a promoter account can |
| CVE-2026-101301 | Deferred | 未確認 | CWE-284 | The WPCode WordPress plugin before 2.4.0 does not correctly verify that a request is genuinely for the login screen before entering its snippet safe mode, allowing unauthenticated |
| CVE-2026-101302 | Analyzed | 未確認 | CWE-193, CWE-476 | TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the inner record type ha |
| CVE-2026-101303 | Analyzed | 未確認 | CWE-941 | The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic |
| CVE-2026-101304 | Modified | 未確認 | CWE-273 | When fdescfs(4) was mounted in a jail with the "nodup" option, opening /dev/fd/N returned a descriptor that did not inherit FD_RESOLVE_BENEATH or the Capsicum capability rights of |
| CVE-2026-101305 | Analyzed | 未確認 | CWE-273 | renameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments. A jailed process could rename a directory relative to a restricted descriptor, then escape the jail root |
| CVE-2026-101306 | Analyzed | 未確認 | CWE-273, CWE-281 | SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restriction by sending the descriptor to itself |
| CVE-2026-101307 | Analyzed | 未確認 | CWE-122, CWE-787 | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated doublings caused the counter to wrap to zero, resulting in a near-zero-length |
| CVE-2026-101308 | Analyzed | 未確認 | CWE-367 | When an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer. An mm |
| CVE-2026-101309 | Awaiting Analysis | 未確認 | CWE-362 | The xHCI (USB 3) device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on each use, and Transfer Request Block (T |
| CVE-2026-10131 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP r |
| CVE-2026-101310 | Awaiting Analysis | 未確認 | CWE-126, CWE-362, CWE-787 | The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bounds read or write dur |
| CVE-2026-101311 | Awaiting Analysis | 未確認 | CWE-362 | The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync. Additionally, writes to the framebu |
| CVE-2026-10132 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP |
| CVE-2026-101322 | Deferred | 未確認 | CWE-201 | In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's `Authorization` header to outgoi |
| CVE-2026-101324 | Deferred | 未確認 | CWE-79 | The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'any attacke |
| CVE-2026-101329 | Analyzed | 未確認 | CWE-284 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper access control. |
| CVE-2026-10133 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request |
| CVE-2026-101331 | Analyzed | 未確認 | CWE-522 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to insufficiently protected credentials. |
| CVE-2026-101335 | Deferred | 未確認 | CWE-94 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 1.58.1 |
| CVE-2026-101337 | Awaiting Analysis | 未確認 | CWE-121 | When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K |
| CVE-2026-101338 | Awaiting Analysis | 未確認 | CWE-121 | When a SVCB or HTTPS RR has filled the wire format RDATA up to the brim, another ECH parameter may overwrite the stack, and once beyond the limit, the base64 decoder can write atta |
| CVE-2026-101339 | Awaiting Analysis | 未確認 | CWE-121 | A HIP resource record that fills the RDATA near or at is limit, and has another dname RDATA field (a HIP Rendezvous server) can overwrite the stack with up to 191 bytes of attacker |
| CVE-2026-101341 | Deferred | 未確認 | CWE-121 | Tokens of text in RDATA (of for example TXT records) under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack |
| CVE-2026-10135 | Deferred | 未確認 | CWE-78 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lea |
| CVE-2026-101356 | Awaiting Analysis | 未確認 | CWE-362 | Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. |
| CVE-2026-101357 | Deferred | 未確認 | CWE-79 | The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analytics_matomo_id' parameter in all versions |
| CVE-2026-101359 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attac |
| CVE-2026-10136 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP r |
| CVE-2026-101360 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attack | |
| CVE-2026-101361 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged atta | |
| CVE-2026-101362 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated att | |
| CVE-2026-101363 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated a | |
| CVE-2026-101364 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privi | |
| CVE-2026-101365 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high priv | |
| CVE-2026-101366 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacke | |
| CVE-2026-101367 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacke | |
| CVE-2026-101368 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unaut | |
| CVE-2026-101369 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unaut | |
| CVE-2026-10137 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP |
| CVE-2026-101370 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated att | |
| CVE-2026-101371 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows high privileged att | |
| CVE-2026-101372 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows unauthenticated att | |
| CVE-2026-101373 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attac |
| CVE-2026-101374 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows una |
| CVE-2026-101375 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privi |
| CVE-2026-101376 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high priv |
| CVE-2026-101377 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: Database Actions). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high priv |
| CVE-2026-101378 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacke |
| CVE-2026-101379 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attack |
| CVE-2026-10138 | Deferred | 未確認 | CWE-78 | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request |
| CVE-2026-101380 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacke |
| CVE-2026-101381 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: ADP). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attacke | |
| CVE-2026-101382 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged atta | |
| CVE-2026-101383 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows unauthenticated attac | |
| CVE-2026-101384 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows low privileged attack | |
| CVE-2026-101385 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Easily exploitable vulnerability allows high privileged attac | |
| CVE-2026-101386 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0. Difficult to exploit vulnerability allows low privileged atta | |
| CVE-2026-101387 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab | |
| CVE-2026-101388 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Easily exploitable vul | |
| CVE-2026-101389 | Undergoing Analysis | 未確認 | CWE-400 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-10139 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can |
| CVE-2026-101390 | Undergoing Analysis | 未確認 | CWE-306 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-101391 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabil |
| CVE-2026-101392 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabil |
| CVE-2026-101393 | Awaiting Analysis | 未確認 | CWE-352 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabil |
| CVE-2026-101394 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabil |
| CVE-2026-101395 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabil |
| CVE-2026-101396 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerab |
| CVE-2026-101397 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerab |
| CVE-2026-101398 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab |
| CVE-2026-101399 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabil |
| CVE-2026-101400 | Awaiting Analysis | 未確認 | CWE-404 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerab |
| CVE-2026-101401 | Awaiting Analysis | 未確認 | CWE-404 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerab |
| CVE-2026-101402 | Awaiting Analysis | 未確認 | CWE-404 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vu |
| CVE-2026-101403 | Awaiting Analysis | 未確認 | CWE-601 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vu |
| CVE-2026-101404 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerab |
| CVE-2026-101405 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerab | |
| CVE-2026-101406 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerab | |
| CVE-2026-101407 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Change Assistant). Supported versions that are affected are 8.61-8.63. Easi | |
| CVE-2026-101408 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vuln | |
| CVE-2026-101409 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex | |
| CVE-2026-10141 | Deferred | 未確認 | CWE-347 | A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted firmware bin |
| CVE-2026-101410 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult | |
| CVE-2026-101411 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-101412 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult to | |
| CVE-2026-101413 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult to | |
| CVE-2026-101414 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63. Difficult to exploit | |
| CVE-2026-101415 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Analytic Server). Supported versions that are affected are 8.61-8.63. Difficult to | |
| CVE-2026-101416 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PsAdmin). Supported versions that are affected are 8.61-8.63. Difficult to exploit |
| CVE-2026-101417 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tuxedo). Supported versions that are affected are 8.61-8.63. Difficult to exploit v | |
| CVE-2026-101418 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex | |
| CVE-2026-101419 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulner | |
| CVE-2026-101420 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulner |
| CVE-2026-101421 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Easily exploitable vulner | |
| CVE-2026-101422 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex | |
| CVE-2026-101423 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex | |
| CVE-2026-101424 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Difficult | |
| CVE-2026-101425 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vuln | |
| CVE-2026-101426 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vuln | |
| CVE-2026-101427 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex | |
| CVE-2026-101428 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vuln | |
| CVE-2026-101429 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.61-8.63. Difficult to exploit vuln | |
| CVE-2026-101430 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploit | |
| CVE-2026-101431 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploit | |
| CVE-2026-101432 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploit | |
| CVE-2026-101433 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Test Framework). Supported versions that are affected are 8.61-8.63. Easily exploit | |
| CVE-2026-101434 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Database Server). Supported versions that are affected are 8.61-8.63. Easily exploi | |
| CVE-2026-101435 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63. Easily exploitable vu | |
| CVE-2026-101436 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101437 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101438 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101439 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101440 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101441 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101442 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101443 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo | |
| CVE-2026-101444 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo | |
| CVE-2026-101445 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-101446 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17.0-26.9. Easily explo | |
| CVE-2026-101447 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Workflow). Supported versions that are affected are 25.12-26.9. Difficult to exploit vulnerabi | |
| CVE-2026-101448 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.9. Easily exploita | |
| CVE-2026-101449 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Siebel Management Console). Supported versions that are affected are 17.0-26.9. Easily exploita | |
| CVE-2026-101450 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Easily exp | |
| CVE-2026-101451 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel Life Sciences product of Oracle Siebel CRM (component: Web UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al | |
| CVE-2026-101452 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerabilit | |
| CVE-2026-101453 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable | |
| CVE-2026-101454 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9. Easily exploitable v | |
| CVE-2026-101455 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 17.0-26.9. Difficult to exp | |
| CVE-2026-101456 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Configuration Tools). Supported versions that are affected are 17.0-26.9. Easily exploitable v | |
| CVE-2026-101457 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: eDetailing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulne | |
| CVE-2026-101458 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable | |
| CVE-2026-101459 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable | |
| CVE-2026-101460 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-101461 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-101462 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-101463 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: UIF Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabilit |
| CVE-2026-101464 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-101465 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-101466 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101467 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Portal Framework). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulne |
| CVE-2026-101468 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Cloud Gateway). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerab |
| CVE-2026-101469 | Awaiting Analysis | 未確認 | CWE-269, CWE-306, CWE-89 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Difficul |
| CVE-2026-101470 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e | |
| CVE-2026-101471 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e | |
| CVE-2026-101472 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Issues). The supported version that is affected is 3.6.1. Easily e | |
| CVE-2026-101473 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101474 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101475 | Awaiting Analysis | 未確認 | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.1 | |
| CVE-2026-101476 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerabil | |
| CVE-2026-101477 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows l | |
| CVE-2026-101478 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows l | |
| CVE-2026-101479 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allow | |
| CVE-2026-101480 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Secure Backup (component: NDMP daemon). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows unaut | |
| CVE-2026-101481 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerab |
| CVE-2026-101482 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerab |
| CVE-2026-101483 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerab | |
| CVE-2026-101484 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allow |
| CVE-2026-101485 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows l | |
| CVE-2026-101486 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.63. Easily exploitable | |
| CVE-2026-101487 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Easily exploitable vul | |
| CVE-2026-101488 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exp | |
| CVE-2026-101489 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Easily exploitable vul | |
| CVE-2026-101490 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.63. Easily exploitable | |
| CVE-2026-101491 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61-8.63. Easily exploitable vuln | |
| CVE-2026-101492 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9. Difficult to exploit v | |
| CVE-2026-101493 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows low privileged attack | |
| CVE-2026-101494 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows low privileged attack | |
| CVE-2026-101495 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel Approval Manager). Supported versions that are affected are 17.0-26.9. Easily exploitab | |
| CVE-2026-101497 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Connector Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. | |
| CVE-2026-101498 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability allows unauthenticate | |
| CVE-2026-101499 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-101500 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions). Supported versions that are affe |
| CVE-2026-101501 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged a | |
| CVE-2026-101502 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Difficult to exploit vulnerability allows low privileged | |
| CVE-2026-101503 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged a | |
| CVE-2026-101504 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low priv | |
| CVE-2026-101505 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low priv | |
| CVE-2026-101506 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: Application expert UI). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low priv | |
| CVE-2026-101507 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported version that is affected is 26.1. Easily exploitable vulnerability allows low privileged a | |
| CVE-2026-101508 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability all |
| CVE-2026-101510 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitab | |
| CVE-2026-101511 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are affected are 13.5 and | |
| CVE-2026-101512 | Awaiting Analysis | 未確認 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att | |
| CVE-2026-101513 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.37. Difficult to exploit vulnerability allows ph | |
| CVE-2026-101515 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). Supported versions that are affected are 12.2.1.4.0, 14.1 | |
| CVE-2026-101516 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affect | |
| CVE-2026-101517 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.4.0.1 | |
| CVE-2026-101518 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 13.5 and 2 | |
| CVE-2026-101519 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easi | |
| CVE-2026-101520 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer). Supported versions that are affec |
| CVE-2026-101521 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1.0-24.1.21, 24.2.0-24.2.20 and 26.1.0-26.1.4. Easily exploitable vulnerability all |
| CVE-2026-101522 | Awaiting Analysis | 未確認 | Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 22.1-22.1.1.43.0. Easily exploitable vulnerability allows | |
| CVE-2026-101524 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Security Framework). Supported versions that are affected are 13.5 an | |
| CVE-2026-101525 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 | |
| CVE-2026-101526 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Manager (component: Configuration Management). Supported versions that are affected are 13.5 | |
| CVE-2026-101527 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Install). Supported versions that are affected are | |
| CVE-2026-101528 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected ar | |
| CVE-2026-101529 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management). Supported versions that are affected ar | |
| CVE-2026-101531 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 | |
| CVE-2026-101532 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Easi | |
| CVE-2026-101533 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). Supported versions that are affected are 12.2.3-12.2.15. Diff | |
| CVE-2026-101534 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabil | |
| CVE-2026-101535 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex | |
| CVE-2026-101536 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are 12.2.3-12.2.15. Difficult to | |
| CVE-2026-101537 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauth |
| CVE-2026-101538 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas | |
| CVE-2026-101539 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl | |
| CVE-2026-101540 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab | |
| CVE-2026-101541 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab | |
| CVE-2026-101542 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab | |
| CVE-2026-101543 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exp | |
| CVE-2026-101544 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl | |
| CVE-2026-101545 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diff | |
| CVE-2026-101546 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Materials Requirement Planning product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12. | |
| CVE-2026-101547 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploi | |
| CVE-2026-101548 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Difficult to exploit vulnerability allows low privi | |
| CVE-2026-101549 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Application Testing Suite (component: OpenScript). The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows low privile | |
| CVE-2026-101551 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12. | |
| CVE-2026-101552 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Flexfields). Supported versions that are affected are 12.2.3-12.2.15. Difficu | |
| CVE-2026-101553 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element Types, Links, Entries). Supported versions that are affected are 12.2.3-12.2.15. Easily | |
| CVE-2026-101554 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl | |
| CVE-2026-101555 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl | |
| CVE-2026-101556 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl | |
| CVE-2026-101557 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit | |
| CVE-2026-101558 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulne | |
| CVE-2026-101559 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: PO View Document). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl | |
| CVE-2026-101560 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Commerce Server). The supported version that is affected is 11.4.0. Easily exploitable | |
| CVE-2026-101562 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. Easily exploitable vulnerability allows | |
| CVE-2026-101564 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Acollect). The supported version that is affected is 2.6. Difficult to exploit vulnerability allo | |
| CVE-2026-101565 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Import). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows | |
| CVE-2026-101566 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Easi | |
| CVE-2026-101567 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-101568 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health). Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Easily | |
| CVE-2026-101569 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. E |
| CVE-2026-101570 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit v | |
| CVE-2026-101571 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are 3.0.0-3.2.21 and 4.0 | |
| CVE-2026-101572 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily expl |
| CVE-2026-101573 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth). Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4. | |
| CVE-2026-101574 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerabi | |
| CVE-2026-101575 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows | |
| CVE-2026-101576 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows | |
| CVE-2026-101577 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerabilit | |
| CVE-2026-101578 | Awaiting Analysis | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login). Supported versions that are affected are 4.0.0-4.5.5. Easily | |
| CVE-2026-101579 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server). Supported versions that are affected are 3.0.0-3.2.21. Easily exploitable vulner | |
| CVE-2026-101580 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easi | |
| CVE-2026-101581 | Deferred | 未確認 | CWE-284 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). Supported versions that are affected are 4.0.0-4.5.5 and |
| CVE-2026-101582 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable | |
| CVE-2026-101583 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to | |
| CVE-2026-101584 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily | |
| CVE-2026-101585 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 3.0.0-3.2.21. Easily exploitable vulnerability | |
| CVE-2026-101586 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitabl | |
| CVE-2026-101587 | Deferred | 未確認 | CWE-400 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily expl |
| CVE-2026-101588 | Deferred | 未確認 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulner | |
| CVE-2026-101589 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.6.0.1 | |
| CVE-2026-101590 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitab |
| CVE-2026-101591 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101592 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101593 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101594 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101595 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supply Chain Relationship Mgmt). The supported version that | |
| CVE-2026-101596 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101597 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability | |
| CVE-2026-101598 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily exploitable vulnerability a | |
| CVE-2026-101599 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Difficult to exploit vulnerability | |
| CVE-2026-101600 | Awaiting Analysis | 未確認 | Vulnerability in Oracle TimesTen In-Memory Database (component: TimesTen IMDB). Supported versions that are affected are 26.1-26.1.1.3.0. Difficult to exploit vulnerability allows | |
| CVE-2026-101601 | Awaiting Analysis | 未確認 | Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 21.3-21.23. Easily exploitable vulnerability allows low privileged a | |
| CVE-2026-101602 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-101603 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5 | |
| CVE-2026-101604 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5 | |
| CVE-2026-101605 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: System Wide). Supported versions that are affected are 2.4.0.1 | |
| CVE-2026-101606 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 | |
| CVE-2026-101607 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 | |
| CVE-2026-101608 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 | |
| CVE-2026-101609 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. | |
| CVE-2026-101610 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 | |
| CVE-2026-101611 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. | |
| CVE-2026-101612 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. | |
| CVE-2026-101613 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3 | |
| CVE-2026-101614 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. | |
| CVE-2026-101615 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. | |
| CVE-2026-101616 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7. | |
| CVE-2026-101617 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. | |
| CVE-2026-101618 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101619 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101620 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3; MySQL |
| CVE-2026-101621 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101622 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101623 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101624 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101625 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allow |
| CVE-2026-101626 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability all |
| CVE-2026-101627 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101628 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). The supported version that is affected is 9.7.3. Easily exploitable vulnerability a |
| CVE-2026-101629 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; My |
| CVE-2026-101630 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-101631 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allow |
| CVE-2026-101632 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows |
| CVE-2026-101633 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows |
| CVE-2026-101634 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101635 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101636 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-101637 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; My |
| CVE-2026-101638 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-101639 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-101640 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera |
| CVE-2026-101641 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-101642 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-101643 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-101644 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diff |
| CVE-2026-101645 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-101646 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-101647 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.2.3-12.2.1 |
| CVE-2026-101648 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Diffic |
| CVE-2026-101649 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-101650 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-101651 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-101653 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101654 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101655 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101656 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101658 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-101660 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-101661 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Difficult to ex |
| CVE-2026-101662 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-101664 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101665 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-101666 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-101667 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable |
| CVE-2026-101668 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Customer Care product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl |
| CVE-2026-101669 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Public Sector Human Resources product of Oracle E-Business Suite (component: Regression Testing). Supported versions that are affected are 12.2.3-12.2. |
| CVE-2026-101670 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-101671 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-101672 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Call Center Technology product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Di |
| CVE-2026-101673 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15 |
| CVE-2026-101674 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101675 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101676 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-101677 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows |
| CVE-2026-101678 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows |
| CVE-2026-101679 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9 |
| CVE-2026-101680 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0 |
| CVE-2026-101681 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit v |
| CVE-2026-101682 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-101683 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit v |
| CVE-2026-101684 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 1 |
| CVE-2026-101685 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-101686 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-101687 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-101688 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-101689 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-101690 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA Provider). Supported versions that are affected are 12.2.3-1 |
| CVE-2026-101692 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-101694 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-101695 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-101696 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-101697 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Admin Console UI). Supported versions that are affected are 12.2.3-12.2.15. Easil |
| CVE-2026-101698 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues). Supported versions that are affected are 12.2.3-12.2.15. Dif |
| CVE-2026-101699 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-101700 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-101701 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Request Submission and Scheduling). Supported versions that are affected are 12.2. |
| CVE-2026-101703 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Pasta product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulne |
| CVE-2026-101704 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-101705 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-101706 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-101707 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Supported versions that are affected are 12.2.3-12.2.15. Difficult |
| CVE-2026-101708 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl |
| CVE-2026-101709 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl |
| CVE-2026-101710 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl |
| CVE-2026-101711 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerab |
| CVE-2026-101712 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl |
| CVE-2026-101713 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Easily exploitable vulnerab |
| CVE-2026-101714 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability al |
| CVE-2026-101715 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulner |
| CVE-2026-101716 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Web Client). The supported version that is affected is 9.3.6. Easily exploitable vulnerability al |
| CVE-2026-101717 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Difficult to exploit vulnerability al |
| CVE-2026-101718 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulner |
| CVE-2026-101719 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server). The supported version that is affected is 9.3.6. Difficult to exploit vulner |
| CVE-2026-101720 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 26.7.0-26 |
| CVE-2026-101721 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4 |
| CVE-2026-101722 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are MySQL Server: 9.7.0-9.7 |
| CVE-2026-101723 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). The supported version that is affected is 3.6. Difficult to exploit v |
| CVE-2026-101724 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101725 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7 |
| CVE-2026-101726 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: C API). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7 |
| CVE-2026-101727 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7 |
| CVE-2026-101728 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, |
| CVE-2026-101729 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7 |
| CVE-2026-101730 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101731 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101732 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101733 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7. |
| CVE-2026-101734 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-101735 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Supported versions that are affected are 23.12.0-23.12.16. Easi |
| CVE-2026-101736 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 21.12.0-21.12.17. Difficult to ex |
| CVE-2026-101737 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 26.0.2. Difficult to exploit vulnerability allows unauthenticated |
| CVE-2026-101738 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-101739 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-101740 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-101741 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-101742 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Easily explo |
| CVE-2026-101743 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL Clus |
| CVE-2026-101744 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-101745 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Engineering Communication Interface). The supported version that is affec |
| CVE-2026-101746 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install). The supported version that is affected is 6.2.1. Easily exploit |
| CVE-2026-101747 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101748 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Audit). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, |
| CVE-2026-101749 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 26.7.0-2 |
| CVE-2026-101750 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9. |
| CVE-2026-101751 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8 |
| CVE-2026-101752 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 9.7.0-9.7 |
| CVE-2026-101753 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: RAPID). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26. |
| CVE-2026-101754 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9 |
| CVE-2026-101755 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQL |
| CVE-2026-101756 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7. |
| CVE-2026-101757 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). Supported versions that are affected are 12.2.3-12.2.15. Easi |
| CVE-2026-101758 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 |
| CVE-2026-101759 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 |
| CVE-2026-101760 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26. |
| CVE-2026-101761 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8. |
| CVE-2026-101762 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 8.4.0-8. |
| CVE-2026-101763 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported versions that are affecte |
| CVE-2026-101764 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 |
| CVE-2026-101765 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 |
| CVE-2026-101766 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7 |
| CVE-2026-101767 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-101768 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allow |
| CVE-2026-101769 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 26.7.0-26.7.1. Difficult to exploit vulnerabilit |
| CVE-2026-101770 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9 |
| CVE-2026-101771 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9 |
| CVE-2026-101772 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client programs). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9 |
| CVE-2026-101773 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4. |
| CVE-2026-101774 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, |
| CVE-2026-101775 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7 |
| CVE-2026-101776 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Server: 8.4. |
| CVE-2026-101777 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are MySQL Server: 9.7.0-9. |
| CVE-2026-101778 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4 |
| CVE-2026-101779 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101780 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0- |
| CVE-2026-101781 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8 |
| CVE-2026-101782 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Interfaces). Supported versions that are affected are 12.2.3-12. |
| CVE-2026-101783 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allow |
| CVE-2026-101784 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101785 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7. |
| CVE-2026-101786 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 26.7.0-26.7.1; MySQ |
| CVE-2026-101787 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101788 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4 |
| CVE-2026-101789 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101790 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are affected are 15.0.0.0. |
| CVE-2026-101791 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). The supported version that is affected is 15.2.0. |
| CVE-2026-101792 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are affected are 15.0.0.0. |
| CVE-2026-101793 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core). Supported versions that are affected are 15.0.0.0.0, 1 |
| CVE-2026-101794 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3 |
| CVE-2026-101795 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are MySQL Server: 8.4.0-8.4 |
| CVE-2026-101796 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7 |
| CVE-2026-101797 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101798 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101799 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8 |
| CVE-2026-101800 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are MySQL Server: 8.4.0-8. |
| CVE-2026-101801 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0 |
| CVE-2026-101802 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9. |
| CVE-2026-101803 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: XML). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3 |
| CVE-2026-101804 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability al |
| CVE-2026-101805 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to |
| CVE-2026-101806 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability al |
| CVE-2026-101807 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 |
| CVE-2026-101808 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vu |
| CVE-2026-101809 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit |
| CVE-2026-101810 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows |
| CVE-2026-101812 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-101813 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-101814 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita |
| CVE-2026-101815 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Assets product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulner |
| CVE-2026-101816 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-101818 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit |
| CVE-2026-101819 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp |
| CVE-2026-101820 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit v |
| CVE-2026-101821 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Statement). Supported versions that are affected are 12.2.3-12 |
| CVE-2026-101822 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-101823 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu |
| CVE-2026-101824 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.2.3-12.2.15. Ea |
| CVE-2026-101825 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. D |
| CVE-2026-101826 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. D |
| CVE-2026-101827 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. D |
| CVE-2026-101828 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-101829 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server). Supported versions that are affected are 12.2.3-12.2.15. |
| CVE-2026-101830 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-101831 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl | |
| CVE-2026-101832 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas | |
| CVE-2026-101833 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily | |
| CVE-2026-101834 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult | |
| CVE-2026-101835 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Easily exp | |
| CVE-2026-101836 | Awaiting Analysis | 未確認 | Vulnerability in the iSupplier Portal product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-101837 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult | |
| CVE-2026-101840 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2 | |
| CVE-2026-101841 | Awaiting Analysis | 未確認 | Vulnerability in the Global Order Promising product of Oracle E-Business Suite (component: Web Service). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl | |
| CVE-2026-101842 | Awaiting Analysis | 未確認 | Vulnerability in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO). Supported versions that are affected are 12.2.3-12.2.15. E | |
| CVE-2026-101843 | Awaiting Analysis | 未確認 | Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult | |
| CVE-2026-101844 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests). Supported versions that are affected are 12.2.3-12.2.15. Dif | |
| CVE-2026-101845 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to e | |
| CVE-2026-101846 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploit | |
| CVE-2026-101847 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficu | |
| CVE-2026-101849 | Awaiting Analysis | 未確認 | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitab | |
| CVE-2026-101850 | Awaiting Analysis | 未確認 | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerabil | |
| CVE-2026-101851 | Awaiting Analysis | 未確認 | Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Data Provider UI). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable v | |
| CVE-2026-101852 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi | |
| CVE-2026-101853 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi | |
| CVE-2026-101854 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi | |
| CVE-2026-101855 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi | |
| CVE-2026-101856 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas | |
| CVE-2026-101857 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas | |
| CVE-2026-101886 | Awaiting Analysis | 未確認 | CWE-22 | Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled fi |
| CVE-2026-101887 | Awaiting Analysis | 未確認 | CWE-369 | BlueALSA (bluez-alsa/bluealsad) contains a division-by-zero vulnerability in the LC3plus sink decoder (a2dp-lc3plus.c, a2dp_lc3plus_dec_thread) that allows a Bluetooth-adjacent att |
| CVE-2026-101888 | Deferred | 未確認 | CWE-22 | The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the int |
| CVE-2026-101889 | Deferred | 未確認 | CWE-22 | The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a cr |
| CVE-2026-101890 | Deferred | 未確認 | CWE-79 | The Prime Mover plugin for WordPress before 2.2.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by injecting an unescap |
| CVE-2026-101893 | Awaiting Analysis | 未確認 | CWE-611 | Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing. The PC Job Files view automatically parses every recognized job file exte |
| CVE-2026-101895 | Awaiting Analysis | 未確認 | CWE-400, CWE-835 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.31, 21.2.23, and 22.1.6, the @angu |
| CVE-2026-101896 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.32, 21.2.24, and 22.2.0, the @angu |
| CVE-2026-101897 | Awaiting Analysis | 未確認 | CWE-346, CWE-441, CWE-940 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, the Angular DevTools b |
| CVE-2026-101899 | Awaiting Analysis | 未確認 | CWE-693 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy treats the NO_PROXY CIDR form as a textual hostname suffix inste |
| CVE-2026-101919 | Awaiting Analysis | 未確認 | CWE-20 | A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the privileged control plane namespace wi |
| CVE-2026-101920 | Deferred | 未確認 | CWE-79 | The Molongui Authorship – Author Boxes, Guest Authors & Co-Authors for WordPress plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'comment (href |
| CVE-2026-101921 | Deferred | 未確認 | CWE-79 | The WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'a |
| CVE-2026-101923 | Deferred | 未確認 | CWE-862 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to Arbitrary Content Deletion in versions up to, and including, 1.2.30. This is due to the plugin storing attac |
| CVE-2026-101924 | Deferred | 未確認 | CWE-79 | The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overvie |
| CVE-2026-101925 | Deferred | 未確認 | CWE-79 | The bbp style pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (via /wp-admin/profile.php) + bbp_reply_content (via bbPress reply form)' |
| CVE-2026-101926 | Deferred | 未確認 | CWE-89 | The Hyyan WooCommerce Polylang Integration plugin for WordPress is vulnerable to SQL Injection via the 'variation_ids' parameter of the 'woocommerce_remove_variations' AJAX action |
| CVE-2026-101927 | Awaiting Analysis | 未確認 | CWE-122 | A Heap-based Buffer Overflow vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved on all platforms allows an unprivileged local attacker to cause a denial of s |
| CVE-2026-101928 | Deferred | 未確認 | CWE-79 | The Magic Tooltips For Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all versions up to, and including, 1.0.34 due |
| CVE-2026-101934 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service (DoS) via sending a crafted pa |
| CVE-2026-101936 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data pl |
| CVE-2026-101937 | Awaiting Analysis | 未確認 | CWE-195 | A Signed to Unsigned Conversion Error vulnerability in the srxpfe of Juniper Networks Junos OS on the SRX Series allows an adjacent attacker to cause a denial of service of the dat |
| CVE-2026-101938 | Awaiting Analysis | 未確認 | CWE-191 | An Integer Underflow (Wrap or Wraparound) vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an adjacent unauthenticated attacke |
| CVE-2026-101939 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cau |
| CVE-2026-101940 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial |
| CVE-2026-101941 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial o |
| CVE-2026-101942 | Awaiting Analysis | 未確認 | CWE-130 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an unauth |
| CVE-2026-101943 | Awaiting Analysis | 未確認 | CWE-20 | An Improper Input Validation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker t |
| CVE-2026-101944 | Awaiting Analysis | 未確認 | CWE-190 | An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause a denial of servi |
| CVE-2026-101945 | Awaiting Analysis | 未確認 | CWE-190 | An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an established EVPN BGP peering r |
| CVE-2026-101946 | Awaiting Analysis | 未確認 | CWE-125 | An Out-of-bounds Read vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent low-privilege attacker to disclose limited rpd process m |
| CVE-2026-101947 | Awaiting Analysis | 未確認 | CWE-78 | ExifTool for photo and video 5.0.1-gms by CellHubs constructs shell command strings from file paths and invokes /system/bin/sh -c. In the CSV-export path, the selected media path i |
| CVE-2026-101948 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a |
| CVE-2026-101949 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cau |
| CVE-2026-101950 | Awaiting Analysis | 未確認 | CWE-122 | A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service a |
| CVE-2026-101951 | Awaiting Analysis | 未確認 | CWE-1288 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent co |
| CVE-2026-101952 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP ISO- |
| CVE-2026-101954 | Awaiting Analysis | 未確認 | CWE-287 | An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an unauthentica |
| CVE-2026-101955 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the UTM Anti-Spam SBL of Juniper Networks Junos OS on SRX series allows an unauthenticated remote attacker to cause arbitrary code ex |
| CVE-2026-101956 | Awaiting Analysis | 未確認 | CWE-287 | An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitrary Junos com |
| CVE-2026-101957 | Awaiting Analysis | 未確認 | CWE-665 | An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause an rpd crash via a |
| CVE-2026-101959 | Awaiting Analysis | 未確認 | CWE-688 | A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unau |
| CVE-2026-101960 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on QFX5240, QFX5241 and QFX5250 configured for BGP global-load-balanc |
| CVE-2026-101961 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routi |
| CVE-2026-101962 | Awaiting Analysis | 未確認 | CWE-130 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker sendi |
| CVE-2026-101963 | Awaiting Analysis | 未確認 | CWE-682 | An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN neighbor to cause an rpd crash when |
| CVE-2026-101964 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause an rpd crash via a c |
| CVE-2026-101965 | Awaiting Analysis | 未確認 | CWE-134 | An Use of Externally-Controlled Format String vulnerability in the gRPC daemon of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause telemetry-serv |
| CVE-2026-101966 | Awaiting Analysis | 未確認 | CWE-134 | A Use of Externally-Controlled Format String vulnerability in the jti-dialoutd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause persistent tel |
| CVE-2026-101967 | Awaiting Analysis | 未確認 | CWE-78 | An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved allows an unauthenticated attacker on the management LAN to |
| CVE-2026-101968 | Awaiting Analysis | 未確認 | CWE-191 | An Integer Underflow (Wrap or Wraparound) vulnerability in the rpd process of Juniper Networks Junos OS on EX Series and MX Series, and Junos OS Evolved on ACX Series allows an una |
| CVE-2026-101969 | Awaiting Analysis | 未確認 | CWE-20 | An Improper Input Validation vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of ser |
| CVE-2026-101970 | Awaiting Analysis | 未確認 | CWE-416 | A Use After Free vulnerability in the rpd PIM Join/Prune processing of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to crash |
| CVE-2026-101971 | Awaiting Analysis | 未確認 | CWE-770 | An Allocation of Resources Without Limits or Throttling vulnerability in rpd, the routing protocol daemon, of Juniper Networks Junos OS and Junos OS Evolved platforms allows an una |
| CVE-2026-101972 | Awaiting Analysis | 未確認 | CWE-190 | An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker t |
| CVE-2026-101973 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed p |
| CVE-2026-101974 | Awaiting Analysis | 未確認 | An Improper Validation of Specified Quantity in Input vulnerability in rpd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to disclose rpd memory or | |
| CVE-2026-101975 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a denial of service |
| CVE-2026-101976 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiated four-octet- |
| CVE-2026-101977 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent |
| CVE-2026-101978 | Awaiting Analysis | 未確認 | CWE-78 | An OS Command Injection vulnerability in the bootzd zero-touch provisioning daemon of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated attacker on the mana |
| CVE-2026-101979 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code with root pr |
| CVE-2026-101980 | Awaiting Analysis | 未確認 | CWE-191 | An Integer Underflow vulnerability in the kernel of Juniper Networks Junos OS with Extended Echo configured allows an unauthenticated, network-based attacker to cause a denial of s |
| CVE-2026-101981 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent LDP peer to ca |
| CVE-2026-101982 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to cause root |
| CVE-2026-101983 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code e |
| CVE-2026-101984 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a network-adjacent BGP peer to cause a denial of s |
| CVE-2026-101985 | Awaiting Analysis | 未確認 | CWE-1284 | A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated |
| CVE-2026-101986 | Awaiting Analysis | 未確認 | CWE-287 | An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authentication and e |
| CVE-2026-101987 | Awaiting Analysis | 未確認 | An Improper Validation of Specified Quantity in Input vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cau | |
| CVE-2026-101988 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause |
| CVE-2026-101989 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a compromised LDP neighbor to cause an rpd crash v |
| CVE-2026-101990 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote configured BGP peer to cause an r |
| CVE-2026-101991 | Awaiting Analysis | 未確認 | CWE-130 | An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP- |
| CVE-2026-101992 | Awaiting Analysis | 未確認 | CWE-20 | An Improper Input Validation vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP peer to cause an r |
| CVE-2026-101993 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP peer to cause a denial of service |
| CVE-2026-101994 | Awaiting Analysis | 未確認 | CWE-130 | An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who can control or |
| CVE-2026-101995 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker with access to an |
| CVE-2026-101996 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devices configured for MC-LAG/ICCP allows an adjacent attacker to caus |
| CVE-2026-101997 | Awaiting Analysis | 未確認 | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated n |
| CVE-2026-101998 | Awaiting Analysis | 未確認 | CWE-636 | Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a response-body read returned data together with an error, affected handlers could for |
| CVE-2026-101999 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP se |
| CVE-2026-102000 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent unauthenticated attacker to cause a denial of service via LDP c |
| CVE-2026-102002 | Deferred | 未確認 | CWE-200 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includi |
| CVE-2026-102007 | Deferred | 未確認 | CWE-79 | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'field mapped |
| CVE-2026-102011 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an adjacent attacker to cause a denial of service via an established LDP se |
| CVE-2026-102012 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved allows a remote unauthenticated attacker to cause a denial of service via a gRPC te |
| CVE-2026-102013 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-int |
| CVE-2026-102014 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows an attacker able to influence a configured RADIUS server to cause authd to cras |
| CVE-2026-102015 | Awaiting Analysis | 未確認 | CWE-122 | A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to |
| CVE-2026-102016 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP MVPN peer to cause |
| CVE-2026-102017 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of serv |
| CVE-2026-102018 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-servi |
| CVE-2026-102019 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Networks Junos OS and Junos Evolved allows an unauthenticated adjacent attacker to |
| CVE-2026-102020 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker to cause a denial of service |
| CVE-2026-102021 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent network attacker to cause a denia |
| CVE-2026-102022 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP-LS pee |
| CVE-2026-102023 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated network attacker to cause a denial of service via an SNMP firewall-coun |
| CVE-2026-102024 | Awaiting Analysis | 未確認 | CWE-190 | An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer to cause a denial of |
| CVE-2026-102025 | Awaiting Analysis | 未確認 | CWE-762 | A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network |
| CVE-2026-102026 | Awaiting Analysis | 未確認 | CWE-664 | An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent eBGP |
| CVE-2026-102027 | Awaiting Analysis | 未確認 | CWE-131 | An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP neighbor to ca |
| CVE-2026-102028 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of servic |
| CVE-2026-102029 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured MSDP peer or ad |
| CVE-2026-102030 | Awaiting Analysis | 未確認 | CWE-459 | An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured MVPN neighbor to cause a denial of service via a BGP MV |
| CVE-2026-102031 | Awaiting Analysis | 未確認 | CWE-78 | An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-privileged TACACS+-authenticated user to execute commands with root privileges whe |
| CVE-2026-102032 | Awaiting Analysis | 未確認 | CWE-401 | A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacke |
| CVE-2026-102033 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of serv |
| CVE-2026-102034 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured ICCP peer to cause a denial |
| CVE-2026-102035 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via an ICCP peer |
| CVE-2026-102036 | Awaiting Analysis | 未確認 | CWE-190 | An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cause a denial of servic |
| CVE-2026-102037 | Awaiting Analysis | 未確認 | CWE-91 | An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Junos OS on SRX Series devices allows an unauthenticated network attacker to commi |
| CVE-2026-102039 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of service via a malform |
| CVE-2026-102040 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to crash the routin |
| CVE-2026-102041 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated network attacker to cause a denia |
| CVE-2026-102042 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via RSVP-TE associ |
| CVE-2026-102043 | Awaiting Analysis | 未確認 | CWE-197 | A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to crash the routing process via MPLS-TE f |
| CVE-2026-102044 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause a denial of service via a BGP-LS u |
| CVE-2026-102045 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolved allows a Layer-2-adjacent attacker to cause a denial of service via a crafted |
| CVE-2026-102046 | Awaiting Analysis | 未確認 | CWE-835 | A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsctp.ko of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to cause a |
| CVE-2026-102047 | Awaiting Analysis | 未確認 | CWE-1288 | An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated Layer 2 a |
| CVE-2026-102048 | Awaiting Analysis | 未確認 | CWE-770 | An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a denia |
| CVE-2026-102049 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a denial of |
| CVE-2026-102050 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of s |
| CVE-2026-102051 | Awaiting Analysis | 未確認 | CWE-401 | An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unaut |
| CVE-2026-102052 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause d |
| CVE-2026-102053 | Awaiting Analysis | 未確認 | CWE-401 | An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved on QFX5K-family platforms allows a |
| CVE-2026-102054 | Awaiting Analysis | 未確認 | CWE-130 | An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obta |
| CVE-2026-102055 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on PTX Series platforms allows an unauthenticated adj |
| CVE-2026-102056 | Awaiting Analysis | 未確認 | CWE-125 | An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent-network attacker to crash the daemon an |
| CVE-2026-102057 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a denial of service via a DHCP c |
| CVE-2026-102058 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platforms allows an unauthenticated adjacent attacker to cause a denial of |
| CVE-2026-102059 | Awaiting Analysis | 未確認 | CWE-78 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos O |
| CVE-2026-102060 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthenticated adjacent attacker |
| CVE-2026-102061 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute |
| CVE-2026-102062 | Awaiting Analysis | 未確認 | CWE-134 | An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execut |
| CVE-2026-102063 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Series routers allows an unauthenticated network attacker to cause a denial |
| CVE-2026-102064 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to cause rpd crash via malformed BGP M |
| CVE-2026-102065 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthent |
| CVE-2026-102066 | Awaiting Analysis | 未確認 | CWE-1284 | A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthe |
| CVE-2026-102067 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauth |
| CVE-2026-102068 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allows an unauthenticated remote attacker to trigger a kernel panic via a crafted TCP |
| CVE-2026-102069 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker actin |
| CVE-2026-102070 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause |
| CVE-2026-102071 | Awaiting Analysis | 未確認 | CWE-617 | A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a de |
| CVE-2026-102072 | Awaiting Analysis | 未確認 | CWE-409 | An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of Juniper Networks Junos OS allows an authenticated network-based attacker to cau |
| CVE-2026-102073 | Awaiting Analysis | 未確認 | CWE-191 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC |
| CVE-2026-102074 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC |
| CVE-2026-102075 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC |
| CVE-2026-102076 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC |
| CVE-2026-102077 | Awaiting Analysis | 未確認 | CWE-754 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows an unauthenti |
| CVE-2026-102078 | Awaiting Analysis | 未確認 | CWE-416 | A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial- |
| CVE-2026-102079 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request c |
| CVE-2026-102080 | Awaiting Analysis | 未確認 | CWE-413 | An Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper Networks Junos OS on MX Series allows a unauthenticated, logically adjacent att |
| CVE-2026-102081 | Awaiting Analysis | 未確認 | CWE-401 | A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (PFE) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, netwo |
| CVE-2026-102082 | Awaiting Analysis | 未確認 | CWE-166 | An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks Junos OS on SRX Series allows a network-based, unauthenticated attacker to cause |
| CVE-2026-102083 | Awaiting Analysis | 未確認 | CWE-413 | An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-S |
| CVE-2026-102084 | Awaiting Analysis | 未確認 | CWE-1286 | An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-based attacker |
| CVE-2026-102085 | Awaiting Analysis | 未確認 | CWE-923 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause |
| CVE-2026-102086 | Awaiting Analysis | 未確認 | CWE-476 | A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-o |
| CVE-2026-102087 | Awaiting Analysis | 未確認 | CWE-184 | An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent att |
| CVE-2026-102155 | Awaiting Analysis | 未確認 | CWE-611 | An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary loca |
| CVE-2026-102156 | Awaiting Analysis | 未確認 | CWE-74 | Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inj |
| CVE-2026-102157 | Awaiting Analysis | 未確認 | CWE-639 | An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to a |
| CVE-2026-102158 | Awaiting Analysis | 未確認 | CWE-74 | Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection against |
| CVE-2026-102159 | Awaiting Analysis | 未確認 | CWE-306 | An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may |
| CVE-2026-102160 | Awaiting Analysis | 未確認 | CWE-78 | An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute a |
| CVE-2026-102161 | Awaiting Analysis | 未確認 | CWE-290, CWE-798 | An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their sourc |
| CVE-2026-102162 | Awaiting Analysis | 未確認 | CWE-121 | On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an una |
| CVE-2026-102163 | Awaiting Analysis | 未確認 | CWE-787 | On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) proximity can send a crafted frame |
| CVE-2026-102164 | Awaiting Analysis | 未確認 | CWE-125 | On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelle |
| CVE-2026-102165 | Awaiting Analysis | 未確認 | CWE-121 | On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentiall |
| CVE-2026-102167 | Awaiting Analysis | 未確認 | CWE-121 | On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor |
| CVE-2026-102168 | Awaiting Analysis | 未確認 | CWE-191 | On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with |
| CVE-2026-102169 | Awaiting Analysis | 未確認 | CWE-476 | On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with |
| CVE-2026-102173 | Deferred | 未確認 | CWE-79 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via registration metadata in all versions up to, a |
| CVE-2026-102174 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Networks Junos OS on the SRX Series allows an authenticated remote-access VPN client to |
| CVE-2026-102175 | Awaiting Analysis | 未確認 | CWE-122 | A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated attacker who can |
| CVE-2026-102176 | Awaiting Analysis | 未確認 | CWE-120 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service process of Juniper Networks Junos OS allows an unauthenticated network att |
| CVE-2026-102177 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to cause a d |
| CVE-2026-102178 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP flowspec peer to cause routing-engin |
| CVE-2026-102179 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BGP EVPN |
| CVE-2026-102180 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker with access to a configured BG |
| CVE-2026-102182 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX Series allows an unauthenticated network attacker to execute code as root via sp |
| CVE-2026-102183 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP E |
| CVE-2026-102184 | Awaiting Analysis | 未確認 | CWE-1284 | An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos Evolved platforms allows a configure |
| CVE-2026-102185 | Awaiting Analysis | 未確認 | CWE-835 | A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote networ |
| CVE-2026-102186 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. |
| CVE-2026-102187 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-102188 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-102189 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102191 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102192 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
| CVE-2026-102193 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102194 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102195 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102196 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102197 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102198 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network. |
| CVE-2026-102199 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network. |
| CVE-2026-102201 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102202 | Analyzed | 未確認 | CWE-59 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102203 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102204 | Undergoing Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102205 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102206 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-102207 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102208 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102209 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102210 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102211 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102214 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-102215 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102216 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102217 | Analyzed | 未確認 | CWE-22, CWE-41 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102218 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102220 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-102221 | Undergoing Analysis | 未確認 | CWE-299 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-102225 | Undergoing Analysis | 未確認 | CWE-125, CWE-197 | Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102226 | Undergoing Analysis | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102227 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
| CVE-2026-102229 | Undergoing Analysis | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network. |
| CVE-2026-102231 | Undergoing Analysis | 未確認 | CWE-41 | Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-102232 | Undergoing Analysis | 未確認 | CWE-863 | Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-102233 | Undergoing Analysis | 未確認 | CWE-862 | Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-102234 | Awaiting Analysis | 未確認 | CWE-807 | Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-102235 | Awaiting Analysis | 未確認 | CWE-116 | Improper encoding or escaping of output in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102238 | Awaiting Analysis | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102250 | Deferred | 未確認 | CWE-345 | CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware updat |
| CVE-2026-102251 | Deferred | 未確認 | CWE-89 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'validate' parameter in all versions up to, and including, 10.8.0 due to |
| CVE-2026-102255 | Awaiting Analysis | 未確認 | CWE-441, CWE-918 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthentica |
| CVE-2026-102256 | Awaiting Analysis | 未確認 | CWE-78 | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 appliance which in s |
| CVE-2026-102257 | Awaiting Analysis | 未確認 | CWE-22 | A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destination directory using a s |
| CVE-2026-102258 | Awaiting Analysis | 未確認 | CWE-79 | Post-authentication Stored Cross-Site Scripting (XSS) vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potenti |
| CVE-2026-102262 | Awaiting Analysis | 未確認 | CWE-22, CWE-668 | Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL |
| CVE-2026-102282 | Deferred | 未確認 | CWE-732 | adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored in a zip entry directly to the |
| CVE-2026-102291 | Deferred | 未確認 | CWE-74 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 6.3.1 This |
| CVE-2026-102294 | Deferred | 未確認 | CWE-78 | TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system |
| CVE-2026-102295 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaScript code within a user's bro |
| CVE-2026-102298 | Deferred | 未確認 | CWE-639, CWE-862 | In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check. An authenticated user can supply a caller-controlled Identifier paramet |
| CVE-2026-102322 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security sev |
| CVE-2026-102342 | Deferred | 未確認 | CWE-79 | ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that allow the SVG animate or set elements can retain an animati |
| CVE-2026-102354 | Deferred | 未確認 | CWE-367, CWE-918 | BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a DNS-over-HTTPS safety check in hostnameRes |
| CVE-2026-102368 | Deferred | 未確認 | CWE-312 | Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonvolatile storage. An attacker with physical access to an affected device can reco |
| CVE-2026-102369 | Deferred | 未確認 | CWE-287 | Tapo C120 v1 and C200 V5 do not adequately protect login challenge data or sanitize attacker-controlled input processed by the MacTool handler. An unauthenticated attacker on the s |
| CVE-2026-102370 | Deferred | 未確認 | CWE-1191 | Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not lock the bootloader. Although the debug traces are physic |
| CVE-2026-102378 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Parallax Section block <= 2.0.4 versions. |
| CVE-2026-102379 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo- |
| CVE-2026-102381 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic S |
| CVE-2026-102382 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-102383 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lookzy: from n/a th |
| CVE-2026-102387 | Deferred | 未確認 | CWE-497 | Unauthenticated Sensitive Data Exposure in Xserver Migrator <= 1.6.6 versions. |
| CVE-2026-102388 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator |
| CVE-2026-102389 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Broken Link Che |
| CVE-2026-102390 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Exploiting Incorrectly Configured Access Contro |
| CVE-2026-102393 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Starter Templates astra-sites allows Stored XSS.This issue af |
| CVE-2026-102394 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite |
| CVE-2026-102401 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'regurl' parameter in all versions up to, and including, 3.3.71 due to insufficient i |
| CVE-2026-102402 | Deferred | 未確認 | CWE-79 | The Team – Team Members Showcase Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ttp_filter_taxonomy (meta of the attacker-chosen post)' parameter |
| CVE-2026-102404 | Analyzed | 未確認 | CWE-400 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged authenticated user can submit a sp |
| CVE-2026-102406 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the sa |
| CVE-2026-102407 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An auth |
| CVE-2026-102408 | Analyzed | 未確認 | CWE-1333 | Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expression Exponential Blowup (CAPEC-492). The ES|QL CHUNK function' |
| CVE-2026-102409 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excess |
| CVE-2026-102410 | Analyzed | 未確認 | CWE-862 | Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An internal API surface within |
| CVE-2026-102411 | Analyzed | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforces a size li |
| CVE-2026-102412 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Kibana can lead to sensitive information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). An authenticated Ki |
| CVE-2026-102413 | Undergoing Analysis | 未確認 | CWE-248 | Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name. When Elastic Defend's Elastic Endpoint component processes a file |
| CVE-2026-102426 | Analyzed | 未確認 | CWE-79 | Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from |
| CVE-2026-102428 | Analyzed | 未確認 | CWE-89 | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and not properly validated, leading |
| CVE-2026-102438 | Awaiting Analysis | 未確認 | CWE-427 | An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link librar |
| CVE-2026-102460 | Analyzed | 未確認 | CWE-863 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthHandler when u |
| CVE-2026-102461 | Analyzed | 未確認 | CWE-407 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison loop with no s |
| CVE-2026-102462 | Analyzed | 未確認 | CWE-400 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates |
| CVE-2026-102463 | Analyzed | 未確認 | CWE-789 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecodeArray) alloc |
| CVE-2026-102464 | Analyzed | 未確認 | CWE-770 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound QoS 2 PUBLISH |
| CVE-2026-102465 | Analyzed | 未確認 | CWE-770 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length declared by th |
| CVE-2026-102466 | Analyzed | 未確認 | CWE-789 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column defi |
| CVE-2026-102467 | Analyzed | 未確認 | CWE-770 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number of bytes allocation w |
| CVE-2026-102469 | Analyzed | 未確認 | CWE-502 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that |
| CVE-2026-102471 | Analyzed | 未確認 | CWE-93 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters in user-suppl |
| CVE-2026-102475 | Analyzed | 未確認 | CWE-770 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered bytes limit to en |
| CVE-2026-102476 | Awaiting Analysis | 未確認 | CWE-295 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should r |
| CVE-2026-102477 | Analyzed | 未確認 | CWE-409 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in bytes, however |
| CVE-2026-102478 | Awaiting Analysis | 未確認 | CWE-1289 | In affected versions of Octopus Server, an authenticated user with permission to modify roles could bypass the protections preventing access abuse resulting in privilege escalation |
| CVE-2026-102479 | Analyzed | 未確認 | CWE-444 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization |
| CVE-2026-102483 | Awaiting Analysis | 未確認 | CWE-617 | Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request with excess NTS Cookie Placeholder extension fields. |
| CVE-2026-102484 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the Telephone JJY time source to corrupt memory or crash ntpd via |
| CVE-2026-102485 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash ntpd or disclose memor |
| CVE-2026-102486 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension F |
| CVE-2026-102488 | Awaiting Analysis | 未確認 | CWE-863 | In affected versions, Octopus Server incorrectly evaluates multiple scoped permission assignments, allowing a highly privileged user to obtain deployment permissions beyond those a |
| CVE-2026-102499 | Deferred | 未確認 | CWE-89 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter before using it in a |
| CVE-2026-102501 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-102502 | Analyzed | 未確認 | CWE-347 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage |
| CVE-2026-102503 | Awaiting Analysis | 未確認 | CWE-306, CWE-862 | Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in Google |
| CVE-2026-102504 | Analyzed | 未確認 | CWE-190, CWE-789 | Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol. Nothing range-checks raw_datachannels. Th |
| CVE-2026-102505 | Analyzed | 未確認 | CWE-131 | Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in i_gsampf_fp. For a paletted image, getsamples() with type "float" allo |
| CVE-2026-102514 | Awaiting Analysis | 未確認 | CWE-125, CWE-1284, CWE-787 | Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who |
| CVE-2026-102527 | Awaiting Analysis | 未確認 | CWE-349 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.2.5 until 6.7.0, the dynamic /_og/d/*.png route accepts unsigned requests while resolvePathCacheKey() produces |
| CVE-2026-102536 | Rejected | 未確認 | Rejected reason: This CVE has been rejected because it was issued to a development-only issue with no affected distributed version identified. | |
| CVE-2026-102539 | Awaiting Analysis | 未確認 | CWE-312, CWE-693 | Super Productivity is an advanced todo list app with integrated timeboxing and time tracking capabilities. From 17.3.0 until 18.13.1, the SuperSync end-to-end encryption setup call |
| CVE-2026-102551 | Awaiting Analysis | 未確認 | CWE-940 | Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party t |
| CVE-2026-102552 | Awaiting Analysis | 未確認 | CWE-940 | Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen addre |
| CVE-2026-102554 | Awaiting Analysis | 未確認 | CWE-502, CWE-770 | Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial o |
| CVE-2026-102562 | Deferred | 未確認 | CWE-79 | The AcyMailing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customField[] parameter of the public frontusers::subscribe endpoint in versions up to, and |
| CVE-2026-102565 | Deferred | 未確認 | CWE-79 | The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'booking_service_qty' parameter in all versions up to, and including, 1.8.28 due to |
| CVE-2026-102576 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting (XSS). Because the application does not val |
| CVE-2026-102596 | Deferred | 未確認 | CWE-862 | Nango is an open-source platform for connecting agents and products to third-party APIs. Prior to 0.70.9, on accounts with RBAC enabled through a plan with has_rbac=true, two priva |
| CVE-2026-102599 | Awaiting Analysis | 未確認 | CWE-248 | Socket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can independently derive an Engine.IO proto |
| CVE-2026-102603 | Awaiting Analysis | 未確認 | CWE-620 | Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint (POST /current/user/password) accepts a |
| CVE-2026-102607 | Deferred | 未確認 | CWE-78 | ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents() function concatenates the attacker-controlled exportFile reque |
| CVE-2026-102608 | Deferred | 未確認 | CWE-78 | ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, downloadEvents() manually wraps a monitor Name value in single quotes instead of |
| CVE-2026-102626 | Deferred | 未確認 | CWE-79 | An authenticated LimeSurvey Community Edition 7.4.0 user with the global Surveys: create permission can store a JavaScript-breaking value in the date_min attribute of a Date/Time q |
| CVE-2026-102627 | Awaiting Analysis | 未確認 | CWE-22 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive e |
| CVE-2026-102628 | Deferred | 未確認 | CWE-215, CWE-489 | The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled (APP_DEBUG=true, APP_ENV=local) in a publicly accessible environment. An unauthenticated attac |
| CVE-2026-102631 | Deferred | 未確認 | CWE-287 | In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back to matching |
| CVE-2026-102663 | Deferred | 未確認 | CWE-200, CWE-639 | OpenList is a file list program that supports multiple storage backends. Prior to 4.2.4, the OpenList search API uses a non-separator-aware strings.HasPrefix comparison as a path c |
| CVE-2026-102666 | Deferred | 未確認 | CWE-798 | The Joyland AI app contains hard-coded credentials for the GeTui push notification service, allowing an attacker to access the GeTui REST API and send push notifications containing |
| CVE-2026-102667 | Deferred | 未確認 | CWE-749 | Joyland AI app allows an attacker with shared network access to inject JavaScript into content loaded in WebView. Without user-granted permissions, an attacker could access the cli |
| CVE-2026-102668 | Deferred | 未確認 | CWE-295 | The Joyland AI app accepts any TLS certificates from any server without validation. |
| CVE-2026-102669 | Deferred | 未確認 | CWE-297 | Joyland AI app does not verify hostnames, allowing a malicious host to connect or intercept chat messages. |
| CVE-2026-102670 | Deferred | 未確認 | CWE-319 | Joyland AI app explicitly permits cleartext HTTP traffic on Android 9+ where the default is to block it. |
| CVE-2026-102671 | Deferred | 未確認 | CWE-295 | The Joyland AI app accepts invalid SSL certificates in the invisible advertisement WebView by default. |
| CVE-2026-102672 | Awaiting Analysis | 未確認 | CWE-367 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.5, and 42.0.0-beta.2, Electron applications on macOS |
| CVE-2026-102682 | Deferred | 未確認 | CWE-345, CWE-770, CWE-862 | Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai package's built-in development |
| CVE-2026-102692 | Deferred | 未確認 | CWE-190, CWE-787 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, nanocoap accepts oversized CoAP Block2 |
| CVE-2026-102693 | Deferred | 未確認 | CWE-120, CWE-121 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's _atwinc15x0_st |
| CVE-2026-102695 | Deferred | 未確認 | CWE-345, CWE-409, CWE-552 | OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, CombinedResourceHandler accepts a structurally valid deflated and |
| CVE-2026-102699 | Awaiting Analysis | 未確認 | CWE-191 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with |
| CVE-2026-102700 | Awaiting Analysis | 未確認 | CWE-404 | With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL pointer check, yet the addition of that chec |
| CVE-2026-102702 | Awaiting Analysis | 未確認 | CWE-191 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with |
| CVE-2026-102731 | Deferred | 未確認 | CWE-789 | Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer (or a MITM) can send a small BER-encoded response causing a large memory |
| CVE-2026-102734 | Deferred | 未確認 | CWE-693, CWE-749, CWE-913 | asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type |
| CVE-2026-102740 | Awaiting Analysis | 未確認 | CWE-379, CWE-61, CWE-732 | The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumabl |
| CVE-2026-102748 | Deferred | 未確認 | CWE-306, CWE-862 | Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers administrative HTTP routes on port 6080 without authentication when the administrative |
| CVE-2026-102755 | Deferred | 未確認 | CWE-79 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users with folder creation permission can store HTML-bearing names through datasour |
| CVE-2026-102756 | Deferred | 未確認 | CWE-79 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart configuration can store an HTML-bearing |
| CVE-2026-102764 | Analyzed | 掲載 | CWE-290 | The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Unde |
| CVE-2026-102772 | Deferred | 未確認 | CWE-79 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<textarea_code field id> (e.g. kl_code, kl_post_code)' parameter in all versions up to, and incl |
| CVE-2026-102774 | Deferred | 未確認 | CWE-79 | The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content |
| CVE-2026-102775 | Analyzed | 未確認 | CWE-639 | Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-file download endpoint does not |
| CVE-2026-102776 | Analyzed | 未確認 | CWE-352 | Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the buttons of the back-end lists |
| CVE-2026-102777 | Analyzed | 未確認 | CWE-918 | Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos picker of the back-end upload page |
| CVE-2026-102778 | Analyzed | 未確認 | CWE-352, CWE-601 | Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the share |
| CVE-2026-102779 | Analyzed | 未確認 | CWE-862 | Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes the site task `records.custom_ |
| CVE-2026-102780 | Analyzed | 未確認 | CWE-862, CWE-915 | Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditionally authorizes both creation |
| CVE-2026-102781 | Awaiting Analysis | 未確認 | CWE-284 | Joomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.6 - modOsTouchSliderHelper::getAjax(), wired through Joomla’s core com_ajax dispat |
| CVE-2026-102782 | Awaiting Analysis | 未確認 | CWE-89 | Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0 - site/simplemembership.php dispatches task=checkLoginPass with no authenticat |
| CVE-2026-102783 | Awaiting Analysis | 未確認 | CWE-22 | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site UploaderHelper . The showI |
| CVE-2026-102784 | Awaiting Analysis | 未確認 | CWE-352 | Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP |
| CVE-2026-102785 | Awaiting Analysis | 未確認 | CWE-434 | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52 - YOOtheme Pro’s publicly accessible image transformation handler incompletely |
| CVE-2026-102786 | Deferred | 未確認 | CWE-79 | Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5 |
| CVE-2026-102795 | Deferred | 未確認 | CWE-284 | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic Server: from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are rec |
| CVE-2026-102797 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a throug |
| CVE-2026-102798 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Stored XSS.This issue affects |
| CVE-2026-102832 | Awaiting Analysis | 未確認 | CWE-367, CWE-863 | JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.5.7 until 4.5.11 and 4.6.4, the markdownviewe |
| CVE-2026-102834 | Awaiting Analysis | 未確認 | CWE-190 | JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries. Prior to 1.5.14, IPCameraFrameGrabber doubles a 32-bit buffer capacity without checking for overf |
| CVE-2026-102849 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102850 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102851 | Undergoing Analysis | 未確認 | CWE-266 | Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-102855 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102856 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102857 | Analyzed | 未確認 | CWE-122, CWE-193 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102858 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102859 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-102860 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102861 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102862 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102863 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-102864 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-102865 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-102866 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-102867 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-102869 | Undergoing Analysis | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-102870 | Undergoing Analysis | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in ASP.NET Core allows an unauthorized attacker to execute code over a network. |
| CVE-2026-102893 | Awaiting Analysis | 未確認 | CWE-287 | Zulip is an open-source team collaboration tool. In Zulip Server versions through 12.1, GenericOpenIdConnectBackend matches the identity provider email claim to an active account's |
| CVE-2026-102899 | Awaiting Analysis | 未確認 | CWE-287 | Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who controls a SAML identity provid |
| CVE-2026-102914 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affe |
| CVE-2026-102915 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WPO365 <= 44.1 versions. |
| CVE-2026-102916 | Awaiting Analysis | 未確認 | CWE-617 | A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, v |
| CVE-2026-102917 | Analyzed | 未確認 | CWE-269 | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/R |
| CVE-2026-102923 | Deferred | 未確認 | CWE-918 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and SparkyFitnessServer/services/lab |
| CVE-2026-102941 | Deferred | 未確認 | CWE-125 | The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/p |
| CVE-2026-102944 | Deferred | 未確認 | CWE-522 | cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() removes Host, Proxy-Authorization, and Authorization headers when following a cross-o |
| CVE-2026-102946 | Deferred | 未確認 | CWE-290, CWE-345, CWE-347 | joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to 1.7.4, joserfc.jws.deserialize_json() accepts a |
| CVE-2026-102980 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, PageVersionEndpoint in apps/api/plane/app/views/page/version.py scopes page-version lookups by workspace and page i |
| CVE-2026-102981 | Deferred | 未確認 | CWE-200, CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, self-hosted Plane deployments allow unauthenticated GET requests to api/workspaces/{slug}/invitations/{pk}/join/ th |
| CVE-2026-102982 | Deferred | 未確認 | CWE-79 | Plane is an open-source project management tool. Prior to 1.4.0, the plane comments fail to sanitize unsafe URL schemes stored in comment_html. A project member can store a crafted |
| CVE-2026-102985 | Deferred | 未確認 | CWE-862 | Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partial_update places its authorization checks inside the role update branch, so a guest |
| CVE-2026-102986 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/{anchor}/ requires auth |
| CVE-2026-102988 | Deferred | 未確認 | CWE-943 | Plane is an open-source project management tool. Prior to 1.4.0, multiple issue-listing endpoints, including unauthenticated public deploy boards handled by IssueListSpaceEndpoint |
| CVE-2026-102989 | Awaiting Analysis | 未確認 | CWE-79 | TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168. |
| CVE-2026-103004 | Analyzed | 未確認 | CWE-524 | Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Components |
| CVE-2026-103005 | Analyzed | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user with connector mana |
| CVE-2026-103006 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search AP |
| CVE-2026-103007 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization |
| CVE-2026-103008 | Analyzed | 未確認 | CWE-674 | Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to Denial of Service via a specially crafted request that causes the server to construct and process a deeply nested data |
| CVE-2026-103009 | Analyzed | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in Elasticsearch can lead to Information Disclosure via a specially crafted cross-cluster search request that references |
| CVE-2026-103010 | Deferred | 未確認 | CWE-122 | Heap-based buffer overflow in the legacy Blowfish decryption routine (BlowFishEncryptor::DecryptFromString) in Progressive Robot hMailServer 6.0.0 through 6.3.3 on Windows allows a |
| CVE-2026-103011 | Deferred | 未確認 | CWE-122 | Heap-based buffer overflow in the legacy Blowfish encryption routine (BlowFishEncryptor::Encode, called by EncryptToString) in Progressive Robot hMailServer 6.0.0 through 6.3.5 all |
| CVE-2026-103028 | Deferred | 未確認 | CWE-863 | SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_patterns o |
| CVE-2026-103030 | Deferred | 未確認 | CWE-200 | Dio is a powerful HTTP client for Dart and Flutter. From 1.0.0 until 2.8.0, dio_http2_adapter follows redirects in Http2Adapter._fetch by copying the original RequestOptions.header |
| CVE-2026-103036 | Deferred | 未確認 | CWE-1321, CWE-915 | oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.9, the @orpc/json-schema SmartCoercionPlugin uses JsonSchemaCoerce |
| CVE-2026-103038 | Deferred | 未確認 | CWE-78 | PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends the attacker-controlled Host va |
| CVE-2026-103059 | Analyzed | 未確認 | CWE-305 | When Gitea's built-in SSH server is enabled (`START_SSH_SERVER = true`), the presented public key was looked up with an SQL `LIKE` comparison of its encoded content, which is case- |
| CVE-2026-103060 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in erlang rebar3 allows a malicious package publisher to delete a directory outside the |
| CVE-2026-103061 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-lang gleam allows a malicious package publisher to delete a directory outside |
| CVE-2026-103062 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs TranslatePress translatepress-multilingual allows Stored XSS.This i |
| CVE-2026-103063 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.Thi |
| CVE-2026-103064 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.Thi |
| CVE-2026-103065 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Themeum Kirki kirki allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Kirki: fr |
| CVE-2026-103066 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events al |
| CVE-2026-103067 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Cross Site Request Forgery.This issue affects Memberful - Membership |
| CVE-2026-103068 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in ByteCoreStack – MCP Connector for AI Tools <= 1.2.2 versions. |
| CVE-2026-103070 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel ShortPixel Image Optimizer shortpixel-image-optimiser allows Stored |
| CVE-2026-103071 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Thank You Page Customizer for WooCommerce woo-thank-you-page-customizer allows Code Injection. |
| CVE-2026-103072 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme VillaTheme Core villatheme-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VillaTh |
| CVE-2026-103075 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPMU DEV Hustle wordpress-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hustle: from n/a t |
| CVE-2026-103076 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeGrill User Registration user-registration allows Cross Site Request Forgery.This issue affects User Registration: from n/a t |
| CVE-2026-103078 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-103079 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting Incorrectly Configured Access Control Security Levels.This |
| CVE-2026-103080 | Deferred | 未確認 | CWE-472 | External Control of Assumed-Immutable Web Parameter vulnerability in VillaTheme Salevo woo-boost-sales allows Input Data Manipulation.This issue affects Salevo: from n/a through 1. |
| CVE-2026-103081 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a through 1.3.0 |
| CVE-2026-103082 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in LA-Studio LA-Studio Element Kit for Elementor lastudio-element-kit allows Server Side Request Forgery.This issue affects LA-Stud |
| CVE-2026-103083 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-products-prices-attr |
| CVE-2026-103084 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stor |
| CVE-2026-103085 | Deferred | 未確認 | CWE-284 | Improper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager: from n/a through 2.9.20. |
| CVE-2026-103086 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through |
| CVE-2026-103090 | Awaiting Analysis | 未確認 | CWE-306, CWE-522 | Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the control plane enrollment status handler (HandleEnrollStatus at GET |
| CVE-2026-103091 | Awaiting Analysis | 未確認 | CWE-1188, CWE-200, CWE-306, CWE-862, CWE-863 | Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in mcp_service.go) and OIDC registrat |
| CVE-2026-103096 | Deferred | 未確認 | CWE-312, CWE-540, CWE-798 | API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client |
| CVE-2026-103097 | Deferred | 未確認 | CWE-312, CWE-540, CWE-798 | An API key is hardcoded and retrievable from the application package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the clie |
| CVE-2026-103098 | Deferred | 未確認 | CWE-319 | Transmission of a sensitive key in the URL over an unencrypted HTTP connection. The request is sent over HTTP rather than HTTPS, meaning the key is transmitted in plaintext across |
| CVE-2026-103119 | Awaiting Analysis | 未確認 | CWE-127 | Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next reques |
| CVE-2026-103220 | Awaiting Analysis | 未確認 | CWE-129 | The Affinity by Canva application before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to |
| CVE-2026-103223 | Analyzed | 未確認 | CWE-789 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the Postg |
| CVE-2026-103224 | Analyzed | 未確認 | CWE-789 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a composite |
| CVE-2026-103234 | Deferred | 未確認 | CWE-94 | The WP Ultimate Review WordPress plugin before 2.4.5 does not neutralise shortcodes in all of the review fields submitted through its public review form, which is available to unau |
| CVE-2026-103244 | Awaiting Analysis | 未確認 | CWE-306 | ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL duri |
| CVE-2026-103245 | Deferred | 未確認 | CWE-347 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 fail to verify the x-webflow-signature HMAC in the Webflow Trigger node webhook handler. Unaut |
| CVE-2026-103246 | Deferred | 未確認 | CWE-639 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 fail to validate credential ownership during inline agent node-tool introspection. Attackers can reference arbitrary credential |
| CVE-2026-103247 | Deferred | 未確認 | CWE-639 | n8n versions before 1.123.80 contain a credential tampering vulnerability where duplicate node IDs bypass the workflow credential tamper guard. Attackers with editor access to shar |
| CVE-2026-103248 | Deferred | 未確認 | CWE-89 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a filter injection vulnerability in the Supabase node's Filters (String) mode that fai |
| CVE-2026-103249 | Deferred | 未確認 | CWE-79 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a stored DOM cross-site scripting vulnerability in Resource Locator parameter dropdown |
| CVE-2026-103250 | Deferred | 未確認 | CWE-943 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a NoSQL injection vulnerability in the MongoDB Chat Memory node that fails to validate |
| CVE-2026-103251 | Deferred | 未確認 | CWE-862 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a validation bypass vulnerability in the community package installation handler for qu |
| CVE-2026-103252 | Deferred | 未確認 | CWE-639 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an authorization bypass vulnerability in the credential test endpoint that resolves pr |
| CVE-2026-103253 | Deferred | 未確認 | CWE-89 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain an SQL injection vulnerability in the Oracle Database node's Delete Table Drop operati |
| CVE-2026-103254 | Deferred | 未確認 | CWE-22 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in signed resume URL generation for Send-and-Wait appro |
| CVE-2026-103255 | Deferred | 未確認 | CWE-73 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the Supabase node where the tableId parameter is ins |
| CVE-2026-103256 | Deferred | 未確認 | CWE-522 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a credentials leak vulnerability in the Wekan and Baserow username-and-password credentials that sends unencrypted passw |
| CVE-2026-103257 | Deferred | 未確認 | CWE-22 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal vulnerability in the n8n node that fails to validate resource identif |
| CVE-2026-103258 | Deferred | 未確認 | CWE-943 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an unescaped parameter interpolation vulnerability in SendGrid, Freshservice, and ServiceNow nodes that allows attackers |
| CVE-2026-103259 | Deferred | 未確認 | CWE-863 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain a session token leakage vulnerability in the Dynamic Credentials authorize and revoke endpoints. Attackers with resolver |
| CVE-2026-103260 | Deferred | 未確認 | CWE-862 | n8n versions before 2.39.6 and 2.40.0 before 2.40.1 contain an approval bypass vulnerability in the Send and Wait node's Approve Within Chat mode. Attackers can submit resume reque |
| CVE-2026-103261 | Deferred | 未確認 | CWE-770 | Tornado before 6.5.9 fails to limit the number of query string fields in HTTPServerRequest.__init__, allowing remote attackers to cause event-loop stalling by sending requests with |
| CVE-2026-103262 | Deferred | 未確認 | CWE-409 | Tornado versions before 6.5.9 contain an unbounded memory accumulation vulnerability in CurlAsyncHTTPClient that allows remote attackers to cause denial of service by sending a com |
| CVE-2026-103263 | Deferred | 未確認 | CWE-59 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the resolved target stays wi |
| CVE-2026-103264 | Analyzed | 未確認 | CWE-287 | Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that accepts hostnames and hardware serials as authentication tokens in addition to de |
| CVE-2026-103265 | Analyzed | 未確認 | CWE-863 | Fleet versions before 4.89.0 fail to properly filter MDM command results by team authorization in the commands/results endpoint. Team-scoped users can read MDM command results for |
| CVE-2026-103266 | Deferred | 未確認 | CWE-863 | Ghost versions 5.2.0 through versions prior to 6.62.0 allow a remote attacker, without authentication, to abuse the Stripe Checkout flow to attach a paid subscription to an existin |
| CVE-2026-103267 | Deferred | 未確認 | CWE-807 | Ghost versions before 6.62.0 contain an authentication bypass vulnerability in staff invite acceptance that allows users to specify any email address when creating their account. A |
| CVE-2026-103268 | Deferred | 未確認 | CWE-862 | Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Atta |
| CVE-2026-103269 | Deferred | 未確認 | CWE-862 | Ghost versions 5.3.0 before 6.62.0 contain a missing authorization vulnerability that allows an authenticated site member to read the excerpts of posts they do not have access to ( |
| CVE-2026-103271 | Deferred | 未確認 | CWE-863 | Ghost versions from 4.0.0 before 6.63.0 contain a content API vulnerability that allows unauthenticated visitors to access gated post content. Attackers can bypass content restrict |
| CVE-2026-103272 | Deferred | 未確認 | CWE-203 | Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration vulnerability in the content API that allows unauthenticated attackers to leak user data. Attackers can observe |
| CVE-2026-103273 | Deferred | 未確認 | CWE-863 | Ghost versions 4.3.0 before 6.58.0 contain an authentication bypass vulnerability where lower-privilege staff users can use staff tokens to bypass post editing restrictions. Attack |
| CVE-2026-103274 | Deferred | 未確認 | CWE-862 | Ghost versions 5.3.0 before 6.58.0 fail to properly enforce access controls on comments in private mode. Unauthenticated visitors can read comments that should be restricted, bypas |
| CVE-2026-103275 | Deferred | 未確認 | CWE-203 | Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and page edit and delete endpoints, which accept filters on restricted fields |
| CVE-2026-103276 | Deferred | 未確認 | CWE-173 | Ghost versions before 6.20.0 contain a file extension filtering bypass vulnerability that allows unauthenticated attackers to read theme templates and metadata. Attackers can use U |
| CVE-2026-103277 | Deferred | 未確認 | CWE-79 | Ghost versions from 2.5.0 before 6.34.0 contain an untrusted script execution vulnerability in the oEmbed preview feature that fails to sandbox externally hosted scripts. Attackers |
| CVE-2026-103278 | Deferred | 未確認 | CWE-23 | Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content publ |
| CVE-2026-103279 | Deferred | 未確認 | CWE-613 | Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts |
| CVE-2026-103280 | Deferred | 未確認 | CWE-201 | Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint: the endpoint responds to unauthenticated requests with the site owner |
| CVE-2026-103281 | Deferred | 未確認 | CWE-201 | Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users with low-privilege staff accounts. An authenticated low-privilege staff u |
| CVE-2026-103282 | Deferred | 未確認 | CWE-362 | Ghost versions 0.5.0 before 6.23.0 contain a concurrency issue in the staff invitation acceptance mechanism that allows multiple accounts to be created from a single invite token. |
| CVE-2026-103283 | Deferred | 未確認 | CWE-613 | Ghost versions 6.20.0 before 6.57.1 contain a session handling vulnerability that allows authenticated staff users to log in as any other staff user with only the password, bypassi |
| CVE-2026-103284 | Deferred | 未確認 | CWE-863 | Ghost versions from 5.125.1 before 6.57.1 contain an information disclosure vulnerability in the Admin Feedback endpoint that allows unauthorized staff users to access member data. |
| CVE-2026-103285 | Deferred | 未確認 | CWE-352 | Ghost versions from 5.19.0 before 6.57.1 contain a cross-site request forgery vulnerability in the post feedback functionality that allows attackers to submit feedback on behalf of |
| CVE-2026-103286 | Deferred | 未確認 | CWE-266 | Ghost versions from 2.21.0 before 6.56.0 contain a privilege escalation vulnerability in the notifications system that allows low-privilege staff users to escalate to higher-privil |
| CVE-2026-103287 | Deferred | 未確認 | CWE-918 | Ghost versions 1.18.0 before 6.27.0 contain a server-side request forgery vulnerability in the webhooks feature that allows staff users to probe internal hosts. Attackers with staf |
| CVE-2026-103288 | Deferred | 未確認 | CWE-639 | Ghost, an open-source publishing platform, contains an input validation flaw in its comment like feature in versions from 5.9.0 before 6.44.1. An authenticated member can delete co |
| CVE-2026-103289 | Deferred | 未確認 | CWE-943 | Ghost from 5.9.0 before 6.44.1 contains an input validation issue in the comments feature that allows authenticated members to access comments they are not authorized to view, resu |
| CVE-2026-103290 | Deferred | 未確認 | CWE-35 | Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths ma |
| CVE-2026-103291 | Deferred | 未確認 | CWE-918 | Ghost versions from 3.20.2 before 6.51.0 contain a server-side request forgery vulnerability in image dimension refetching that allows authenticated staff users to trigger outbound |
| CVE-2026-103292 | Deferred | 未確認 | CWE-79 | Ghost versions from 0.5.3 through versions prior to 6.50.0 fail to sanitize the data placed in the JSON-LD HTML tag emitted by the {{ghost_head}} helper. An authenticated user with |
| CVE-2026-103293 | Deferred | 未確認 | CWE-22 | The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a local filesystem path and |
| CVE-2026-103294 | Analyzed | 未確認 | CWE-295 | CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerabilit |
| CVE-2026-103296 | Analyzed | 未確認 | CWE-347 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage |
| CVE-2026-103297 | Analyzed | 未確認 | CWE-347 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage |
| CVE-2026-103301 | Deferred | 未確認 | CWE-345 | The Payment Gateway for Telcell WordPress plugin before 2.0.5 does not verify the authenticity of incoming payment notifications, because the secret used to sign them is empty by d |
| CVE-2026-103302 | Deferred | 未確認 | CWE-290 | The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of incoming payment notifications, because the merchant credentials used to compute the |
| CVE-2026-103304 | Deferred | 未確認 | CWE-862 | The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated user |
| CVE-2026-103305 | Deferred | 未確認 | CWE-79 | The Prenotazioni WordPress plugin through 1.7.5 does not have authorisation and CSRF checks when saving its settings, and does not escape some of them when outputting them, allowin |
| CVE-2026-103307 | Deferred | 未確認 | CWE-89 | The Walletdoc Payment Gateway for WooCommerce WordPress plugin before 1.8.5 does not properly sanitize and escape user input before using it in a SQL statement, and verifies its pa |
| CVE-2026-103308 | Deferred | 未確認 | CWE-345 | The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is empty on a sto |
| CVE-2026-103309 | Deferred | 未確認 | CWE-79 | The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not escape them when outputting them in translated pages, allowing |
| CVE-2026-103311 | Deferred | 未確認 | CWE-345 | The Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin through 1.4.1 does not verify the authenticity of incoming payment webhook notifications, because the shared |
| CVE-2026-103314 | Awaiting Analysis | 未確認 | CWE-294 | A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). The Central SAML authentication ACS endpoint does not retain used SAML assertion or response identifie |
| CVE-2026-103316 | Deferred | 未確認 | CWE-269 | The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. An attacker with |
| CVE-2026-103323 | Deferred | 未確認 | CWE-862 | The Integration for Epos Now and WooCommerce WordPress plugin before 4.11.2 does not perform an authorization check on one of its REST endpoints, allowing unauthenticated users to |
| CVE-2026-103324 | Deferred | 未確認 | CWE-345 | The Cardinity Payment Gateway for WooCommerce WordPress plugin before 3.4.2 does not properly verify the authenticity of the payment notifications it receives, as the secret used t |
| CVE-2026-103329 | Deferred | 未確認 | CWE-347 | The Super Payments WordPress plugin before 1.43.1 does not properly verify the authenticity of incoming payment webhook notifications, as the signing key used to validate their sig |
| CVE-2026-103334 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations restaurant-reservations allows Retrieve Embedded |
| CVE-2026-103335 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with Zoom video-conferencing-with-zoom-api allows Retrieve Embedded Sensiti |
| CVE-2026-103336 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer wp-ultimate-csv-importer allows Retrieve Embedded Sensitive Data.This i |
| CVE-2026-103337 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WC |
| CVE-2026-103338 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Tem |
| CVE-2026-103339 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet Metform metform allows Stored XSS.This issue affects Metform: from n/a t |
| CVE-2026-103340 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews |
| CVE-2026-103341 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) unlimited-elements-for-elementor allows Exploiting Inco |
| CVE-2026-103342 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Tem |
| CVE-2026-103343 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP ManageNinja LLC FluentForm fluentform allows Stored XSS.This issue affects |
| CVE-2026-103344 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Tem |
| CVE-2026-103345 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: |
| CVE-2026-103346 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tomlister Payflex Payment Gateway payflex-payment-gateway allows Reflected XSS |
| CVE-2026-103347 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in hCaptcha for WP <= 5.3.0 versions. |
| CVE-2026-103348 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Smackcoders Inc. WP Ultimate Exporter wp-ultimate-exporter allows Object Injection.This issue affects WP Ultimate Exporter: from |
| CVE-2026-103349 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Object Injection.This issue affects Product Feed PRO f |
| CVE-2026-103350 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important |
| CVE-2026-103351 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce ecab-taxi-booking-manager allows Input Data Manipulation.Th |
| CVE-2026-103352 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events al |
| CVE-2026-103353 | Deferred | 未確認 | CWE-696 | Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6. |
| CVE-2026-103354 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allow |
| CVE-2026-103355 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Tem |
| CVE-2026-103356 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-103357 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme GIFT4U gift4u-gift-cards-all-in-one-for-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff |
| CVE-2026-103358 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Email Template Customizer for WooCommerce email-template-customizer-for-woo allows Code Inject |
| CVE-2026-103360 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory |
| CVE-2026-103365 | Deferred | 未確認 | CWE-200 | The Bookly – Online Scheduling and Appointment Booking System plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 28.4 via the cl |
| CVE-2026-103366 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and inclu |
| CVE-2026-103367 | Deferred | 未確認 | CWE-98 | The ShopMagic – email automation for WordPress plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.0 via the 'billing_address.first |
| CVE-2026-103369 | Deferred | 未確認 | CWE-79 | The Social Share Buttons & Analytics Plugin – GetSocial.io plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'response' parameter in all versions up to, and |
| CVE-2026-103371 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: from 2.0.0 before 2.0.3. Users are recommended to upgrade to |
| CVE-2026-103376 | Deferred | 未確認 | CWE-200 | The PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net, NMI) WordPress plugin before 1.120.70 does not perform any capability or |
| CVE-2026-103378 | Deferred | 未確認 | CWE-200 | The Geliver Akıllı Kargo Pazaryeri WordPress plugin before 3.1.1 does not prevent unauthenticated access to a log file it stores within its own web-accessible directory, into which |
| CVE-2026-103380 | Deferred | 未確認 | CWE-200 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc |
| CVE-2026-103412 | Awaiting Analysis | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Apache Camel Karavan. A project file name supplied through the project file API w |
| CVE-2026-103413 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation vulnerability in Apache Camel Karavan. When a deployment was started, Karavan unmarshalled a project's `kubernetes.yaml` and applied every resource it |
| CVE-2026-103414 | Awaiting Analysis | 未確認 | CWE-787 | The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because `gx_page |
| CVE-2026-103415 | Awaiting Analysis | 未確認 | CWE-787 | When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both th |
| CVE-2026-103416 | Deferred | 未確認 | CWE-787 | Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and |
| CVE-2026-103417 | Deferred | 未確認 | CWE-346 | Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating pa |
| CVE-2026-103418 | Deferred | 未確認 | CWE-79 | Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged co |
| CVE-2026-103421 | Deferred | 未確認 | CWE-79 | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'REQUEST_URI (path segment after /android_json/search/)' pa |
| CVE-2026-103422 | Deferred | 未確認 | CWE-79 | The AnyComment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in versions up to, and including, 0.3.6. This is due to insufficient inpu |
| CVE-2026-103423 | Deferred | 未確認 | CWE-862 | The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.29 This is due to the plugin not properly verifying that a |
| CVE-2026-103424 | Deferred | 未確認 | CWE-79 | The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, an |
| CVE-2026-103425 | Deferred | 未確認 | CWE-79 | The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.7.29 due to insufficient input |
| CVE-2026-103426 | Deferred | 未確認 | CWE-79 | The Relevanssi Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_rt' parameter in all versions up to, and including, 2.31.4 due to insufficient in |
| CVE-2026-103427 | Deferred | 未確認 | CWE-79 | The Simple Membership plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'country' parameter in all versions up to, and including, 4.8.4 due to insufficient |
| CVE-2026-103431 | Deferred | 未確認 | CWE-150 | colmux in collectl before 4.3.20.2 does not sanitize ANSI/VT100 terminal escape sequences in data received from remote collectl instances before displaying it, allowing a local use |
| CVE-2026-103433 | Awaiting Analysis | 未確認 | CWE-862 | Docker Buildx Bake does not request the expected fs.read approval for certain filesystem inputs. An untrusted Bake definition can expose a readable file through a pathless secret w |
| CVE-2026-103435 | Awaiting Analysis | 未確認 | CWE-22, CWE-367, CWE-61 | Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time without repeating that v |
| CVE-2026-103478 | Deferred | 未確認 | CWE-79 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'checkout[billing][phone] (and state / taxid / email |
| CVE-2026-103480 | Deferred | 未確認 | CWE-79 | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'type' parameter in all versions up to |
| CVE-2026-103481 | Deferred | 未確認 | CWE-79 | The Gwolle Guestbook plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 5.1.1 due to insuffici |
| CVE-2026-103482 | Deferred | 未確認 | CWE-79 | The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_tag>] (e.g. first_name)' paramete |
| CVE-2026-103484 | Awaiting Analysis | 未確認 | CWE-1284, CWE-787 | IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. |
| CVE-2026-103488 | Analyzed | 未確認 | CWE-863 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues |
| CVE-2026-103489 | Analyzed | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.19422 hTML injection in VCS command failure notifications was possible |
| CVE-2026-103490 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links |
| CVE-2026-103491 | Analyzed | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.2.19422 iDOR in the issue activities API allowed reading restricted issues |
| CVE-2026-103492 | Analyzed | 未確認 | CWE-835 | In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments |
| CVE-2026-103493 | Analyzed | 未確認 | CWE-79 | In JetBrains YouTrack before 2026.2.19422 stored XSS via Mermaid and LaTeX content was possible |
| CVE-2026-103494 | Analyzed | 未確認 | CWE-266 | In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group membership changes |
| CVE-2026-103495 | Analyzed | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs |
| CVE-2026-103496 | Analyzed | 未確認 | CWE-639 | In JetBrains YouTrack before 2026.2.19422 iDOR in inbox threads allowed reading other users' notifications |
| CVE-2026-103497 | Analyzed | 未確認 | CWE-918 | In JetBrains YouTrack before 2026.2.19422 sSRF was possible via the GitHub VCS integration |
| CVE-2026-103499 | Awaiting Analysis | 未確認 | CWE-400 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cau |
| CVE-2026-103501 | Undergoing Analysis | 未確認 | CWE-122, CWE-1284 | Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). When deserializing a sketch in LIST mode, from either a byte buffer or |
| CVE-2026-103502 | Deferred | 未確認 | CWE-295, CWE-636 | Improper Certificate Validation vulnerability in hexpm hex_core allows an attacker who can intercept HTTPS connections to impersonate hex.pm, repo.hex.pm or any other repository or |
| CVE-2026-103503 | Deferred | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bu |
| CVE-2026-103504 | Awaiting Analysis | 未確認 | CWE-272 | Changing an organization team's permission through the API with only the `permission` field did not rebuild the team's per-unit access, and the requested level was not applied as a |
| CVE-2026-103505 | Awaiting Analysis | 未確認 | CWE-88 | Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated us |
| CVE-2026-103507 | Awaiting Analysis | 未確認 | CWE-73 | Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration interface. An attacker holding the service authentication token can writ |
| CVE-2026-103508 | Awaiting Analysis | 未確認 | CWE-23 | P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration that causes fi |
| CVE-2026-103509 | Awaiting Analysis | 未確認 | CWE-1220 | P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing |
| CVE-2026-103510 | Awaiting Analysis | 未確認 | CWE-636 | P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected configurations, an unauthenticated attacker with network access can o |
| CVE-2026-103511 | Awaiting Analysis | 未確認 | CWE-73 | Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write |
| CVE-2026-103512 | Awaiting Analysis | 未確認 | CWE-290 | Perforce P4 Search prior to 2026.4.2 trusts a client-supplied address when validating certain authentication requests. An attacker holding a stolen P4 Server ticket can bypass host |
| CVE-2026-103513 | Undergoing Analysis | 未確認 | CWE-125, CWE-787 | Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). A crafted serialized CPC sketch passed to cpc_sketch::deseriali |
| CVE-2026-103514 | Deferred | 未確認 | CWE-287 | The WP 2FA WordPress plugin before 4.1.0 does not invalidate a time-based one-time passcode once it has been used, allowing an attacker who knows an account's password and has obs |
| CVE-2026-103515 | Undergoing Analysis | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when an instance administrator locked a |
| CVE-2026-103517 | Deferred | 未確認 | CWE-345 | The Airwallex Online Payments Gateway WordPress plugin before 1.36.0 does not verify that an incoming payment notification genuinely comes from the payment provider when no webhook |
| CVE-2026-103518 | Deferred | 未確認 | CWE-89 | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL Injection via the 'products[*].variants[*].<attacker-chosen k |
| CVE-2026-103519 | Deferred | 未確認 | CWE-94 | The The WP Ultimate Review plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.3. This is due to the software allowing use |
| CVE-2026-103520 | Deferred | 未確認 | CWE-79 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'custom text attribute (user-defined |
| CVE-2026-103521 | Deferred | 未確認 | CWE-434 | In Thelia v2.6.0, the document upload endpoint properly blocks the upload of executable file types, but the document update endpoint does not perform the same validation. An attack |
| CVE-2026-103522 | Deferred | 未確認 | CWE-434 | In Thelia v2.6.0, the store banner upload feature performs insufficient filetype validation that relies exclusively on client‑supplied MIME types. An attacker with administrative a |
| CVE-2026-103523 | Deferred | 未確認 | CWE-601 | Thelia v2.6.0 contains an open redirect vulnerability in its address creation workflow. After a user accesses a crafted URL and successfully submits the “Add New Address” form, the |
| CVE-2026-103524 | Deferred | 未確認 | CWE-79 | Thelia v2.6.0 is vulnerable to multiple stored XSS vulnerabilities within the administrative interface. User-supplied input is stored without sufficient output encoding or sanitiza |
| CVE-2026-103525 | Deferred | 未確認 | CWE-639 | The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1. |
| CVE-2026-103526 | Deferred | 未確認 | CWE-204 | In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid usernames and incorrect passwords, allowing unauthenticated |
| CVE-2026-103527 | Deferred | 未確認 | CWE-79 | Thelia v2.6.0's Smarty templates (address.html and address-update.html) fail to properly escape double quotes in the “next” parameter, enabling reflected Cross‑Site Scripting (XSS) |
| CVE-2026-103528 | Deferred | 未確認 | CWE-1336 | Thelia 2.6.0 uses Smarty for email templates without properly restricting access to dangerous PHP functions. An authenticated administrator can inject malicious Smarty expressions |
| CVE-2026-103529 | Deferred | 未確認 | CWE-434 | Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can inc |
| CVE-2026-103530 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. |
| CVE-2026-103531 | Deferred | 未確認 | CWE-119, CWE-121 | A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function setcos_construct_fci_44 of the file src/libopensc/card-setcos.c. Executing a manipulation of the |
| CVE-2026-103532 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link |
| CVE-2026-103533 | Deferred | 未確認 | CWE-22 | A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/ |
| CVE-2026-103534 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in David-Crty databasement up to 1.7.1. Affected is the function SnapshotPolicy.viewAny/SnapshotPolicy.view of the file /api/v1/snapshots of the comp |
| CVE-2026-103535 | Deferred | 未確認 | CWE-434, CWE-94 | Thelia v2.6.1 contains path traversal and PHP code injection vulnerabilities in its translation editor that can be chained to achieve remote code execution. The `item_name` paramet |
| CVE-2026-103536 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in ZongXR Supermarket 1.0.0.0. Affected by this vulnerability is the function OrderController.addOrder of the file order/src/main/java/com/supermarke |
| CVE-2026-103537 | Deferred | 未確認 | CWE-1336, CWE-94 | Thelia 2.6.1 contains an absolute path traversal vulnerability in its Smarty template handling that enables SSTI and remote code execution. The `checkTemplate()` validation restric |
| CVE-2026-103538 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in ZongXR SuperMarket 1.0.0.0. Affected by this issue is the function OrderController.deleteOrder of the file order/src/main/java/com/supermarke |
| CVE-2026-103539 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in ZongXR SuperMarket 1.0.0.0. This affects the function startBuy of the file instant-buy/src/main/java/com/supermarket/instantbuy/controller/Instant |
| CVE-2026-103540 | Deferred | 未確認 | CWE-1336, CWE-791 | A security vulnerability has been detected in formtools.org Form Tools up to 3.1.1. This vulnerability affects the function Clients::updateClientSettingsTab of the file global/code |
| CVE-2026-103541 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile of the file global/code/actions.php of the component Ajax Ha |
| CVE-2026-103542 | Deferred | 未確認 | CWE-918 | A flaw has been found in formtools.org Form Tools up to 3.1.1. Impacted is the function smart_fill of the file /global/code/actions.php of the component AJAX Endpoint. This manipul |
| CVE-2026-103543 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Leave Management System 1.0. The affected element is an unknown function of the file /module/leavetype/controller.php. Such manipulat |
| CVE-2026-103544 | Deferred | 未確認 | CWE-488 | A vulnerability was found in datadrivenconstruction OpenConstructionERP up to 14.8.1. The impacted element is an unknown function of the file backend/app/modules/ai/ai_client.py of |
| CVE-2026-103546 | Undergoing Analysis | 未確認 | CWE-918 | In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended |
| CVE-2026-103549 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-103552 | Deferred | 未確認 | CWE-121 | Stack Overflow vulnerability in Apache Directory LDAP API. Before binding, a client can send a deeply nested search filter that overflows the stack in the server's decoder. T |
| CVE-2026-103553 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-103554 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-103555 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-103558 | Undergoing Analysis | 未確認 | CWE-833 | Deadlock in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-103560 | Analyzed | 未確認 | CWE-862 | Improper authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-103565 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-103567 | Undergoing Analysis | 未確認 | CWE-126 | Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
| CVE-2026-103568 | Undergoing Analysis | 未確認 | CWE-122, CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges loca |
| CVE-2026-103569 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-103572 | Undergoing Analysis | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code o |
| CVE-2026-103575 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-103576 | Undergoing Analysis | 未確認 | CWE-601 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-103577 | Undergoing Analysis | 未確認 | CWE-453 | Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-103578 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-103600 | Undergoing Analysis | 未確認 | CWE-674 | Uncontrolled recursion in the ASN.1 parser (Asn1InputStream, Asn1StreamParser) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated attacker t |
| CVE-2026-103601 | Undergoing Analysis | 未確認 | CWE-354 | Release of unverified plaintext in the CCM (CcmBlockCipher) and DSTU 7624 CCM (KCcmBlockCipher) AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remot |
| CVE-2026-103602 | Undergoing Analysis | 未確認 | CWE-295 | Improper certificate validation in PkixNameConstraintValidator in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who controls, or can obtain certificate |
| CVE-2026-103603 | Undergoing Analysis | 未確認 | CWE-789 | Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignature) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a |
| CVE-2026-103604 | Undergoing Analysis | 未確認 | CWE-407 | Inefficient algorithmic complexity in X.509 distinguished name string conversion (X509Name.ToString and IetfUtilities.ValueToString) in Legion of the Bouncy Castle Inc. bc-csharp b |
| CVE-2026-103620 | Analyzed | 未確認 | CWE-862 | A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository collaborator with write access to delete the current default branch throu |
| CVE-2026-103621 | Analyzed | 未確認 | CWE-190 | Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Hi |
| CVE-2026-103622 | Analyzed | 未確認 | CWE-416 | Use after free in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-103623 | Analyzed | 未確認 | CWE-416 | Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-103624 | Analyzed | 未確認 | CWE-416 | Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute a |
| CVE-2026-103625 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-103626 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary |
| CVE-2026-103627 | Analyzed | 未確認 | CWE-200 | Information leak in SVG in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medi |
| CVE-2026-103628 | Analyzed | 未確認 | CWE-787 | Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-103629 | Analyzed | 未確認 | CWE-190 | Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-103630 | Analyzed | 未確認 | CWE-416 | Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-103631 | Analyzed | 未確認 | CWE-122 | Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-103634 | Awaiting Analysis | 未確認 | CWE-190, CWE-787 | Out-of-bounds read and write in the Count-Min sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). count_min_sketch::deserialize() did not include the pream |
| CVE-2026-103635 | Undergoing Analysis | 未確認 | CWE-125, CWE-190 | Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp). compact_theta_sketch::deserialize() and wrapped_compact_theta_s |
| CVE-2026-103636 | Undergoing Analysis | 未確認 | CWE-125, CWE-191 | Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ (repo: datasketches-cpp). var_opt_union::deserialize() read the 32-byte preamble of a non-empty u |
| CVE-2026-103641 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in GEGL. The Radiance HDR loader reads past the end of a memory-mapped image when an uncompressed scanline is shorter than the width declared in the file header. O |
| CVE-2026-103646 | Deferred | 未確認 | CWE-287 | The Ultimate Multisite WordPress plugin before 2.17.0 does not require authentication before a logged-out checkout is linked to, and logged in as, an existing WordPress account ma |
| CVE-2026-103647 | Deferred | 未確認 | CWE-79 | Cross-site scripting in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote attacker who can send a user an encrypted message to run script in the webm |
| CVE-2026-103648 | Awaiting Analysis | 未確認 | CWE-22 | Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the configured destination dire |
| CVE-2026-103649 | Deferred | 未確認 | CWE-1088 | Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound m |
| CVE-2026-103651 | Deferred | 未確認 | CWE-287, CWE-362 | MISP contains a vulnerability in its one-time password (OTP) authentication flow that allows replay of a consumed HOTP (paper) token and rewinding of the token counter. The HOTP v |
| CVE-2026-103655 | Deferred | 未確認 | CWE-294 | MISP contains a vulnerability in its two-factor authentication (TOTP) verification process that permits a valid one-time code to be accepted more than once within its time-based va |
| CVE-2026-103656 | Rejected | 未確認 | Rejected reason: this is rejected | |
| CVE-2026-103658 | Awaiting Analysis | 未確認 | CWE-122 | GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer overflow write (CWE-122) in its read-only dictionary loader. String::reserve() in common/st |
| CVE-2026-103659 | Deferred | 未確認 | CWE-285, CWE-862 | MISP contains an authorization bypass in the event flattening feature. When a user requests an event with the flatten option enabled, the application removes the Object containment |
| CVE-2026-103662 | Deferred | 未確認 | CWE-79 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the legacy taxonomy tag management confirmation forms (add tag and disable tag). The affected forms echoed a |
| CVE-2026-103663 | Awaiting Analysis | 未確認 | CWE-23, CWE-913 | Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacke |
| CVE-2026-103664 | Deferred | 未確認 | CWE-79 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the analyst data notes panel. The seed path parameter, supplied by the user via the URL, was passed directly i |
| CVE-2026-103667 | Analyzed | 未確認 | CWE-79 | Gitea's container registry served blob downloads with a `Content-Type` taken from the media type declared in pushed image manifests, without a `Content-Disposition` or restrictive |
| CVE-2026-103668 | Awaiting Analysis | 未確認 | CWE-89 | An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected pro |
| CVE-2026-103670 | Analyzed | 未確認 | CWE-667 | When a Gitea Actions run was inserted, older runs in the same workflow-level concurrency group were cancelled without checking whether the new run still needed approval. Because fo |
| CVE-2026-103671 | Deferred | 未確認 | CWE-472 | External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redirected to an arbitra |
| CVE-2026-103672 | Awaiting Analysis | 未確認 | CWE-129 | The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then copies attacker payload from record+0x1c into a fixed-size stac |
| CVE-2026-103678 | Analyzed | 未確認 | CWE-125 | A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format (RTF) data. Because the applicat |
| CVE-2026-103679 | Analyzed | 未確認 | CWE-416 | A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format (TNEF) file containing multiple |
| CVE-2026-103680 | Analyzed | 未確認 | CWE-787 | A flaw was found in tnef. A heap-based buffer overflow can occur in the find_free_number() function when generating numbered backup suffixes for duplicate filenames. When numbered |
| CVE-2026-103681 | Deferred | 未確認 | CWE-284 | The Frontend Dashboard WordPress plugin before 3.0.0 does not perform a capability check in one of its AJAX actions, allowing authenticated users with low privileges, such as subsc |
| CVE-2026-103684 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP E |
| CVE-2026-103685 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VillaTheme ALD – Dropshipping and Fulfillment for AliExpress and WooCommerce woo-alidropship allows Exploiting Incorrectly Configured Access |
| CVE-2026-103686 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in rhukster dom-sanitizer up to 1.0.15. Impacted is the function DOMSanitizer::isDangerousUrl of the file src/DOMSanitizer.php of the component URL Validation |
| CVE-2026-103687 | Deferred | 未確認 | CWE-183, CWE-184 | A vulnerability has been found in rhukster dom-sanitizer up to 1.0.15. The affected element is the function url of the file src/DOMSanitizer.php of the component SVG Sanitization. |
| CVE-2026-103690 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Leave Management System 1.0. This vulnerability affects unknown code of the file /module/leave/controller.php. Executing a manipulation of the |
| CVE-2026-103692 | Deferred | 未確認 | CWE-269 | The Frontend Dashboard WordPress plugin before 3.0.5 does not perform any authorisation or nonce check on actions available to unauthenticated users that call an attacker-chosen PH |
| CVE-2026-103694 | Deferred | 未確認 | CWE-269 | The Mobile builder WordPress plugin through 1.4.2 does not properly restrict which user meta keys a logged-in user can update through one of its REST routes, allowing any user with |
| CVE-2026-103695 | Deferred | 未確認 | CWE-89 | The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injecti |
| CVE-2026-103696 | Deferred | 未確認 | CWE-89 | The Mobile builder WordPress plugin through 1.4.2 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injecti |
| CVE-2026-103752 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions. |
| CVE-2026-103754 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker protoco |
| CVE-2026-103755 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-103757 | Deferred | 未確認 | CWE-918 | Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts use |
| CVE-2026-103758 | Awaiting Analysis | 未確認 | CWE-863 | Obot 0.21.1 through 0.24.1 contains an authorization bypass vulnerability that allows authenticated users to reach MCP servers because the checkUI deny list omits the /mcp-connect- |
| CVE-2026-103760 | Deferred | 未確認 | CWE-400 | Mooncake transfer engine through 0.3.13.post1 contains a denial of service vulnerability that allows unauthenticated remote attackers to block the handshake daemon by never reading |
| CVE-2026-103761 | Deferred | 未確認 | CWE-770 | Mooncake transfer engine through 0.3.13.post1 contains a memory exhaustion vulnerability in TransferMetadata::receivePeerNotify that allows unauthenticated attackers to grow proces |
| CVE-2026-103762 | Deferred | 未確認 | CWE-862 | SiYuan before v3.8.5 contains a missing authorization vulnerability in the getRefCreateSavePath, getShorthandSavePath, and getDocCreateSavePath endpoints that allows read-only publ |
| CVE-2026-103763 | Deferred | 未確認 | CWE-200 | SiYuan before v3.8.5 contains an information disclosure vulnerability that allows read-only publish readers to learn metadata of publish-excluded documents through the getNotebookI |
| CVE-2026-103764 | Deferred | 未確認 | CWE-822 | Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary proc |
| CVE-2026-103765 | Deferred | 未確認 | CWE-306 | Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the HTTP metadata server /metadata handler that allows unauthenticated attackers to read, overwrite |
| CVE-2026-103766 | Deferred | 未確認 | CWE-89 | ClipBucket v5 through 5.5.3-#197 contains an sql injection vulnerability that allows authenticated users with ad_manager_access permission to inject SQL via the delete parameter in |
| CVE-2026-103768 | Deferred | 未確認 | CWE-434 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.3.7 via the initMailPart |
| CVE-2026-103778 | Analyzed | 未確認 | CWE-321, CWE-798 | Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentia |
| CVE-2026-103820 | Analyzed | 未確認 | CWE-22 | CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system |
| CVE-2026-103821 | Analyzed | 未確認 | CWE-787 | Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is |
| CVE-2026-103822 | Analyzed | 未確認 | CWE-125 | Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclo |
| CVE-2026-103823 | Analyzed | 未確認 | CWE-121 | Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit |
| CVE-2026-103824 | Analyzed | 未確認 | CWE-476 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t |
| CVE-2026-103825 | Analyzed | 未確認 | CWE-125 | Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclo |
| CVE-2026-103826 | Analyzed | 未確認 | CWE-476 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t |
| CVE-2026-103827 | Analyzed | 未確認 | CWE-121 | Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerabilit |
| CVE-2026-103828 | Analyzed | 未確認 | CWE-476 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t |
| CVE-2026-103829 | Analyzed | 未確認 | CWE-476 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability t |
| CVE-2026-103830 | Analyzed | 未確認 | CWE-121 | Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-103831 | Deferred | 未確認 | CWE-502 | CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize() function |
| CVE-2026-103832 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103833 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103834 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103835 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103836 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103837 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103838 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103839 | Analyzed | 未確認 | CWE-787 | Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issu |
| CVE-2026-103840 | Analyzed | 未確認 | CWE-125 | Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An |
| CVE-2026-103841 | Analyzed | 未確認 | CWE-125 | Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An |
| CVE-2026-103842 | Analyzed | 未確認 | CWE-125 | Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An |
| CVE-2026-103843 | Analyzed | 未確認 | CWE-416 | Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requ |
| CVE-2026-103844 | Awaiting Analysis | 未確認 | CWE-787 | Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires |
| CVE-2026-103845 | Awaiting Analysis | 未確認 | CWE-427 | Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with u |
| CVE-2026-103846 | Awaiting Analysis | 未確認 | CWE-79 | Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current us |
| CVE-2026-103847 | Awaiting Analysis | 未確認 | CWE-426 | Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vul |
| CVE-2026-103848 | Awaiting Analysis | 未確認 | CWE-78 | Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary c |
| CVE-2026-103849 | Undergoing Analysis | 未確認 | CWE-1336 | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of |
| CVE-2026-103850 | Awaiting Analysis | 未確認 | CWE-125 | Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose |
| CVE-2026-103851 | Awaiting Analysis | 未確認 | CWE-121 | Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th |
| CVE-2026-103852 | Awaiting Analysis | 未確認 | CWE-476 | Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to |
| CVE-2026-103853 | Awaiting Analysis | 未確認 | CWE-125 | Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive |
| CVE-2026-103854 | Awaiting Analysis | 未確認 | CWE-121 | Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re |
| CVE-2026-103855 | Awaiting Analysis | 未確認 | CWE-476 | Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the a |
| CVE-2026-103856 | Awaiting Analysis | 未確認 | CWE-125 | Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sen |
| CVE-2026-103857 | Awaiting Analysis | 未確認 | CWE-125 | Adobe Framemaker is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sen |
| CVE-2026-103858 | Deferred | 未確認 | CWE-285 | MISP contains an incomplete authorization check in the discussion posting functionality. When a user submits a post to a thread or replies to an existing post, the application only |
| CVE-2026-103868 | Awaiting Analysis | 未確認 | CWE-488 | A flaw was found in pulp-container when it authenticates to an upstream registry. Basic and bearer credentials from one remote are reused for later downloads in the same worker. A |
| CVE-2026-103869 | Awaiting Analysis | 未確認 | CWE-488 | A flaw was found in pulp-ansible's bearer-token refresh for collection remotes. The access token is kept in one module-level variable and reused for every token download in that wo |
| CVE-2026-103870 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can ma |
| CVE-2026-103877 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Directory LDAP API. A rogue/compromised LDAP server (or pre-TLS MITM) can answer a client's loadSchema() subschema sear |
| CVE-2026-103878 | Deferred | 未確認 | CWE-345 | Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead t |
| CVE-2026-103880 | Deferred | 未確認 | CWE-405 | Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using the bcrypt algorithm with a high force like 30 in a LDAP server that support |
| CVE-2026-103884 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths pr |
| CVE-2026-103885 | Deferred | 未確認 | CWE-400 | Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. A LDAP server using the LDAP API (like Apache DS) may consume 100% of a CPU core indefinitely when pr |
| CVE-2026-103888 | Deferred | 未確認 | CWE-79 | The WPC Smart Quick View for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'woosq-redirect' parameter in all versions up to, and includin |
| CVE-2026-103889 | Deferred | 未確認 | CWE-434 | The 3D Product configurator for WooCommerce plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.16.2 via the 'xpv_image' parameter p |
| CVE-2026-103895 | Deferred | 未確認 | CWE-287 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 5.5.8 via the `mo_by_pass |
| CVE-2026-103896 | Deferred | 未確認 | CWE-22 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in versions up to, and in |
| CVE-2026-103897 | Deferred | 未確認 | CWE-79 | The Responsive Lightbox & Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 2.7.9 due to i |
| CVE-2026-103899 | Deferred | 未確認 | CWE-79 | The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'vat_number' parameter in all versions up to, and including, 2.1.30.2 |
| CVE-2026-103902 | Deferred | 未確認 | CWE-347 | Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS. The vulnerability allows |
| CVE-2026-103903 | Awaiting Analysis | 未確認 | CWE-863 | An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with credentials for a low-privilege account |
| CVE-2026-103904 | Deferred | 未確認 | CWE-79 | The public consent endpoint of JTL-Shop accepts arbitrary consent names from unauthenticated visitors without validating them against the configured consent items. These names are |
| CVE-2026-103905 | Deferred | 未確認 | CWE-306 | The authentication middleware of the JTL-Shop administration backend processes the plugin safe mode toggle on the admin logout route before checking whether the requesting user is |
| CVE-2026-103907 | Deferred | 未確認 | CWE-862 | The JNews - Jeg Elementor Kit plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on both the 'jkit_post_block' and 'jeg_find_author |
| CVE-2026-103909 | Deferred | 未確認 | CWE-79 | The Calculated Fields Form – AI Form Builder for WordPress – Contact, Payment, Quote, Quiz & More plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via |
| CVE-2026-103910 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-101335. Reason: This candidate is a reservation duplicate of CVE-2026-101335. Notes: All CVE us | |
| CVE-2026-103911 | Deferred | 未確認 | CWE-94 | The The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including |
| CVE-2026-103912 | Deferred | 未確認 | CWE-79 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the '<attacker-chosen query var name matching th |
| CVE-2026-103913 | Deferred | 未確認 | CWE-89 | The GeoDirectory plugin for WordPress is vulnerable to SQL Injection via the stored latitude/longitude coordinates of a listing in versions up to, and including, 2.8.186. This is d |
| CVE-2026-103918 | Deferred | 未確認 | CWE-1321, CWE-915 | oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.10, the @orpc/zod ZodSmartCoercionPlugin and experimental_ZodSmart |
| CVE-2026-103921 | Awaiting Analysis | 未確認 | CWE-295 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 1.1.35, the executor-legacy-ws buildWSLegacyExecutor() function hardcodes TLS certif |
| CVE-2026-103922 | Awaiting Analysis | 未確認 | CWE-346, CWE-441 | Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigation guard validates a |
| CVE-2026-103923 | Awaiting Analysis | 未確認 | CWE-807 | KaTeX is a fast, easy-to-use JavaScript library for TeX math rendering on the web. From 0.11.0 until 0.18.2, KaTeX uses ordinary JavaScript property access for the renderer options |
| CVE-2026-103928 | Awaiting Analysis | 未確認 | CWE-73 | Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1.60.9, and 1.61.4, native queries and actions against an H2 data sourc |
| CVE-2026-103929 | Deferred | 未確認 | CWE-284, CWE-78 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml [settings] from an untrusted local project b |
| CVE-2026-103930 | Deferred | 未確認 | CWE-113 | cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream in httplib.h accepts a caller-controlled path that reaches detail::write_request_ |
| CVE-2026-103936 | Deferred | 未確認 | CWE-248, CWE-755 | libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/webrtc webRTCDirect() Node.js listener processes unauthenticated STUN Binding Req |
| CVE-2026-103937 | Deferred | 未確認 | CWE-459 | Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. Rep |
| CVE-2026-103946 | Awaiting Analysis | 未確認 | CWE-89 | An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus. |
| CVE-2026-103956 | Awaiting Analysis | 未確認 | CWE-1188, CWE-306 | Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent cont |
| CVE-2026-103957 | Awaiting Analysis | 未確認 | CWE-201, CWE-918 | Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of the |
| CVE-2026-103958 | Awaiting Analysis | 未確認 | CWE-918 | Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentials |
| CVE-2026-103964 | Deferred | 未確認 | CWE-200 | The Download Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.3.71 via the 'first_name' parameter. This makes it |
| CVE-2026-103965 | Awaiting Analysis | 未確認 | CWE-94 | An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authent |
| CVE-2026-103966 | Awaiting Analysis | 未確認 | CWE-122 | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is |
| CVE-2026-103967 | Awaiting Analysis | 未確認 | CWE-787 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re |
| CVE-2026-103974 | Deferred | 未確認 | CWE-79 | lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d378fe20f80d4c790c6fdee54c4, a user who can add a chapter to a study can place at |
| CVE-2026-103975 | Awaiting Analysis | 未確認 | CWE-59 | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extraction accepts an archive |
| CVE-2026-103977 | Deferred | 未確認 | CWE-307, CWE-841 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise stores failed TOTP verification attempts in $_SESS |
| CVE-2026-103988 | Deferred | 未確認 | CWE-284, CWE-639 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise /api/folder/renameFolder.php authorizes an authent |
| CVE-2026-103993 | Awaiting Analysis | 未確認 | CWE-787 | An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker which sends a specific set o |
| CVE-2026-103994 | Awaiting Analysis | 未確認 | CWE-122 | A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Junos OS allows a malicious or compromised SDN-controller to cause a complete outag |
| CVE-2026-103998 | Deferred | 未確認 | CWE-79 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'inputs (array key)' paramet |
| CVE-2026-103999 | Deferred | 未確認 | CWE-79 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via File Upload in all versions up to, and including, 3.5.54 due to insufficie |
| CVE-2026-104000 | Deferred | 未確認 | CWE-79 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'status' parameter in all versions up to, and including, 1.6.12.35 due to |
| CVE-2026-104001 | Deferred | 未確認 | CWE-94 | The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 Thi |
| CVE-2026-104002 | Awaiting Analysis | 未確認 | CWE-390 | A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intend |
| CVE-2026-104003 | Deferred | 未確認 | CWE-94 | The WP User Avatar / ProfilePress plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.17.5. This is due to the get_user_profile_ |
| CVE-2026-104004 | Awaiting Analysis | 未確認 | CWE-476 | MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running w |
| CVE-2026-104005 | Awaiting Analysis | 未確認 | CWE-617 | A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a sp |
| CVE-2026-104006 | Deferred | 未確認 | CWE-524 | The SpeedyCache – Cache, Optimization, Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2 via the 'comment |
| CVE-2026-104011 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-94257. Reason: This candidate is a reservation duplicate of CVE-2026-94257. Notes: All CVE user | |
| CVE-2026-104018 | Awaiting Analysis | 未確認 | CWE-269 | An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when configured to enforce per-user command privileges. Under certain s |
| CVE-2026-104019 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution 2.x before 2.14.12, 3.x before 3.9.12, 4.0.x before 4.0.11, 4.1.x before 4.1.11, |
| CVE-2026-104020 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a de |
| CVE-2026-104021 | Deferred | 未確認 | CWE-94 | The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the `fastcache_settings[cache_cookie_exclude][]` param |
| CVE-2026-104022 | Deferred | 未確認 | CWE-269 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.0.3. This |
| CVE-2026-104023 | Deferred | 未確認 | CWE-89 | The Smart Popup by Supsystic plugin for WordPress is vulnerable to generic SQL Injection via the 'sidx' parameter in all versions up to, and including, 1.13.2 due to insufficient e |
| CVE-2026-104024 | Deferred | 未確認 | CWE-184, CWE-693 | Incomplete List of Disallowed Inputs (CWE-184) in the dangerous-extension confirmation of the archive object viewer (peach.pas, grid_obj_open) in PeaZip 10.5.0 through 11.2.0 on Wi |
| CVE-2026-104025 | Deferred | 未確認 | CWE-22, CWE-693 | Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a victim to pr |
| CVE-2026-104026 | Awaiting Analysis | 未確認 | CWE-150 | In Sapling SCM prior to v0.2.20260929-102736, control characters were allowed to be embedded in Git subtree URLs. A maliciously constructed repository, if cloned by a target, could |
| CVE-2026-104028 | Deferred | 未確認 | CWE-434 | The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to a |
| CVE-2026-104029 | Undergoing Analysis | 未確認 | CWE-125 | A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset |
| CVE-2026-104030 | Undergoing Analysis | 未確認 | CWE-125 | A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that lacks null t |
| CVE-2026-104031 | Undergoing Analysis | 未確認 | CWE-772 | A flaw was found in SSSD. In configurations where the autofs responder service is enabled, memory allocated during successful request processing is not released until the client co |
| CVE-2026-104032 | Undergoing Analysis | 未確認 | CWE-408 | A flaw was found in SSSD. An unprivileged local user can repeatedly request master automount map updates through the autofs responder due to missing authorization checks. This trig |
| CVE-2026-104033 | Undergoing Analysis | 未確認 | CWE-193 | A flaw was found in SSSD. When configured to enforce account expiration using LDAP (Lightweight Directory Access Protocol) shadow attributes, SSSD fails to treat an expiration valu |
| CVE-2026-104034 | Undergoing Analysis | 未確認 | CWE-825 | A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager (KCM) responder during Kerberos ticket-granting ticket (TGT) renewal, where a def |
| CVE-2026-104035 | Undergoing Analysis | 未確認 | CWE-772 | A flaw was found in SSSD. An issue in the Kerberos Credential Manager (KCM) responder allows a local user to cause a Denial of Service (DoS) by maintaining a persistent connection |
| CVE-2026-104036 | Undergoing Analysis | 未確認 | CWE-787 | A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort befor |
| CVE-2026-104037 | Undergoing Analysis | 未確認 | CWE-125 | A flaw was found in SSSD. A local attacker can exploit this issue by sending a specially crafted request with an invalid packet length to the autofs responder UNIX socket. This cau |
| CVE-2026-104038 | Undergoing Analysis | 未確認 | CWE-476 | A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) extension. In deploymen |
| CVE-2026-104039 | Undergoing Analysis | 未確認 | CWE-825 | A flaw was found in SSSD. A local user can cause a denial of service (DoS) by disrupting system authentication services. When handling Generic Security Services Application Program |
| CVE-2026-104040 | Analyzed | 未確認 | CWE-140 | A flaw was found in SSSD. When configured with the Entra ID identity provider, input lookup names containing single quotes are not properly escaped before being included in Microso |
| CVE-2026-104041 | Undergoing Analysis | 未確認 | CWE-770 | A flaw was found in SSSD. An unprivileged local user can repeatedly request lookups for nonexistent entries through the Name Service Switch (NSS) responder. Because the negative ca |
| CVE-2026-104042 | Undergoing Analysis | 未確認 | CWE-125 | A flaw was found in sssd. A local attacker can cause a Denial of Service (DoS) by sending a crafted Pluggable Authentication Module (PAM) request containing a zero-length authentic |
| CVE-2026-104043 | Undergoing Analysis | 未確認 | CWE-125 | A flaw was found in SSSD. A local attacker with access to the Name Service Switch (NSS) responder UNIX socket can trigger an integer underflow by sending a specially crafted reques |
| CVE-2026-104044 | Undergoing Analysis | 未確認 | CWE-476 | A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request when passkey authentic |
| CVE-2026-104045 | Analyzed | 未確認 | CWE-772 | A flaw was found in SSSD. A local user can trigger a Denial of Service (DoS) by exploiting a race condition in the autofs responder between asynchronous enumeration completion and |
| CVE-2026-104046 | Analyzed | 未確認 | CWE-770 | A flaw was found in SSSD (System Security Services Daemon). When Identity Provider (IdP) authentication is enabled, pre-authentication requests retain state in memory without being |
| CVE-2026-104047 | Analyzed | 未確認 | CWE-140 | A flaw was found in SSSD. When configured to use Microsoft Entra ID, search inputs are not properly sanitized before being incorporated into directory query filters. A local user c |
| CVE-2026-104048 | Analyzed | 未確認 | CWE-1025 | A flaw was found in SSSD. In trust-enabled identity management environments, SSSD evaluates Host-Based Access Control (HBAC) rules by stripping domain qualifiers and comparing only |
| CVE-2026-104049 | Deferred | 未確認 | CWE-639 | The Academy LMS WordPress plugin before 4.0.0 does not verify course enrollment or object ownership when returning a lesson's content through one of its REST API routes, allowing |
| CVE-2026-104050 | Deferred | 未確認 | CWE-639 | The Academy LMS WordPress plugin before 4.0.0 does not verify that a quiz question belongs to the course the requesting user is authorized to access before returning that question |
| CVE-2026-104051 | Deferred | 未確認 | CWE-522 | PictShare before 3.7.1 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain the secret delete_code and uploader metadata by calling the |
| CVE-2026-104052 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file admin_reject_completed.php. This manipulation |
| CVE-2026-104053 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file admin_reservefilter.php. Such manipulation of |
| CVE-2026-104054 | Deferred | 未確認 | CWE-862, CWE-863 | A security flaw has been discovered in calcom cal.diy up to 6.2.0. This affects the function doesUserIdHaveAccessToBooking of the file BookingAccessService.ts of the component PBAC |
| CVE-2026-104055 | Awaiting Analysis | 未確認 | CWE-532 | The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicated "monitoring" PostgreSQL user. On database connection errors, the exp |
| CVE-2026-104056 | Awaiting Analysis | 未確認 | CWE-345, CWE-346, CWE-829 | Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or issuer-origin binding. This allows a poisoned discovery respo |
| CVE-2026-104057 | Deferred | 未確認 | CWE-362 | Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared maps (activePlayers and allConnections) in its WebSocket ha |
| CVE-2026-104058 | Deferred | 未確認 | CWE-306 | Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin engine instead of the BasicAuth-protected router group, allow |
| CVE-2026-104059 | Deferred | 未確認 | CWE-352 | Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows unauthenticated attackers to perform state-changing actions by |
| CVE-2026-104068 | Deferred | 未確認 | CWE-59 | JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-c |
| CVE-2026-104069 | Deferred | 未確認 | CWE-434 | HortusFox before 6.2 contains a remote code execution vulnerability in ThemeModule::startImport() where an uploaded ZIP archive is extracted directly into the public web root befor |
| CVE-2026-104070 | Awaiting Analysis | 未確認 | CWE-862 | The Crayons plugin for SPIP before 3.5.0 contains a missing authorization vulnerability that allows unauthenticated attackers to modify arbitrary editable object fields by omitting |
| CVE-2026-104073 | Awaiting Analysis | 未確認 | CWE-668, CWE-79 | NetBox versions 2.9.5 before 4.7.0 contain a server-side template injection vulnerability that allows a low-privileged user with the "Can add custom links" permission to steal sess |
| CVE-2026-104074 | Deferred | 未確認 | CWE-908 | Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate reques |
| CVE-2026-104075 | Deferred | 未確認 | CWE-288 | TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authentication bypass vulnerability in the web management login endpoint POST /tvu/Login th |
| CVE-2026-104076 | Deferred | 未確認 | CWE-306 | TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote unauthenticated attackers to read se |
| CVE-2026-104077 | Awaiting Analysis | 未確認 | CWE-1188, CWE-79 | Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers to craft malicious Markdown notes exploiting insufficient sanitization of the da |
| CVE-2026-104078 | Awaiting Analysis | 未確認 | CWE-1188, CWE-79 | Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 Safe component that allows attackers to execute arbitrary code by embedding a cra |
| CVE-2026-104079 | Awaiting Analysis | 未確認 | CWE-862 | Envira Gallery Lite before 1.16.2 contains a missing authorization vulnerability in its gallery conversion REST endpoint that allows lower-privileged authenticated users to create |
| CVE-2026-104081 | Deferred | 未確認 | CWE-22 | KodExplorer before 4.55 contains a path traversal vulnerability in the unzip_pre_name() function within app/function/helper.function.php, where a single non-recursive str_replace() |
| CVE-2026-104082 | Awaiting Analysis | 未確認 | CWE-94 | SmarterMail before build 9777 contains a remote code execution vulnerability that allows an attacker holding a SysAdmin-scoped access token to bypass the Volume Mount script-direct |
| CVE-2026-104083 | Awaiting Analysis | 未確認 | CWE-79 | SmarterMail before build 9777 contains a stored mutation cross-site scripting vulnerability that allows remote attackers to inject executable script by placing payloads inside a <s |
| CVE-2026-104084 | Awaiting Analysis | 未確認 | CWE-613 | SmarterMail before build 9777 contains a privilege escalation vulnerability where JWT access and refresh tokens embed a role claim at issuance that is not revalidated against the a |
| CVE-2026-104085 | Deferred | 未確認 | CWE-78 | odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a |
| CVE-2026-104086 | Awaiting Analysis | 未確認 | CWE-908 | 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by c |
| CVE-2026-104102 | Deferred | 未確認 | CWE-22 | copyparty is a portable file server. Prior to 1.20.19, FTP upload path handling does not confine destinations to configured copyparty volumes. When FTP or FTPS is explicitly enable |
| CVE-2026-104103 | Awaiting Analysis | 未確認 | CWE-22, CWE-59 | Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() validated tar member name |
| CVE-2026-104105 | Deferred | 未確認 | CWE-287, CWE-294 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise verifies that a TOTP code is valid for the accepte |
| CVE-2026-104106 | Deferred | 未確認 | CWE-306, CWE-620 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF |
| CVE-2026-104107 | Deferred | 未確認 | CWE-22 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operation accepts dot and dot |
| CVE-2026-104108 | Deferred | 未確認 | CWE-287, CWE-290, CWE-345 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise maps an authenticated OIDC identity to a local acc |
| CVE-2026-104109 | Deferred | 未確認 | CWE-59 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates archive entry names but extracts them di |
| CVE-2026-104110 | Deferred | 未確認 | CWE-200, CWE-306 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.24.0, FileRise Pro /api/pro/portals/get.php returns a configured |
| CVE-2026-104112 | Awaiting Analysis | 未確認 | CWE-772 | A missing release of resources in the illumos name service cache daemon (nscd) allows a local user to exhaust kernel memory. The nscd door server procedure, switcher() in usr/src/c |
| CVE-2026-104113 | Awaiting Analysis | 未確認 | CWE-415 | A double free in the IP management daemon (ipmgmtd) of OmniOS and SmartOS allows a local user to crash the daemon. When authorizing a door request that modifies interface configura |
| CVE-2026-104114 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-inet/lib/nwamd/door_if.c |
| CVE-2026-104115 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow in the illumos reparse point daemon (reparsed) allows a local user to crash the daemon. get_fs_locations() in usr/src/cmd/fs.d/nfs/rp_basic/libnfs_bas |
| CVE-2026-104116 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization check in the illumos zones statistics daemon (zonestatd) allows a local user in any zone to disrupt zonestat in other zones and to determine which zones are |
| CVE-2026-104117 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization check in the illumos IP management daemon (ipmgmtd) allows a local user to change the persistent IP multipathing (IPMP) configuration. The ipmgmtd door disp |
| CVE-2026-104118 | Deferred | 未確認 | CWE-639 | The Razorpay for WooCommerce WordPress plugin before 4.8.8 does not perform ownership or authorization checks on a REST API route used during checkout, allowing unauthenticated att |
| CVE-2026-104119 | Deferred | 未確認 | CWE-79 | The Simple Shopping Cart WordPress plugin before 5.2.6 does not escape some of its settings field values before outputting them on an admin settings page, allowing high-privilege u |
| CVE-2026-104120 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in modelcontextprotocol mcp-server-fetch and mcp-server-everything up to 2026.6.4. Affected is the function fetch_url of the file mcp_ser |
| CVE-2026-104122 | Deferred | 未確認 | CWE-89 | The Ukr-To-Lat WordPress plugin through 1.3.5 does not sanitize and escape a term name before using it in a SQL query, allowing users with Contributor-level access and above to per |
| CVE-2026-104123 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer_0/admins/asse |
| CVE-2026-104126 | Deferred | 未確認 | CWE-94 | JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate |
| CVE-2026-104140 | Awaiting Analysis | 未確認 | CWE-79 | QGIS is a free, open source, cross-platform geographic information system. Prior to 3.44.12 and 4.0.0 through 4.2.3, QGIS Server renders feature data in WFS3 (OGC API Features) HTM |
| CVE-2026-104141 | Deferred | 未確認 | CWE-89 | DataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names, connection usernames, table names, or d |
| CVE-2026-104142 | Deferred | 未確認 | CWE-89 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users can store crafted FieldGroupDTO.min, FieldGroupDTO.max, FieldGroupDTO.startTi |
| CVE-2026-104143 | Deferred | 未確認 | CWE-289 | DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users can store a crafted custom dateFormat for a dataset field. DatasetTableFieldD |
| CVE-2026-104150 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.2 and 9.1.1, the regular expression returned by router.matchers.slug() contains |
| CVE-2026-104181 | Deferred | 未確認 | CWE-306 | Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.13.3 and 5.8.3, app-based multi-factor authentication management actions d |
| CVE-2026-104182 | Deferred | 未確認 | CWE-407 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, the JSONC parser at stream-json/jsonc/parser.js a |
| CVE-2026-104183 | Deferred | 未確認 | CWE-1321 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. Prior to 3.6.0, Assembler materializes object properties with pla |
| CVE-2026-104192 | Deferred | 未確認 | CWE-415 | Dragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc can associate one streamNACK wit |
| CVE-2026-104198 | Deferred | 未確認 | CWE-287, CWE-697 | ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in we |
| CVE-2026-104246 | Deferred | 未確認 | CWE-22 | The Contact Form 7 Signature Addon WordPress plugin through 4.2.2 does not sanitize a signature field value before building an email attachment path from it, allowing unauthenticat |
| CVE-2026-104250 | Awaiting Analysis | 未確認 | CWE-116, CWE-79 | The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to 0.24.1, |
| CVE-2026-104252 | Analyzed | 未確認 | CWE-79 | Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Action and dti |
| CVE-2026-104266 | Deferred | 未確認 | CWE-835 | tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a sub-atom with a size of zero inside a ---- atom can cause the metadata |
| CVE-2026-104286 | Analyzed | 掲載 | CWE-22 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail |
| CVE-2026-104313 | Deferred | 未確認 | CWE-79 | The WPC Estimated Delivery Date for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'rule_data' parameter in all versions up to, and includ |
| CVE-2026-104332 | Undergoing Analysis | 未確認 | CWE-121 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table |
| CVE-2026-104334 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper control of code generation. |
| CVE-2026-104335 | Analyzed | 未確認 | CWE-284 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper access control. |
| CVE-2026-104340 | Awaiting Analysis | 未確認 | CWE-122 | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is |
| CVE-2026-104341 | Awaiting Analysis | 未確認 | CWE-787 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re |
| CVE-2026-104342 | Awaiting Analysis | 未確認 | CWE-416 | Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires |
| CVE-2026-104343 | Awaiting Analysis | 未確認 | CWE-476 | Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cras |
| CVE-2026-104344 | Awaiting Analysis | 未確認 | CWE-122 | Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this is |
| CVE-2026-104345 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-104346 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-104347 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-104348 | Analyzed | 未確認 | CWE-122 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i |
| CVE-2026-104355 | Awaiting Analysis | 未確認 | CWE-863 | A connected peer cluster can modify a Temporal Server cluster's local namespaces, which are never replicated to that peer, because the receiving cluster applies inbound namespace r |
| CVE-2026-104356 | Deferred | 未確認 | CWE-338 | PictShare before version 3.7.1 contains a weak randomness vulnerability where the getRandomString() function uses the non-cryptographic rand() PRNG to generate the delete_code auth |
| CVE-2026-104364 | Undergoing Analysis | 未確認 | CWE-20 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation. |
| CVE-2026-104380 | Deferred | 未確認 | CWE-1385 | Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one. On HTTP/2 and HTTP/3 a WebSocket handshake a |
| CVE-2026-104385 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions. |
| CVE-2026-104386 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP VR: from n/a through |
| CVE-2026-104387 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in PowerPress Podcasting <= 11.17.9 versions. |
| CVE-2026-104388 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sensitive Data.This issue affects PowerPress Podcasting: from n/ |
| CVE-2026-104389 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sirv Sirv sirv allows Blind SQL Injection.This issue affects Sirv: from n/a th |
| CVE-2026-104390 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a thr |
| CVE-2026-104391 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Stored XSS.This iss |
| CVE-2026-104392 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a t |
| CVE-2026-104393 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.Thi |
| CVE-2026-104394 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Charitable <= 1.8.12.3 versions. |
| CVE-2026-104395 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in picu <= 3.10.1 versions. |
| CVE-2026-104396 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name Directory name-directory allows Stored XSS.This issue affec |
| CVE-2026-104397 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Name D |
| CVE-2026-104398 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce affi-affiliate-marketing-for-woo allows Object Injection.This issue affects |
| CVE-2026-104399 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embedded Sensitive Data. This issue affects Motors: from n/a through 1.4.1 |
| CVE-2026-104400 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from |
| CVE-2026-104401 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Membership Plugin memberful-wp allows Retrieve Embedded Sensitive |
| CVE-2026-104402 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp allows Retrieve Embedded Sensitive Data.This issue affects Mindio Magi |
| CVE-2026-104403 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in ThimPress LearnPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects |
| CVE-2026-104404 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP GiveWP give allows Stored XSS.This issue affects GiveWP |
| CVE-2026-104405 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in GiveWP <= 4.17.0 versions. |
| CVE-2026-104406 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in picu <= 3.10.1 versions. |
| CVE-2026-104407 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Cross Site Request Forgery.This issue affects PowerPress Podcasting: f |
| CVE-2026-104408 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects |
| CVE-2026-104409 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite al |
| CVE-2026-104410 | Deferred | 未確認 | CWE-862 | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish readers to read password-protected and publish-disabled database rows via the /api/export/p |
| CVE-2026-104411 | Deferred | 未確認 | CWE-79 | Ghost from 6.22.1 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users to host scripts by uploading files served with extension-derived conten |
| CVE-2026-104412 | Deferred | 未確認 | CWE-269 | Ghost 0.5.0 before 6.64.0 does not correctly restrict staff role assignment, allowing users with the Editor or Super Editor role to assign their own role to other staff despite lac |
| CVE-2026-104413 | Deferred | 未確認 | CWE-79 | Ghost from 5.94.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows staff users, including Contributors, to host arbitrary HTML by abusing bookmark car |
| CVE-2026-104414 | Deferred | 未確認 | CWE-79 | Ghost from 2.5.0 before 6.64.0 contains a stored cross-site scripting vulnerability that allows attackers to inject untrusted scripts into post content via oEmbed photo responses. |
| CVE-2026-104415 | Deferred | 未確認 | CWE-203 | Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff-level users to determine the relative ordering of other staff use |
| CVE-2026-104416 | Deferred | 未確認 | CWE-203 | Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows staff users to view secret tokens of pending staff invites. Staff user |
| CVE-2026-104417 | Deferred | 未確認 | CWE-22 | Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the ac |
| CVE-2026-104418 | Deferred | 未確認 | CWE-22 | Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attac |
| CVE-2026-104419 | Deferred | 未確認 | CWE-345 | Zebra (zebrad) 4.5.0 before 6.3.0 discards which peer supplied the block hashes in FindBlocks responses, then assigns 100 misbehavior points, the ban threshold, to whichever peer s |
| CVE-2026-104420 | Deferred | 未確認 | CWE-704 | Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup |
| CVE-2026-104421 | Deferred | 未確認 | CWE-459 | Zebra before 6.2.1 contains an incomplete cleanup vulnerability that allows unauthenticated peers to block downloading of valid blocks by leaving rejected hashes in SentHashes. Att |
| CVE-2026-104422 | Deferred | 未確認 | CWE-345 | The block sync download path in Zebra (zebrad) before 6.3.0 reads a block's height from its unvalidated coinbase scriptSig and drops blocks that appear too far behind the tip befor |
| CVE-2026-104423 | Deferred | 未確認 | CWE-405 | Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthenticated peers to stall block verification by pushing V6 mempool transactio |
| CVE-2026-104424 | Deferred | 未確認 | CWE-131 | Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attack |
| CVE-2026-104425 | Deferred | 未確認 | CWE-405 | ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated peers to degrade block processing by pushing transactions with invalid O |
| CVE-2026-104426 | Deferred | 未確認 | CWE-407 | Zebra before 6.1.0 contains an inefficient algorithmic complexity vulnerability in remaining_transaction_value that clones the entire block-level spent-UTXO map per transaction dur |
| CVE-2026-104427 | Deferred | 未確認 | CWE-459 | Zebra before 6.1.0 contains an incomplete cleanup vulnerability in the state write task that allows remote unauthenticated peers to stall node synchronization by poisoning parent_e |
| CVE-2026-104428 | Deferred | 未確認 | CWE-617 | The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbosity 2 for a side-chain block because the block's -1 confirmations sen |
| CVE-2026-104429 | Deferred | 未確認 | CWE-770 | Zebra (zebrad) 5.0.0 before 6.0.0-rc.0 does not apply its per-peer mempool admission cap to transactions received as direct P2P tx messages, because these are queued without the se |
| CVE-2026-104430 | Deferred | 未確認 | CWE-628 | Zebra zebrad 4.5.0 and zebra-script 7.0.0 count P2SH redeem script signature operations in legacy mode rather than zcashd's accurate P2SH mode, overcounting CHECKMULTISIG preceded |
| CVE-2026-104431 | Deferred | 未確認 | CWE-405 | Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio workers by submitting mempool transactions requiring expensive synchr |
| CVE-2026-104432 | Deferred | 未確認 | CWE-754 | Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards valid one-hash FindBlocks responses, falsely reporting close-to-tip stat |
| CVE-2026-104433 | Deferred | 未確認 | CWE-125 | Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated attackers to crash th |
| CVE-2026-104434 | Deferred | 未確認 | CWE-617 | ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_listunifiedreceivers RPC handler, which calls expect() on Sapling receiv |
| CVE-2026-104435 | Deferred | 未確認 | CWE-347 | Zebra zebrad 4.4.0 and zebra-script 6.0.0 fail to enforce a ZIP-244 consensus rule, accepting V5 transparent inputs signed with SIGHASH_SINGLE that lack a corresponding output. Att |
| CVE-2026-104436 | Deferred | 未確認 | CWE-770 | Zebra before 4.5.0 contains an uncontrolled resource consumption vulnerability that allows remote P2P peers to exhaust blocking-pool threads by sending oversized block locator vect |
| CVE-2026-104437 | Deferred | 未確認 | CWE-347 | Zebra before 4.4.0 contains a consensus divergence vulnerability in V5 transparent signature verification, computing a ZIP-244 digest for SIGHASH_SINGLE inputs lacking correspondin |
| CVE-2026-104438 | Deferred | 未確認 | CWE-862 | YesWiki before 4.6.7 contains a missing authorization vulnerability in the listpagestag and includepages actions of the tags tool, which enumerate pages without applying read-ACL f |
| CVE-2026-104439 | Deferred | 未確認 | CWE-204 | YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows unauthenticated attackers to confirm registered email addresses through differi |
| CVE-2026-104440 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains a blind server-side request forgery vulnerability that allows unauthenticated attackers to make arbitrary server-side requests via the idtypeannonce p |
| CVE-2026-104441 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary hosts and ports via the { |
| CVE-2026-104442 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch arbitrary URLs by supplying a syndi |
| CVE-2026-104443 | Deferred | 未確認 | CWE-863 | YesWiki before 4.6.7 contains an empty-filter scope bypass in the triples delete API that allows any authenticated user to delete or forge arbitrary semantic triples regardless of |
| CVE-2026-104444 | Deferred | 未確認 | CWE-639 | YesWiki before 4.6.7 contains an authorization bypass vulnerability in the comments API editComment route that allows authenticated low-privilege users to overwrite arbitrary pages |
| CVE-2026-104445 | Deferred | 未確認 | CWE-290 | YesWiki before 4.6.7 contains an authentication bypass vulnerability in the ActivityPub inbox that fails to bind the verified HTTP signature signer to the activity actor. Unauthent |
| CVE-2026-104446 | Deferred | 未確認 | CWE-306 | YesWiki before 4.6.7 contains an authentication bypass in the contact mail AJAX handler that allows unauthenticated attackers to send email through the wiki's SMTP server. Attacker |
| CVE-2026-104447 | Deferred | 未確認 | CWE-352 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the autoupdate UpdateAction that allows attackers to delete installed packages via unprotected GET reque |
| CVE-2026-104448 | Deferred | 未確認 | CWE-352 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the ajaxdeletepage handler, which permanently deletes a page on any GET request carrying a jsonp_callbac |
| CVE-2026-104449 | Deferred | 未確認 | CWE-639 | YesWiki before 4.6.7 contains an access control vulnerability allowing unauthenticated attackers to overwrite any existing wiki page, including pages whose write ACL restricts edit |
| CVE-2026-104450 | Deferred | 未確認 | CWE-79 | YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action (tools/attach/actions/pointimage.php), which saves content to an attacker-chosen page with write |
| CVE-2026-104451 | Deferred | 未確認 | CWE-352 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in RevisionsHandler that allows attackers to restore old page revisions through GET requests lacking CSRF t |
| CVE-2026-104452 | Deferred | 未確認 | CWE-352 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the filemanager page handler, which deletes page attachments on GET requests without validating a CSRF t |
| CVE-2026-104453 | Deferred | 未確認 | CWE-352 | YesWiki before 4.6.7 contains a cross-site request forgery vulnerability in the admintag action that allows attackers to delete tag associations by luring administrators to crafted |
| CVE-2026-104454 | Deferred | 未確認 | CWE-1333 | YesWiki before 4.6.7 contains an algorithmic-complexity denial of service in the wakka.php formatter due to an O(n^2) markdown-link regex. Unauthenticated attackers can submit a sm |
| CVE-2026-104455 | Deferred | 未確認 | CWE-200 | YesWiki before 4.6.7 contains an access control bypass vulnerability that allows unauthenticated attackers to read restricted page content via the recentchangesrssplus RSS action. |
| CVE-2026-104456 | Deferred | 未確認 | CWE-89 | YesWiki before 4.6.7 contains a second-order SQL injection vulnerability in AclService::updateRequestWithACL, where a stored username is concatenated unescaped into a read-ACL LIKE |
| CVE-2026-104457 | Deferred | 未確認 | CWE-89 | YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar filtertags action, which wraps unescaped filterN attribute tokens in quotes and concatenates them into a r |
| CVE-2026-104458 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability in validateKeyIdUrl() that allows unauthenticated attackers to bypass the SSRF guard using 6to4, NAT64, or |
| CVE-2026-104459 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability in WebfingerService that allows unauthenticated attackers to trigger HTTPS requests to internal hosts. Att |
| CVE-2026-104460 | Deferred | 未確認 | CWE-89 | YesWiki before 4.6.7 contains a blind SQL injection vulnerability in the {{newtextsearch}} action because Bazar list option ids are concatenated into SQL REGEXP/LIKE clauses in act |
| CVE-2026-104461 | Deferred | 未確認 | CWE-79 | YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in the Bazar FileField, which validates only the upload's file extension and never calls HtmlPurifierServi |
| CVE-2026-104462 | Deferred | 未確認 | CWE-89 | YesWiki before 4.6.7 contains an SQL injection vulnerability in the Bazar nuagetag action, which concatenates the unescaped tags attribute into a raw SQL IN clause. Attackers with |
| CVE-2026-104463 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger server requests by sending signed Follow activities to th |
| CVE-2026-104464 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated actor U |
| CVE-2026-104465 | Deferred | 未確認 | CWE-79 | YesWiki before 4.6.7 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the field parameter of the mail handler. At |
| CVE-2026-104466 | Deferred | 未確認 | CWE-79 | YesWiki before 4.6.7 contains a stored cross-site scripting vulnerability in formatters/wakka.php that allows users who can edit pages or post comments to inject event handlers by |
| CVE-2026-104467 | Deferred | 未確認 | CWE-862 | YesWiki before 4.6.7 contains an authorization bypass vulnerability in ApiService::isAuthorized() that allows unauthenticated attackers to call admin-only API routes when public AP |
| CVE-2026-104468 | Deferred | 未確認 | CWE-613 | YesWiki before 4.6.7 contains an insufficient session expiration vulnerability that allows attackers to reuse old password reset links because tokens lack expiry timestamps. Attack |
| CVE-2026-104469 | Deferred | 未確認 | CWE-384 | YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attacker |
| CVE-2026-104470 | Deferred | 未確認 | CWE-918 | YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows page editors to make the server fetch arbitrary URLs via the url parameter of the Bazar valeur |
| CVE-2026-104471 | Deferred | 未確認 | CWE-434 | YesWiki before 4.6.7 contains an unrestricted file upload vulnerability that allows authenticated admins to write remote files into the web-accessible files/ directory via Bazar CS |
| CVE-2026-104472 | Deferred | 未確認 | CWE-862 | YesWiki before 4.6.7 contains a missing authorization vulnerability in the attachment download handler that allows unauthenticated attackers to bypass page read ACLs. Attackers can |
| CVE-2026-104473 | Deferred | 未確認 | CWE-79 | YesWiki before 4.5.3 contains multiple reflected cross-site scripting vulnerabilities that allow remote attackers to inject JavaScript through unsanitized parameters such as incomi |
| CVE-2026-104474 | Deferred | 未確認 | CWE-367 | OpenLiteSpeed before 1.9.3 contains a local privilege escalation vulnerability in admin/misc/lsup.sh that runs unverified update packages from a nobody-writable directory as root. |
| CVE-2026-104475 | Deferred | 未確認 | CWE-79 | IDURAR ERP CRM through 4.1.1 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts by uploading unsanitized SVG files. Attackers ca |
| CVE-2026-104476 | Deferred | 未確認 | CWE-200 | Backdrop CMS before 1.35.1 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve configuration export archives left on the server after |
| CVE-2026-104477 | Awaiting Analysis | 未確認 | CWE-79 | Showdown through 2.1.0 contains a cross-site scripting vulnerability in the makehtml link and image subparsers, which fail to escape double quotes in destination URLs placed into h |
| CVE-2026-104478 | Deferred | 未確認 | CWE-22 | Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Attackers with backup do |
| CVE-2026-104479 | Deferred | 未確認 | CWE-79 | Shopclass before 6.2.0 contains a stored cross-site scripting vulnerability that allows self-registered non-admin users to inject scripts into item listing descriptions when fronte |
| CVE-2026-104480 | Awaiting Analysis | 未確認 | CWE-390, CWE-863 | Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signali |
| CVE-2026-104584 | Deferred | 未確認 | CWE-78 | reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection via the custom_headers scan engine configurat |
| CVE-2026-104585 | Deferred | 未確認 | CWE-77 | Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integration module. |
| CVE-2026-104586 | Deferred | 未確認 | CWE-94 | AUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi. |
| CVE-2026-104587 | Deferred | 未確認 | CWE-79 | blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerability. The application uses text/template instead of html/template, failing to perform con |
| CVE-2026-104606 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Online Admission System Project 1.0. The impacted element is an unknown function of the file confirm.php. The manipulation of th |
| CVE-2026-104609 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function get of the file edit_accounts.p |
| CVE-2026-104610 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa |
| CVE-2026-104611 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast_setting_internet_set of the component POST Request Handler. Performi |
| CVE-2026-104612 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file script/academic/core/new_announcement.php of the componen |
| CVE-2026-104613 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in CodeAstro Simple Pharmacy Management System 1.0. This vulnerability affects unknown code of the file /SimplePharmacy-PHP/product/view.php. This ma |
| CVE-2026-104614 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in CodeAstro Simple Pharmacy Management System 1.0. This issue affects some unknown processing of the file /SimplePharmacy-PHP/product/delete.php. Su |
| CVE-2026-104617 | Awaiting Analysis | 未確認 | CWE-522 | There are two invocations of `qrencode` to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged use |
| CVE-2026-104618 | Awaiting Analysis | 未確認 | CWE-732 | On request the `sdbootutil` script creates a world-readable debug log in /var/log/sdbootutil.log. The log file is created world-readable, however, which means that arbitrary low-pr |
| CVE-2026-104625 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the a |
| CVE-2026-104626 | Analyzed | 未確認 | CWE-841 | A user who can open a fork pull request can place workflow content with a shared run-level concurrency group into a Gitea Actions run that is awaiting approval. When a later run in |
| CVE-2026-104627 | Awaiting Analysis | 未確認 | CWE-287, CWE-352 | The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without checking that the signed-in user had started the linking. Because Op |
| CVE-2026-104628 | Deferred | 未確認 | CWE-1333 | Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit crafted s |
| CVE-2026-104629 | Awaiting Analysis | 未確認 | CWE-470 | A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which may be an invalid component to load. An attacker with an authenticated u |
| CVE-2026-104632 | Analyzed | 未確認 | CWE-285 | Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintainer approves the run. The rerun path only required a run to be finished |
| CVE-2026-104633 | Analyzed | 未確認 | CWE-400, CWE-835 | When migrating a repository from another Gitea instance, Gitea used the page size reported in the source server's API settings to end its paginated downloads. A source that reporte |
| CVE-2026-104634 | Deferred | 未確認 | CWE-704 | Incorrect Type Conversion or Cast vulnerability in BeamMCP.Server in ScriptKittyOS beam_mcp allows an MCP client's JSON true, false and null tool arguments to reach the host's disp |
| CVE-2026-104635 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Protobuf.JSON.Decode in elixir-protobuf protobuf allows an unauthenticated remote attacker to crash the decoding process via a deeply nested |
| CVE-2026-104636 | Analyzed | 未確認 | CWE-918 | Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads, but the subsequent raw Git operations followed HTTP redirec |
| CVE-2026-104637 | Deferred | 未確認 | CWE-284, CWE-434 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function add_patient/add_phys |
| CVE-2026-104638 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function o |
| CVE-2026-104641 | Deferred | 未確認 | CWE-345 | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify that a PayPal payment notification is for a payment received by the site owner's PayPal account in its defaul |
| CVE-2026-104642 | Deferred | 未確認 | CWE-345 | The Simple Shopping Cart WordPress plugin before 5.3.3 does not verify submitted product prices against a value only the site owner can set, allowing users with the Contributor rol |
| CVE-2026-104643 | Deferred | 未確認 | CWE-862 | The Easy HTTPS Redirection (SSL) WordPress plugin before 2.0.2 does not perform capability checks in some of its AJAX actions, allowing any authenticated user, such as a Subscriber |
| CVE-2026-104644 | Deferred | 未確認 | CWE-79 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.15 does not sanitize or escape gallery configuration values before echoing them into an inline script on every |
| CVE-2026-104645 | Deferred | 未確認 | CWE-639 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not properly verify authorization on several of its gallery and image management actions, checking owne |
| CVE-2026-104646 | Deferred | 未確認 | CWE-79 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.14 does not sanitise several gallery configuration values that can be overridden through its gallery shortcode |
| CVE-2026-104651 | Deferred | 未確認 | CWE-639 | The Yaad Sarig Payment Gateway For WC WordPress plugin before 2.2.13 does not verify authorization or that the requesting user owns the target order in several of its order payment |
| CVE-2026-104652 | Deferred | 未確認 | CWE-79 | The Envira Gallery WordPress plugin before 1.16.1 does not sanitise and escape a gallery item identifier before outputting it in an image tag attribute, allowing users with the Au |
| CVE-2026-104653 | Deferred | 未確認 | CWE-79 | The Envira Gallery WordPress plugin before 1.16.1 does not sanitise or escape user-supplied gallery display configuration values before storing them and outputting them in an imag |
| CVE-2026-104658 | Deferred | 未確認 | CWE-807 | The Linux live-update apply helper (hmailserver-update) of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver serv |
| CVE-2026-104659 | Deferred | 未確認 | CWE-346 | Missing Host header validation and missing throttling of failed administrator sign-ins in the REST API listener of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote |
| CVE-2026-104660 | Deferred | 未確認 | CWE-862 | Missing authorization on COM objects in Progressive Robot hMailServer 6.0.0 through 6.3.5 (Windows only) lets a local interactive user with no hMailServer credential read and write |
| CVE-2026-104661 | Analyzed | 未確認 | CWE-266 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have al |
| CVE-2026-104667 | Deferred | 未確認 | CWE-89 | The Animated Number Counters WordPress plugin before 3.1 does not sanitise or escape a value stored by an Editor-level user before concatenating it into a SQL query that runs when |
| CVE-2026-104670 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in LearnPress <= 4.4.9 versions. |
| CVE-2026-104671 | Deferred | 未確認 | CWE-862 | The TutorStarter WordPress theme before 4.0.4 does not respect the site's user registration setting in one of its AJAX registration handlers, allowing unauthenticated visitors to c |
| CVE-2026-104672 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.17.0 versions. |
| CVE-2026-104673 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar mp3-music-player- |
| CVE-2026-104675 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-104677 | Deferred | 未確認 | CWE-94 | The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role hol |
| CVE-2026-104678 | Deferred | 未確認 | CWE-284 | The CP Media Player WordPress plugin before 1.3.4 does not perform a capability check on its settings-page handler, allowing users with only Contributor-level access to create, mo |
| CVE-2026-104679 | Deferred | 未確認 | CWE-611 | VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended |
| CVE-2026-104680 | Deferred | 未確認 | CWE-269 | The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user holds the capability WordPress reserves for installing Envira Gallery WordPress plugin before 1.16.2 |
| CVE-2026-104681 | Deferred | 未確認 | CWE-200 | The Envira Gallery WordPress plugin before 1.16.2 does not verify that an image identifier added to a gallery refers to a media attachment the caller is permitted to view, allowin |
| CVE-2026-104682 | Deferred | 未確認 | CWE-862 | The Envira Gallery WordPress plugin before 1.16.2 does not correctly check authorization on its gallery-conversion feature, verifying that the requester can edit an arbitrary post |
| CVE-2026-104684 | Deferred | 未確認 | CWE-639 | The Envira Gallery WordPress plugin before 1.16.2 does not verify that a user is authorized to read a gallery before rendering it, allowing authors to embed and expose other users |
| CVE-2026-104703 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-104704 | Deferred | 未確認 | CWE-319 | Progressive Robot hMailServer 6.0.0 through 6.3.5 does not enforce TLS for outbound SMTP delivery to a mail exchanger whose DNSSEC-validated TLSA records contain no DANE-EE (usage |
| CVE-2026-104706 | Deferred | 未確認 | CWE-31 | DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> Vie |
| CVE-2026-104710 | Rejected | 未確認 | Rejected reason: Duplicate of CVE-2026-71364, which was publicly disclosed and fixed in Red Hat Ansible Automation Platform on 2026-08-24. No separate identifier is required. | |
| CVE-2026-104711 | Analyzed | 未確認 | CWE-917 | Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache Struts. If the application is configu |
| CVE-2026-104712 | Analyzed | 未確認 | CWE-405 | Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal (java.math.BigDecimal) property |
| CVE-2026-104713 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any bound on how much will be accept |
| CVE-2026-104714 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message formats a date or time argumen |
| CVE-2026-104715 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) s |
| CVE-2026-104721 | Deferred | 未確認 | CWE-22 | Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an MDC-based discriminator val |
| CVE-2026-104722 | Deferred | 未確認 | CWE-22 | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in t |
| CVE-2026-104723 | Deferred | 未確認 | CWE-502 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserial |
| CVE-2026-104724 | Deferred | 未確認 | CWE-89 | The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to generic SQL Injection via FireBox Form Display Cond |
| CVE-2026-104725 | Deferred | 未確認 | CWE-269 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.9 This is due to a mi |
| CVE-2026-104726 | Deferred | 未確認 | CWE-79 | The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dir' Shortcode Attribute in all versions up to, and including, 1.34.2 due to insufficient |
| CVE-2026-104728 | Deferred | 未確認 | CWE-862 | The AutomatorWP – No-Code Workflow Automation, Integration & Webhooks Plugin, now with AI plugin for WordPress is vulnerable to authorization bypass in all versions up to, and incl |
| CVE-2026-104730 | Deferred | 未確認 | CWE-502 | The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3 |
| CVE-2026-104732 | Deferred | 未確認 | CWE-287 | The Advanced IP Blocker plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 8.13.13 The vulnerability exists because `handle_login_act |
| CVE-2026-104733 | Deferred | 未確認 | CWE-290 | User Impersonation in ProcessOnes XMMP Server ejabberd <= 26.04 allows an attacker to impersonate arbitrary users via unvalidated authzid parameter in SASL-PLAIN mechanism. |
| CVE-2026-104734 | Deferred | 未確認 | CWE-502 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.3.2 via deseriali |
| CVE-2026-104735 | Deferred | 未確認 | CWE-79 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Feedzy Loop B |
| CVE-2026-104736 | Deferred | 未確認 | CWE-502 | The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via deserialization of untrusted input from the 'checkout-email' |
| CVE-2026-104741 | Deferred | 未確認 | CWE-862 | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to |
| CVE-2026-104742 | Deferred | 未確認 | CWE-862 | The AI Puffer – Chat. Create. Automate. (formerly AI Power) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.4.89. This is due to |
| CVE-2026-104745 | Deferred | 未確認 | CWE-269 | The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the `alg_wc_ev_verify_email` parameter in versions up to, and includi |
| CVE-2026-104747 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Haaken <= 1.5 versions. |
| CVE-2026-104748 | Deferred | 未確認 | CWE-269 | The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and includin |
| CVE-2026-104749 | Deferred | 未確認 | CWE-269 | The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execution in all v |
| CVE-2026-104751 | Deferred | 未確認 | CWE-862 | The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to dele |
| CVE-2026-104752 | Deferred | 未確認 | CWE-434 | The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-le |
| CVE-2026-104753 | Deferred | 未確認 | CWE-89 | The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administr |
| CVE-2026-104754 | Deferred | 未確認 | CWE-79 | The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can man |
| CVE-2026-104755 | Deferred | 未確認 | CWE-269 | The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 7.25.00 The vulnerabilit |
| CVE-2026-104757 | Deferred | 未確認 | CWE-266 | Editor Privilege Escalation in Import and export users and customers <= 2.5.5 versions. |
| CVE-2026-104758 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-73364. Reason: This candidate is a reservation duplicate of CVE-2026-73364. Notes: All CVE user | |
| CVE-2026-104759 | Deferred | 未確認 | CWE-287 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Authentication Bypass via OIDC Nonce Replay in all versions up to, an |
| CVE-2026-104761 | Deferred | 未確認 | CWE-79 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input s |
| CVE-2026-104762 | Deferred | 未確認 | CWE-79 | The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Block Font Family Attribute in all versions up |
| CVE-2026-104763 | Deferred | 未確認 | CWE-22 | The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter. Th |
| CVE-2026-104764 | Deferred | 未確認 | CWE-502 | The Post Export Import with Media plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.17.1 via deserialization of untrusted input . T |
| CVE-2026-104766 | Deferred | 未確認 | CWE-269 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5. |
| CVE-2026-104767 | Deferred | 未確認 | CWE-269 | The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828. This is |
| CVE-2026-104769 | Deferred | 未確認 | CWE-22 | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter. |
| CVE-2026-104774 | Deferred | 未確認 | CWE-172, CWE-193, CWE-693 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the t:jsDecode transformation in internal/transformations/js_decode.go |
| CVE-2026-104795 | Awaiting Analysis | 未確認 | CWE-250 | The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting. When scanning a container, the coordinato |
| CVE-2026-104797 | Deferred | 未確認 | CWE-287 | The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and inc |
| CVE-2026-104798 | Deferred | 未確認 | CWE-269 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.8.7. The public `mcs` GET parameter is |
| CVE-2026-104800 | Deferred | 未確認 | CWE-434 | The AGE-GATE plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0 via the 'width (and height)' parameter parameter. This is due to |
| CVE-2026-104801 | Deferred | 未確認 | CWE-22 | The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_files |
| CVE-2026-104803 | Deferred | 未確認 | CWE-287 | The WPCOM Member plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.7.27 via the `uuid` and `code` parameters of the social-login c |
| CVE-2026-104805 | Deferred | 未確認 | CWE-22, CWE-345, CWE-434, CWE-494, CWE-73 | DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to introduce arbitrary |
| CVE-2026-104806 | Deferred | 未確認 | CWE-31 | DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maint |
| CVE-2026-104807 | Deferred | 未確認 | CWE-79 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content into the |
| CVE-2026-104808 | Deferred | 未確認 | CWE-79 | DigitalCanion has discovered a stored Cross-Site Scripting (XSS) vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resultin |
| CVE-2026-104809 | Deferred | 未確認 | CWE-426, CWE-427, CWE-494, CWE-73, CWE-829 | DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The load |
| CVE-2026-104810 | Deferred | 未確認 | CWE-31 | This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerabili |
| CVE-2026-104811 | Deferred | 未確認 | CWE-20, CWE-434, CWE-829, CWE-94 | DigitalCanion SA has discovered a vulnerability that allows remote attackers to execute arbitrary code on affected installations of the product. Authentication may be required to e |
| CVE-2026-104814 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions. |
| CVE-2026-104816 | Deferred | 未確認 | CWE-79 | Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL |
| CVE-2026-104817 | Deferred | 未確認 | CWE-405, CWE-770, CWE-918 | Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated fetch-rss API lacks rate limiting and response-size restrictions and p |
| CVE-2026-104827 | Deferred | 未確認 | CWE-770 | react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 1.0.0 until 1.11.1, React\Http\Browser uses ClientRequestStream::handleData() to a |
| CVE-2026-104828 | Deferred | 未確認 | CWE-79 | HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML. Prior to 5.4.0, HTMLWriterFilter writes decoded TEXTAREA and TITLE character content without entity encoding because both eleme |
| CVE-2026-104841 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-104843 | Awaiting Analysis | 未確認 | CWE-22 | uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outs |
| CVE-2026-104844 | Awaiting Analysis | 未確認 | CWE-400, CWE-407 | PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it. Prior to 7.1.6, src/parser.js splitWord() can receive a flat selector as one |
| CVE-2026-104845 | Deferred | 未確認 | CWE-770 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.6.3, deserializeTypedArray in fromJSON and fromCrossJSON t |
| CVE-2026-104846 | Deferred | 未確認 | CWE-843 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. From 0.12.0 until 1.6.2, fromJSON deserialization of a fulfilled Prom |
| CVE-2026-104847 | Awaiting Analysis | 未確認 | CWE-79 | ProseMirror's view component renders and manages the editable browser interface for ProseMirror documents. Prior to 1.42.3, prosemirror-view paste handling accepts attacker-provide |
| CVE-2026-104848 | Deferred | 未確認 | CWE-1321 | Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.1, Tinypool constructs ThreadPool.options from a normal options object and reads the execArgv and env |
| CVE-2026-104849 | Deferred | 未確認 | CWE-1321, CWE-94 | Tinypool is a minimal Node.js worker thread pool implementation. Prior to 2.1.2, Tinypool reads filename from a caller-supplied options object in pool.run(task, options) without re |
| CVE-2026-104850 | Awaiting Analysis | 未確認 | CWE-345, CWE-522 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. Starting in version 1.12.0 and prior to versions 1.31.0 and 2.2.0, the SDK's OAuth |
| CVE-2026-104851 | Deferred | 未確認 | CWE-1336, CWE-94 | fsspec is a specification and Python implementation framework for filesystem interfaces. From 0.9.0 until 2026.6.0, fsspec.implementations.reference.ReferenceFileSystem evaluates f |
| CVE-2026-104852 | Awaiting Analysis | 未確認 | CWE-1321 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to 12.0.1, the GraphQL Tools utils package's mergeDeep function follows inherited prope |
| CVE-2026-104853 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migrations value from a target |
| CVE-2026-104854 | Awaiting Analysis | 未確認 | CWE-269, CWE-732 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolated plugin workers in s |
| CVE-2026-104855 | Deferred | 未確認 | CWE-362 | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 46.0.2 and 47.0.3, fuel and epoch preemption checks inside bulk operations including memory.copy, table.grow, and array.cop |
| CVE-2026-104859 | Awaiting Analysis | 未確認 | CWE-78 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 21.4.0 until 22.7.8 and from 23.0.0 until 23.1.1, the @nx/docker release pipeline builds docker tag, image loo |
| CVE-2026-104861 | Deferred | 未確認 | CWE-1333, CWE-400 | probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and lib/parse_stream/svg.js use the searching regular expression / |
| CVE-2026-104871 | Awaiting Analysis | 未確認 | CWE-22 | The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prerendered-page retrieva |
| CVE-2026-104872 | Awaiting Analysis | 未確認 | CWE-532 | OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript applications. Prior to versions 0.66.0 of @opentelemetry/instrumentatio |
| CVE-2026-104873 | Awaiting Analysis | 未確認 | CWE-863 | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgrap |
| CVE-2026-104874 | Deferred | 未確認 | CWE-401 | Multidict is an implementation of a multidict data structure. From 6.7.0 until 6.9.1, the C extension's items-view reflected union operation, operand | d.items(), in multidict_item |
| CVE-2026-104875 | Deferred | 未確認 | CWE-639 | Ente provides end-to-end encrypted cloud services and security tools. Prior to server image 2026.07.09, the POST /emergency-contacts/approve-recovery endpoint authorized approval u |
| CVE-2026-104886 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78410. Reason: This candidate is a duplicate of CVE-2026-78410. Notes: All CVE users should ref | |
| CVE-2026-104887 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78409. Reason: This candidate is a duplicate of CVE-2026-78409. Notes: All CVE users should ref | |
| CVE-2026-104890 | Deferred | 未確認 | CWE-434 | Kunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2, src/Kunstmaan/MediaBundle/Helper/File/FileHandler.php performs the blackli |
| CVE-2026-104891 | Deferred | 未確認 | CWE-290, CWE-863 | mppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and @insumermodel/mppx-token-gate 1.0.4, th |
| CVE-2026-104892 | Deferred | 未確認 | CWE-256 | Plane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low privileges to steal user API keys an |
| CVE-2026-104893 | Deferred | 未確認 | CWE-770 | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token records, while PATCH /api/users/api-t |
| CVE-2026-104894 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's worksp |
| CVE-2026-104898 | Deferred | 未確認 | CWE-639 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 28.4 via |
| CVE-2026-104899 | Deferred | 未確認 | CWE-98 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2 |
| CVE-2026-104900 | Deferred | 未確認 | CWE-79 | MISP contains a stored cross-site scripting (XSS) vulnerability in the index table rendering of the remote event preview. The count field template escaped the associated link URL b |
| CVE-2026-104901 | Deferred | 未確認 | CWE-79 | MISP contains a cross-site scripting (XSS) vulnerability in the ID Translator feature. When a user views the ID Translator page, the application queries linked (remote) MISP server |
| CVE-2026-104905 | Deferred | 未確認 | CWE-502 | FacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData() that allows authenticated attackers to trigger unserialize() o |
| CVE-2026-104906 | Deferred | 未確認 | CWE-79 | MISP contains a cross-site scripting (XSS) vulnerability in the TAXII object viewer. When displaying a remote TAXII object, the JSON content of string properties was rendered direc |
| CVE-2026-104907 | Deferred | 未確認 | CWE-116, CWE-79 | MISP contains a cross-site scripting (XSS) vulnerability in the remote event preview page. When a linked (remote) MISP server is configured, the event preview renders tag identifie |
| CVE-2026-104908 | Deferred | 未確認 | CWE-285, CWE-915 | MISP contains an improper input validation vulnerability in the decaying model import functionality. The import endpoint was intended to create a new decaying model belonging exclu |
| CVE-2026-104909 | Deferred | 未確認 | CWE-98 | The Mang Board plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.4.3 via the '<mode>_type (e.g. foo_type)' parameter parameter. Thi |
| CVE-2026-104910 | Deferred | 未確認 | CWE-285, CWE-862 | MISP contains an authorization bypass in the related events listing functionality. When a user requests the list of events correlated to a given event, the system retrieved related |
| CVE-2026-104912 | Deferred | 未確認 | CWE-284, CWE-862 | MISP contains an authorization flaw in its correlation handling during attribute searches. When a user performs an attribute search that triggers correlation lookups, the system au |
| CVE-2026-104914 | Deferred | 未確認 | CWE-284, CWE-862 | MISP contains an improper access control vulnerability in its attribute search and paginated attribute view endpoints. When a user queries for soft-deleted attributes (e.g., via t |
| CVE-2026-104915 | Deferred | 未確認 | CWE-862 | The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.3. This |
| CVE-2026-104922 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-104932 | Deferred | 未確認 | CWE-502 | The Search Regex plugin for WordPress is vulnerable to PHP Object Injection in version 3.5 via deserialization of untrusted input in the replace_all function. This allows authentic |
| CVE-2026-104935 | Analyzed | 掲載 | CWE-290 | Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 |
| CVE-2026-104937 | Deferred | 未確認 | CWE-79 | Shopware version 6.7 allows the upload of attacker‑controlled HTML files and serves them as text/html without effective security headers, enabling stored cross-site scripting (XSS) |
| CVE-2026-104939 | Awaiting Analysis | 未確認 | CWE-303 | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAut |
| CVE-2026-104944 | Deferred | 未確認 | CWE-823 | TP-Link Tapo C500 v2.0 contains an out-of-bounds function-pointer dispatch in its TDP (TP-Link Device Protocol) daemon. A single unauthenticated UDP datagram can cause an invalid i |
| CVE-2026-104945 | Deferred | 未確認 | CWE-121 | TP-Link Tapo C500 v2.0 contains an out-of-bounds stack write vulnerability in its ONVIF PTZ SOAP handlers. An authenticated ONVIF client can submit an excessive number of preset-re |
| CVE-2026-104947 | Deferred | 未確認 | CWE-862 | WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in function gp_log_backend_memory_contexts(). Any authenticated d |
| CVE-2026-104948 | Deferred | 未確認 | CWE-862 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in the built-in cluster expansion functions gp_expa |
| CVE-2026-104949 | Deferred | 未確認 | CWE-862 | WarehousePG (WHPG) 6.27.1 through 6.27.6 and 7.2.1 through 7.6.0 are affected by a missing authorization vulnerability (CWE-862) in gp_add_coordinator_standby(). The function is na |
| CVE-2026-104953 | Deferred | 未確認 | CWE-89 | The MPG WordPress plugin before 4.2.3 does not properly validate the structure of imported project data before using it in a database query, allowing users with the Editor role or |
| CVE-2026-104955 | Deferred | 未確認 | CWE-269, CWE-285 | Plane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update endpoint at /api/workspaces/{wo |
| CVE-2026-104956 | Deferred | 未確認 | CWE-943 | Plane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts group_by and sub_group_by query parameters and passes them witho |
| CVE-2026-104960 | Deferred | 未確認 | CWE-639, CWE-862 | Plane is an open-source project management tool. Prior to 1.4.0, Plane exposes the workspace-scoped GET /api/assets/v2/workspaces/{workspace_slug}/download/{asset_id}/ endpoint for |
| CVE-2026-104961 | Deferred | 未確認 | CWE-863 | Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceOwnerPermission does not require is_active=True when checking whether a user is a workspace owner. A deact |
| CVE-2026-104962 | Deferred | 未確認 | CWE-862 | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/v1/workspaces/{slug}/projects/{project_id}/members/ returns the complete project-member roster, including |
| CVE-2026-104963 | Deferred | 未確認 | CWE-200, CWE-863 | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/cycles/ through WorkspaceCyclesEndpoint and GET /api/workspaces/{slug}/modules/ through |
| CVE-2026-104964 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's project update endpoint authorizes the caller against the workspace slug in the request URL but loads the t |
| CVE-2026-104965 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, the issue-relation endpoint accepts issue UUIDs in the request body without validating that they belong to the call |
| CVE-2026-104966 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the workspace and project named in |
| CVE-2026-104967 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/plane/app/views/issue/ accept body- or URL-supplied issu |
| CVE-2026-104968 | Deferred | 未確認 | CWE-862 | Plane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_mention returns workspace-member display names, UUIDs, an |
| CVE-2026-104969 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller |
| CVE-2026-104970 | Deferred | 未確認 | CWE-362 | Plane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in apps/api/plane/license/api/views/admin.py:89-117, 173-229 uses InstanceAdmin. |
| CVE-2026-104971 | Deferred | 未確認 | CWE-639, CWE-862 | Plane is an open-source project management tool. Prior to 1.4.0, DuplicateAssetEndpoint fetches a source FileAsset without limiting it to the caller's workspace, allowing cross-wor |
| CVE-2026-104973 | Deferred | 未確認 | CWE-918 | Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP addresses only when the webhook is created in apps/api/plane/app/se |
| CVE-2026-104974 | Deferred | 未確認 | CWE-284 | Plane is an open-source project management tool. Prior to 1.4.0, a user whose account has been deactivated by setting is_active=False can still log in with existing credentials. Su |
| CVE-2026-104975 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v2.py were remediated for two cross-tenant asset IDORs, |
| CVE-2026-104976 | Deferred | 未確認 | CWE-918 | Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA_HOST only for its URL scheme and does not reject hosts that resolve to private or internal IP |
| CVE-2026-104977 | Deferred | 未確認 | CWE-918 | Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains |
| CVE-2026-104978 | Deferred | 未確認 | CWE-863 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's project invitation list endpoint is accessible to any authenticated user who knows the workspace slug and p |
| CVE-2026-104979 | Deferred | 未確認 | CWE-79, CWE-862 | Plane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through Issue.objects.create(...) without c |
| CVE-2026-104982 | Deferred | 未確認 | CWE-22 | A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_strdup_printf of the file backend/epub/epub-document.c of the |
| CVE-2026-104983 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file shell/ev-window.c of the component PDF Attachment Saving Han |
| CVE-2026-104988 | Awaiting Analysis | 未確認 | CWE-290 | A flaw was found in Dogtag PKI (pki-core). The CMCAuthForEST authentication plugin fails open when an EST fullcmc enrollment request is submitted via BasicAuth without an end-user |
| CVE-2026-104991 | Deferred | 未確認 | CWE-862 | Phproject before 1.8.7 contains a missing object-level authorization vulnerability in the REST API issue endpoints (single_get, single_comments, single_comments_post) that allows a |
| CVE-2026-104993 | Deferred | 未確認 | CWE-79 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email (Contact Email cu |
| CVE-2026-104994 | Deferred | 未確認 | CWE-24 | Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf scanning |
| CVE-2026-104995 | Deferred | 未確認 | CWE-98 | The BP Profile Search plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 5.9 via the 'ajax_template' value parsed from the client-controll |
| CVE-2026-105003 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-105004 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-105005 | Undergoing Analysis | 未確認 | CWE-787 | Out-of-bounds write in Windows Schannel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105006 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-105007 | Undergoing Analysis | 未確認 | CWE-125 | An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to i |
| CVE-2026-105008 | Undergoing Analysis | 未確認 | CWE-290, CWE-420 | No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-105009 | Undergoing Analysis | 未確認 | CWE-276 | Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-105010 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-105013 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-105014 | Awaiting Analysis | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105016 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105029 | Deferred | 未確認 | CWE-639 | UVdesk support-center-bundle before 1.1.3.3 contains an insecure direct object reference vulnerability in the rateTicket action of Controller/Ticket.php that allows authenticated c |
| CVE-2026-105030 | Deferred | 未確認 | CWE-200 | Kener 4.0.0 before 4.1.6 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve hidden or inactive monitor data by querying dashboard AP |
| CVE-2026-105032 | Deferred | 未確認 | CWE-22, CWE-434 | The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does not constrain uploade |
| CVE-2026-105033 | Deferred | 未確認 | CWE-798 | The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with network access to the device can log in as root and take fu |
| CVE-2026-105034 | Deferred | 未確認 | CWE-287, CWE-306 | The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication. An unauthenticated remote attacker can obtain a valid devi |
| CVE-2026-105035 | Deferred | 未確認 | CWE-321 | The EnergizeLab FirmwareUpdater (AArch64 ELF, distributed in the CDN bin.zip) uses a single hard-coded AES key shared by all installations. An attacker who recovers the key from th |
| CVE-2026-105036 | Deferred | 未確認 | CWE-494 | EnergizeLab AI Station firmware, EilikO Linux robot firmware v2.1_20260617182218_release, and the EnergizeLab Windows desktop app 3.1.2 download firmware updates over plain HTTP an |
| CVE-2026-105037 | Deferred | 未確認 | CWE-73 | EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from the server by supplying an attack |
| CVE-2026-105038 | Deferred | 未確認 | CWE-306 | The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication. An unauthenticated remote attacker can |
| CVE-2026-105039 | Deferred | 未確認 | CWE-862 | EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on administrative APIs. Any authenticated low-privilege user can retrieve AI provi |
| CVE-2026-105040 | Deferred | 未確認 | CWE-639 | The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and |
| CVE-2026-105043 | Awaiting Analysis | 未確認 | CWE-451 | MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution. |
| CVE-2026-105044 | Awaiting Analysis | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in Qingteng Host Adaptive Security Platform (Host Monitoring) V3.0 al |
| CVE-2026-105046 | Deferred | 未確認 | CWE-425 | Kentico Xperience 13 before 13.0.216 lacks object-level authorization checks for administration API endpoints. |
| CVE-2026-105048 | Awaiting Analysis | 未確認 | CWE-1289 | The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses). |
| CVE-2026-105049 | Awaiting Analysis | 未確認 | CWE-306 | Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet. |
| CVE-2026-105050 | Awaiting Analysis | 未確認 | CWE-180 | PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because "quotation character already used in the string" is |
| CVE-2026-105051 | Awaiting Analysis | 未確認 | CWE-348 | Denuvo Anti-Tamper through 2026-03-04 allows bypass of a hypervisor presence check via CPUID interception (SimpleSvm.sys on AMD; hyperkd.sys and hyperhv.dll on Intel). |
| CVE-2026-105052 | Awaiting Analysis | 未確認 | CWE-22 | IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL reque |
| CVE-2026-105055 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Mailster WP Mailster wp-mailster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Mailster: f |
| CVE-2026-105056 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode eCommerce Product Catalog ecommerce-product-catalog allows Stored XS |
| CVE-2026-105057 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Zero Spam <= 5.7.11 versions. |
| CVE-2026-105058 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in WP User Profiles <= 2.7.3 versions. |
| CVE-2026-105059 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-105060 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Logo Showcase logo-showcase allows Stored XSS.This issue affects L |
| CVE-2026-105061 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Mailster <= 1.9.0.0 versions. |
| CVE-2026-105062 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brandtoss WP Admin Audit wp-admin-audit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Admin A |
| CVE-2026-105064 | Deferred | 未確認 | CWE-470 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templ |
| CVE-2026-105065 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme.com XStore xstore allows Reflected XSS.This issue affects XStore: from |
| CVE-2026-105066 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SimplyRETS SimplyRETS Real Estate IDX simply-rets allows Reflected XSS.This is |
| CVE-2026-105067 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite allows Blind SQ |
| CVE-2026-105068 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allows Retrieve Embedded Sensitive Data.This issue affects Events Manager: |
| CVE-2026-105069 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS.This issue affects |
| CVE-2026-105070 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Salon booking system <= 10.31.7 versions. |
| CVE-2026-105071 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 versions. |
| CVE-2026-105072 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in FluentBooking Pro < 2.5.0 versions. |
| CVE-2026-105073 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Arraytics WP Event Solution wp-event-solution allows Retrieve Embedded Sensitive Data.Th |
| CVE-2026-105076 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Appsbd Vitepos vitepos-lite allows Blind SQL Injection.This issue affects Vite |
| CVE-2026-105078 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Store Locator WP Store Locator wp-store-locator allows Stored XSS.This issu |
| CVE-2026-105079 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allo |
| CVE-2026-105080 | Deferred | 未確認 | CWE-829 | In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a . |
| CVE-2026-105081 | Awaiting Analysis | 未確認 | CWE-59 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowing configured policy |
| CVE-2026-105083 | Analyzed | 未確認 | CWE-693 | ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an alternate DOCT |
| CVE-2026-105086 | Deferred | 未確認 | CWE-79 | WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML by submitting doubly-encoded entities in vid |
| CVE-2026-105089 | Deferred | 未確認 | CWE-79 | WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject script by setting a malicious video trailer1 URL. |
| CVE-2026-105090 | Awaiting Analysis | 未確認 | CWE-863 | Formbricks before 5.4.4 and 6 before 6.0.1 allows stored XSS. The survey-level Custom Head Scripts feature did not enforce the documented Manage permission boundary. A workspace me |
| CVE-2026-105096 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the file /customer/ of the component Customer Profile API. Executing a mani |
| CVE-2026-105097 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the file /customer-currency/ of the component Customer Information API. The |
| CVE-2026-105098 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The mani |
| CVE-2026-105099 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Omega Solution CoinEx Crypto 2025. Affected by this vulnerability is an unknown functionality of the file /user/ticket of the component Ticket Att |
| CVE-2026-105105 | Awaiting Analysis | 未確認 | CWE-306 | CWE-306: Missing Authentication for Critical Function in the ait.core.server telemetry and command broker (ait-server) in NASA-AMMOS AIT-Core through 3.1.1 allows an unauthenticate |
| CVE-2026-105106 | Deferred | 未確認 | CWE-78 | Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it t |
| CVE-2026-105107 | Deferred | 未確認 | CWE-89 | Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/cat_issues_top.pl script (sub calculate) concatenates the user-controlled Criteria, Filter, and |
| CVE-2026-105110 | Deferred | 未確認 | CWE-306, CWE-78 | OS Command Injection in the login.xgi CGI endpoint in Iskratel Innbox GPON ONT devices allows an unauthenticated remote attacker to execute arbitrary commands as root via the CLI p |
| CVE-2026-105111 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL. This only happens when you're using Class2HTML to gene |
| CVE-2026-105112 | Deferred | 未確認 | CWE-362 | Nezha from 1.8.0 before 2.3.13 contains a lock-order inversion in UpdateGroup and DeleteGroup that allows authenticated non-admin users to deadlock the alerting subsystem. Attacker |
| CVE-2026-105113 | Deferred | 未確認 | CWE-667 | Nezha Dashboard from 1.8.0 before 2.3.13 contains an improper locking vulnerability where a non-deferred mutex unlock leaks on a nil-map panic path. Any authenticated non-admin mem |
| CVE-2026-105114 | Deferred | 未確認 | CWE-79 | OpenAM before 16.1.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying crafted parameters rendered unencod |
| CVE-2026-105115 | Deferred | 未確認 | CWE-306 | OpenAM before 16.1.3 contains an unauthenticated arbitrary class instantiation vulnerability in the legacy JAX-RPC SOAP interface that allows remote attackers to load classes witho |
| CVE-2026-105116 | Deferred | 未確認 | CWE-79 | OpenAM before 16.1.3 contains a latent cross-site scripting defect that places the SAML message, relay state and target URL unencoded into the load-balancer cookie bounce auto-subm |
| CVE-2026-105117 | Deferred | 未確認 | CWE-20 | OpenAM before 16.1.3 contains an email content injection vulnerability that allows unauthenticated attackers to control notification email wording via the forgotPassword and regist |
| CVE-2026-105118 | Deferred | 未確認 | CWE-347 | OpenAM before 16.1.3 contains an open redirect vulnerability that allows unauthenticated attackers to redirect users by supplying an unverified id_token_hint to the /oauth2/connect |
| CVE-2026-105119 | Deferred | 未確認 | CWE-285 | OpenAM before 16.1.3 applies its OAuth2 Provider PKCE enforcement only to authorization requests whose response_type is exactly code, so codes issued through OpenID Connect hybrid |
| CVE-2026-105120 | Deferred | 未確認 | CWE-200 | OpenAM before 16.1.3 contains an authorization bypass vulnerability in the sessions REST endpoint query operation that allows realm administrators to list sessions of every realm. |
| CVE-2026-105121 | Deferred | 未確認 | CWE-285 | OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the req |
| CVE-2026-105122 | Deferred | 未確認 | CWE-918 | OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resources |
| CVE-2026-105123 | Deferred | 未確認 | CWE-434 | W (vincent-peugnet/wcms) through 3.18.0 contains a remote code execution vulnerability that allows authenticated editors to write arbitrary files by abusing the unvalidated path in |
| CVE-2026-105124 | Deferred | 未確認 | CWE-79 | W (vincent-peugnet/wcms) through 3.18.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts via the login user field and vi |
| CVE-2026-105125 | Deferred | 未確認 | CWE-22 | LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the {lang} route segment. On Windows hos |
| CVE-2026-105126 | Deferred | 未確認 | CWE-269 | LaraDashboard before 1.4.8 contains an improper privilege management vulnerability that allows authenticated Admin users to escalate to Superadmin by editing or renaming roles. Att |
| CVE-2026-105127 | Deferred | 未確認 | CWE-770 | LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verif |
| CVE-2026-105128 | Deferred | 未確認 | CWE-601 | LaraDashboard before 1.4.8 contains an open redirect vulnerability that allows remote attackers to redirect users by supplying an unvalidated redirect_url parameter to EmailTemplat |
| CVE-2026-105129 | Deferred | 未確認 | CWE-863 | LaraDashboard before 1.4.8 contains an incorrect authorization vulnerability that allows authenticated users with only settings.view permission to read stored secrets through the s |
| CVE-2026-105130 | Deferred | 未確認 | CWE-367 | LaraDashboard from 1.4.0 before 1.4.8 contains a race condition vulnerability in RegisterController::register that allows unauthenticated attackers to bypass the per-IP daily regis |
| CVE-2026-105131 | Deferred | 未確認 | CWE-863 | ezBookkeeping 1.2.0 before 2.0.1 contains a privilege escalation vulnerability that allows attackers holding an API token to obtain a full session token via /api/v1/tokens/refresh. |
| CVE-2026-105133 | Analyzed | 掲載 | CWE-287 | A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file com/ahsay/obs/api/ApiStructsAction.java of the component API. Perform |
| CVE-2026-105134 | Analyzed | 掲載 | CWE-77, CWE-78 | A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the file /rps/api/json/UpdateReceivers.do of the component Replication Receiver. Ex |
| CVE-2026-105135 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py of the component Planner Agen |
| CVE-2026-105137 | Deferred | 未確認 | CWE-494 | A vulnerability was found in Laradock up to 20.4. Impacted is an unknown function of the file workspace/Dockerfile of the component Build Process. The manipulation results in downl |
| CVE-2026-105138 | Deferred | 未確認 | CWE-522 | Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins |
| CVE-2026-105139 | Deferred | 未確認 | CWE-863 | Obot 0.26.0 before 0.26.2 contains an authorization bypass vulnerability that allows authenticated users matching any vMCP profile to reach prompts and resources of ungranted compo |
| CVE-2026-105140 | Deferred | 未確認 | CWE-362 | Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships just revoked in the identity provid |
| CVE-2026-105141 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in topoteretes cognee up to 1.5.4. The affected element is the function get_user_id_by_email of the file cognee/modules/users/authentication/get |
| CVE-2026-105142 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-105144 | Deferred | 未確認 | CWE-22 | A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route of the file lib/src/StaticFileRouter.cc of the component Sta |
| CVE-2026-105145 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environment of the file goldenverba/components/util.py of the compo |
| CVE-2026-105146 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/ch |
| CVE-2026-105147 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability was determined in SciPhi-AI R2R up to 3.6.6. This affects an unknown part of the component JWT Secret Handler. This manipulation of the argument DEFAULT_BCRYPT_SECR |
| CVE-2026-105148 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in SciPhi-AI R2R up to 3.6.6. This vulnerability affects unknown code of the file py/shared/abstractions/llm.py of the component Retrieval Completion |
| CVE-2026-105149 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in mooSocial up to 3.2.4. This issue affects some unknown processing of the file /stores/all-products. Performing a manipulation of the argument |
| CVE-2026-105151 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-105156 | Deferred | 未確認 | CWE-326, CWE-916 | A weakness has been identified in YzmCMS up to 7.6. Impacted is the function Password of the file /common/function/system.func.php of the component MD5 Handler. Executing a manipul |
| CVE-2026-105157 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the com |
| CVE-2026-105158 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component |
| CVE-2026-105161 | Deferred | 未確認 | CWE-345, CWE-347 | A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead |
| CVE-2026-105163 | Deferred | 未確認 | CWE-362, CWE-367 | A vulnerability was detected in crossplane crossplane-runtime up to 2.2.2/2.3.2. This vulnerability affects the function Get of the file pkg/xpkg/client.go of the component ImageCo |
| CVE-2026-105164 | Deferred | 未確認 | CWE-119, CWE-125 | A flaw has been found in NASA cFS up to 7.0.1. This issue affects the function CFE_FS_ParseInputFileNameEx of the file cfe/modules/fs/fsw/src/cfe_fs_api.c. This manipulation causes |
| CVE-2026-105165 | Deferred | 未確認 | CWE-275, CWE-732 | A vulnerability has been found in devopspolis secrets-replicator up to 0.4.0. Impacted is the function process_single_secret of the file src/handler.py of the component AssumeRole |
| CVE-2026-105166 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the f |
| CVE-2026-105167 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is |
| CVE-2026-105168 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown |
| CVE-2026-105169 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unk |
| CVE-2026-105170 | Deferred | 未確認 | CWE-287, CWE-306 | A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected is an unknown f |
| CVE-2026-105171 | Deferred | 未確認 | CWE-285, CWE-639 | A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by |
| CVE-2026-105172 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of |
| CVE-2026-105173 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in code-projects Human Resource Management 1.0. This affects an unknown part of the file /humanresourcemanagementsystem/src/store/EventStore.php of the compon |
| CVE-2026-105174 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Manag |
| CVE-2026-105175 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown processing of the file /Auth/add_student.php of the component Student Re |
| CVE-2026-105176 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argumen |
| CVE-2026-105177 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug C |
| CVE-2026-105178 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom. |
| CVE-2026-105179 | Deferred | 未確認 | CWE-310, CWE-311 | A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. |
| CVE-2026-105180 | Deferred | 未確認 | CWE-913, CWE-915 | A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipula |
| CVE-2026-105181 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument f |
| CVE-2026-105182 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/activities/b |
| CVE-2026-105183 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation of the arg |
| CVE-2026-105184 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such manipulati |
| CVE-2026-105185 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argumen |
| CVE-2026-105186 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead |
| CVE-2026-105187 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to |
| CVE-2026-105188 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveEventHistor |
| CVE-2026-105190 | Deferred | 未確認 | CWE-862 | The Easy Digital Downloads WordPress plugin before 3.7.1 does not consult the site's user registration setting before creating a WordPress account, allowing unauthenticated users t |
| CVE-2026-105192 | Deferred | 未確認 | CWE-306, CWE-502 | LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket |
| CVE-2026-105193 | Deferred | 未確認 | CWE-326 | The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entropy, deriving each from a low-entropy time-seeded value, which |
| CVE-2026-105194 | Deferred | 未確認 | CWE-200 | The Easy Digital Downloads WordPress plugin before 3.7.1 does not restrict a block's order data to the current user, allowing users with subscriber-level access to view other cust |
| CVE-2026-105195 | Deferred | 未確認 | CWE-200 | The Booking Calendar WordPress plugin before 11.8.3 does not adequately restrict which options a lower-privileged user can load through one of its settings handlers, allowing users |
| CVE-2026-105196 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user h |
| CVE-2026-105197 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to act on the specific record targeted for deletion, allowing |
| CVE-2026-105198 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns the order referenced by an order-item identifier before rendering that order's co |
| CVE-2026-105199 | Received | 未確認 | CWE-79 | The Pixel Tag Manager for WooCommerce WordPress plugin before 2.2.3 does not perform a capability check in one of its AJAX actions, and exposes the nonce protecting it to any user |
| CVE-2026-105205 | Deferred | 未確認 | CWE-200 | SiYuan before 3.8.5 contains an information disclosure vulnerability that allows publish-mode readers to learn backlink block IDs and reference counts from password-protected and p |
| CVE-2026-105206 | Deferred | 未確認 | CWE-863 | ZITADEL 3.0.0 through 3.4.15 and 4.x before 4.17.3 contains an incorrect authorization flaw in the User Service API, which verifies user.read against the caller's organization rath |
| CVE-2026-105207 | Deferred | 未確認 | CWE-306 | ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without verifying a primary factor or the caller's permissi |
| CVE-2026-105208 | Deferred | 未確認 | CWE-649 | ZITADEL 4.x before 4.17.3 and 3.x through 3.4.15 protects IdP intent tokens with unauthenticated, malleable encryption, allowing authenticated users to tamper with their own token |
| CVE-2026-105209 | Deferred | 未確認 | CWE-862 | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless enrollment codes, it checks only the organiza |
| CVE-2026-105210 | Deferred | 未確認 | CWE-287 | ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains a missing authentication flaw in the hosted Login V1 UI, whose second-factor enrollment and initialization handlers act on |
| CVE-2026-105211 | Deferred | 未確認 | CWE-200 | ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the returnC |
| CVE-2026-105212 | Deferred | 未確認 | CWE-287 | ZITADEL 3.x before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 and Login V2 UIs that accepts passkey or other authenticator enrollment on |
| CVE-2026-105213 | Deferred | 未確認 | CWE-287 | ZITADEL 4.x before 4.17.1 does not check an organization's inactive state during Login V2 authentication, verifying only the individual user's status. Users of a deactivated organi |
| CVE-2026-105214 | Deferred | 未確認 | CWE-918 | Zitadel before 4.16.2 contains a server-side request forgery vulnerability that allows attackers to make the server request internal resources through organization domain HTTP veri |
| CVE-2026-105215 | Deferred | 未確認 | CWE-290 | ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because the 'external account not found' registration endpoint trusts client |
| CVE-2026-105216 | Awaiting Analysis | 未確認 | CWE-295 | go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the shared TLS helper sets InsecureSki |
| CVE-2026-105217 | Deferred | 未確認 | CWE-295 | Cockpit CMS 2.12.0 before 2.14.1 disables TLS certificate verification in the cron.php web worker restart request, allowing network attackers to capture the worker token. Man-in-th |
| CVE-2026-105218 | Deferred | 未確認 | CWE-295 | gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider APIs. Att |
| CVE-2026-105219 | Awaiting Analysis | 未確認 | CWE-1333 | Mammoth.js 1.3.0 before 1.12.3 contains a regular expression denial of service vulnerability in the style map tokeniser in lib/styles/parser/tokeniser.js due to overlapping regex a |
| CVE-2026-105220 | Deferred | 未確認 | CWE-79 | Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can c |
| CVE-2026-105221 | Deferred | 未確認 | CWE-295 | The gist RubyGem before 6.1.0 contains an improper certificate validation vulnerability that allows on-path attackers to intercept HTTPS traffic because http_connection in lib/gist |
| CVE-2026-105222 | Deferred | 未確認 | CWE-295 | The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer to FALSE, which is pass |
| CVE-2026-105223 | Deferred | 未確認 | CWE-295 | maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-dat |
| CVE-2026-105224 | Deferred | 未確認 | CWE-79 | YesWiki before 4.6.7 contains a cross-site scripting vulnerability in the Bazar valeur action that allows page editors to inject script by rendering unescaped HTML fetched from a r |
| CVE-2026-105225 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Su |
| CVE-2026-105226 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component News |
| CVE-2026-105227 | Deferred | 未確認 | CWE-125 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft. |
| CVE-2026-105228 | Deferred | 未確認 | CWE-125 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft. |
| CVE-2026-105229 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some |
| CVE-2026-105230 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Impacted is |
| CVE-2026-105231 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is an |
| CVE-2026-105232 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknow |
| CVE-2026-105233 | Deferred | 未確認 | CWE-384 | A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown |
| CVE-2026-105236 | Deferred | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client that holds a certificate trusted by one SNI virtual host to authenticate to a sec |
| CVE-2026-105237 | Deferred | 未確認 | CWE-307, CWE-799 | A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/web/AdminAu |
| CVE-2026-105238 | Deferred | 未確認 | CWE-918 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Han |
| CVE-2026-105239 | Analyzed | 未確認 | CWE-158 | Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net. A NUL character in logged content ended the Windows Event Log record |
| CVE-2026-105240 | Analyzed | 未確認 | CWE-158 | Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache log4net. A NUL character in logged content ended the debug output re |
| CVE-2026-105241 | Analyzed | 未確認 | CWE-176 | Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content that the mail file writer cannot encode, such as an unpaired UTF-16 sur |
| CVE-2026-105242 | Analyzed | 未確認 | CWE-755 | Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache log4net. Reading request parameters triggers ASP.NET request validation |
| CVE-2026-105243 | Analyzed | 未確認 | CWE-778 | Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to a fixed size that exceeds what the Windows Event Log accepts once the |
| CVE-2026-105244 | Analyzed | 未確認 | CWE-116 | Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every character outside visible ASCII and space was removed from the record in |
| CVE-2026-105245 | Deferred | 未確認 | CWE-310, CWE-319 | A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the file python/sglang/srt/entrypoints/http_server.py of the compo |
| CVE-2026-105246 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/Subject/btn_functions. |
| CVE-2026-105247 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. The affected element is an unknown function of the file /reviewer_0/admins/assessments/Subje |
| CVE-2026-105248 | Deferred | 未確認 | CWE-119, CWE-787 | A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the file src/meta/txtp_parser.c of the component TXTP File Handle |
| CVE-2026-105249 | Deferred | 未確認 | CWE-119, CWE-416 | A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/meta/txtp_process.c of the component TXTP File Handler. This ma |
| CVE-2026-105250 | Deferred | 未確認 | CWE-369, CWE-404 | A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file src/coding/ima_decoder.c of the component Microsoft IMA Deco |
| CVE-2026-105251 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in vgmstream up to r2117. Affected by this vulnerability is the function ps_find_padding of the file src/coding/psx_decoder.c of the component VAG File |
| CVE-2026-105253 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of t |
| CVE-2026-105254 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy |
| CVE-2026-105256 | Deferred | 未確認 | CWE-345 | The LatePoint WordPress plugin before 5.7.5 does not validate the client-supplied value that determines how much is charged for a booking against the amounts the service and site a |
| CVE-2026-105257 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user is assigned to a customer before returning or searching that cu |
| CVE-2026-105260 | Deferred | 未確認 | CWE-352 | The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify the CSRF nonce when the field is omitted and performs no capability check of its o |
| CVE-2026-105261 | Deferred | 未確認 | CWE-79 | The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plugin before 4.10.6 does not enforce a safe HTML-element a |
| CVE-2026-105262 | Deferred | 未確認 | CWE-79 | The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when saving term translations, and exposes a valid nonce to any logged-in user throug |
| CVE-2026-105263 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataControll |
| CVE-2026-105265 | Deferred | 未確認 | CWE-22 | A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime to point to a file ou |
| CVE-2026-105267 | Analyzed | 未確認 | CWE-732, CWE-863 | The Gitea web route for deleting tags (`POST /{owner}/{repo}/tags/delete`) requires only write access to the Code unit, but shares its handler with release deletion and did not che |
| CVE-2026-105268 | Analyzed | 未確認 | CWE-639, CWE-863 | The Gitea API routes for issue attachments (`/api/v1/repos/{owner}/{repo}/issues/{index}/assets/{attachment_id}`) also accepted attachments that belong to comments on the issue. Be |
| CVE-2026-105269 | Deferred | 未確認 | CWE-79 | Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untrusted conte |
| CVE-2026-105270 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in esaml_binding in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and cras |
| CVE-2026-105271 | Deferred | 未確認 | CWE-312 | "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of the affected |
| CVE-2026-105273 | Deferred | 未確認 | CWE-835 | MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same input. |
| CVE-2026-105274 | Deferred | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted repository mirror, or a server answering hex_core's API request |
| CVE-2026-105275 | Deferred | 未確認 | CWE-23 | Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could ac |
| CVE-2026-105278 | Awaiting Analysis | 未確認 | CWE-798 | The published Docker image for openPDC includes a fixed administrative credential with no forced change on first use. An attacker with network access to the management interface ca |
| CVE-2026-105279 | Deferred | 未確認 | CWE-306 | In the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to enumerate and retrieve patient infor |
| CVE-2026-105280 | Deferred | 未確認 | CWE-354 | Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarball that mix hex.package fetch PACKAGE VERSION --output - writ |
| CVE-2026-105281 | Awaiting Analysis | 未確認 | CWE-306 | The internal data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this inte |
| CVE-2026-105283 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read internal Elixir terms from an RP |
| CVE-2026-105284 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the file /bin/boa of the component Authentication Check. |
| CVE-2026-105285 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handle |
| CVE-2026-105286 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. |
| CVE-2026-105287 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getM |
| CVE-2026-105288 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in feelec-yishu feelcrm-os 1.0.0. Affected by this vulnerability is the function IndexController::index of the file App/ThinkPHP/Common/functions.php |
| CVE-2026-105289 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialchars_decode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.c |
| CVE-2026-105290 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component g |
| CVE-2026-105291 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupContro |
| CVE-2026-105292 | Deferred | 未確認 | CWE-352 | Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth sta |
| CVE-2026-105293 | Deferred | 未確認 | CWE-22 | Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated them |
| CVE-2026-105294 | Deferred | 未確認 | CWE-15 | Legcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Discord page to write any config key via the window.legcord settings.setConfi |
| CVE-2026-105295 | Deferred | 未確認 | CWE-494 | GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors a |
| CVE-2026-105297 | Awaiting Analysis | 未確認 | CWE-770 | Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its own 16 MiB decoded header-list size and no limit on concu |
| CVE-2026-105298 | Awaiting Analysis | 未確認 | CWE-444 | Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-header. Request filters, cache keys, and logs that read the |
| CVE-2026-105299 | Awaiting Analysis | 未確認 | CWE-444 | Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through upstream_request_filter and wrote it to the upstream without removi |
| CVE-2026-105301 | Rejected | 未確認 | Rejected reason: This candidate was rejected after further investigation determined that it is not a security vulnerability. The client certificate chain is validated during mTLS n | |
| CVE-2026-105302 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested |
| CVE-2026-105305 | Awaiting Analysis | 未確認 | CWE-287 | A flaw was found in the OIDC implementation of Keycloak, specifically within the Device Authorization Grant flow. This component allows devices with limited input capabilities to o |
| CVE-2026-105306 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration process fails to filter se |
| CVE-2026-105307 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in Casdoor up to 3.161.1. Affected is the function ApiFilter of the file routers/authz_filter.go of the component API Endpoint. Performing a manipulati |
| CVE-2026-105311 | Awaiting Analysis | 未確認 | CWE-441 | The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set spec.kafkaClusters[].credentials.kafkaUse |
| CVE-2026-105312 | Awaiting Analysis | 未確認 | CWE-269 | A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into |
| CVE-2026-105314 | Deferred | 未確認 | CWE-24 | Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to site-packages, and it |
| CVE-2026-105315 | Deferred | 未確認 | CWE-94, CWE-95 | A vulnerability has been found in django-haystack up to 3.3.0. Affected is the function _to_python of the file haystack/backends/elasticsearch_backend.py of the component more_like |
| CVE-2026-105316 | Deferred | 未確認 | CWE-79 | The Magee Shortcodes WordPress plugin through 2.1.1 does not sanitise and escape user input in some of its AJAX actions, which are available to unauthenticated users, before reflec |
| CVE-2026-105317 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Paid Member Subscriptions <= 3.1.1 versions. |
| CVE-2026-105318 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Datasolution AcyMailing SMTP Newsletter acymailing allows Reflected XSS.This i |
| CVE-2026-105322 | Deferred | 未確認 | CWE-472 | The Magee Shortcodes WordPress plugin through 2.1.1 does not restrict the recipient of some of its unauthenticated contact-form actions, allowing unauthenticated users to send arbi |
| CVE-2026-105324 | Deferred | 未確認 | CWE-113 | An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system. By sending a crafted HT |
| CVE-2026-105326 | Awaiting Analysis | 未確認 | CWE-88 | An argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that supply a mailto notify-recipient- |
| CVE-2026-105329 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file packages/tallcms/cms/src/Filament/Pages/ThemeManager.php of the component Plugin |
| CVE-2026-105331 | Deferred | 未確認 | CWE-426, CWE-829 | Local privilege escalation in Checkmk 2.5.0 before 2.5.0p10 allows a user with access to edit the Oracle Instant Client referenced by the agent plugin 'mk-oracle' to escalate their |
| CVE-2026-105382 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function update_subaccount of the file php/contro |
| CVE-2026-105383 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown function of the file php/controll |
| CVE-2026-105384 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the file patient_info.php. Performing |
| CVE-2026-105385 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this vulnerability is an unknown functionalit |
| CVE-2026-105386 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is the function get of the file pr |
| CVE-2026-105387 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqli_query of the f |
| CVE-2026-105388 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.class.php o |
| CVE-2026-105389 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.clas |
| CVE-2026-105390 | Awaiting Analysis | 未確認 | CWE-413, CWE-833 | Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted wri |
| CVE-2026-105391 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-105392 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JW |
| CVE-2026-105396 | Deferred | 未確認 | CWE-346 | Heym before v0.0.112 contains a token leakage vulnerability in build_public_base_url() that allows unauthenticated attackers to redirect HITL review links by spoofing Origin or X-F |
| CVE-2026-105397 | Deferred | 未確認 | CWE-79 | LearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject scripts via quiz question hint |
| CVE-2026-105398 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105399 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105400 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105401 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105402 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105403 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105404 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105405 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105407 | Deferred | 未確認 | CWE-78 | An OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary commands on the server. |
| CVE-2026-105408 | Deferred | 未確認 | CWE-79 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's brow |
| CVE-2026-105409 | Deferred | 未確認 | CWE-79 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's brow |
| CVE-2026-105410 | Deferred | 未確認 | CWE-79 | A Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary script code in user's brow |
| CVE-2026-105411 | Deferred | 未確認 | CWE-639 | An Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker with tracker administration rig |
| CVE-2026-105412 | Deferred | 未確認 | CWE-89 | An SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database. |
| CVE-2026-105421 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) for WooCommerce convertkit-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Lev |
| CVE-2026-105429 | Deferred | 未確認 | CWE-116, CWE-78 | Improper neutralization of special elements in the NetBird client SSH configuration manager (client/ssh/config/manager.go) in NetBird versions 0.60.0 through 0.74.6 allows a malici |
| CVE-2026-105436 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1. |
| CVE-2026-105438 | Deferred | 未確認 | CWE-918 | A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /x_general_assemble_control/jaxrs/excel/upload/with/url of the compone |
| CVE-2026-105442 | Awaiting Analysis | 未確認 | CWE-502 | IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 Liberty could allow a remote attacker to cause a denial of s |
| CVE-2026-105443 | Awaiting Analysis | 未確認 | CWE-284 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install. |
| CVE-2026-105444 | Deferred | 未確認 | CWE-99 | A security flaw has been discovered in dotnet eShop .NET 8. The impacted element is the function GetOrderAsync of the file src/Ordering.API/Apis/OrdersApi.cs of the component Order |
| CVE-2026-105445 | Awaiting Analysis | 未確認 | CWE-266 | An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a personal access token (PA |
| CVE-2026-105447 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger configuration details containing repository write tokens to global read- |
| CVE-2026-105452 | Awaiting Analysis | 未確認 | CWE-200 | Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the host egress proxy. The proxy removed alternate credentials only when their values |
| CVE-2026-105453 | Awaiting Analysis | 未確認 | CWE-269 | IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to gain elevated privileges due to improper privilege manageme |
| CVE-2026-105458 | Analyzed | 未確認 | CWE-807 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have al |
| CVE-2026-105460 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted |
| CVE-2026-105464 | Undergoing Analysis | 未確認 | CWE-269 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to gain elevated privileges due to i |
| CVE-2026-105465 | Undergoing Analysis | 未確認 | CWE-269 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation when db2locssh is enabled with the db2 instance. |
| CVE-2026-105466 | Undergoing Analysis | 未確認 | CWE-770 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when inserting into a table with XML columns under specific conditions. |
| CVE-2026-105468 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqli_query of the file Admin/ |
| CVE-2026-105469 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file |
| CVE-2026-105470 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This issue affects the function mysqli_query of the |
| CVE-2026-105471 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file sig |
| CVE-2026-105472 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. The affected element is an unknown function of the f |
| CVE-2026-105474 | Deferred | 未確認 | CWE-1336 | A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root. |
| CVE-2026-105481 | Awaiting Analysis | 未確認 | CWE-367 | A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CV |
| CVE-2026-105482 | Awaiting Analysis | 未確認 | CWE-284 | A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE |
| CVE-2026-105483 | Awaiting Analysis | 未確認 | CWE-295 | A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non |
| CVE-2026-105484 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted element is the function firmware_check of the file /cgi-bin/cstecgi.cgi of the com |
| CVE-2026-105485 | Awaiting Analysis | 未確認 | CWE-294 | Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured d |
| CVE-2026-105486 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipula |
| CVE-2026-105487 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in yogeshojha reNgine up to 2.2.0. Affected by this vulnerability is the function subdomain_discovery of the file web/reNgine/tasks.py of the component li |
| CVE-2026-105488 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete |
| CVE-2026-105570 | Awaiting Analysis | 未確認 | CWE-178 | Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to mask managed credential responses, while request routing treated DNS hostnames ca |
| CVE-2026-105571 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the file /buyer/passport/member/bindMobile of the component Mobile Binding. T |
| CVE-2026-105572 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipul |
| CVE-2026-105573 | Deferred | 未確認 | CWE-840 | A vulnerability was found in newbee-ltd newbee-mall up to 2.7.5. This impacts an unknown function of the file /jshERP-boot/accountHead/updateAccountHeadAndDetail of the component S |
| CVE-2026-105591 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105592 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105593 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105595 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105596 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105597 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105598 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105599 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105610 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was found in chillzhuang SpringBlade up to 5.0.1. The impacted element is an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/s |
| CVE-2026-105611 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was determined in chillzhuang SpringBlade up to 5.0.1. This affects an unknown function of the file blade-service/blade-system/src/main/java/org/springblade/system/ |
| CVE-2026-105621 | Deferred | 未確認 | CWE-266, CWE-285 | A security flaw has been discovered in jishenghua jshERP up to 3.5. Affected is the function updateAccountHeadAndDetail of the file jshERP-boot/src/main/java/com/jsh/erp/service/Ac |
| CVE-2026-105627 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-105628 | Deferred | 未確認 | CWE-918 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url from provider user data through a server-side HTTP req |
| CVE-2026-105629 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare primary-key lookup without workspace, p |
| CVE-2026-105630 | Deferred | 未確認 | CWE-434, CWE-616, CWE-79 | Plane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an image/svg+xml file as a generic o |
| CVE-2026-105631 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEndpoint.get resolve FileAsset records within a workspace |
| CVE-2026-105632 | Deferred | 未確認 | CWE-284 | Plane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member add themselves to any project in that workspace includin |
| CVE-2026-105633 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id in the URL but omits it from the database query. A project |
| CVE-2026-105634 | Deferred | 未確認 | CWE-269 | Plane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows any project member, including a user with the lowest GUEST ro |
| CVE-2026-105635 | Deferred | 未確認 | CWE-200, CWE-284, CWE-862 | Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{slug}/projects/{project_id}/join/{pk}/ uses permission_classes = [Allow |
| CVE-2026-105636 | Deferred | 未確認 | CWE-918 | Plane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_task.py calls requests.post() without allow_redirects=F |
| CVE-2026-105637 | Deferred | 未確認 | CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves assets using id__in=asset_ids and w |
| CVE-2026-105638 | Deferred | 未確認 | CWE-307 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric OTP with approximately 20 bits of entropy. The verifier has |
| CVE-2026-105639 | Deferred | 未確認 | CWE-200, CWE-287, CWE-639 | Plane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an out-of-band ownership check, wh |
| CVE-2026-105640 | Deferred | 未確認 | CWE-287, CWE-290 | Plane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab OAuth deployments where email confi |
| CVE-2026-105641 | Deferred | 未確認 | CWE-798 | Plane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide fixed, publicly known SECRET_KEY an |
| CVE-2026-105642 | Deferred | 未確認 | CWE-94 | Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user |
| CVE-2026-105643 | Deferred | 未確認 | CWE-653, CWE-79 | Ghost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against stored cross-site scripting. Any st |
| CVE-2026-105644 | Deferred | 未確認 | CWE-434, CWE-79 | Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, SVG images included in content imports were stored without sanitization. An attacker who convinced an Adminis |
| CVE-2026-105645 | Deferred | 未確認 | CWE-1333 | Ghost is a Node.js content management system. From 5.37.0 until 6.67.0, a crafted request to the external media inliner could cause excessive CPU usage, making the Ghost server unr |
| CVE-2026-105646 | Deferred | 未確認 | CWE-1333 | Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiti |
| CVE-2026-105647 | Deferred | 未確認 | CWE-367, CWE-918 | Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user |
| CVE-2026-105648 | Deferred | 未確認 | CWE-184, CWE-918 | Ghost is a Node.js content management system. From 6.0.9 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user t |
| CVE-2026-105649 | Deferred | 未確認 | CWE-434, CWE-79 | Ghost is a Node.js content management system. From 4.22.0 until 6.65.0, SVG media thumbnails and SVG images uploaded with a non-SVG file extension were stored without sanitization. |
| CVE-2026-105650 | Deferred | 未確認 | CWE-184, CWE-79 | Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post co |
| CVE-2026-105651 | Deferred | 未確認 | CWE-434, CWE-79 | Ghost is a Node.js content management system. From 5.94.0 until 6.64.0, when creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmar |
| CVE-2026-105652 | Deferred | 未確認 | CWE-203, CWE-943 | Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determine the relative ordering of other staff users' hashed passwords. This |
| CVE-2026-105659 | Deferred | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote attacker to pin HTTP/2 stream processes indefinitely via a trickle of small WINDO |
| CVE-2026-105660 | Deferred | 未確認 | CWE-1286 | Improper Validation of Syntactic Correctness of Input vulnerability in mtrudel bandit allows an unauthenticated remote attacker to set conn.host and conn.port to values outside the |
| CVE-2026-105661 | Awaiting Analysis | 未確認 | CWE-248, CWE-476 | Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home handler dereference a nil organization and panic. The request n |
| CVE-2026-105664 | Deferred | 未確認 | CWE-204 | The endpoint exposes an observable response discrepancy when processing ID values. A request submitted with a nonexistent ID returns a distinct error response code from one submitt |
| CVE-2026-105667 | Deferred | 未確認 | CWE-306 | In the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender can reassign studies and relat |
| CVE-2026-105668 | Deferred | 未確認 | CWE-693 | Protection Mechanism Failure vulnerability in hexpm hex allows the owner of a package, or an attacker who has taken over the owner's account, to get a newly published release past |
| CVE-2026-105672 | Deferred | 未確認 | CWE-287 | TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can appe |
| CVE-2026-105673 | Deferred | 未確認 | CWE-121 | An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair |
| CVE-2026-105674 | Deferred | 未確認 | CWE-330 | TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and reco |
| CVE-2026-105675 | Deferred | 未確認 | CWE-203, CWE-943 | Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, |
| CVE-2026-105676 | Deferred | 未確認 | CWE-22, CWE-73 | Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JS |
| CVE-2026-105677 | Deferred | 未確認 | CWE-22, CWE-829, CWE-94 | Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to execute |
| CVE-2026-105678 | Deferred | 未確認 | CWE-269, CWE-863 | Ghost is a Node.js content management system. From 0.5.0 until 6.64.0, staff users with the Editor or Super Editor role were able to assign their own role to Author and Contributor |
| CVE-2026-105679 | Deferred | 未確認 | CWE-434, CWE-79 | Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On s |
| CVE-2026-105680 | Deferred | 未確認 | CWE-862 | Ghost is a Node.js content management system. From 5.81.0 until 6.60.0, staff with the Author role could delete posts and pages that they did not author. This issue is fixed in ver |
| CVE-2026-105681 | Deferred | 未確認 | CWE-943 | Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issue i |
| CVE-2026-105682 | Deferred | 未確認 | CWE-918 | Ghost is a Node.js content management system. From 1.18.0 until 6.27.0, an SSRF vulnerability in the webhooks feature allowed staff users to probe internal hosts from the Ghost ser |
| CVE-2026-105683 | Deferred | 未確認 | CWE-35 | Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data stora |
| CVE-2026-105684 | Deferred | 未確認 | CWE-200, CWE-863 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-comment-threads, get-comment-thread, and get-comments RPC commands use check-comment-permissions! |
| CVE-2026-105686 | Deferred | 未確認 | CWE-770 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither rejects an already stor |
| CVE-2026-105687 | Deferred | 未確認 | CWE-269, CWE-863 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administrator to remove any member other than themselves but doe |
| CVE-2026-105688 | Deferred | 未確認 | CWE-269 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation acceptance path allow a non-owner team administrator to assign |
| CVE-2026-105689 | Deferred | 未確認 | CWE-918 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, app.util.ssrf/blocked-address? relies on Java InetAddress predicates that do not classify NAT64, 6to4, or |
| CVE-2026-105690 | Deferred | 未確認 | CWE-613 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, logout clears the browser's auth-token cookie without revoking the corresponding server-side session. A p |
| CVE-2026-105691 | Deferred | 未確認 | CWE-78 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a ppmcolormask command |
| CVE-2026-105692 | Deferred | 未確認 | CWE-284, CWE-639 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies only that the caller can |
| CVE-2026-105693 | Deferred | 未確認 | CWE-862 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller |
| CVE-2026-105694 | Deferred | 未確認 | CWE-79 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, authenticated users with file-edit permission can upload SVG media whose scripts, event-handler attribute |
| CVE-2026-105695 | Deferred | 未確認 | CWE-862 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-chunk correctly scope |
| CVE-2026-105696 | Deferred | 未確認 | CWE-862 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but does not verify that |
| CVE-2026-105697 | Awaiting Analysis | 未確認 | CWE-78 | Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP |
| CVE-2026-105698 | Awaiting Analysis | 未確認 | CWE-639, CWE-862 | Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.0.0 until 1.10.1, Langflow did not verify flow ownership in the deprecated POST /api/v1/build/ |
| CVE-2026-105699 | Awaiting Analysis | 未確認 | CWE-639 | Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.6.8 until 1.9.1, Langflow authenticated access to the project identifier in a project-scoped M |
| CVE-2026-105701 | Deferred | 未確認 | CWE-434 | The ACPT (Premium) plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.0.66 via the render function. This is due to missing capabili |
| CVE-2026-105703 | Deferred | 未確認 | CWE-285, CWE-863 | A vulnerability was determined in PHPGurukul User Registration & Login and User Management System 3.3. The impacted element is an unknown function of the file loginsystem/admin/cha |
| CVE-2026-105704 | Deferred | 未確認 | CWE-287 | A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument use |
| CVE-2026-105705 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file Admin/add_drug.php. Performing a manipulation res |
| CVE-2026-105706 | Deferred | 未確認 | CWE-352, CWE-862 | A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected is an unknown function. Executing a manipulation can lead to cross-site request forgery. T |
| CVE-2026-105707 | Deferred | 未確認 | CWE-200, CWE-209 | A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is the function Login of the file pkg/org/user_handler.go. The manipulation |
| CVE-2026-105708 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Execu |
| CVE-2026-105711 | Undergoing Analysis | 未確認 | CWE-524 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when a merge request in a public pro |
| CVE-2026-105712 | Awaiting Analysis | 未確認 | CWE-61 | gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing directory con |
| CVE-2026-105713 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network. |
| CVE-2026-105714 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105715 | Analyzed | 未確認 | CWE-190, CWE-416 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105716 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105717 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105718 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-105719 | Analyzed | 未確認 | CWE-20 | Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-10572 | Analyzed | 未確認 | CWE-122 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with |
| CVE-2026-105720 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-105722 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-105723 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-105725 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Security App allows an authorized attacker to elevate privileges locally. |
| CVE-2026-105726 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally. |
| CVE-2026-105727 | Awaiting Analysis | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-105728 | Awaiting Analysis | 未確認 | CWE-306 | Improper authentication in Dynamics Business Central allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-105729 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. |
| CVE-2026-105731 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally. |
| CVE-2026-105732 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally. |
| CVE-2026-105733 | Awaiting Analysis | 未確認 | Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. | |
| CVE-2026-10574 | Analyzed | 未確認 | CWE-122 | IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operat |
| CVE-2026-105740 | Awaiting Analysis | 未確認 | CWE-78 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, any authenticated Langflow user can achieve Remote Code Execution (RCE) on the server |
| CVE-2026-105741 | Awaiting Analysis | 未確認 | CWE-290, CWE-345 | Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol (MCP) configurati |
| CVE-2026-105742 | Analyzed | 未確認 | CWE-201, CWE-522 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.95.0 until 2.132.0, the HTML image resource lo |
| CVE-2026-105743 | Analyzed | 未確認 | CWE-367, CWE-918 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.91.0 until 2.132.0, validate_url_safety in doc |
| CVE-2026-105744 | Analyzed | 未確認 | CWE-1188, CWE-22, CWE-73 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into Late |
| CVE-2026-105745 | Analyzed | 未確認 | CWE-696, CWE-829 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.27.0 until 2.131.0, Docling plugin factories i |
| CVE-2026-105746 | Analyzed | 未確認 | CWE-668, CWE-693 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class |
| CVE-2026-105747 | Analyzed | 未確認 | CWE-409, CWE-770 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.45.0 until 2.131.0, METS-GBS format detection |
| CVE-2026-105748 | Analyzed | 未確認 | CWE-200, CWE-73 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.16.0 until 2.131.0, the InputFormat.JSON_DOCLI |
| CVE-2026-105749 | Modified | 未確認 | CWE-400, CWE-789 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.0.0 until 2.131.0, the HTML, JATS, OpenDocumen |
| CVE-2026-105750 | Analyzed | 未確認 | CWE-552, CWE-863 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.82.0 until 2.118.1, HTMLBackendOptions(render_ |
| CVE-2026-105751 | Analyzed | 未確認 | CWE-22 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docling/backend/opendocum |
| CVE-2026-105752 | Analyzed | 未確認 | CWE-200, CWE-524 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, Harmony tool continuations submitted through "POST /v1/responses" requests rebuild the next-turn |
| CVE-2026-105753 | Analyzed | 未確認 | CWE-617 | vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multimodal LRU cache can commit a media hash in the frontend sender cache d |
| CVE-2026-105754 | Analyzed | 未確認 | CWE-1284, CWE-20, CWE-617, CWE-639, CWE-668, CWE-704 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate endpoint in the disaggregated scale-out path accepts caller-supplied |
| CVE-2026-105755 | Analyzed | 未確認 | CWE-639 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash late-interaction scoring at the /score and /rerank endpoints derives each worker's query_k |
| CVE-2026-105756 | Analyzed | 未確認 | CWE-20, CWE-248 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models accept a non-empty cache_salt value without enforcing the chara |
| CVE-2026-105757 | Analyzed | 未確認 | CWE-20, CWE-248, CWE-755 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request failures can escape request-scoped validation and reach the EngineCore |
| CVE-2026-105758 | Analyzed | 未確認 | CWE-770 | vLLM is an inference and serving engine for large language models. From 0.24.0 until 0.30.0, the Qwen2VLVideoBackend and Qwen3VLVideoBackend classes accept request-level values for |
| CVE-2026-105759 | Analyzed | 未確認 | CWE-400 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometh |
| CVE-2026-105760 | Analyzed | 未確認 | CWE-400 | vLLM is an inference and serving engine for large language models. Prior to 0.30.0, a caller can use the request-level media_io_kwargs field to select the GLMGA video backend and s |
| CVE-2026-105761 | Deferred | 未確認 | CWE-639 | Dify is an open-source LLM app development platform. Prior to 1.16.0, the PUT /console/api/apps/<app_id>/server endpoint in api/controllers/console/app/mcp_server.py used App |
| CVE-2026-105762 | Deferred | 未確認 | CWE-918 | Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py accepted an attacker-cont |
| CVE-2026-105763 | Deferred | 未確認 | CWE-522 | Twenty is an open-source CRM (customer relationship management) platform. From 1.20.10 until 2.7.0, the /metadata GraphQL connectedAccounts query returned connectionParameters from |
| CVE-2026-105764 | Deferred | 未確認 | CWE-94 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files that thumbnail-generation code |
| CVE-2026-105766 | Deferred | 未確認 | CWE-319 | Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy (edu) from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 b |
| CVE-2026-105767 | Deferred | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu) from commit 7375a80caabcc31c33e |
| CVE-2026-105768 | Deferred | 未確認 | CWE-197 | apko allows users to build and publish OCI container images built from apk packages. From version 0.2.0 to before version 1.4.5, UserEntry.Parse and GroupEntry.Parse in pkg/passwd |
| CVE-2026-105772 | Awaiting Analysis | 未確認 | CWE-22 | Path Traversal (CWE-22) in FileArtifactService in Google ADK TypeScript (@google/adk) versions 0.4.0 before 0.6.0 allows a remote unauthenticated attacker to read files matching th |
| CVE-2026-105773 | Awaiting Analysis | 未確認 | CWE-362 | Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file val |
| CVE-2026-105775 | Deferred | 未確認 | CWE-119, CWE-125 | A security vulnerability has been detected in vllm-project vLLM up to 0.31.0. This impacts the function conv_ssm_forward of the file vllm/model_executor/layers/mamba/mamba_mixer2.p |
| CVE-2026-105776 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in bhagya3929 Employee-Movement-Tracking-and-Monitoring-Website-for-IOCL up to ae783195ba7e0390d3b3bfaddd99944b7e9735a4. Affected by this vulnerability is an |
| CVE-2026-105777 | Undergoing Analysis | 未確認 | CWE-201 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unaut |
| CVE-2026-105778 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability has been found in Tenda AC5 02.03.01.111_multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such |
| CVE-2026-105782 | Awaiting Analysis | 未確認 | CWE-470 | Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddleware in scrapy/spidermiddlewares/referer.py treated a Referrer-Policy r |
| CVE-2026-105783 | Deferred | 未確認 | CWE-346, CWE-352 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clippe |
| CVE-2026-105784 | Deferred | 未確認 | CWE-79 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, selecting a note containing a jsoncanvas fence causes the |
| CVE-2026-105785 | Deferred | 未確認 | CWE-620, CWE-640 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts sto |
| CVE-2026-105786 | Deferred | 未確認 | CWE-306, CWE-330, CWE-863 | Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, packages/server/src/models/ApplicationModel.ts accepts a |
| CVE-2026-105788 | Deferred | 未確認 | CWE-78, CWE-88 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.10, the type_text and launch_app tools in ufo/client/mcp/http_server |
| CVE-2026-105789 | Deferred | 未確認 | CWE-184, CWE-88 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the execute_command tool in ufo/client/mcp/http_servers/linux_mcp |
| CVE-2026-105790 | Deferred | 未確認 | CWE-918 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can supply |
| CVE-2026-105791 | Deferred | 未確認 | CWE-184, CWE-88 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the run_shell tool in the CommandLineExecutor component of ufo/cl |
| CVE-2026-105792 | Deferred | 未確認 | CWE-833 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the /api/task_result/{task_name} endpoint calls SessionManager.ge |
| CVE-2026-105793 | Deferred | 未確認 | CWE-78 | Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, the press_key tool in ufo/client/mcp/http_servers/mobile_mcp_serv |
| CVE-2026-105794 | Awaiting Analysis | 未確認 | CWE-295 | MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C#, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicT |
| CVE-2026-105795 | Awaiting Analysis | 未確認 | CWE-22 | Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path from an attacker-controlled or com |
| CVE-2026-105796 | Awaiting Analysis | 未確認 | CWE-94 | Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than ne |
| CVE-2026-105797 | Deferred | 未確認 | CWE-78, CWE-863 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. In versions 0.261.003 and 0.261.027, an authorization orde |
| CVE-2026-105798 | Deferred | 未確認 | CWE-79 | SimpleChat is a secure AI conversation application with personal and group workspaces for document-grounded interactions. Prior to 0.261.029, POST /api/group_documents/upload store |
| CVE-2026-105799 | Awaiting Analysis | 未確認 | CWE-943 | LangChain is a framework for building LLM-powered applications. Prior to 1.1.1, @langchain/redis does not escape attacker-controlled values in structured RediSearch TAG filters and |
| CVE-2026-105800 | Deferred | 未確認 | CWE-74, CWE-918 | i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace value |
| CVE-2026-105801 | Deferred | 未確認 | CWE-116, CWE-150, CWE-94 | openapi-python-client generates Python clients from OpenAPI documents. Prior to 0.29.1, the generator does not safely neutralize malicious OpenAPI document content before rendering |
| CVE-2026-105804 | Undergoing Analysis | 未確認 | CWE-916 | Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.0 and canary versions from 4.0.0-canary.0 before 4.0.0-canary.34 use a |
| CVE-2026-105805 | Undergoing Analysis | 未確認 | CWE-200, CWE-863 | Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query a readab |
| CVE-2026-105806 | Undergoing Analysis | 未確認 | CWE-862 | Payload is a free and open source headless content management system. In @payloadcms/plugin-mcp versions from 3.61.0 until 3.88.0, an authenticated user can manage MCP API keys out |
| CVE-2026-105807 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Simple Student Information System 1.0. This affects an unknown part of the file searchquery.php. Performing a manipulation results in sq |
| CVE-2026-105808 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in SourceCodester Simple Student Information System 1.0. This vulnerability affects the function clean of the file searchresults.php. Executing a man |
| CVE-2026-105809 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in SourceCodester Simple Student Information System 1.0. This issue affects some unknown processing of the file /register.php of the component Profil |
| CVE-2026-105810 | Deferred | 未確認 | CWE-121 | Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submi |
| CVE-2026-105811 | Awaiting Analysis | 未確認 | CWE-639 | Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample ( q-business-lambda-hook https://github.com/aws-solutions-library-samples/qn |
| CVE-2026-105812 | Awaiting Analysis | 未確認 | CWE-94 | Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticated same-account actor to e |
| CVE-2026-105814 | Deferred | 未確認 | CWE-287 | TP-Link Tapo C210 V3.60 contains an authentication bypass vulnerability in the DS JSON API. A crafted JSON request containing both a protected operation and public onboarding-relat |
| CVE-2026-105815 | Deferred | 未確認 | CWE-287 | TP-Link Tapo C210 V3.60 may expose shared credential material and cryptographic metadata through unauthenticated DS JSON API requests. The exposed shared credential can be accepted |
| CVE-2026-105816 | Awaiting Analysis | 未確認 | CWE-22 | Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals an |
| CVE-2026-105818 | Awaiting Analysis | 未確認 | CWE-345 | Vault's PKI secrets engine ACME server did not restrict certificate identities that ACME challenges do not validate when issuing certificates under the default directory policy. Th |
| CVE-2026-105820 | Awaiting Analysis | 未確認 | CWE-22 | Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted policy names to use th |
| CVE-2026-105823 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105824 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105825 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105826 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105827 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected as a duplicate. | |
| CVE-2026-105828 | Awaiting Analysis | 未確認 | CWE-209 | Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerability in which GraphQL validation error messages reveal hidden class na |
| CVE-2026-105829 | Awaiting Analysis | 未確認 | CWE-80 | League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users posting Markdown to bypass the DisallowedRawHtml extension by ending raw |
| CVE-2026-105830 | Awaiting Analysis | 未確認 | CWE-400 | league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart() |
| CVE-2026-105831 | Deferred | 未確認 | CWE-79 | EspoCRM before 10.0.6 contains a stored HTML injection vulnerability that allows unauthenticated attackers to inject HTML by submitting crafted Lead Capture public form data. The r |
| CVE-2026-105832 | Deferred | 未確認 | CWE-287 | EspoCRM before 10.0.6 contains an authentication bypass vulnerability that accepts a login stopped at the second factor on routes not requiring authentication. Attackers knowing a |
| CVE-2026-105833 | Deferred | 未確認 | CWE-522 | EspoCRM before 10.0.5 contains an insecure direct object reference vulnerability in PersonalAccount\Service that allows users with Email Account scope access to retrieve other user |
| CVE-2026-105834 | Awaiting Analysis | 未確認 | CWE-22 | Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.c |
| CVE-2026-105835 | Deferred | 未確認 | CWE-307 | PLANKA 2.2.0 through 2.2.1 fails to limit incorrect TOTP codes submitted to POST /api/access-tokens/verify-totp, allowing attackers to brute force two-factor authentication codes. |
| CVE-2026-105836 | Deferred | 未確認 | CWE-639 | QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminProductsController::ajaxProcessBulkUpdateRooms that allows hotel-restricted back-office employees to mo |
| CVE-2026-105837 | Deferred | 未確認 | CWE-190 | libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafted track counts. Attac |
| CVE-2026-105838 | Deferred | 未確認 | CWE-125 | libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized pa |
| CVE-2026-105839 | Deferred | 未確認 | CWE-190 | libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track counts. Attackers ca |
| CVE-2026-105840 | Deferred | 未確認 | CWE-22 | lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current dir |
| CVE-2026-105841 | Deferred | 未確認 | CWE-78 | lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filena |
| CVE-2026-105842 | Deferred | 未確認 | CWE-122 | lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Ma |
| CVE-2026-105844 | Undergoing Analysis | 未確認 | CWE-1321 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an unauthenticated user can s |
| CVE-2026-105845 | Undergoing Analysis | 未確認 | CWE-89 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can que |
| CVE-2026-105846 | Analyzed | 未確認 | CWE-601 | Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an attacker can craft a redi |
| CVE-2026-105847 | Analyzed | 未確認 | CWE-200, CWE-639 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a collec |
| CVE-2026-105848 | Analyzed | 未確認 | CWE-749, CWE-862 | Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticat |
| CVE-2026-105849 | Analyzed | 未確認 | CWE-201, CWE-862 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, users with ordinary read acce |
| CVE-2026-105850 | Analyzed | 未確認 | CWE-837 | Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the |
| CVE-2026-105851 | Analyzed | 未確認 | CWE-284, CWE-863 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation copie |
| CVE-2026-105852 | Analyzed | 未確認 | CWE-862 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a re |
| CVE-2026-105853 | Analyzed | 未確認 | CWE-200 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, token refresh responses and p |
| CVE-2026-105854 | Analyzed | 未確認 | CWE-1333, CWE-400 | Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart request |
| CVE-2026-105855 | Analyzed | 未確認 | CWE-284 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, the server fails to enforce a field-leve |
| CVE-2026-105856 | Analyzed | 未確認 | CWE-89 | Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection contain |
| CVE-2026-105857 | Analyzed | 未確認 | CWE-1321, CWE-94 | Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attac |
| CVE-2026-105858 | Analyzed | 未確認 | CWE-1321, CWE-94 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-re |
| CVE-2026-105859 | Analyzed | 未確認 | CWE-639, CWE-862 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a sp |
| CVE-2026-105860 | Analyzed | 未確認 | CWE-862 | Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the defa |
| CVE-2026-105861 | Analyzed | 未確認 | CWE-200, CWE-346 | Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authe |
| CVE-2026-105862 | Analyzed | 未確認 | CWE-434, CWE-79 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SV |
| CVE-2026-105863 | Analyzed | 未確認 | CWE-290, CWE-915 | Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authenticatio |
| CVE-2026-105864 | Analyzed | 未確認 | CWE-863 | Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authe |
| CVE-2026-105865 | Analyzed | 未確認 | CWE-22, CWE-73 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can update or |
| CVE-2026-105866 | Analyzed | 未確認 | CWE-307, CWE-645 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an |
| CVE-2026-105867 | Analyzed | 未確認 | CWE-639 | Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated |
| CVE-2026-105868 | Analyzed | 未確認 | CWE-434 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept |
| CVE-2026-105869 | Awaiting Analysis | 未確認 | CWE-347 | Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON Web Token (JWT). The provider is intended for use with token a |
| CVE-2026-105870 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc. WP Associate Post R2 wp-associate-post-r2 allows Reflected X |
| CVE-2026-105871 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Store |
| CVE-2026-105872 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in mklacroix Product Configurator for WooCommerce product-configurator-for-woocommerce allows Object Injection.This issue affects Pr |
| CVE-2026-105873 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Store |
| CVE-2026-105874 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Reflected XSS.This issue affects Sur |
| CVE-2026-105875 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows |
| CVE-2026-105876 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Modula Image Gallery modula-best-grid-gallery allows Retrieve Embedded Sensitive Data.This issue affects Modula Image Gallery: from |
| CVE-2026-105877 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: |
| CVE-2026-105878 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2026-105879 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue |
| CVE-2026-105881 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue af |
| CVE-2026-105882 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.This issue af |
| CVE-2026-105883 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeHunk Th Shop Mania th-shop-mania allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Th Shop Mani |
| CVE-2026-105884 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Media Rocket Lazy Load rocket-lazy-load allows Stored XSS.This issue affect |
| CVE-2026-105885 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in 10Web Slider by 10Web slider-wd allows Object Injection.This issue affects Slider by 10Web: from n/a through 1.2.62. |
| CVE-2026-105886 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultim |
| CVE-2026-105887 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Robosoft Robo Gallery robo-gallery allows Stored XSS.This issue affects Robo G |
| CVE-2026-105888 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-105889 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This |
| CVE-2026-105890 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allow |
| CVE-2026-105891 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-105892 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows Pa |
| CVE-2026-105893 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Manipulating User-Controlled Variables.This issue affect |
| CVE-2026-105895 | Undergoing Analysis | 未確認 | CWE-20 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, potentially gai |
| CVE-2026-105896 | Analyzed | 未確認 | CWE-476 | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cra |
| CVE-2026-105897 | Analyzed | 未確認 | CWE-918 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction |
| CVE-2026-105898 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-105899 | Analyzed | 未確認 | CWE-434 | ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user. An atta |
| CVE-2026-105900 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash th |
| CVE-2026-105901 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-105902 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-105903 | Analyzed | 未確認 | CWE-94 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-105918 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Impacted is the function mysql_error of the file login.php |
| CVE-2026-105919 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The affected element is the function mysql_query of the file ad |
| CVE-2026-105920 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. The impacted element is an unknown function of the file st |
| CVE-2026-105921 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file search_class. |
| CVE-2026-105922 | Analyzed | 未確認 | CWE-404 | A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of th |
| CVE-2026-105923 | Awaiting Analysis | 未確認 | CWE-190, CWE-476 | A malicious SVG can trigger an integer overflow which in turn triggers a null-pointer dereference in VectorImage QML Type. |
| CVE-2026-105926 | Awaiting Analysis | 未確認 | CWE-862 | The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for a topic, and GetOrCreateSchema, which registers a new schema |
| CVE-2026-105927 | Awaiting Analysis | 未確認 | CWE-863 | The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through query parameters of the consumer endpoint, including the deadLetterTopic p |
| CVE-2026-105930 | Awaiting Analysis | 未確認 | CWE-863 | When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package stored in the Pulsar Packages Management Service by supplying a |
| CVE-2026-105931 | Awaiting Analysis | 未確認 | CWE-862 | The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactions. When authentication and authorization are enabled, most of the read endpoints o |
| CVE-2026-105932 | Awaiting Analysis | 未確認 | CWE-862 | The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a topic. For persistent topics these endpoints check that |
| CVE-2026-105933 | Awaiting Analysis | 未確認 | CWE-636 | Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting the encryption_required namespace policy. When this policy i |
| CVE-2026-105934 | Awaiting Analysis | 未確認 | CWE-862 | The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/persistent/{tenant}/{namespace}/{topic}/truncate). Truncating a topic |
| CVE-2026-105935 | Awaiting Analysis | 未確認 | CWE-862 | The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value to one of the function's configured input topics. The Fu |
| CVE-2026-105936 | Awaiting Analysis | 未確認 | CWE-862 | The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the functions worker: the worker connectors endpoint (/admi |
| CVE-2026-105937 | Awaiting Analysis | 未確認 | CWE-862 | Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed ledger. The source topic is selected by setting the reser |
| CVE-2026-105938 | Awaiting Analysis | 未確認 | CWE-863 | Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication mode, which requires a subscription name to start with |
| CVE-2026-105941 | Awaiting Analysis | 未確認 | CWE-918 | The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes without format validation, enabling SSRF that exfiltrates the prox |
| CVE-2026-105942 | Awaiting Analysis | 未確認 | CWE-863 | When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broker is designed to authorize both the proxy role and the origi |
| CVE-2026-105944 | Awaiting Analysis | 未確認 | CWE-306 | Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and it can be configured with an HTTP authentication creden |
| CVE-2026-105945 | Awaiting Analysis | 未確認 | CWE-22 | The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the filesystem storage provider. Package names consist of |
| CVE-2026-105949 | Awaiting Analysis | 未確認 | CWE-287 | Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttp |
| CVE-2026-105950 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/Dom |
| CVE-2026-105957 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/view_product.php. Performing a |
| CVE-2026-105958 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in spice-server. Multiple migration data handlers use client-supplied offsets from SPICE_MSGC_MIGRATE_DATA messages without bounds validation, allowing a malicious |
| CVE-2026-105959 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in spice-server. The GLZ encoder dictionary restore path truncates a size_t allocation size to int when calling the malloc callback, allowing a malicious authentic |
| CVE-2026-105960 | Awaiting Analysis | 未確認 | CWE-130 | PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requested or queued record count without sufficiently capping th |
| CVE-2026-105963 | Deferred | 未確認 | CWE-532 | Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in elixir-plug plug_crypto allows an unauthenticated remote attacker to expose the |
| CVE-2026-105964 | Awaiting Analysis | 未確認 | CWE-770 | The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit. A user who can run a workflow and obtains the runner token of that run |
| CVE-2026-105969 | Deferred | 未確認 | CWE-200 | The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to retrieve another |
| CVE-2026-105973 | Deferred | 未確認 | CWE-862 | The Visual Form Builder WordPress plugin through 3.1 does not perform authorization or nonce checks when reordering form fields, allowing any authenticated user (Subscriber and abo |
| CVE-2026-105974 | Deferred | 未確認 | CWE-200 | The Visual Form Builder WordPress plugin through 3.1 does not perform an authorization check before displaying recent form submission data in a dashboard widget, allowing any authe |
| CVE-2026-105975 | Deferred | 未確認 | CWE-862 | The CamPay Shortcode Payment Gateway WordPress plugin before 1.7 does not verify the authenticity of Mobile Money payment confirmations and derives the payment result from client-s |
| CVE-2026-105976 | Deferred | 未確認 | CWE-863 | The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform proper authorization checks in a set of AJAX actions, allowing users with at least the Contributor role |
| CVE-2026-105977 | Deferred | 未確認 | CWE-639 | The Portfolio Filter Gallery WordPress plugin before 2.2.1 does not perform a per-object authorization check before deleting an attachment, allowing users with the Contributor rol |
| CVE-2026-105985 | Deferred | 未確認 | CWE-1336 | Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Pa |
| CVE-2026-105989 | Deferred | 未確認 | CWE-862 | The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization or request-validation checks on one of its AJAX actions, allowing u |
| CVE-2026-105990 | Deferred | 未確認 | CWE-200 | The Accept PayPal Payments using Contact Form 7 WordPress plugin before 4.0.7 does not perform any authorization checks before exporting stored form submissions, allowing unauthent |
| CVE-2026-105992 | Deferred | 未確認 | CWE-862 | The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the payment provider before marking it paid and confirmed, allowing |
| CVE-2026-105994 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to by |
| CVE-2026-105995 | Deferred | 未確認 | CWE-200 | The Booking Package WordPress plugin before 1.7.30 does not perform authorization checks before returning stored reservation data, allowing unauthenticated users to disclose other |
| CVE-2026-105996 | Deferred | 未確認 | CWE-326 | The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source of randomness, deriving them instead from values it exposes p |
| CVE-2026-105998 | Deferred | 未確認 | CWE-862 | The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before resetting its premium subscription state, allowing unauthenticated at |
| CVE-2026-105999 | Deferred | 未確認 | CWE-200 | The Booking Package WordPress plugin before 1.7.31 does not perform authorization checks before returning calendar-account configuration in a response, allowing unauthenticated use |
| CVE-2026-106006 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-106010 | Deferred | 未確認 | CWE-862 | The BDM Digital Payment Gateway WordPress plugin through 1.3.12 does not verify the credentials on its public payment-status update route and treats unset credentials as valid, all |
| CVE-2026-106014 | Deferred | 未確認 | CWE-284 | The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing una |
| CVE-2026-106016 | Modified | 未確認 | CWE-693 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158. |
| CVE-2026-106017 | Awaiting Analysis | 未確認 | CWE-295 | Improper certificate validation in the OpenVPN 3 Core library version 3.4 through 3.11.7 allows attackers to circumvent extended key usage restrictions. |
| CVE-2026-106026 | Deferred | 未確認 | CWE-125 | tftp-hpa 5.4 before 6.0 contains an out-of-bounds read vulnerability in rewrite_string() in tftpd/remap.c that walks heap memory during jump label searches. Unauthenticated remote |
| CVE-2026-106028 | Deferred | 未確認 | CWE-862 | The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to c |
| CVE-2026-106029 | Deferred | 未確認 | CWE-862 | The WeddingCity Lite WordPress plugin through 1.0.4 does not perform any authorisation or validity checks before deleting posts, pages and media attachments, allowing unauthentica |
| CVE-2026-106030 | Awaiting Analysis | 未確認 | CWE-863 | NordVPN for Windows allows local attackers to stop unprotected Windows system services and change their startup type to Manual via named pipes. The NordVPN user-mode application al |
| CVE-2026-106031 | Deferred | 未確認 | CWE-284 | The Spin Wheel WordPress plugin before 2.2.1 does not verify that a visitor actually performed a legitimate spin before returning and consuming a configured prize coupon, allowing |
| CVE-2026-106032 | Awaiting Analysis | 未確認 | CWE-918 | Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authenticate |
| CVE-2026-106033 | Awaiting Analysis | 未確認 | CWE-79 | A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the |
| CVE-2026-106034 | Awaiting Analysis | 未確認 | CWE-22 | A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system. |
| CVE-2026-106035 | Awaiting Analysis | 未確認 | CWE-532 | An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database |
| CVE-2026-106037 | Deferred | 未確認 | CWE-306 | Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated |
| CVE-2026-106038 | Deferred | 未確認 | CWE-306 | Mooncake Store master through 0.3.13.post1 contains a missing authentication vulnerability that allows unauthenticated attackers to force-delete any object via Remove, RemoveByRege |
| CVE-2026-106039 | Deferred | 未確認 | CWE-862 | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to create, steal, and falsely complete replication t |
| CVE-2026-106040 | Deferred | 未確認 | CWE-862 | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskRepl |
| CVE-2026-106041 | Deferred | 未確認 | CWE-862 | Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to inject completed LOCAL_DISK replicas through the |
| CVE-2026-106042 | Awaiting Analysis | 未確認 | CWE-73 | An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generated requests t |
| CVE-2026-106043 | Awaiting Analysis | 未確認 | CWE-306 | A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site. |
| CVE-2026-106047 | Awaiting Analysis | 未確認 | CWE-22 | A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files. |
| CVE-2026-106053 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-106056 | Awaiting Analysis | 未確認 | CWE-78 | Rundeck before 6.2.0 contains an OS command injection vulnerability that allows authenticated users with job run permission to execute commands on Windows nodes by supplying crafte |
| CVE-2026-106057 | Deferred | 未確認 | CWE-78 | patool before 4.0.6 contains an OS command injection vulnerability on Windows because shell_quote_nt fails to escape cmd.exe metacharacters or embedded double quotes in archive fil |
| CVE-2026-106058 | Awaiting Analysis | 未確認 | CWE-78 | GitAhead through 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames |
| CVE-2026-106059 | Awaiting Analysis | 未確認 | CWE-78 | GitAhead through 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames interpolated unescaped i |
| CVE-2026-106061 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in GIMP’s X cursor (XMC) thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width * height size computed |
| CVE-2026-106062 | Awaiting Analysis | 未確認 | CWE-119 | A heap-based buffer overflow was found in GIMP’s DirectDraw Surface (DDS) loader. When loading a crafted DDS image, buffer sizes derived from width, height, and pitch can be comput |
| CVE-2026-106063 | Awaiting Analysis | 未確認 | CWE-119 | A heap-based buffer overflow was found in GIMP’s DICOM export plug-in. When exporting an image with extremely large width and height, the export path allocates a buffer using a 32- |
| CVE-2026-106064 | Awaiting Analysis | 未確認 | CWE-119 | A heap-based buffer overflow was found in GIMP’s GIF export plug-in. Exporting an image with very large width and height can cause 32-bit overflow when computing the pixel buffer s |
| CVE-2026-106065 | Awaiting Analysis | 未確認 | CWE-119 | A heap-based buffer overflow was found in GIMP’s PCX export plug-in. For images with extremely large width and height, buffer allocation uses overflowing 32-bit width * height arit |
| CVE-2026-106066 | Awaiting Analysis | 未確認 | CWE-119 | A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-per-pixel |
| CVE-2026-106067 | Awaiting Analysis | 未確認 | CWE-119 | A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width * height (and related) |
| CVE-2026-106068 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-106069 | Awaiting Analysis | 未確認 | CWE-295 | A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a n |
| CVE-2026-106070 | Awaiting Analysis | 未確認 | CWE-840 | A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation fails. When `zipEntry |
| CVE-2026-106071 | Awaiting Analysis | 未確認 | CWE-284 | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule. When the requested p |
| CVE-2026-106072 | Awaiting Analysis | 未確認 | CWE-295 | A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, su |
| CVE-2026-106073 | Awaiting Analysis | 未確認 | CWE-284 | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which |
| CVE-2026-106074 | Awaiting Analysis | 未確認 | CWE-330 | A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup sn |
| CVE-2026-106089 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-106090 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-106095 | Deferred | 未確認 | CWE-862 | The Code Snippets WordPress plugin before 3.10.0 does not perform a capability check on one of its snippet-management actions and derives the network scope of the targeted snippet |
| CVE-2026-106097 | Deferred | 未確認 | CWE-89 | The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpo |
| CVE-2026-106098 | Deferred | 未確認 | CWE-863 | The WP Data Access WordPress plugin before 5.5.77 does not correctly check authorization on one of its application REST endpoints, verifying only read permission before performing |
| CVE-2026-106099 | Deferred | 未確認 | CWE-200 | The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data Access Word |
| CVE-2026-106100 | Analyzed | 未確認 | CWE-639, CWE-915 | Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions before 3.87.0 and canary versions before 4.0.0-canary.20, an authenticated |
| CVE-2026-106101 | Awaiting Analysis | 未確認 | CWE-843 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL() utility in ui/src/utils/open-url/open-url.js trusted window.Saf |
| CVE-2026-106102 | Awaiting Analysis | 未確認 | CWE-116, CWE-79 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.0, the SSR-only getHead() serializer in ui/src/plugins/meta/Meta.js used getAttr |
| CVE-2026-106103 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and |
| CVE-2026-106104 | Awaiting Analysis | 未確認 | CWE-1333 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.23.3, Platform.parseSSR() passed an unbounded User-Agent request header to getMatch |
| CVE-2026-106105 | Awaiting Analysis | 未確認 | CWE-732 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @qu |
| CVE-2026-106106 | Awaiting Analysis | 未確認 | CWE-497, CWE-79 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/render-ssr-error 2.2.4 and @quasar/app-vite 3.3.0, renderSSRError() in utils/ |
| CVE-2026-106107 | Awaiting Analysis | 未確認 | CWE-116, CWE-79 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.n |
| CVE-2026-106108 | Deferred | 未確認 | CWE-22 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by getSsgPages() could |
| CVE-2026-106109 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved build.distDir before |
| CVE-2026-106110 | Analyzed | 未確認 | CWE-787 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, the TIFF CCITT Group 3 encoder allocates an undersized compressed-data buffer for narrow 1-bit images. TiffCcittCompres |
| CVE-2026-106111 | Analyzed | 未確認 | CWE-226 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ExrBaseDecompressor.UndoZipCompression accepts a nonempty ZIP or ZIPS inflate result that is shorter than the EXR block |
| CVE-2026-106112 | Analyzed | 未確認 | CWE-787 | ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator |
| CVE-2026-106113 | Analyzed | 未確認 | CWE-787 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, decoding an attacker-supplied 32-bit floating-point TIFF as Image<HalfVector4> and applying HistogramEqualization can p |
| CVE-2026-106114 | Analyzed | 未確認 | CWE-789 | ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation sizes from attacker-declared channel and grid dimensions before confirm |
| CVE-2026-106115 | Analyzed | 未確認 | CWE-787 | ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can e |
| CVE-2026-106116 | Analyzed | 未確認 | CWE-835 | ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF IFD entry count and iterates once per declared entry. When fewer than |
| CVE-2026-106117 | Undergoing Analysis | 未確認 | CWE-787 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, decoding a strip TIFF using CCITT Group 3 or Modified Huffman compression can pass attacker-expanded runs to BitWriterU |
| CVE-2026-106118 | Awaiting Analysis | 未確認 | CWE-787 | ImageSharp is a 2D graphics library. From 3.0.0 until 4.1.1, tiled TIFF decoding allocates a destination buffer using TileWidth but TiffDecompressorsFactory.Create constructs T4, T |
| CVE-2026-106119 | Awaiting Analysis | 未確認 | CWE-943 | LangChain is a framework for building LLM-powered applications. Prior to 1.3.1, MongoDBChatMessageHistory does not enforce the documented string type for an untrusted structured se |
| CVE-2026-106120 | Deferred | 未確認 | CWE-200 | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnly does not consistently restrict inherited array indice |
| CVE-2026-106121 | Analyzed | 未確認 | CWE-835 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() f |
| CVE-2026-106122 | Analyzed | 未確認 | CWE-172, CWE-248 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed |
| CVE-2026-106123 | Modified | 未確認 | CWE-209 | The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load() includ |
| CVE-2026-106126 | Awaiting Analysis | 未確認 | CWE-78 | A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) allows an authenticated, low-privileged attacker to execute arbitrary |
| CVE-2026-106138 | Awaiting Analysis | 未確認 | CWE-80 | In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML with |
| CVE-2026-106139 | Awaiting Analysis | 未確認 | CWE-80 | In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as raw HTML |
| CVE-2026-106145 | Deferred | 未確認 | CWE-266 | In Progress® Telerik® Report Server prior to version 12.2.26.1007, incorrect privilege assignment in the service-agent SignalR hub allows an authenticated user, including a low-pri |
| CVE-2026-106147 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default item template renders the bound dataTextField value as raw HTML witho |
| CVE-2026-106148 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components insert data source imageUrl values into single-quoted image src attributes witho |
| CVE-2026-106149 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string concatenation without proper neutraliz |
| CVE-2026-106150 | Awaiting Analysis | 未確認 | CWE-79 | In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting with version 2011.2.804 and the Tooltip component starting with version 2013.1.3 |
| CVE-2026-106151 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Validator decodes validation messages from data-msg-* attributes and parses the re |
| CVE-2026-106153 | Analyzed | 未確認 | CWE-79 | In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url and data.title without proper URL sanitiz |
| CVE-2026-106155 | Deferred | 未確認 | CWE-79 | In Progress® Telerik® Report Server prior to version 12.2.26.1007, a stored cross-site scripting vulnerability in the shared reporting engine allows an authenticated report author |
| CVE-2026-106157 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the PanelBar component inserts data source item URL values into a single-quoted href a |
| CVE-2026-106158 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, and Agenda views insert resource color values into quoted event wrapper attribute |
| CVE-2026-106159 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonGroup button URLs are concatenated into an unquoted href attribute afte |
| CVE-2026-106160 | Analyzed | 未確認 | CWE-1321 | In Progress® Kendo® UI for jQuery prior to 2026.3.1015, Model.accept passes server-response keys to kendo.setter without guarding against unsafe object paths containing __proto__, |
| CVE-2026-106161 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw HTML without encoding, including v |
| CVE-2026-106162 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery versions starting with 2023.3.1010 and prior to 2026.3.1015, the FileManager component renders remotely supplied item names as HTML in its default |
| CVE-2026-106163 | Analyzed | 未確認 | CWE-80 | In Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior to v2026.3.1015, the FileBrowser and ImageBrowser components render remotely supplied file and direct |
| CVE-2026-106164 | Awaiting Analysis | 未確認 | CWE-835 | In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifica |
| CVE-2026-106166 | Deferred | 未確認 | CWE-639 | The NEX-Forms WordPress plugin before 9.3.1 does not perform any authorization, ownership or request-validation checks before updating stored form entries, allowing unauthenticate |
| CVE-2026-106170 | Awaiting Analysis | 未確認 | CWE-248 | An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow |
| CVE-2026-106171 | Awaiting Analysis | 未確認 | CWE-78 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiMa |
| CVE-2026-106172 | Awaiting Analysis | 未確認 | CWE-321 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Clou |
| CVE-2026-106173 | Awaiting Analysis | 未確認 | CWE-22 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or comman |
| CVE-2026-106175 | Awaiting Analysis | 未確認 | CWE-415 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, For |
| CVE-2026-106176 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests |
| CVE-2026-106177 | Awaiting Analysis | 未確認 | CWE-122 | A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to |
| CVE-2026-106179 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: |
| CVE-2026-106180 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium sec |
| CVE-2026-106181 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive informatio |
| CVE-2026-106182 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106183 | Analyzed | 未確認 | CWE-862 | Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Ch |
| CVE-2026-106184 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-106185 | Analyzed | 未確認 | CWE-20 | Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via |
| CVE-2026-106186 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside |
| CVE-2026-106187 | Analyzed | 未確認 | CWE-862 | Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted H |
| CVE-2026-106188 | Modified | 未確認 | CWE-441 | Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted |
| CVE-2026-106189 | Analyzed | 未確認 | CWE-94 | Code injection in ReaderMode in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTM |
| CVE-2026-106190 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106191 | Analyzed | 未確認 | CWE-862 | Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outs |
| CVE-2026-106192 | Analyzed | 未確認 | CWE-200 | Information leak in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chromium security severi |
| CVE-2026-106193 | Analyzed | 未確認 | CWE-416 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-106194 | Analyzed | 未確認 | CWE-862 | Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering |
| CVE-2026-106195 | Modified | 未確認 | CWE-863 | Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. |
| CVE-2026-106196 | Modified | 未確認 | CWE-862 | Missing authorization in Navigation in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTM |
| CVE-2026-106197 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-106198 | Modified | 未確認 | CWE-862 | Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a cra |
| CVE-2026-106199 | Modified | 未確認 | CWE-863 | Incorrect authorization in Actor in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially bypass site |
| CVE-2026-106200 | Analyzed | 未確認 | CWE-416 | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106201 | Analyzed | 未確認 | CWE-362 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-106202 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-106203 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Autofill in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craft |
| CVE-2026-106204 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security seve |
| CVE-2026-106205 | Analyzed | 未確認 | CWE-862 | Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation |
| CVE-2026-106206 | Analyzed | 未確認 | CWE-20 | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromi |
| CVE-2026-106207 | Analyzed | 未確認 | CWE-367 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-106208 | Modified | 未確認 | CWE-862 | Missing authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted Chrome exte |
| CVE-2026-106209 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML pag |
| CVE-2026-106210 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium security se |
| CVE-2026-106211 | Analyzed | 未確認 | CWE-416 | Use after free in TabStrip in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox |
| CVE-2026-106212 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HT |
| CVE-2026-106213 | Analyzed | 未確認 | CWE-362 | Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security sever |
| CVE-2026-106214 | Analyzed | 未確認 | CWE-200 | Information leak in Proxy in Google Chrome on on Windows prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium |
| CVE-2026-106215 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-106216 | Analyzed | 未確認 | CWE-352 | Cross-site request forgery in ReadingList in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy |
| CVE-2026-106217 | Analyzed | 未確認 | CWE-862 | Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craf |
| CVE-2026-106218 | Analyzed | 未確認 | CWE-184 | In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible |
| CVE-2026-106219 | Analyzed | 未確認 | CWE-73 | In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server |
| CVE-2026-106220 | Analyzed | 未確認 | CWE-200 | Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity |
| CVE-2026-106221 | Modified | 未確認 | CWE-441 | Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted H |
| CVE-2026-106222 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Sync in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. (Chromium security se |
| CVE-2026-106223 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-106224 | Analyzed | 未確認 | CWE-862 | Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a cr |
| CVE-2026-106225 | Analyzed | 未確認 | CWE-862 | Missing authorization in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML |
| CVE-2026-106226 | Analyzed | 未確認 | CWE-20 | Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a craft |
| CVE-2026-106227 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106228 | Analyzed | 未確認 | CWE-441 | Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outs |
| CVE-2026-106229 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafte |
| CVE-2026-106230 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Offline in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensiti |
| CVE-2026-106231 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-106232 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chrom |
| CVE-2026-106233 | Analyzed | 未確認 | CWE-416 | Use after free in Metrics in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox v |
| CVE-2026-106234 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox |
| CVE-2026-106235 | Analyzed | 未確認 | CWE-416 | Use after free in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-106236 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted ne |
| CVE-2026-106237 | Modified | 未確認 | CWE-200 | Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low |
| CVE-2026-106238 | Analyzed | 未確認 | CWE-362 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the |
| CVE-2026-106239 | Analyzed | 未確認 | CWE-190 | Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HT |
| CVE-2026-106240 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-106241 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary cod |
| CVE-2026-106242 | Modified | 未確認 | CWE-200 | Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via crafted |
| CVE-2026-106243 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Proxy Auth in Google Chrome prior to 155.0.8059.39 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium securit |
| CVE-2026-106244 | Modified | 未確認 | CWE-863 | Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chromium |
| CVE-2026-106245 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-106246 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medi |
| CVE-2026-106247 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside th |
| CVE-2026-106248 | Analyzed | 未確認 | CWE-416 | Use after free in Bindings in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-106249 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromi |
| CVE-2026-106250 | Modified | 未確認 | CWE-862 | Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HT |
| CVE-2026-106251 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted networ |
| CVE-2026-106252 | Analyzed | 未確認 | CWE-697 | Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-106253 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. (Chromium securi |
| CVE-2026-106254 | Analyzed | 未確認 | CWE-200 | Information leak in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via a co-installed app. (Chromium security |
| CVE-2026-106255 | Analyzed | 未確認 | CWE-362 | Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-106256 | Analyzed | 未確認 | CWE-200 | Information leak in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a cr |
| CVE-2026-106257 | Analyzed | 未確認 | CWE-416 | Use after free in HTML in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-106258 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-106259 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromi |
| CVE-2026-106260 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML pag |
| CVE-2026-106261 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-106262 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to sp |
| CVE-2026-106263 | Analyzed | 未確認 | CWE-20 | Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a craft |
| CVE-2026-106264 | Analyzed | 未確認 | CWE-862 | Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML pag |
| CVE-2026-106265 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium |
| CVE-2026-106266 | Analyzed | 未確認 | CWE-441 | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy into a pr |
| CVE-2026-106267 | Analyzed | 未確認 | CWE-862 | Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted H |
| CVE-2026-106268 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-106269 | Analyzed | 未確認 | CWE-416 | Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-106270 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severit |
| CVE-2026-106271 | Analyzed | 未確認 | CWE-862 | Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted P |
| CVE-2026-106272 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements vi |
| CVE-2026-106273 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a |
| CVE-2026-106274 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information |
| CVE-2026-106275 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-106276 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chro |
| CVE-2026-106277 | Analyzed | 未確認 | CWE-200 | Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medi |
| CVE-2026-106278 | Analyzed | 未確認 | CWE-416 | Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted |
| CVE-2026-106279 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execu |
| CVE-2026-106280 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chr |
| CVE-2026-106281 | Analyzed | 未確認 | CWE-416 | Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-106282 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106283 | Analyzed | 未確認 | CWE-416 | Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox |
| CVE-2026-106284 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social enginee |
| CVE-2026-106285 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a cr |
| CVE-2026-106286 | Analyzed | 未確認 | CWE-441 | Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: M |
| CVE-2026-106287 | Analyzed | 未確認 | CWE-221 | Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low |
| CVE-2026-106288 | Analyzed | 未確認 | CWE-862 | Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted |
| CVE-2026-106289 | Analyzed | 未確認 | CWE-862 | Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: M |
| CVE-2026-106290 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sa |
| CVE-2026-106291 | Analyzed | 未確認 | CWE-416 | Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-106292 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside th |
| CVE-2026-106293 | Analyzed | 未確認 | CWE-843 | Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the |
| CVE-2026-106294 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. (Chro |
| CVE-2026-106295 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Unbounded Element in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a c |
| CVE-2026-106296 | Analyzed | 未確認 | CWE-269 | Improper privilege management in UI in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions v |
| CVE-2026-106297 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Scheduling in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security seve |
| CVE-2026-106298 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HT |
| CVE-2026-106299 | Analyzed | 未確認 | CWE-20 | Improper input validation in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restriction |
| CVE-2026-106300 | Analyzed | 未確認 | CWE-367 | Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a c |
| CVE-2026-106301 | Analyzed | 未確認 | CWE-441 | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions |
| CVE-2026-106302 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML pa |
| CVE-2026-106303 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to |
| CVE-2026-106304 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severit |
| CVE-2026-106305 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security seve |
| CVE-2026-106306 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions via a crafted HTML page. (Chromium securit |
| CVE-2026-106307 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions v |
| CVE-2026-106308 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive informa |
| CVE-2026-106309 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium |
| CVE-2026-10631 | Awaiting Analysis | 未確認 | CWE-639 | An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.1.19 allows an authenticated user with EWS enabled to read complete mailbox item |
| CVE-2026-106310 | Analyzed | 未確認 | CWE-672 | Use of released resource in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a |
| CVE-2026-106311 | Analyzed | 未確認 | CWE-1021 | Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chr |
| CVE-2026-106312 | Analyzed | 未確認 | CWE-862 | Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome |
| CVE-2026-106313 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Browser in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via |
| CVE-2026-106314 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security s |
| CVE-2026-106315 | Analyzed | 未確認 | CWE-416 | Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-106316 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted networ |
| CVE-2026-106317 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security |
| CVE-2026-106318 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-10632 | Awaiting Analysis | 未確認 | CWE-79 | A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an attacker to inject JavaScript through the packages parameter |
| CVE-2026-106320 | Analyzed | 未確認 | CWE-672 | Use of released resource in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML pa |
| CVE-2026-106321 | Analyzed | 未確認 | CWE-200 | Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. ( |
| CVE-2026-106322 | Analyzed | 未確認 | CWE-601 | Open redirect in AppManifest in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (C |
| CVE-2026-106323 | Analyzed | 未確認 | CWE-862 | Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary c |
| CVE-2026-106324 | Modified | 未確認 | CWE-863 | Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML pa |
| CVE-2026-106325 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML |
| CVE-2026-106326 | Modified | 未確認 | CWE-441 | Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged page via a co-installed |
| CVE-2026-106327 | Modified | 未確認 | CWE-863 | Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via |
| CVE-2026-106328 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in PDF in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to obtain sensitive information via a co |
| CVE-2026-106329 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside |
| CVE-2026-106330 | Analyzed | 未確認 | CWE-200 | Information leak in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: Medi |
| CVE-2026-106331 | Analyzed | 未確認 | CWE-20 | Improper input validation in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privilege |
| CVE-2026-106332 | Analyzed | 未確認 | CWE-190 | Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: |
| CVE-2026-106333 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chro |
| CVE-2026-106334 | Analyzed | 未確認 | CWE-200 | Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page |
| CVE-2026-106335 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106336 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Me |
| CVE-2026-106337 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity |
| CVE-2026-106338 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium sec |
| CVE-2026-106339 | Analyzed | 未確認 | CWE-672 | Use of released resource in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data |
| CVE-2026-106340 | Analyzed | 未確認 | CWE-862 | Missing authorization in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to obtain sensitive information via physical access. (Chr |
| CVE-2026-106341 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-106342 | Analyzed | 未確認 | CWE-200 | Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: |
| CVE-2026-106343 | Analyzed | 未確認 | CWE-754 | Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium sec |
| CVE-2026-106344 | Analyzed | 未確認 | CWE-862 | Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to |
| CVE-2026-106345 | Analyzed | 未確認 | CWE-672 | Use of released resource in Session in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HT |
| CVE-2026-106346 | Analyzed | 未確認 | CWE-754 | Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-106347 | Analyzed | 未確認 | CWE-416 | Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106348 | Analyzed | 未確認 | CWE-200 | Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: |
| CVE-2026-106349 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-106350 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security sev |
| CVE-2026-106351 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive info |
| CVE-2026-106352 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted |
| CVE-2026-106353 | Analyzed | 未確認 | CWE-20 | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a co-i |
| CVE-2026-106354 | Analyzed | 未確認 | CWE-668 | Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security s |
| CVE-2026-106355 | Analyzed | 未確認 | CWE-862 | Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive informat |
| CVE-2026-106356 | Analyzed | 未確認 | CWE-1021 | Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security |
| CVE-2026-106357 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-106358 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-106359 | Analyzed | 未確認 | CWE-441 | Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium se |
| CVE-2026-106360 | Analyzed | 未確認 | CWE-200 | Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Med |
| CVE-2026-106361 | Analyzed | 未確認 | CWE-684 | Incorrect provision of specified functionality in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web ori |
| CVE-2026-106362 | Analyzed | 未確認 | CWE-862 | Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome e |
| CVE-2026-106363 | Analyzed | 未確認 | CWE-862 | Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to b |
| CVE-2026-106364 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a |
| CVE-2026-106365 | Analyzed | 未確認 | CWE-862 | Missing authorization in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-106366 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secu |
| CVE-2026-106367 | Analyzed | 未確認 | CWE-862 | Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code o |
| CVE-2026-106368 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity |
| CVE-2026-106369 | Analyzed | 未確認 | CWE-862 | Missing authorization in Translate in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted |
| CVE-2026-106370 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sa |
| CVE-2026-106371 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Transactions Platform in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML |
| CVE-2026-106372 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. ( |
| CVE-2026-106373 | Analyzed | 未確認 | CWE-416 | Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-106374 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-106375 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Dawn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-106376 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-106377 | Analyzed | 未確認 | CWE-362 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via |
| CVE-2026-106378 | Analyzed | 未確認 | CWE-250 | Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outsid |
| CVE-2026-106379 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: H |
| CVE-2026-106380 | Analyzed | 未確認 | CWE-451 | UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium s |
| CVE-2026-106381 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium secu |
| CVE-2026-106382 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-106383 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106384 | Analyzed | 未確認 | CWE-862 | Missing authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a cra |
| CVE-2026-106385 | Analyzed | 未確認 | CWE-362 | Race condition in Chromoting in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially bypass system access restrictions via cr |
| CVE-2026-106386 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106387 | Analyzed | 未確認 | CWE-862 | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a craf |
| CVE-2026-106388 | Analyzed | 未確認 | CWE-862 | Missing authorization in DataTransfer in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via |
| CVE-2026-106389 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Ch |
| CVE-2026-106390 | Analyzed | 未確認 | CWE-684 | Incorrect provision of specified functionality in SanitizerAPI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML pa |
| CVE-2026-106391 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements vi |
| CVE-2026-106392 | Analyzed | 未確認 | CWE-200 | Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security sev |
| CVE-2026-106393 | Analyzed | 未確認 | CWE-416 | Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox v |
| CVE-2026-106394 | Analyzed | 未確認 | CWE-459 | Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chrom |
| CVE-2026-106395 | Analyzed | 未確認 | CWE-908 | Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-106396 | Analyzed | 未確認 | CWE-20 | Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a |
| CVE-2026-106397 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via |
| CVE-2026-106398 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: M |
| CVE-2026-106399 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. (Chromium s |
| CVE-2026-106400 | Analyzed | 未確認 | CWE-1021 | Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. |
| CVE-2026-106401 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-106402 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome exte |
| CVE-2026-106403 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a c |
| CVE-2026-106404 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restriction |
| CVE-2026-106405 | Analyzed | 未確認 | CWE-367 | Race condition in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass web origin policy via a co-installed app. (Chromium security s |
| CVE-2026-106406 | Analyzed | 未確認 | CWE-862 | Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML pa |
| CVE-2026-106407 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restricti |
| CVE-2026-106408 | Analyzed | 未確認 | CWE-693 | Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium se |
| CVE-2026-106409 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arb |
| CVE-2026-106410 | Analyzed | 未確認 | CWE-862 | Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted H |
| CVE-2026-106411 | Analyzed | 未確認 | CWE-416 | Use after free in Parser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-106412 | Analyzed | 未確認 | CWE-367 | Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to pote |
| CVE-2026-106413 | Analyzed | 未確認 | CWE-367 | Race condition in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. ( |
| CVE-2026-106414 | Analyzed | 未確認 | CWE-20 | Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code |
| CVE-2026-106415 | Analyzed | 未確認 | CWE-200 | Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severity: |
| CVE-2026-106416 | Analyzed | 未確認 | CWE-94 | Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (C |
| CVE-2026-106417 | Analyzed | 未確認 | CWE-190 | Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-106418 | Analyzed | 未確認 | CWE-862 | Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network tra |
| CVE-2026-106419 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-106420 | Analyzed | 未確認 | CWE-682 | Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome |
| CVE-2026-106421 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-106422 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in API in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: L |
| CVE-2026-106423 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-106424 | Analyzed | 未確認 | CWE-200 | Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafte |
| CVE-2026-106425 | Analyzed | 未確認 | CWE-862 | Missing authorization in BrowserTag in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to b |
| CVE-2026-106426 | Analyzed | 未確認 | CWE-362 | Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-106427 | Analyzed | 未確認 | CWE-441 | Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML |
| CVE-2026-106428 | Undergoing Analysis | 未確認 | CWE-125 | An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message |
| CVE-2026-106429 | Undergoing Analysis | 未確認 | CWE-191 | An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocation failure that terminates the application process. This can occur when an auth |
| CVE-2026-106430 | Undergoing Analysis | 未確認 | CWE-436 | The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection names accepted by the collection API. This can cause the driver and the calling a |
| CVE-2026-106431 | Undergoing Analysis | 未確認 | CWE-787 | An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte immediately past a heap allocation when a document ends at a specific buffer bo |
| CVE-2026-106432 | Analyzed | 未確認 | CWE-681 | The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without validation. When an affected application encodes a string near 4 GiB, the allocation s |
| CVE-2026-106433 | Undergoing Analysis | 未確認 | CWE-843 | Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as an incompatible type when cleaning up a key document containing duplicate maste |
| CVE-2026-106434 | Undergoing Analysis | 未確認 | CWE-354 | The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchanged instead of returning a decryption error. An actor who can modify s |
| CVE-2026-106435 | Analyzed | 未確認 | CWE-125 | The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes malformed BSON containing a truncated regular-expression element without a trai |
| CVE-2026-106436 | Analyzed | 未確認 | CWE-252 | The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceeds libbson's size limit. This can leave the encoder in an invalid state. An unaut |
| CVE-2026-106437 | Undergoing Analysis | 未確認 | CWE-191 | The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned le |
| CVE-2026-106438 | Undergoing Analysis | 未確認 | CWE-682 | An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain over-precision inputs containing leading zeros instead of rejecting them. This prod |
| CVE-2026-106439 | Awaiting Analysis | 未確認 | CWE-470, CWE-693 | Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target blocklists and related execution |
| CVE-2026-106440 | Awaiting Analysis | 未確認 | CWE-470 | Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dot |
| CVE-2026-106441 | Awaiting Analysis | 未確認 | CWE-94 | Hydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to logging.config.dictConfig() without |
| CVE-2026-106442 | Awaiting Analysis | 未確認 | CWE-184 | Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist introduced for CVE-2026-68508 incompl |
| CVE-2026-106443 | Deferred | 未確認 | CWE-20 | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py passes fetched image bytes from HTML img URLs, CSS image valu |
| CVE-2026-106444 | Awaiting Analysis | 未確認 | CWE-116 | Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.precompile() uses quotedString() in lib/handlebars/compiler/code- |
| CVE-2026-106445 | Awaiting Analysis | 未確認 | CWE-1289, CWE-184 | Handlebars provides the power necessary to let users build semantic templates. From 3.0.0 until 4.7.10, Handlebars lookupProperty returns Function.prototype.constructor before appl |
| CVE-2026-106446 | Awaiting Analysis | 未確認 | CWE-843, CWE-94 | Handlebars provides the power necessary to let users build semantic templates. From 4.0.0 until 4.7.10, Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objec |
| CVE-2026-106447 | Awaiting Analysis | 未確認 | CWE-674 | StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through |
| CVE-2026-106448 | Awaiting Analysis | 未確認 | CWE-1321 | StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map decoding path creates ordinary JavaScript objects and assigns a |
| CVE-2026-106449 | Awaiting Analysis | 未確認 | CWE-674 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false handles each well-formed empty |
| CVE-2026-106450 | Awaiting Analysis | 未確認 | CWE-770 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() allocates two new 4 MiB block buffers whenever a maximum-block- |
| CVE-2026-106451 | Awaiting Analysis | 未確認 | CWE-367, CWE-377 | yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file but d |
| CVE-2026-106452 | Awaiting Analysis | 未確認 | CWE-789 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen field in a legacy LZ4Block header |
| CVE-2026-106453 | Awaiting Analysis | 未確認 | CWE-789 | yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decompressed-length header before va |
| CVE-2026-106454 | Awaiting Analysis | 未確認 | CWE-1333 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. In 25.5.0 and earlier, wildcardToRegexp() in twisted/mail/imap4.py translates the IMAP asteri |
| CVE-2026-106455 | Analyzed | 未確認 | CWE-918 | Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is affected by improper validation |
| CVE-2026-106456 | Undergoing Analysis | 未確認 | CWE-863 | Backstage is an open framework for building developer portals. From 0.5.0 until 0.6.18, the @backstage/plugin-proxy-backend package is affected by inconsistent credential enforceme |
| CVE-2026-106457 | Undergoing Analysis | 未確認 | CWE-287 | Backstage is an open framework for building developer portals. From 0.1.0 until 0.5.0, the @backstage/plugin-auth-backend-module-cloudflare-access-provider package is affected by i |
| CVE-2026-106458 | Undergoing Analysis | 未確認 | CWE-863 | Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsi |
| CVE-2026-106459 | Analyzed | 未確認 | CWE-200, CWE-918 | Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affected by improper input |
| CVE-2026-106460 | Undergoing Analysis | 未確認 | CWE-287 | Backstage is an open framework for building developer portals. From 0.3.0 until 0.6.15 and 0.7.5, the @backstage/plugin-auth-node package did not consistently honor explicit negati |
| CVE-2026-106461 | Analyzed | 未確認 | CWE-863 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by incorrect authorization in scaffolder |
| CVE-2026-106462 | Analyzed | 未確認 | CWE-441, CWE-863 | Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credential boundaries. An au |
| CVE-2026-106463 | Analyzed | 未確認 | CWE-863 | Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in |
| CVE-2026-106464 | Awaiting Analysis | 未確認 | CWE-125, CWE-191 | `_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is non-zero. A certificate whose sig |
| CVE-2026-106465 | Awaiting Analysis | 未確認 | CWE-290, CWE-406 | The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's |
| CVE-2026-106469 | Deferred | 未確認 | CWE-79 | The Gutenverse Form WordPress plugin before 3.0.11 does not sanitize SVG icon markup stored in its form blocks before it is decoded and inserted into the page in the browser, allo |
| CVE-2026-106470 | Deferred | 未確認 | CWE-918 | The WP Data Access WordPress plugin before 5.5.88 does not have authorisation and CSRF checks in one of its actions, allowing any authenticated user, such as a subscriber, to make |
| CVE-2026-106471 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring |
| CVE-2026-106485 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-106486 | Analyzed | 未確認 | CWE-22, CWE-59 | Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffo |
| CVE-2026-106487 | Analyzed | 未確認 | CWE-441 | Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backend package is affected by unsupported catalog cluster authent |
| CVE-2026-106488 | Analyzed | 未確認 | CWE-287 | Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authenticati |
| CVE-2026-106489 | Analyzed | 未確認 | CWE-22, CWE-862 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for |
| CVE-2026-106490 | Analyzed | 未確認 | CWE-22, CWE-23 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdocs s |
| CVE-2026-106491 | Analyzed | 未確認 | CWE-20, CWE-22 | Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backen |
| CVE-2026-106492 | Analyzed | 未確認 | CWE-269, CWE-863 | Backstage is an open framework for building developer portals. Prior to 0.16.1 and 0.17.8, the @backstage/backend-defaults package is affected by improper preservation of access re |
| CVE-2026-106493 | Analyzed | 未確認 | CWE-22 | Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to crea |
| CVE-2026-106494 | Analyzed | 未確認 | CWE-22, CWE-73 | Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validation in cloud storage ur |
| CVE-2026-106495 | Awaiting Analysis | 未確認 | CWE-284 | Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper access control in backend action inv |
| CVE-2026-106496 | Analyzed | 未確認 | CWE-22, CWE-863 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent enforcement of allowed loca |
| CVE-2026-106497 | Analyzed | 未確認 | CWE-178, CWE-863 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent catalog property permission |
| CVE-2026-106498 | Analyzed | 未確認 | CWE-863, CWE-918 | Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend package is affected by improper |
| CVE-2026-106499 | Analyzed | 未確認 | CWE-532 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose secret-derived values in Scaffolder tas |
| CVE-2026-106500 | Analyzed | 未確認 | CWE-362, CWE-59 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper task |
| CVE-2026-106501 | Analyzed | 未確認 | CWE-200, CWE-201 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive inf |
| CVE-2026-106502 | Analyzed | 未確認 | CWE-532 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package could expose sensitive information in Scaffolder tas |
| CVE-2026-106503 | Analyzed | 未確認 | CWE-178, CWE-284 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder ac |
| CVE-2026-106504 | Analyzed | 未確認 | CWE-532 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by sensitive information exposure in sca |
| CVE-2026-106505 | Analyzed | 未確認 | CWE-426, CWE-436 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration |
| CVE-2026-106506 | Analyzed | 未確認 | CWE-202, CWE-203 | Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by improper input validation in scaffold |
| CVE-2026-106507 | Analyzed | 未確認 | CWE-59, CWE-61 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs s |
| CVE-2026-106508 | Analyzed | 未確認 | CWE-22, CWE-59 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file exposure through local tec |
| CVE-2026-106509 | Analyzed | 未確認 | CWE-1336, CWE-94 | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme confi |
| CVE-2026-106510 | Analyzed | 未確認 | CWE-183, CWE-470 | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by remote code execution via crafted markdow |
| CVE-2026-106511 | Deferred | 未確認 | CWE-306, CWE-862, CWE-863 | MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig smart contract system contains a vulnerability where a miss |
| CVE-2026-106512 | Deferred | 未確認 | CWE-113, CWE-20, CWE-79 | The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by directly interpolating a caller-supplied filename into a quoted- |
| CVE-2026-106513 | Deferred | 未確認 | CWE-284, CWE-749 | MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the ZeroMQ plugin, and the SimpleBackgroundJobs plugin—through its |
| CVE-2026-106547 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow in H5VM_array_fill() in src/H5VM.c in HDF5 before 2.2.0 lets a remote attacker cause an application crash and possibly execute arbitrary code with a cr |
| CVE-2026-106549 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-106550 | Deferred | 未確認 | CWE-1321, CWE-400, CWE-915 | Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by incomplete prototype‑pollution protections in config.set(). An attacke |
| CVE-2026-106552 | Analyzed | 未確認 | CWE-23 | In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation. |
| CVE-2026-106553 | Analyzed | 未確認 | CWE-669 | In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. |
| CVE-2026-106555 | Analyzed | 未確認 | CWE-669 | In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. |
| CVE-2026-106556 | Analyzed | 未確認 | CWE-184, CWE-78 | Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by configuration bypass in techdocs mkdocs.y |
| CVE-2026-106557 | Awaiting Analysis | 未確認 | CWE-22, CWE-918 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently validate TechDocs Markdo |
| CVE-2026-106558 | Analyzed | 未確認 | CWE-502 | Backstage is an open framework for building developer portals. Prior to 1.14.8, 1.15.6, and 2.0.1, the @backstage/plugin-techdocs-node package improperly validated mapping-style ma |
| CVE-2026-106559 | Analyzed | 未確認 | CWE-22, CWE-73 | Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improp |
| CVE-2026-106560 | Analyzed | 未確認 | CWE-22 | Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improp |
| CVE-2026-106561 | Analyzed | 未確認 | CWE-200, CWE-863 | Backstage is an open framework for building developer portals. Prior to 0.21.9, the @backstage/plugin-kubernetes-backend package is affected by sensitive information disclosure in |
| CVE-2026-106562 | Analyzed | 未確認 | CWE-754, CWE-863 | Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-backend and 1.8.7 in @backstage/plugin-search-backend-module-elasticsearch |
| CVE-2026-106563 | Analyzed | 未確認 | CWE-20, CWE-862 | Backstage is an open framework for building developer portals. Prior to 0.21.8, the @backstage/plugin-kubernetes-backend package is affected by improper entity validation in deprec |
| CVE-2026-106564 | Analyzed | 未確認 | CWE-122, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, a crafted EXR image can cause the EXR decoder to write beyond a he |
| CVE-2026-106565 | Analyzed | 未確認 | CWE-400, CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a missing end-of-file check while reading bzip2-comp |
| CVE-2026-106566 | Analyzed | 未確認 | CWE-59, CWE-61 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, delegate symlink cleanup does not check the MAGICK_SHRED_PASSES en |
| CVE-2026-106567 | Analyzed | 未確認 | CWE-196, CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted PSD file can trigger an integer-conversion |
| CVE-2026-106568 | Analyzed | 未確認 | CWE-835 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32 and 6.9.13-57, a crafted XMP profile embedded in an image can cause |
| CVE-2026-106569 | Analyzed | 未確認 | CWE-770, CWE-789 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, missing validation and resource checks in the ASE decoder allow a |
| CVE-2026-106570 | Analyzed | 未確認 | CWE-400 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-32, an unauthenticated adjacent-network client can repeatedly connect |
| CVE-2026-106571 | Analyzed | 未確認 | CWE-190, CWE-787 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the GetVirtualPixels API can |
| CVE-2026-106572 | Analyzed | 未確認 | CWE-674 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder |
| CVE-2026-106573 | Analyzed | 未確認 | CWE-400, CWE-770 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing limit check in the MVG decoder allows a cr |
| CVE-2026-106574 | Analyzed | 未確認 | CWE-122, CWE-125, CWE-131, CWE-190 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel cache server can send |
| CVE-2026-106575 | Analyzed | 未確認 | CWE-775 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted Magick script can cause an opened file pointer to remain |
| CVE-2026-106576 | Analyzed | 未確認 | CWE-400, CWE-834 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a crafted XMP profile can trigger excessive work while the parser |
| CVE-2026-106577 | Analyzed | 未確認 | CWE-94 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, unescaped or untrimmed values can inject code into o |
| CVE-2026-106578 | Analyzed | 未確認 | CWE-590 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can cause an invalid memory free in |
| CVE-2026-106579 | Analyzed | 未確認 | CWE-551 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a crafted image can bypass an ImageMagick security p |
| CVE-2026-106580 | Analyzed | 未確認 | CWE-284, CWE-400 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder a |
| CVE-2026-106581 | Awaiting Analysis | 未確認 | CWE-347 | Before 4.92.0, Docker Desktop for Windows did not verify the signature of a package supplied to Docker Desktop Installer.exe install -package. An attacker able to provide a crafted |
| CVE-2026-106582 | Analyzed | 未確認 | CWE-514 | In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings. |
| CVE-2026-106583 | Analyzed | 未確認 | CWE-99 | In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. |
| CVE-2026-106584 | Analyzed | 未確認 | CWE-193 | In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users |
| CVE-2026-106585 | Analyzed | 未確認 | CWE-409 | In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data. |
| CVE-2026-106586 | Analyzed | 未確認 | CWE-670 | In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73 |
| CVE-2026-106587 | Analyzed | 未確認 | CWE-843 | In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. |
| CVE-2026-106588 | Awaiting Analysis | 未確認 | CWE-653 | In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is potentially unexpected. |
| CVE-2026-106589 | Awaiting Analysis | 未確認 | CWE-272 | In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts |
| CVE-2026-106596 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Visual Composer Visual Composer Website Builder visualcomposer allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-106597 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Use |
| CVE-2026-106598 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Retrieve Embedded Sensitive Data.This issue affects User Registration: from n/a through |
| CVE-2026-106599 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Brainstorm Force SureCart surecart allows Object Injection.This issue affects SureCart: from n/a through 4.9.3. |
| CVE-2026-106600 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Liquid Web / StellarWP GiveWP give allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GiveWP: from n/ |
| CVE-2026-106601 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a thro |
| CVE-2026-106602 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Automattic Jetpack jetpack allows Password Recovery Exploitation.This issue affects Jetpack: from n/a thro |
| CVE-2026-106603 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Groundhogg HollerBox holler-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2026-106604 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Stored XSS.This |
| CVE-2026-106605 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-cal |
| CVE-2026-106606 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in YITH YITH WooCommerce Affiliates yith-woocommerce-affiliates allows Object Injection.This issue affects YITH WooCommerce Affiliat |
| CVE-2026-106608 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Automattic WooCommerce woocommerce allows Privilege Escalation.This issue affects WooCommerce: from 9.8.0 through 11.1.2. |
| CVE-2026-106609 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Web Impian Bayarcash WooCommerce bayarcash-wc allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Baya |
| CVE-2026-106610 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp ver |
| CVE-2026-106611 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in WPMU DEV Forminator forminator allows Cross Site Request Forgery.This issue affects Forminator: from n/a through 1.57.3. |
| CVE-2026-106612 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-106613 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker cou |
| CVE-2026-106614 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-106615 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-106616 | Analyzed | 未確認 | CWE-611 | ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead to arbitrary file system read. An attacker could exploit th |
| CVE-2026-106617 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-106618 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could |
| CVE-2026-106619 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit thi |
| CVE-2026-106620 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to by |
| CVE-2026-106621 | Analyzed | 未確認 | CWE-94 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-106622 | Analyzed | 未確認 | CWE-918 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction |
| CVE-2026-106623 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sens |
| CVE-2026-106624 | Analyzed | 未確認 | CWE-94 | ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execution in the context of the current use |
| CVE-2026-106625 | Awaiting Analysis | 未確認 | CWE-787 | Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re |
| CVE-2026-106626 | Undergoing Analysis | 未確認 | CWE-20 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker wit |
| CVE-2026-106627 | Analyzed | 未確認 | CWE-400 | CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerabi |
| CVE-2026-106628 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-106629 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form field |
| CVE-2026-106630 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form field |
| CVE-2026-106631 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-106632 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-106633 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-106634 | Undergoing Analysis | 未確認 | CWE-22 | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system w |
| CVE-2026-106646 | Deferred | 未確認 | CWE-862 | The Classified Listing WordPress plugin before 6.1.1 does not verify that the requester owns or can edit the target listing when a gallery request references an unattached media i |
| CVE-2026-106700 | Deferred | 未確認 | CWE-862 | ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.UserController |
| CVE-2026-106701 | Deferred | 未確認 | CWE-79 | ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue. |
| CVE-2026-106705 | Deferred | 未確認 | CWE-284 | ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu (RoleController.updateRoleMenu) aut |
| CVE-2026-106706 | Deferred | 未確認 | CWE-79 | XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor. JobCodeController.save() stores the user-supplied glueSource parameter wi |
| CVE-2026-106707 | Deferred | 未確認 | CWE-79 | XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog). An authenticated user who holds permission on a target execu |
| CVE-2026-106708 | Deferred | 未確認 | CWE-352 | XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController). The endpoints /user/insert, /us |
| CVE-2026-106763 | Deferred | 未確認 | An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions. | |
| CVE-2026-106764 | Deferred | 未確認 | An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function. | |
| CVE-2026-106765 | Deferred | 未確認 | An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function. | |
| CVE-2026-106931 | Analyzed | 掲載 | CWE-78 | SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system r |
| CVE-2026-106932 | Deferred | 未確認 | CWE-862 | The Moloni WordPress plugin before 5.0.14 does not perform capability or nonce checks on several of its authenticated AJAX actions, relying only on whether the site holds a stored |
| CVE-2026-106933 | Deferred | 未確認 | CWE-79 | The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowin |
| CVE-2026-107079 | Awaiting Analysis | 未確認 | An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcode_auth.html component | |
| CVE-2026-107081 | Deferred | 未確認 | CWE-89 | SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, admin/AJAX_ |
| CVE-2026-107082 | Deferred | 未確認 | CWE-89 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted GET parameters of admin/modules |
| CVE-2026-107083 | Deferred | 未確認 | CWE-89 | SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dl_detail.php via the parameter fileID. |
| CVE-2026-107084 | Deferred | 未確認 | Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows cross-site request forgery (CSRF) against admin/modules/circulation/loan_history_maintenance.php because the action | |
| CVE-2026-107102 | Deferred | 未確認 | CWE-345 | This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated rem |
| CVE-2026-107103 | Deferred | 未確認 | CWE-89 | This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could |
| CVE-2026-107104 | Deferred | 未確認 | CWE-502 | This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit th |
| CVE-2026-107120 | Deferred | 未確認 | CWE-287 | The Contest Gallery WordPress plugin before 33.0.1 does not limit the number of attempts against its front-end registration email-verification step, which relies on a short numeri |
| CVE-2026-107121 | Awaiting Analysis | 未確認 | CWE-319 | A flaw was found in the SMTP email configuration handling of the keycloak-services component. When the STARTTLS option is enabled, Keycloak fails to strictly enforce an encrypted c |
| CVE-2026-107125 | Awaiting Analysis | 未確認 | CWE-119, CWE-122 | A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based |
| CVE-2026-107126 | Deferred | 未確認 | CWE-79 | The WP Booking System WordPress plugin before 2.1.0.1 does not sanitise and escape a client-controllable request value before storing it and later outputting it in an administrati |
| CVE-2026-107127 | Deferred | 未確認 | CWE-352 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not validate the origin of a password-reset request, allowing an unauthenticated attacker to set the password o |
| CVE-2026-107128 | Deferred | 未確認 | CWE-863 | The Uncanny Toolkit for LearnDash WordPress plugin before 3.8.2 does not verify that the acting user is permitted to manage the targeted accounts before changing their verification |
| CVE-2026-107151 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication has been found in remote-execution task updates in the smart_proxy_dynflow package. The progress and completion callbacks accept a report when the one-time t |
| CVE-2026-107153 | Deferred | 未確認 | CWE-1391 | Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the affected device, a cra |
| CVE-2026-107158 | Deferred | 未確認 | CWE-862 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or validation on one of its REST routes that writes to the database, allowing unauth |
| CVE-2026-107159 | Awaiting Analysis | 未確認 | CWE-369 | MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData() that allows unauthenticated local network attackers to crash the daemon. A |
| CVE-2026-107160 | Deferred | 未確認 | CWE-345 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allowing unauthe |
| CVE-2026-107161 | Awaiting Analysis | 未確認 | CWE-122 | A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response |
| CVE-2026-107162 | Awaiting Analysis | 未確認 | CWE-287 | Express Gateway through 1.16.11 contains an authentication bypass vulnerability in the OAuth 2.0 refresh_token grant that fails to validate the token secret or issuing client. Atta |
| CVE-2026-107166 | Deferred | 未確認 | CWE-400, CWE-770 | A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pfcp_xact_local_create of the file src/upf/gtp-path.c of the component GTP-U Rece |
| CVE-2026-107167 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific condit |
| CVE-2026-107168 | Awaiting Analysis | 未確認 | CWE-835 | A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an attacker can cause the text parsing function to enter an infinite loop. |
| CVE-2026-107169 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text processing. This iss |
| CVE-2026-107170 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditions, such as system re |
| CVE-2026-107171 | Deferred | 未確認 | CWE-321 | An Hardcoded Cryptographic Key vulnerability existed in Trellix Agent 5.8.4 via mfecryptc.dll leads to Database Decryption by Regular Users. |
| CVE-2026-107172 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107174 | Awaiting Analysis | 未確認 | CWE-61 | A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who suppli |
| CVE-2026-107175 | Deferred | 未確認 | CWE-284, CWE-665 | MISP contains a defect in its event save workflow that prevents the correlation engine from recalculating correlations when an event's distribution level or sharing group is modifi |
| CVE-2026-107176 | Awaiting Analysis | 未確認 | CWE-250 | A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Secret resour |
| CVE-2026-107177 | Awaiting Analysis | 未確認 | CWE-1394 | Express Gateway through 1.16.11 contains a hardcoded cryptographic key vulnerability that allows attackers with datastore access to decrypt stored OAuth 2.0 token secrets via the d |
| CVE-2026-107178 | Deferred | 未確認 | CWE-79 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.6.16 does not escape gallery lightbox configuration values before printing them into an inline script on every pa |
| CVE-2026-107180 | Deferred | 未確認 | CWE-287, CWE-306 | On MISP instances configured to require TOTP enrolment (Security.otp_required), the enforcement of the mandatory two-factor authentication setup applied only to standard browser re |
| CVE-2026-107181 | Awaiting Analysis | 未確認 | CWE-143 | Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links |
| CVE-2026-107183 | Awaiting Analysis | 未確認 | CWE-416 | llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allows unauthenticated remote attackers to corrupt heap memory v |
| CVE-2026-107186 | Deferred | 未確認 | CWE-287 | An unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow rule. This allows for workflow rule |
| CVE-2026-107187 | Deferred | 未確認 | CWE-200 | A user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication bypass vulnerability can be chai |
| CVE-2026-107188 | Deferred | 未確認 | CWE-434 | A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to th |
| CVE-2026-107193 | Awaiting Analysis | 未確認 | CWE-639 | A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search limit on the caller's permission. |
| CVE-2026-107194 | Awaiting Analysis | 未確認 | CWE-288 | Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentially leading to "local blackouts on the whol |
| CVE-2026-107202 | Deferred | 未確認 | CWE-77 | A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API due to improper validation of the listen configuration field. When an authentica |
| CVE-2026-107203 | Awaiting Analysis | 未確認 | CWE-863 | An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet interface API checks only that the caller hol |
| CVE-2026-107204 | Deferred | 未確認 | CWE-306 | LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endp |
| CVE-2026-107205 | Deferred | 未確認 | CWE-306 | LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control |
| CVE-2026-107206 | Deferred | 未確認 | CWE-306 | LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoin |
| CVE-2026-107207 | Deferred | 未確認 | CWE-306 | LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by |
| CVE-2026-107208 | Analyzed | 未確認 | CWE-400, CWE-674 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted XMP profile can reach a recursion limit th |
| CVE-2026-107209 | Analyzed | 未確認 | CWE-415, CWE-416 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, when ImageMagick is built without Cairo support, a c |
| CVE-2026-107210 | Analyzed | 未確認 | CWE-409 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a crafted highly compressed MAT image can make the M |
| CVE-2026-107211 | Analyzed | 未確認 | CWE-129 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to index the pivo |
| CVE-2026-107212 | Analyzed | 未確認 | CWE-770 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows without a |
| CVE-2026-107213 | Analyzed | 未確認 | CWE-476 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without check |
| CVE-2026-107214 | Analyzed | 未確認 | CWE-248 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and parameter |
| CVE-2026-107215 | Analyzed | 未確認 | CWE-789 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlle |
| CVE-2026-107216 | Analyzed | 未確認 | CWE-674 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, cre |
| CVE-2026-107217 | Analyzed | 未確認 | CWE-129, CWE-190 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2 and from 1.1.0 to 1.4.1 in github.com/xu |
| CVE-2026-107218 | Analyzed | 未確認 | CWE-129 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit counts but |
| CVE-2026-107219 | Analyzed | 未確認 | CWE-400 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount and performs |
| CVE-2026-107220 | Analyzed | 未確認 | CWE-125, CWE-129 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an empty mergeC |
| CVE-2026-107221 | Analyzed | 未確認 | CWE-787 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in XML documen |
| CVE-2026-107222 | Analyzed | 未確認 | CWE-129, CWE-476 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices or derefer |
| CVE-2026-107223 | Analyzed | 未確認 | CWE-789 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validating Min and |
| CVE-2026-107224 | Analyzed | 未確認 | CWE-190, CWE-681 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted from uint |
| CVE-2026-107225 | Analyzed | 未確認 | CWE-129, CWE-20 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates check only upp |
| CVE-2026-107226 | Awaiting Analysis | 未確認 | CWE-384, CWE-693 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the default ThreadSaf |
| CVE-2026-107227 | Awaiting Analysis | 未確認 | CWE-400, CWE-409 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.2.0 until 3.0.14, WebSocket permessage- |
| CVE-2026-107228 | Awaiting Analysis | 未確認 | CWE-287 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 3.0.14, the enabled-by-defaul |
| CVE-2026-107229 | Awaiting Analysis | 未確認 | CWE-1275, CWE-384 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStor |
| CVE-2026-107230 | Awaiting Analysis | 未確認 | CWE-346, CWE-863 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 3.0.14, connection-pool parti |
| CVE-2026-107231 | Awaiting Analysis | 未確認 | CWE-319, CWE-522, CWE-757 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, Realm.Builder trea |
| CVE-2026-107232 | Awaiting Analysis | 未確認 | CWE-319, CWE-441, CWE-522 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x and 2.16.1 on 2.x, the |
| CVE-2026-107237 | Deferred | 未確認 | CWE-862 | The Backup and Staging by WP Time Capsule WordPress plugin before 1.22.28 does not perform capability or nonce checks on the handler that deploys a staging site to the live site, a |
| CVE-2026-107248 | Deferred | 未確認 | CWE-1336, CWE-94 | Thelia 3.0.0's back-office Email/Messages feature contains a server‑side template injection (SSTI) flaw that allows any authenticated user with the “Messages” permission to supply |
| CVE-2026-107269 | Deferred | 未確認 | CWE-208 | Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login respon |
| CVE-2026-107270 | Deferred | 未確認 | CWE-639 | Gophish through 0.12.1 contains an insecure direct object reference vulnerability that allows authenticated users to take over other users' groups, templates, landing pages and sen |
| CVE-2026-107271 | Deferred | 未確認 | CWE-348 | Gophish through 0.12.1 contains a rate limit bypass vulnerability that allows unauthenticated attackers to evade /login throttling by spoofing X-Forwarded-For or X-Real-IP headers. |
| CVE-2026-107272 | Deferred | 未確認 | CWE-79 | Gophish through 0.12.1 contains stored and reflected cross-site scripting vulnerabilities that allow attackers to inject script by returning malicious SMTP server error messages. A |
| CVE-2026-107273 | Deferred | 未確認 | CWE-918 | Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/ |
| CVE-2026-107274 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107275 | Awaiting Analysis | 未確認 | CWE-390, CWE-613, CWE-754 | @fastify/jwt is a JSON Web Token plugin for the Fastify web framework. In versions before 10.2.3, a time span passed to expiresIn, notBefore, or maxAge that the plugin's parser can |
| CVE-2026-107276 | Deferred | 未確認 | CWE-362, CWE-367 | MISP contains a race condition in the email-based one-time password (OTP) login flow. When two HTTP requests carrying the same valid OTP are submitted concurrently, both can succes |
| CVE-2026-107278 | Deferred | 未確認 | CWE-20 | MISP contains a validation flaw in its object synchronization logic. When a MISP Object is created without a description, it is stored correctly on the originating instance. Howeve |
| CVE-2026-107279 | Awaiting Analysis | 未確認 | CWE-303, CWE-757 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. In 3.0.12, a peer offering only Digest qop=aut |
| CVE-2026-107280 | Awaiting Analysis | 未確認 | CWE-1275 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, ThreadSafeCookieS |
| CVE-2026-107281 | Awaiting Analysis | 未確認 | CWE-346, CWE-863 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, the HTTP/1.1 conne |
| CVE-2026-107282 | Awaiting Analysis | 未確認 | CWE-319, CWE-441, CWE-522 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16.1, cross-host reques |
| CVE-2026-107283 | Awaiting Analysis | 未確認 | CWE-338 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, Realm.Builder gen |
| CVE-2026-107284 | Awaiting Analysis | 未確認 | CWE-345, CWE-670 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, WebSocketHandler.u |
| CVE-2026-107285 | Awaiting Analysis | 未確認 | CWE-319, CWE-522 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 and 2.16.1, a proxied ws reque |
| CVE-2026-107286 | Analyzed | 未確認 | CWE-772 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 2.10.0 until 2.53.0, streamed requests made through ConcurrencyLimitedModel |
| CVE-2026-107287 | Analyzed | 未確認 | CWE-400, CWE-407 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.7 and 2.52.0, the local web_fetch_tool and the WebFetch |
| CVE-2026-107288 | Analyzed | 未確認 | CWE-1289, CWE-918 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch |
| CVE-2026-107289 | Analyzed | 未確認 | CWE-1289, CWE-918 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.56.0 until 1.107.6 and 2.44.0, applications that opt attacker-influenced |
| CVE-2026-107290 | Analyzed | 未確認 | CWE-1333 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.6 and 2.44.0, the local web_fetch_tool and the WebFetch |
| CVE-2026-107291 | Analyzed | 未確認 | CWE-212, CWE-532 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.6 and 2.44.0, OpenTelemetry instrumentation configured wi |
| CVE-2026-107292 | Analyzed | 未確認 | CWE-346, CWE-350 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.to_web() and clai web development chat serve |
| CVE-2026-107293 | Analyzed | 未確認 | CWE-212, CWE-532 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4 until 1.107.4 and 2.27.1, OpenTelemetry instrumentation configured wi |
| CVE-2026-107294 | Analyzed | 未確認 | CWE-400 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.77.0 until 1.107.2 and 2.24.0, web_fetch_tool, the WebFetch local fallbac |
| CVE-2026-107295 | Analyzed | 未確認 | CWE-352 | Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 1.107.4 and 2.28.0, the Agent.to_web() and clai web developmen |
| CVE-2026-107296 | Deferred | 未確認 | CWE-471 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provid |
| CVE-2026-107297 | Deferred | 未確認 | CWE-407 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder reparses an incomplete array or map from the beginning whenever another c |
| CVE-2026-107298 | Deferred | 未確認 | CWE-674 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an attacker who can prov |
| CVE-2026-107299 | Deferred | 未確認 | CWE-228 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 as incomplete input instead of |
| CVE-2026-107300 | Deferred | 未確認 | CWE-674 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete MessagePack value remaining |
| CVE-2026-107301 | Deferred | 未確認 | CWE-1321 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing msgpack5 with an empty or partial options object disables the default protoAction: |
| CVE-2026-107302 | Deferred | 未確認 | CWE-125 | msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete fiv |
| CVE-2026-107303 | Awaiting Analysis | 未確認 | CWE-79 | JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. Prior to generator-jhipster 9.4.0 and react-jhip |
| CVE-2026-107305 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-107313 | Awaiting Analysis | 未確認 | CWE-201 | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection with GSS |
| CVE-2026-107314 | Awaiting Analysis | 未確認 | CWE-636 | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six authentication methods the dri |
| CVE-2026-107315 | Awaiting Analysis | 未確認 | CWE-201, CWE-226 | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and t |
| CVE-2026-107316 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107318 | Deferred | 未確認 | CWE-295 | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the s |
| CVE-2026-107319 | Deferred | 未確認 | CWE-639 | The GamiPress WordPress plugin before 8.0.6 does not perform a capability check or ownership verification on one of its authenticated AJAX actions, allowing any authenticated user |
| CVE-2026-107320 | Deferred | 未確認 | CWE-200 | The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private activity log |
| CVE-2026-107321 | Deferred | 未確認 | CWE-22 | The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce an effective file-type restriction on it, allowing use |
| CVE-2026-107322 | Awaiting Analysis | 未確認 | CWE-184 | An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin before 1.7.1 might allow a remote unauthenticated actor to execute arbitrary operati |
| CVE-2026-107323 | Deferred | 未確認 | CWE-79 | The Gallery PhotoBlocks WordPress plugin before 1.3.6 does not sanitize and escape one of its gallery settings before outputting it into an HTML attribute, allowing users with Cont |
| CVE-2026-107324 | Undergoing Analysis | 未確認 | CWE-190 | An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON document. An unauthe |
| CVE-2026-107325 | Undergoing Analysis | 未確認 | CWE-129 | Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index and runtime panic when an application calls bson.RawArray.Validate or bsoncore. |
| CVE-2026-107332 | Awaiting Analysis | 未確認 | CWE-276, CWE-459 | Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4.10.0 allowed local users to obtain CodeCatalyst bearer tokens via reading world |
| CVE-2026-107333 | Awaiting Analysis | 未確認 | CWE-863 | Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua based role-based access control (RBAC) authorization layer and nginx's own reque |
| CVE-2026-107334 | Awaiting Analysis | 未確認 | CWE-863 | Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /auth, /admin_login, /arkime/api/e |
| CVE-2026-107335 | Awaiting Analysis | 未確認 | CWE-409 | Malcolm's upload-processing pipeline (scripts/safe-extract.py) enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives (zip/tar/r |
| CVE-2026-107336 | Awaiting Analysis | 未確認 | CWE-290, CWE-441, CWE-863 | Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A request whose path segm |
| CVE-2026-107337 | Awaiting Analysis | 未確認 | CWE-352 | The Malcolm kiosk Flask application exposes a POST /script_call/<script> endpoint with zero authentication and wildcard CORS (CORS(app)). An attacker can force the operator's brows |
| CVE-2026-107345 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107346 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107348 | Awaiting Analysis | 未確認 | CWE-190, CWE-835 | Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service when max_packet_size i |
| CVE-2026-107349 | Awaiting Analysis | 未確認 | CWE-400, CWE-835 | An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose options parameter contains an emp |
| CVE-2026-107350 | Awaiting Analysis | 未確認 | CWE-287 | Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user that authentica |
| CVE-2026-107352 | Awaiting Analysis | 未確認 | CWE-424, CWE-862 | Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to read limited query metadata (AWS account identifiers and |
| CVE-2026-107353 | Awaiting Analysis | 未確認 | CWE-1321 | traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow prototype pollution through set(). When the path passed to set |
| CVE-2026-107354 | Rejected | 未確認 | Rejected reason: ** This candidate has been removed by an organization. | |
| CVE-2026-107355 | Rejected | 未確認 | Rejected reason: ** This candidate has been removed by an organization. | |
| CVE-2026-107361 | Awaiting Analysis | 未確認 | CWE-288 | The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port 8005 on all network interfaces (viewHost=0.0.0.0). Arkime trusts the X-Forwarde |
| CVE-2026-107362 | Awaiting Analysis | 未確認 | CWE-918 | Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) largely unmodified: Dockerfile copies all upstream *.php files and Malcolm only ove |
| CVE-2026-107363 | Awaiting Analysis | 未確認 | CWE-472 | In OpenStack Zaqar before 23.0.1, the WebSocket transport fails to bind the project identifier in subsequent requests to the project authenticated by the Keystone token. An authent |
| CVE-2026-107366 | Awaiting Analysis | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overw |
| CVE-2026-107369 | Awaiting Analysis | 未確認 | CWE-601 | The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL. The SDK then stores this value and, in a later step, reconstructs it for the post-authenticat |
| CVE-2026-107370 | Awaiting Analysis | 未確認 | CWE-532, CWE-598 | When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates the authentication transaction with a GET request instead of a |
| CVE-2026-107371 | Awaiting Analysis | 未確認 | CWE-613 | When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time claim in the resulting ID token against the requested maxAge val |
| CVE-2026-107373 | Deferred | 未確認 | CWE-125 | ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::strin |
| CVE-2026-107375 | Awaiting Analysis | 未確認 | CWE-89 | JHipster is a development platform to quickly generate, develop, and deploy modern web applications and microservice architectures. From 7.0.0 until 9.4.0, reactive applications ge |
| CVE-2026-107376 | Awaiting Analysis | 未確認 | CWE-674 | webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\Language\Parser performs recursive descent without a recursion limit in parseSel |
| CVE-2026-107377 | Deferred | 未確認 | CWE-22, CWE-73 | datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-direct |
| CVE-2026-107378 | Awaiting Analysis | 未確認 | CWE-407 | CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to 2.9.1, rendering an attacker-controlled SVG with a path containing many segments can cause quadratic CP |
| CVE-2026-107379 | Deferred | 未確認 | CWE-770 | savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD with a #FIXED attribute default to make cleanAttributesOnWhitelist() perform a dou |
| CVE-2026-107380 | Deferred | 未確認 | CWE-79 | savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer's isHrefSafeValue() validates an SVG href after XML DTD entity expansion, but saveXML() serializes the orig |
| CVE-2026-107381 | Awaiting Analysis | 未確認 | CWE-178, CWE-400 | svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/ElementReference/Resolver.php builds the SVG <use> reference graph with a case-sensit |
| CVE-2026-107382 | Awaiting Analysis | 未確認 | CWE-248 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.3.0 until 3.5.4, the zero-configuration TLS fingerprint-valida |
| CVE-2026-107383 | Awaiting Analysis | 未確認 | CWE-200 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, the GeoJSON Polygon and Mult |
| CVE-2026-107384 | Awaiting Analysis | 未確認 | CWE-89 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. From 3.2.0 until 3.2.5, 3.3.4, 3.4.7, and 3.5.4, applications that en |
| CVE-2026-107385 | Awaiting Analysis | 未確認 | CWE-89 | MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL databases. Prior to 3.2.5, 3.3.4, 3.4.7, and 3.5.4, text-protocol escaping alway |
| CVE-2026-107386 | Deferred | 未確認 | CWE-770 | amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes becaus |
| CVE-2026-107387 | Analyzed | 未確認 | CWE-789 | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads an attacker-controlled tag-item size and allocates a Uint8Array for a |
| CVE-2026-107388 | Modified | 未確認 | CWE-789 | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the ID3v2 parser trusts the syncsafe tag-size field and allocates the complete tag body befor |
| CVE-2026-107389 | Analyzed | 未確認 | CWE-789 | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM EBML parser decodes an attacker-controlled VINT element length and uses |
| CVE-2026-107390 | Analyzed | 未確認 | CWE-789 | music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a Jav |
| CVE-2026-107391 | Analyzed | 未確認 | CWE-400, CWE-835 | music-metadata is a metadata parser for audio and video media files. In the public development revision introduced after 11.14.0, a development-branch regression in the MP4 stsd sa |
| CVE-2026-107392 | Analyzed | 未確認 | CWE-248, CWE-400 | music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parser handles an unrecognized chunk by calling tokenizer.ignore without awaiting the |
| CVE-2026-107393 | Awaiting Analysis | 未確認 | CWE-116, CWE-79 | FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.235, when APP_CLOUDFLARE_IS_USED is enabled, FreeScout trusts an unvalidated CF-Connecting-IP header during fa |
| CVE-2026-107394 | Deferred | 未確認 | CWE-918 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, the previous fix for CVE-2026-25738 did not cover |
| CVE-2026-107395 | Deferred | 未確認 | CWE-862 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, an authenticated user can misuse the legacy sessio |
| CVE-2026-107396 | Deferred | 未確認 | CWE-692 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can manage events or create content, inc |
| CVE-2026-107397 | Deferred | 未確認 | CWE-79 | Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to 3.3.13, users who can create content, including speakers w |
| CVE-2026-107399 | Deferred | 未確認 | CWE-200, CWE-522 | The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize applies no origin trust boundary in Mechanize::HTTP::Agent#response_follow_meta_r |
| CVE-2026-107400 | Awaiting Analysis | 未確認 | CWE-287 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication. |
| CVE-2026-107406 | Awaiting Analysis | 未確認 | CWE-119 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAM |
| CVE-2026-107416 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Le |
| CVE-2026-107417 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Muralidharan Ramasamy Push Notification for Post and BuddyPress push-notification-for-post-and-buddypress allows Exploiting Incorrectly Confi |
| CVE-2026-107418 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a thr |
| CVE-2026-107419 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Cool Plugins AI Translation for Polylang automatic-translations-for-polylang allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-107420 | Deferred | 未確認 | CWE-345 | Unauthenticated Bypass Vulnerability in Pay With MetaMask For WooCommerce – Cryptocurrency Payment Gateway <= 1.7.2 versions. |
| CVE-2026-107421 | Deferred | 未確認 | CWE-384 | Session Fixation vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Session Hijacking.This issue affects Broadcast Live Video: fr |
| CVE-2026-107422 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows Stored XSS.This iss |
| CVE-2026-107423 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP |
| CVE-2026-107424 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in M A Vinoth Kumar Frontend Dashboard frontend-dashboard allows Privilege Escalation.This issue affects Frontend Dashboard: from n/a t |
| CVE-2026-107425 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Ac |
| CVE-2026-107426 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-107427 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-107428 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Reflected |
| CVE-2026-107429 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data Manipulation.This issue affects |
| CVE-2026-10743 | Analyzed | 未確認 | CWE-1223 | IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN operations. |
| CVE-2026-107430 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Acce |
| CVE-2026-107431 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetFormBu |
| CVE-2026-107432 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-107433 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in miniOrange WP OAuth Server miniorange-oauth-20-server allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-107434 | Deferred | 未確認 | CWE-1284 | Subscriber Bypass Vulnerability in MicroPayments <= 3.2.9 versions. |
| CVE-2026-107435 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong Testimonials strong-testimonials allows Stored XSS.This issue |
| CVE-2026-107436 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in WP Chill Strong Testimonials strong-testimonials allows Object Injection.This issue affects Strong Testimonials: from n/a through |
| CVE-2026-107437 | Awaiting Analysis | 未確認 | CWE-798 | GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed |
| CVE-2026-107444 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated |
| CVE-2026-107445 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authentic |
| CVE-2026-107446 | Awaiting Analysis | 未確認 | CWE-190 | containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd b |
| CVE-2026-107447 | Deferred | 未確認 | CWE-290 | The Contest Gallery WordPress plugin before 34.0.1 does not reliably validate the visitor identity used to enforce its one-vote-per-entry restriction, trusting a client-supplied re |
| CVE-2026-107448 | Awaiting Analysis | 未確認 | CWE-99 | Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel GoToExterna |
| CVE-2026-107449 | Deferred | 未確認 | CWE-918 | linuxserver Heimdall through 2.8.3 applies its SafeUrlFetcher SSRF protection mechanism only to ItemController; the enhanced-application test and live-stats requests occur via Supp |
| CVE-2026-107450 | Deferred | 未確認 | CWE-863 | In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_lists.rs) depend only on the shared AccessSmartList permission |
| CVE-2026-107459 | Deferred | 未確認 | CWE-78 | The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can inject arbitrary OS commands and execute them on the server. |
| CVE-2026-107460 | Awaiting Analysis | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. Wh |
| CVE-2026-107466 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration (CI) system to process a c |
| CVE-2026-107503 | Awaiting Analysis | 未確認 | CWE-15, CWE-346, CWE-522 | In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI and the OpenID Connect |
| CVE-2026-107506 | Deferred | 未確認 | CWE-269 | The Simple Banner WordPress plugin before 3.3.3 does not correctly limit the capabilities it grants to the user roles an administrator allows to manage its banners, granting such |
| CVE-2026-107507 | Deferred | 未確認 | CWE-863 | The Squadeno WordPress plugin before 1.12.0 does not enforce its restrictions on every way a sport can be saved, allowing users with the lowest-tier Trainer role to change the sec |
| CVE-2026-107508 | Deferred | 未確認 | CWE-22 | The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file to include, allowing unauthenticated attackers to include and r |
| CVE-2026-107510 | Deferred | 未確認 | CWE-269, CWE-284, CWE-88 | An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation. |
| CVE-2026-107564 | Deferred | 未確認 | CWE-770 | An unauthenticated remote attacker may use an allocation of resources without limits or throttling weakness in the affected product to cause high CPU load leading to a denial of se |
| CVE-2026-107565 | Awaiting Analysis | 未確認 | CWE-1284 | A flaw was found in luksmeta. A local attacker with administrative privileges can cause data corruption when saving metadata to a Linux Unified Key Setup (LUKS) device. Due to inco |
| CVE-2026-107566 | Deferred | 未確認 | CWE-862 | Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allo |
| CVE-2026-107567 | Deferred | 未確認 | CWE-348 | Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write signed with t |
| CVE-2026-107568 | Deferred | 未確認 | CWE-862 | Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressive Robot hMailServer allows an authentic |
| CVE-2026-107569 | Deferred | 未確認 | CWE-606 | Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server carrying mail. The server boun |
| CVE-2026-107570 | Deferred | 未確認 | CWE-823 | heap OOB write in convert_file_from_to() via a crafted Content-Type header allows attacker to OOB write when email is used as a template. |
| CVE-2026-107571 | Deferred | 未確認 | CWE-276 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run code as the mail server's high-p |
| CVE-2026-107572 | Deferred | 未確認 | CWE-1333 | Inefficient complexity in the Sieve filter evaluation of Progressive Robot hMailServer 6.2.24 through 6.3.5 allows an authenticated account holder to make the mail services unavail |
| CVE-2026-107573 | Deferred | 未確認 | CWE-276 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a local authenticated user to read the mail server's data. The ins |
| CVE-2026-107574 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer allows a remote unauthenticated attacker to make the mail services unavailable. Reading a JSO |
| CVE-2026-107575 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the SPF macro expansion of Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to consume worker-thread tim |
| CVE-2026-107576 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the inbound DKIM and ARC signature verification of Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a remote unauthenticated attacker |
| CVE-2026-107577 | Deferred | 未確認 | CWE-835 | Inefficient algorithmic complexity and a non-terminating loop in the MIME processing of received messages in Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote unauth |
| CVE-2026-107578 | Deferred | 未確認 | CWE-59 | Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6.3.4 and 6.3.5 allow |
| CVE-2026-107579 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the bounce and complaint processing of Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to stop mail del |
| CVE-2026-107580 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the decoding of message header fields in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows a remote unauthenticated attacker to make th |
| CVE-2026-107581 | Deferred | 未確認 | CWE-407 | Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in account in time quadratic in the command's length or in the number of elements it |
| CVE-2026-107582 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the REST API (6.3.3 through 6.3.5) and the IMAP PREVIEW response (6.2.22 through 6.3.5) of Progressive Robot hMailServer allows a remote unaut |
| CVE-2026-107583 | Deferred | 未確認 | CWE-407 | Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to ma |
| CVE-2026-107584 | Deferred | 未確認 | CWE-636 | Progressive Robot hMailServer 6.0.0 through 6.3.5 fails open when applying DANE (RFC 7672) to outbound SMTP delivery. The server's validating DNSSEC resolver treated a TLSA or MX l |
| CVE-2026-107585 | Deferred | 未確認 | CWE-770 | Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and 6.3.5 allows a remote unauthenticated attacker to make other users' O |
| CVE-2026-107586 | Deferred | 未確認 | CWE-770 | Uncontrolled eviction in the browser session table of the REST API in Progressive Robot hMailServer 6.2.28 through 6.3.5 allows a remote authenticated user to end other users' sess |
| CVE-2026-107587 | Deferred | 未確認 | CWE-295 | Improper certificate validation in the webmail of Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to have S/MIME-encrypted mail that the |
| CVE-2026-107588 | Awaiting Analysis | 未確認 | CWE-1321, CWE-79 | Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 to 24 and 12.2.0 in Vaadin 25, so an application cannot remove these vu |
| CVE-2026-107589 | Deferred | 未確認 | CWE-290 | Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names. |
| CVE-2026-10759 | Awaiting Analysis | 未確認 | CWE-90 | A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Active Directory or LDAP search queries without sufficient input neutral |
| CVE-2026-107594 | Deferred | 未確認 | CWE-73 | The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, and the action |
| CVE-2026-107597 | Awaiting Analysis | 未確認 | CWE-918 | PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and then follows the `jwks_uri` contained in that response w |
| CVE-2026-107604 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in the installation provider and client registration endpoints of the Keycloak identity management service. A realm administrator with only the read-only view-clie |
| CVE-2026-107605 | Awaiting Analysis | 未確認 | CWE-306 | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to |
| CVE-2026-107606 | Awaiting Analysis | 未確認 | CWE-306 | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to |
| CVE-2026-107607 | Awaiting Analysis | 未確認 | CWE-306 | SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to |
| CVE-2026-107608 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the bu |
| CVE-2026-107611 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read vulnerability in the ZRLE decoder of GlavSoft TightVNC Viewer for Windows before 2.8.88 allows a malicious or compromised VNC server to read heap memory beyon |
| CVE-2026-107612 | Awaiting Analysis | 未確認 | CWE-338, CWE-732 | Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles |
| CVE-2026-107613 | Awaiting Analysis | 未確認 | CWE-476 | A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a d |
| CVE-2026-107614 | Awaiting Analysis | 未確認 | CWE-125, CWE-191 | An integer underflow in WinCursorShapeUtils::trimTransparent() in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and pote |
| CVE-2026-107615 | Awaiting Analysis | 未確認 | CWE-427 | An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM priv |
| CVE-2026-107617 | Deferred | 未確認 | CWE-798 | An attacker can use a hard-coded credential to log in to EseeCloud devices. |
| CVE-2026-107618 | Awaiting Analysis | 未確認 | `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection, so a request issued by a third-party site was not rejected. A | |
| CVE-2026-107621 | Deferred | 未確認 | CWE-835 | JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream. |
| CVE-2026-107623 | Awaiting Analysis | 未確認 | CWE-862 | A flaw was found in the OIDC Dynamic Client Registration (DCR) component of Keycloak. A bug in the response serialization causes the backchannel logout offline token revocation set |
| CVE-2026-107631 | Deferred | 未確認 | CWE-79 | The Record of Consent Extension for Complianz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'uid' parameter in all versions up to, and including, 2.5 du |
| CVE-2026-107634 | Awaiting Analysis | 未確認 | CWE-125 | Dislocker through 0.7.3 contains a heap out-of-bounds read vulnerability in get_dataset() and get_next_datum() that never validate dataset and datum sizes against the metadata allo |
| CVE-2026-107635 | Awaiting Analysis | 未確認 | CWE-191 | Dislocker through 0.7.3 contains an integer underflow vulnerability in get_vmk() and get_fvek() that allows attackers to trigger out-of-bounds heap reads via crafted datum sizes. A |
| CVE-2026-107636 | Deferred | 未確認 | CWE-472 | pH7Builder (pH7 Social Dating CMS) before 18.5.1 contains a payment validation vulnerability that allows registered low-privileged members to obtain any membership tier by supplyin |
| CVE-2026-107637 | Deferred | 未確認 | CWE-639 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper authorization vulnerability in the note module delete() action that allows authenticated members to delete oth |
| CVE-2026-107638 | Deferred | 未確認 | CWE-307 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an improper restriction of authentication attempts vulnerability that allows attackers to bypass two-factor authentication |
| CVE-2026-107639 | Deferred | 未確認 | CWE-88 | ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerability in assImagemapQuestionGUI that allows question authors to inject ImageMagick |
| CVE-2026-107640 | Deferred | 未確認 | CWE-640 | Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passw |
| CVE-2026-107645 | Deferred | 未確認 | CWE-269 | The Blocksy Companion plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.1.58 This is due to the implement_user_registration() AJAX hand |
| CVE-2026-107646 | Deferred | 未確認 | CWE-200 | The HUSKY – Products Filter for WooCommerce Professional plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.5 via the 'w |
| CVE-2026-107648 | Deferred | 未確認 | CWE-79 | The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action (also function, plugin, post_type, post_status, ids |
| CVE-2026-107649 | Deferred | 未確認 | CWE-79 | The Events Made Easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'event[location_name]' parameter in all versions up to, and including, 3.2.22 due to |
| CVE-2026-107650 | Deferred | 未確認 | CWE-79 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_title' parameter i |
| CVE-2026-107651 | Awaiting Analysis | 未確認 | CWE-122 | A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata reader due to improper state handling when parsing split metadata chunks. A remote a |
| CVE-2026-107652 | Deferred | 未確認 | CWE-639 | The Database Addon for Contact Form 7 – CFDB7 plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 1.4.1. This is due to the plugin stori |
| CVE-2026-107655 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unhandled null pointer d |
| CVE-2026-107657 | Deferred | 未確認 | CWE-79 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute field name, e |
| CVE-2026-107659 | Deferred | 未確認 | CWE-862 | The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.11 via the 'id |
| CVE-2026-107660 | Analyzed | 未確認 | CWE-297 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tls_open() of libavformat/tls_mbedtls.c, which skips hostname checks for IP-ad |
| CVE-2026-107674 | Analyzed | 未確認 | CWE-667 | IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS using applications attempting to create secure network connect |
| CVE-2026-107675 | Analyzed | 未確認 | CWE-322 | FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersonate SFTP servers. Att |
| CVE-2026-107676 | Analyzed | 未確認 | CWE-908 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping |
| CVE-2026-107677 | Analyzed | 未確認 | CWE-835 | FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to trigger an infinite loop by supplying an empty SegmentTemplate media UR |
| CVE-2026-107678 | Analyzed | 未確認 | CWE-674 | FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in libavutil/encryption_info.c, which recursively frees AVEncryptionInitInfo linked |
| CVE-2026-107682 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-107685 | Deferred | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, includ |
| CVE-2026-107686 | Awaiting Analysis | 未確認 | The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users without write access, although the API did. A signed-in user | |
| CVE-2026-107692 | Awaiting Analysis | 未確認 | CWE-319 | The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after the TCP handshake, using only LZ4 compression rather than encry |
| CVE-2026-107694 | Deferred | 未確認 | CWE-200 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is the r |
| CVE-2026-107695 | Analyzed | 未確認 | CWE-835 | FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to cause denial of service because parse_playlist() accepts Master Playl |
| CVE-2026-107696 | Analyzed | 未確認 | CWE-835 | FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without any redirect limit. Attackers contro |
| CVE-2026-107697 | Analyzed | 未確認 | CWE-693 | FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when opening child playl |
| CVE-2026-107698 | Analyzed | 未確認 | CWE-918 | FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that follows RTSP 3xx redirects without v |
| CVE-2026-107699 | Deferred | 未確認 | CWE-78 | ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execute operating system commands by supplying unsanitized input or output path argume |
| CVE-2026-107700 | Deferred | 未確認 | CWE-94 | dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers to execute JavaScript by supplying crafted paths to get(). The path is concatena |
| CVE-2026-107701 | Deferred | 未確認 | CWE-1321 | dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set(). Attackers contro |
| CVE-2026-107702 | Deferred | 未確認 | CWE-639 | QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminHotelRoomsBookingController::postProcess() that allows restricted back-office employees to access other |
| CVE-2026-107703 | Deferred | 未確認 | CWE-78 | @enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that allows attackers to execute shell commands via unsanitized filepath and convert |
| CVE-2026-107704 | Deferred | 未確認 | CWE-78 | The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in ImageOptimizer#identify_format that allows attackers to execute commands by suppl |
| CVE-2026-107705 | Deferred | 未確認 | CWE-121 | Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() that allows attackers controlling the password to overwrite stack memory when open |
| CVE-2026-107706 | Deferred | 未確認 | CWE-863 | Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax/updateextrafield.php that checks only read permission before writing extrafield |
| CVE-2026-107707 | Deferred | 未確認 | CWE-59 | Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as |
| CVE-2026-107708 | Awaiting Analysis | 未確認 | CWE-476 | MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client principal NULL on ma |
| CVE-2026-107709 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerability located in `lib/decompress-zip.js` improperly validates archive entry paths d |
| CVE-2026-107712 | Deferred | 未確認 | CWE-89 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to time-based SQL Injection via the 'current_month' parameter in all versions up to, and including, 2.1. |
| CVE-2026-107714 | Awaiting Analysis | 未確認 | CWE-200, CWE-319, CWE-522 | The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agent#response_redirect treats redirects as same-origin when the host matc |
| CVE-2026-107715 | Deferred | 未確認 | CWE-200, CWE-522 | The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize sends caller-supplied credential headers to a different host after an HTTP redire |
| CVE-2026-107716 | Deferred | 未確認 | CWE-22, CWE-59 | Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or discovered a |
| CVE-2026-107717 | Deferred | 未確認 | CWE-20 | Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chat_messages() attempts to parse every line of rendered template output as Ch |
| CVE-2026-107718 | Awaiting Analysis | 未確認 | CWE-601 | AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into URLs with |
| CVE-2026-107719 | Deferred | 未確認 | CWE-613 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.4, the fast-jwt createVerifier cache can continue accepting a previously valid, signed JWT after its exp ti |
| CVE-2026-107720 | Deferred | 未確認 | CWE-20, CWE-347 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.1, fast-jwt createVerifier accepts an unsigned JWT when key is an empty string or null and algorithms is a |
| CVE-2026-107721 | Deferred | 未確認 | CWE-613, CWE-682 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier accepts Infinity for clockTolerance because its option validation checks type an |
| CVE-2026-107722 | Deferred | 未確認 | CWE-347 | fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-whitespace c |
| CVE-2026-107723 | Deferred | 未確認 | CWE-1287 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier accepts a validly signed JWT whose payload is a JSON array because src/decoder.j |
| CVE-2026-107724 | Deferred | 未確認 | CWE-347 | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4, fast-jwt can classify raw serialized public JWK or JWKS JSON as an HMAC secret because src/crypto.js performDe |
| CVE-2026-107725 | Awaiting Analysis | 未確認 | CWE-862 | Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the IMap Predi |
| CVE-2026-107726 | Awaiting Analysis | 未確認 | CWE-20 | Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied by a mali |
| CVE-2026-107727 | Awaiting Analysis | 未確認 | CWE-400 | Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy graphql-ws subscription handler in strawberry/subscriptions/protocols/graphql_ws/h |
| CVE-2026-107728 | Awaiting Analysis | 未確認 | CWE-863 | Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on a synchronous field resolver evaluates the result of has_per |
| CVE-2026-107729 | Deferred | 未確認 | CWE-125 | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrusted unsigned mobiHdr.hdrLen field to a signed integer for validation; values abov |
| CVE-2026-107730 | Deferred | 未確認 | CWE-190 | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces * 16 section offset using sign |
| CVE-2026-107731 | Deferred | 未確認 | CWE-125 | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-validation variants in src/LitDoc.cpp allow file-controlled offsets and sizes to |
| CVE-2026-107732 | Deferred | 未確認 | CWE-94 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip() interpr |
| CVE-2026-107733 | Deferred | 未確認 | CWE-476 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe(), which dereferences Wi |
| CVE-2026-107734 | Deferred | 未確認 | CWE-20, CWE-88 | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is substituted for the %f placeholder in an external editor co |
| CVE-2026-107735 | Deferred | 未確認 | CWE-636 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts the sumatrapdfrestrict.ini path with gPolicyRestrictions set to Perm::All and onl |
| CVE-2026-107736 | Deferred | 未確認 | CWE-121 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyIt |
| CVE-2026-107737 | Deferred | 未確認 | CWE-129 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, and in pre-release 3.7.0.20369 when WebView2 is absent or cannot initialize, ParseProtoUrl() accepts the sign |
| CVE-2026-107738 | Deferred | 未確認 | CWE-125 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows file-controlled unsigned string offsets from /#WINDOWS and /#IVB to signed intege |
| CVE-2026-107742 | Deferred | 未確認 | CWE-79 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'author' parameter in all ver |
| CVE-2026-107744 | Deferred | 未確認 | CWE-862 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.10 Thi |
| CVE-2026-107746 | Deferred | 未確認 | CWE-862 | The FunnelKit – Funnel Builder for WooCommerce Checkout plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.16.0.6 This is due to the |
| CVE-2026-107748 | Deferred | 未確認 | CWE-79 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_na |
| CVE-2026-107751 | Deferred | 未確認 | CWE-79 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_name' parameter in all versions up to, and including, 2.4.3 due to insufficient input |
| CVE-2026-107752 | Deferred | 未確認 | CWE-89 | The Welcart e-Commerce plugin for WordPress is vulnerable to generic SQL Injection via the 'wp_usces_order_old (JSON fields searchSql / searchSkuSql)' parameter in all versions up |
| CVE-2026-107754 | Deferred | 未確認 | CWE-79 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_images (file_info[ |
| CVE-2026-107755 | Deferred | 未確認 | CWE-200 | Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of |
| CVE-2026-107756 | Deferred | 未確認 | CWE-79 | The Meow Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name + comment' parameter in all versions up to, and including, 5.6.2 due to in |
| CVE-2026-107757 | Deferred | 未確認 | CWE-79 | The Gallery Custom Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name (profile.php) + comment (wp-comments-post.php)' parameter in all ve |
| CVE-2026-107758 | Deferred | 未確認 | CWE-79 | The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.0.390 due to insuffic |
| CVE-2026-107761 | Awaiting Analysis | 未確認 | CWE-201, CWE-213 | Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not m |
| CVE-2026-107762 | Deferred | 未確認 | CWE-639 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.3.2 v |
| CVE-2026-107763 | Deferred | 未確認 | CWE-862 | The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.5. This is due to the plugin not properly verifying th |
| CVE-2026-107764 | Deferred | 未確認 | CWE-79 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'url (comment_author_url)' parameter in all versions up to, and including, 1. |
| CVE-2026-107768 | Deferred | 未確認 | CWE-79 | The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions |
| CVE-2026-107770 | Deferred | 未確認 | CWE-862 | The Photo Engine (Media Organizer & Lightroom) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.5.6 This is due to the plugin not |
| CVE-2026-107772 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-107777 | Awaiting Analysis | 未確認 | CWE-22 | Thermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the Torrent Server that are accessibl |
| CVE-2026-107778 | Awaiting Analysis | 未確認 | CWE-476 | MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash services by sending mi |
| CVE-2026-107779 | Deferred | 未確認 | CWE-306 | Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentication vulnerability in bundled xxl-job-admin JobInfoController endpoints annotate |
| CVE-2026-107780 | Deferred | 未確認 | CWE-78 | Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command injection vulnerability in the unauthenticated /post/TtsController/textToSpeech endpoi |
| CVE-2026-107781 | Deferred | 未確認 | CWE-918 | Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side request forgery and missing authorization vulnerability in the OnlyOffice save callbac |
| CVE-2026-107782 | Awaiting Analysis | 未確認 | CWE-863 | System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from a |
| CVE-2026-107783 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local users to recover an IAM user's cleartext AWS Management Console passwo |
| CVE-2026-107785 | Deferred | 未確認 | CWE-252, CWE-325, CWE-394 | Crux Agent from 1.9.0 before 2.0.3 uses the full SKA bilocation key as the WireGuard preshared key. When a peering session negotiates use of SHA-512, the key produced is 64 bytes i |
| CVE-2026-107788 | Deferred | 未確認 | CWE-862 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when deleting shipping label records, allowing any authenticated user such as a subscriber to |
| CVE-2026-107789 | Deferred | 未確認 | CWE-639 | The SmartyParcel WordPress plugin before 1.23.4 does not perform authorisation checks when serving shipping label downloads, allowing unauthenticated users to obtain the shipping |
| CVE-2026-107790 | Deferred | 未確認 | CWE-79 | The HireZoot WordPress plugin before 4.1.1 does not sanitise and escape some of its stored data before outputting it in the admin dashboard, and additionally reverses the HTML-ent |
| CVE-2026-107791 | Deferred | 未確認 | CWE-862 | The WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion routines, allowing authenticated use |
| CVE-2026-107792 | Deferred | 未確認 | CWE-862 | Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToForumAction that allows authenticated users to move other user |
| CVE-2026-107793 | Deferred | 未確認 | CWE-639 | Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that allows authenticated users to delete other users' subscription |
| CVE-2026-107794 | Deferred | 未確認 | CWE-191 | ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undef |
| CVE-2026-107795 | Deferred | 未確認 | CWE-284, CWE-862 | Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perform privilege |
| CVE-2026-107796 | Deferred | 未確認 | CWE-79 | Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauthenticated |
| CVE-2026-107797 | Deferred | 未確認 | CWE-79 | Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and tag paramet |
| CVE-2026-107798 | Deferred | 未確認 | CWE-79 | jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidated URLs int |
| CVE-2026-107799 | Deferred | 未確認 | CWE-79 | Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script by posting unsanitized forum message bodies. Message |
| CVE-2026-107800 | Deferred | 未確認 | CWE-79 | Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receiveshortmessa |
| CVE-2026-107801 | Deferred | 未確認 | CWE-79 | Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading attachments with an attacker-suppli |
| CVE-2026-107802 | Deferred | 未確認 | CWE-88 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, src/SelectionTranslate.cpp embeds selected or pasted translation text in quoted Windows command lines using i |
| CVE-2026-107803 | Awaiting Analysis | 未確認 | CWE-89 | ProcessMaker is an open source workflow management software suite. Prior to 2026.14.3, the `GET /api/1.0/tasks` endpoint in ProcessMaker is vulnerable to SQL injection through the |
| CVE-2026-107804 | Awaiting Analysis | 未確認 | CWE-346 | Nginx UI is a web user interface for the Nginx web server. From 2.2.0 until 2.6.0, the bundled reverse proxy does not preserve the external client identity used by Gin because the |
| CVE-2026-107805 | Analyzed | 未確認 | CWE-400 | Nginx UI is a web user interface for the Nginx web server. From 2.5.0 until 2.6.0, the node-signature authentication path performs temporary file staging of an attacker-controlled |
| CVE-2026-107806 | Analyzed | 未確認 | CWE-94 | Nginx UI is a web user interface for the Nginx web server. From 2.3.8 until 2.5.0, an authenticated administrator with an active secure session can submit attacker-controlled porta |
| CVE-2026-107807 | Analyzed | 未確認 | CWE-312, CWE-598 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, Nginx UI accepts the Node.Secret master credential through the node_secret query parameter in HTT |
| CVE-2026-107808 | Analyzed | 未確認 | CWE-287, CWE-305, CWE-308 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, POST /api/login checks EnabledOTP but does not require a WebAuthn assertion when EnabledPasskey i |
| CVE-2026-107809 | Analyzed | 未確認 | CWE-352 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, AuthRequired accepts a browser-managed token cookie as an API credential after the front end stor |
| CVE-2026-107810 | Analyzed | 未確認 | CWE-59, CWE-61 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner archives before applying the restore_nginx and restore_ |
| CVE-2026-107811 | Analyzed | 未確認 | CWE-200, CWE-862 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can access /api/nodes and /api/nodes/:id, whose responses serialize |
| CVE-2026-107812 | Analyzed | 未確認 | CWE-494 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the self-upgrade mechanism validates a downloaded binary only with a same-origin digest obtained |
| CVE-2026-107813 | Analyzed | 未確認 | CWE-862 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, the api/cluster router exposes node and namespace mutation operations and cluster-wide Nginx relo |
| CVE-2026-107814 | Analyzed | 未確認 | CWE-732 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated m |
| CVE-2026-107815 | Analyzed | 未確認 | CWE-787 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an |
| CVE-2026-107816 | Analyzed | 未確認 | CWE-125 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the qc_info plugin could be confused by a qu |
| CVE-2026-107817 | Analyzed | 未確認 | CWE-125 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql_json plugin assumed that imported |
| CVE-2026-107818 | Analyzed | 未確認 | CWE-15 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/ws |
| CVE-2026-107819 | Awaiting Analysis | 未確認 | CWE-297 | MariaDB Connector/C is a C and C++ client library for connecting applications to MariaDB and MySQL databases. From 3.4.1 until 3.4.10, the MariaDB Connector/C libmariadb Zero-Confi |
| CVE-2026-107820 | Awaiting Analysis | 未確認 | CWE-190 | x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/mcp_server.zig parses |
| CVE-2026-107821 | Analyzed | 未確認 | CWE-1285 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, off |
| CVE-2026-107822 | Analyzed | 未確認 | CWE-706, CWE-863 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB's ACL cache could generate the same |
| CVE-2026-107823 | Analyzed | 未確認 | CWE-116, CWE-144 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the MariaDB view FRM parser did not safely e |
| CVE-2026-107824 | Awaiting Analysis | 未確認 | CWE-306 | x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.1, x64dbg-MCP Server exposes all M |
| CVE-2026-107825 | Awaiting Analysis | 未確認 | CWE-20, CWE-436 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessURI in internal/corazawaf/transaction.go handles a url.ParseReq |
| CVE-2026-107826 | Awaiting Analysis | 未確認 | CWE-674 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, readJSON in internal/bodyprocessors/json.go can stop its bounded flatt |
| CVE-2026-107828 | Deferred | 未確認 | CWE-1391 | Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable credentials from |
| CVE-2026-107829 | Deferred | 未確認 | CWE-916 | Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtai |
| CVE-2026-107830 | Deferred | 未確認 | CWE-799 | Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited SMS sendin |
| CVE-2026-107831 | Deferred | 未確認 | CWE-352 | Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing actions by abusing GET endpoints lacking anti-CSRF t |
| CVE-2026-107832 | Awaiting Analysis | 未確認 | CWE-178 | fastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in a route schema does not lowerc |
| CVE-2026-107833 | Awaiting Analysis | 未確認 | CWE-674 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, ProcessResponse in internal/bodyprocessors/json.go passes the ignoreJS |
| CVE-2026-107834 | Awaiting Analysis | 未確認 | CWE-400, CWE-772 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the multipart loop in internal/bodyprocessors/multipart.go executes de |
| CVE-2026-107835 | Awaiting Analysis | 未確認 | CWE-436 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.8.1, internal/cookies.ParseCookies in internal/cookies/cookies.go handles boundary |
| CVE-2026-107836 | Deferred | 未確認 | CWE-125, CWE-191 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, the nanoCoAP client function nan |
| CVE-2026-107837 | Deferred | 未確認 | CWE-125 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. In 2026.07 and earlier, _receive() in sys/net/gnrc/netwo |
| CVE-2026-107838 | Deferred | 未確認 | CWE-252, CWE-617 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. From version 2023.07 through version 2026.07, nanocoap_f |
| CVE-2026-107839 | Deferred | 未確認 | CWE-400 | ageLANServer provides a cross-platform web server and launcher for offline multiplayer in several Age of Empires and Age of Mythology games. Prior to version 1.15.2, the AoE3 POST |
| CVE-2026-107840 | Deferred | 未確認 | CWE-400 | yopass is a service for securely sharing secrets, passwords, and files. Prior to version 14.7.0, the Prometheus metrics middleware in pkg/server/server.go uses the attacker-control |
| CVE-2026-107841 | Deferred | 未確認 | CWE-863 | pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows n |
| CVE-2026-107842 | Deferred | 未確認 | CWE-200 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, ModuleSearch can disclose protected page titles, URLs, and indexed context snippets to unauthenticated vis |
| CVE-2026-107843 | Deferred | 未確認 | CWE-204, CWE-770 | Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile() enters its follow-up registration branch on any POST to a page containing th |
| CVE-2026-107844 | Deferred | 未確認 | CWE-22 | Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {path} parameter to the configured image target directory with |
| CVE-2026-107845 | Deferred | 未確認 | CWE-116, CWE-79 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor can submit a comment whose email or website metadata is rendered without suffic |
| CVE-2026-107848 | Deferred | 未確認 | CWE-352 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUEST_TOKEN only for POST requests, while the declarative GET guard runs |
| CVE-2026-107850 | Deferred | 未確認 | CWE-639, CWE-862 | Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview access voter as Contao\CoreBundle\Security\Voter\DataContainer |
| CVE-2026-107851 | Deferred | 未確認 | CWE-524, CWE-863 | Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/Security/Voter/DataContainer/TableAccessVoter.php caches aut |
| CVE-2026-107852 | Deferred | 未確認 | CWE-345 | Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe/process endpoint accepts a client-supplied Stripe Checkout |
| CVE-2026-107854 | Deferred | 未確認 | CWE-639 | Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billing/free/process endpoint accepts a client-controlled server_i |
| CVE-2026-107856 | Awaiting Analysis | 未確認 | CWE-639 | CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit applications. Prior to 3.33.0, GET /admin/tiDash/editClientForm/ |
| CVE-2026-107857 | Awaiting Analysis | 未確認 | CWE-312, CWE-522 | Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile application writes the Cloud sync bearer token and WebDAV password to |
| CVE-2026-107858 | Awaiting Analysis | 未確認 | CWE-1385, CWE-306, CWE-942 | Missing Origin Validation in WebSockets (CWE-1385) and Permissive Cross-domain Policy with Untrusted Domains (CWE-942) in the development web server (ADK Web) in Google Agent Devel |
| CVE-2026-107861 | Deferred | 未確認 | CWE-78 | The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a |
| CVE-2026-107862 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows DOM-Based XSS.This |
| CVE-2026-107863 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Sec |
| CVE-2026-107864 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored XSS.This issue affects Ad Inse |
| CVE-2026-107865 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored XSS.This issue affects JetMenu: from |
| CVE-2026-107866 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue |
| CVE-2026-107867 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetProductTables jet-product-tables allows Reflected XSS.This issue |
| CVE-2026-107869 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-107870 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEng |
| CVE-2026-107885 | Analyzed | 未確認 | CWE-770 | OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs(). The scheduler suppresses timeout processing fo |
| CVE-2026-107886 | Analyzed | 未確認 | CWE-415 | OpenPrinting CUPS before 2.4.20 contains a double-free in printer-class management. When CUPS-Add-Modify-Class replaces an existing class member list, add_class() frees pclass->pri |
| CVE-2026-107887 | Received | 未確認 | CWE-862 | The Advanced Twenty Seventeen WordPress plugin through 1.3.1 does not perform any capability or nonce check on the action that creates and activates its bundled child , allowing an |
| CVE-2026-107888 | Analyzed | 未確認 | CWE-476 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that has been automatical |
| CVE-2026-107889 | Awaiting Analysis | 未確認 | CWE-79 | A flaw was found in the login theme rendering component of Keycloak. The issue occurs because the security filter responsible for cleaning user input can be bypassed, allowing a re |
| CVE-2026-107890 | Analyzed | 未確認 | CWE-476 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes wit |
| CVE-2026-107907 | Received | 未確認 | CWE-862 | The MAS Videos WordPress plugin through 1.3.4 does not perform any capability or ownership check when handling its front-end video and playlist deletion requests, and the nonce it |
| CVE-2026-107908 | Deferred | 未確認 | CWE-787 | A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to cause a denial of servi |
| CVE-2026-107909 | Deferred | 未確認 | CWE-787 | A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/buffer.c) in FalkorDB before 4.20.0 allows a remote unau |
| CVE-2026-107910 | Deferred | 未確認 | CWE-287 | An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a remote unauthenticated attacker to execute graph |
| CVE-2026-107911 | Deferred | 未確認 | CWE-843 | A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a remote authenticated attacker who can run GRAPH.QUERY |
| CVE-2026-107913 | Rejected | 未確認 | Rejected reason: This CVE ID is a duplicate of CVE-2026-39749 and was never published. Both IDs were assigned to the same Broken Access Control vulnerability in the App for Cloudfl | |
| CVE-2026-107914 | Awaiting Analysis | 未確認 | CWE-459 | Backdrop CMS 1.34 before 1.34.5 and 1.35 before 1.35.1 doesn't sufficiently protect configuration exports when delivering a compressed archive. This vulnerability is mitigated by t |
| CVE-2026-107917 | Awaiting Analysis | 未確認 | CWE-20 | Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unautho |
| CVE-2026-107918 | Awaiting Analysis | 未確認 | CWE-20 | Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthori |
| CVE-2026-107928 | Awaiting Analysis | 未確認 | When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when `gnutls_record_send | |
| CVE-2026-107929 | Awaiting Analysis | 未確認 | When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`if!`, `host!`, `ifhost!`), that binding is not part of the c | |
| CVE-2026-107935 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does no |
| CVE-2026-107937 | Analyzed | 未確認 | CWE-770 | In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured attachment-max-header-size (default 300 characters) and attachment-headers |
| CVE-2026-107938 | Analyzed | 未確認 | CWE-297 | In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that the hostname in the server’s TLS certificate matched the host being c |
| CVE-2026-108013 | Received | 未確認 | BigFix Platform uses Mozilla CA certificate bundle (PEM). Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When Big | |
| CVE-2026-108039 | Analyzed | 未確認 | CWE-776 | By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an XML document. A very large request could therefore use a lot of memory |
| CVE-2026-108062 | Awaiting Analysis | 未確認 | CWE-400 | Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service. |
| CVE-2026-108063 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially cra |
| CVE-2026-108064 | Deferred | 未確認 | CWE-862 | The WP Encryption WordPress plugin before 7.8.8.2 does not perform a capability or nonce check on one of the handlers that drives its SSL certificate-provisioning routine, allowin |
| CVE-2026-108065 | Deferred | 未確認 | CWE-89 | SQL Injection (CWE-89) in the SOAP GetUser method of the /preapproval.asmx endpoint in Channel Software WebAlliance eCommerce [VERSION — missing] allows an unauthenticated remote a |
| CVE-2026-108066 | Deferred | 未確認 | CWE-639 | The WP 2FA WordPress plugin before 4.2.0 does not perform an object-level capability check before removing a user's two-factor authentication configuration, allowing a site admini |
| CVE-2026-108069 | Deferred | 未確認 | CWE-345 | The Sunshine Photo Cart WordPress plugin before 3.7.4 does not check whether a visitor is permitted to access a restricted gallery before accepting comment submissions for its ima |
| CVE-2026-108070 | Deferred | 未確認 | CWE-552 | A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by ma |
| CVE-2026-108071 | Deferred | 未確認 | CWE-304 | Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials |
| CVE-2026-108072 | Deferred | 未確認 | CWE-276 | Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without suff |
| CVE-2026-108073 | Deferred | 未確認 | CWE-200 | The SureCart WordPress plugin before 4.9.5 does not restrict which related objects an anonymous visitor may include when reading a single upsell funnel through its REST API, nor s |
| CVE-2026-108082 | Awaiting Analysis | 未確認 | CWE-1333 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to versions 5.4.54, 6.4.46, 7.4.19, and 8.1.7, HeaderUtils::split() parsed h |
| CVE-2026-108086 | Deferred | 未確認 | CWE-776 | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects Apache Co |
| CVE-2026-108087 | Deferred | 未確認 | CWE-89 | ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Cocoon. This issue affects Apache Co |
| CVE-2026-108088 | Deferred | 未確認 | CWE-524 | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for on |
| CVE-2026-108089 | Deferred | 未確認 | CWE-497 | ** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access |
| CVE-2026-108092 | Deferred | 未確認 | CWE-639 | The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4. This is due |
| CVE-2026-108093 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present before dereferencing it. |
| CVE-2026-108094 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image |
| CVE-2026-108096 | Awaiting Analysis | 未確認 | CWE-639 | Improper authorization in the query resolvers generated by @aws-amplify/graphql-index-transformer in AWS Amplify API Category before 3.1.2 might allow an authenticated remote user |
| CVE-2026-108100 | Deferred | 未確認 | CWE-89 | HortusFox (hortusfox-web) before 6.2 contains an SQL injection vulnerability that allows API token holders to inject SQL by supplying crafted include_info values to the /api/locati |
| CVE-2026-108101 | Deferred | 未確認 | CWE-434 | HortusFox (hortusfox-web) through 6.3 contains an unrestricted file upload vulnerability in PlantAttachmentModel that allows authenticated users to store files with client-supplied |
| CVE-2026-108102 | Deferred | 未確認 | CWE-125 | Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_volume_measurement() in lib/pfcp/types.c that allows remote unauthenticated attackers to re |
| CVE-2026-108103 | Deferred | 未確認 | CWE-125 | Open5GS through 2.8.0 contains a heap out-of-bounds read vulnerability in ogs_pfcp_parse_dropped_dl_traffic_threshold() that allows remote unauthenticated attackers to read past IE |
| CVE-2026-108104 | Awaiting Analysis | 未確認 | CWE-415 | Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fa |
| CVE-2026-108105 | Deferred | 未確認 | CWE-617 | Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows remote unauthenticated attackers to crash the MME via malform |
| CVE-2026-108106 | Awaiting Analysis | 未確認 | CWE-789 | Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in com |
| CVE-2026-108107 | Deferred | 未確認 | CWE-89 | PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that interpolates request parameters into whereRaw() |
| CVE-2026-108108 | Deferred | 未確認 | CWE-287 | PHPNuxBill through 2025.3.20 contains an authentication bypass vulnerability in RADIUS CHAP verification because Password::chap_verify() returns true when the supplied response doe |
| CVE-2026-108109 | Deferred | 未確認 | CWE-307 | PHPNuxBill through 2025.3.20 contains an account takeover vulnerability in the customer password reset flow in system/controllers/forgot.php that allows unauthenticated attackers t |
| CVE-2026-108110 | Deferred | 未確認 | CWE-639 | MOVO through 0.2.3 contains an authorization bypass vulnerability in the chat-api document endpoints that allows authenticated users to access other users' stored objects by supply |
| CVE-2026-108111 | Deferred | 未確認 | CWE-862 | ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users' private workflows. Authenticated non-admi |
| CVE-2026-108112 | Deferred | 未確認 | CWE-862 | ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' workflows via POST /workflow/del/{uuid}. Attacker |
| CVE-2026-108113 | Deferred | 未確認 | CWE-434 | ILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI question import image handling (ilQtiMatImageSecurity) that allows authenticated author |
| CVE-2026-108114 | Awaiting Analysis | 未確認 | CWE-863 | Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is fiel |
| CVE-2026-108115 | Deferred | 未確認 | CWE-918 | Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo |
| CVE-2026-108116 | Analyzed | 未確認 | CWE-74 | In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup into SOAP req |
| CVE-2026-108117 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-108119 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved desti |
| CVE-2026-108120 | Deferred | 未確認 | CWE-31 | Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenti |
| CVE-2026-108121 | Deferred | 未確認 | CWE-20, CWE-400, CWE-96 | Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with hig |
| CVE-2026-108123 | Deferred | 未確認 | CWE-862 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not prop |
| CVE-2026-108124 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author before 4.1.0. |
| CVE-2026-108125 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1. |
| CVE-2026-108126 | Awaiting Analysis | 未確認 | CWE-639 | temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for. When payload encryption is enabled, the proxy chooses the decryption k |
| CVE-2026-108127 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-108128 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-108129 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-108130 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108131 | Awaiting Analysis | 未確認 | CWE-290, CWE-295 | No cwe for this issue in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-108132 | Analyzed | 未確認 | CWE-415 | Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108133 | Awaiting Analysis | 未確認 | CWE-763 | Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108134 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108135 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108136 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108151 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code Injection.This issue affects MDTF: |
| CVE-2026-108156 | Deferred | 未確認 | CWE-73 | LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill' |
| CVE-2026-108157 | Deferred | 未確認 | CWE-287 | Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthenticated attackers to take over accounts by abusing automatic |
| CVE-2026-108158 | Deferred | 未確認 | CWE-22 | plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted fi |
| CVE-2026-108159 | Deferred | 未確認 | CWE-79 | AstronRPA through 1.1.6 contains a cross-site scripting vulnerability in the desktop client's smart-component chat that allows remote attackers to execute OS commands by abusing un |
| CVE-2026-108160 | Deferred | 未確認 | CWE-494 | AstronRPA through 1.1.6 contains a download of code without integrity check vulnerability that allows network attackers to deliver malicious updates by abusing the desktop client's |
| CVE-2026-108161 | Deferred | 未確認 | CWE-78 | FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls wit |
| CVE-2026-108162 | Deferred | 未確認 | CWE-348 | Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts uncondi |
| CVE-2026-108163 | Deferred | 未確認 | CWE-307 | Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated |
| CVE-2026-108164 | Deferred | 未確認 | CWE-639 | Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users to |
| CVE-2026-108165 | Deferred | 未確認 | CWE-862 | Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read Locked Folder asset metadata be |
| CVE-2026-108168 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom Query Blocks post-type-archive-mapping allows Stored XSS.Th |
| CVE-2026-108174 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX |
| CVE-2026-108175 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Stored XSS.Th |
| CVE-2026-108179 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PluginUs.Net WOLF bulk-editor allows Blind SQL Injection.This issue affects WO |
| CVE-2026-108184 | Awaiting Analysis | 未確認 | CWE-295 | Improper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via network access. |
| CVE-2026-108185 | Awaiting Analysis | 未確認 | CWE-295 | Improper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information disclosure via network access. |
| CVE-2026-108258 | Awaiting Analysis | 未確認 | CWE-22 | Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied state_id and joins it into t |
| CVE-2026-108259 | Deferred | 未確認 | CWE-94 | Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMIT_REF, GITHUB_BRANCH, or HEAD, incorporates the raw value in |
| CVE-2026-108260 | Deferred | 未確認 | CWE-79, CWE-83 | Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-components/src/tina-markdown.js assigns a rich-text node.url value |
| CVE-2026-108261 | Deferred | 未確認 | CWE-346, CWE-441, CWE-601 | Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview route in packages/tinacms/src/admin/index.tsx can turn an atta |
| CVE-2026-108263 | Deferred | 未確認 | CWE-1392, CWE-306, CWE-653, CWE-863, CWE-95 | Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-node path through /console-api/workflow/code/run and /wor |
| CVE-2026-108264 | Deferred | 未確認 | CWE-1336 | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to 2026.9.1, wizard step Markdown supplied through the editor o |
| CVE-2026-108265 | Deferred | 未確認 | CWE-346 | Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed t |
| CVE-2026-108266 | Awaiting Analysis | 未確認 | CWE-346 | Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge c |
| CVE-2026-108267 | Deferred | 未確認 | CWE-346 | Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound |
| CVE-2026-108268 | Deferred | 未確認 | CWE-346 | Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certifica |
| CVE-2026-108269 | Deferred | 未確認 | CWE-346 | Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote R |
| CVE-2026-108291 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in itthinx Affiliates affiliates allows Object Injection.This issue affects Affiliates: from n/a through 7.0.1. |
| CVE-2026-108334 | Awaiting Analysis | 未確認 | CWE-917 | A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and r |
| CVE-2026-108335 | Deferred | 未確認 | CWE-640 | When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the a |
| CVE-2026-108336 | Deferred | 未確認 | CWE-321 | When the default self-signed certificate is used, an attacker could gain administrative access to the application. The SSL certificate for the web interface is used to sign JWT |
| CVE-2026-108337 | Deferred | 未確認 | CWE-640 | An administrator could retrieve the password reset code for any user and take over the account. The password reset codes were included in the output of an API and could be used |
| CVE-2026-108357 | Awaiting Analysis | 未確認 | CWE-611, CWE-776 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. From 3.3.0 until 3.10.8 and 5.10.0, Reader\Xml passes stored SpreadsheetML XML through XmlScanner::s |
| CVE-2026-108358 | Awaiting Analysis | 未確認 | CWE-611, CWE-776 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, XmlScanner::scan in src/PhpSpreadsheet/Reader/Se |
| CVE-2026-108359 | Awaiting Analysis | 未確認 | CWE-400, CWE-789 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Ods::processTableRow in src/PhpSpreadsheet/Reade |
| CVE-2026-108360 | Awaiting Analysis | 未確認 | CWE-863, CWE-918 | PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Worksheet\Drawing::setPath validates only the in |
| CVE-2026-108361 | Deferred | 未確認 | CWE-367 | Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload |
| CVE-2026-108362 | Deferred | 未確認 | CWE-346 | Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS |
| CVE-2026-108372 | Deferred | 未確認 | CWE-346, CWE-942 | Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/st |
| CVE-2026-108373 | Deferred | 未確認 | CWE-862 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and 16.27.0, certain endpoints in the Sales Person-wise Transaction Summary report fail to en |
| CVE-2026-108374 | Deferred | 未確認 | CWE-862 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.121.0 and 16.34.0, certain endpoints for status modification fail to enforce proper authorization c |
| CVE-2026-108375 | Awaiting Analysis | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0 |
| CVE-2026-108376 | Awaiting Analysis | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.47.3 through 0 |
| CVE-2026-108377 | Awaiting Analysis | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.62.3 through 0 |
| CVE-2026-108378 | Awaiting Analysis | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.40.0 through 0 |
| CVE-2026-108379 | Deferred | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0 |
| CVE-2026-108380 | Deferred | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0 |
| CVE-2026-108381 | Awaiting Analysis | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.44.0 through 0 |
| CVE-2026-108382 | Awaiting Analysis | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0 |
| CVE-2026-108383 | Awaiting Analysis | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0 |
| CVE-2026-108384 | Deferred | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0 |
| CVE-2026-108385 | Deferred | 未確認 | CWE-94 | dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0 |
| CVE-2026-108388 | Deferred | 未確認 | CWE-863 | Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user instead of the user supplied to Contribution.can_manage |
| CVE-2026-108390 | Deferred | 未確認 | CWE-427, CWE-88, CWE-94 | Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, update_object_value() in func/main.sh does not escape single |
| CVE-2026-108395 | Awaiting Analysis | 未確認 | CWE-770 | The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the io.modelcontextprotocol.sdk:mc |
| CVE-2026-108396 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108398 | Awaiting Analysis | 未確認 | CWE-426 | Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-108399 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108400 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108426 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108427 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108428 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108429 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108430 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108431 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108432 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108433 | Analyzed | 未確認 | CWE-807 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-108434 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108435 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108436 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108437 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108438 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108439 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108440 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108441 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108442 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108443 | Analyzed | 未確認 | CWE-193 | Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108444 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108445 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108446 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108447 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108448 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108449 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108450 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108451 | Analyzed | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108452 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-108453 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108454 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108455 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-108456 | Awaiting Analysis | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-108457 | Undergoing Analysis | 未確認 | CWE-787 | Out-of-bounds write in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108458 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108460 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network. |
| CVE-2026-108461 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108462 | Undergoing Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-108463 | Undergoing Analysis | 未確認 | CWE-41 | Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-108464 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Software Protection Platform (SPP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108465 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108466 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. |
| CVE-2026-108467 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network. |
| CVE-2026-108468 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108471 | Undergoing Analysis | 未確認 | CWE-184 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
| CVE-2026-108473 | Deferred | 未確認 | CWE-306 | Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instruction |
| CVE-2026-108474 | Awaiting Analysis | 未確認 | CWE-89 | In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions |
| CVE-2026-108475 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-108476 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-108477 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a thr |
| CVE-2026-108478 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Store |
| CVE-2026-108479 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a throug |
| CVE-2026-108480 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Skydropx: from n/a thro |
| CVE-2026-108481 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a throug |
| CVE-2026-108482 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stor |
| CVE-2026-108483 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce hippoo allows Reflected XSS.This iss |
| CVE-2026-108484 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best Payments Plugin for WP wp-payment-form allows Stored XSS.Th |
| CVE-2026-108485 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill eStore estore allows Reflected XSS.This issue affects eStore: from |
| CVE-2026-108486 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPMU DEV Forminator forminator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Forminator: from n/ |
| CVE-2026-108487 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue aff |
| CVE-2026-108488 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor |
| CVE-2026-108489 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Retrieve Embedd |
| CVE-2026-108490 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Stor |
| CVE-2026-108491 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored XSS.This issue affects |
| CVE-2026-108492 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Fullworks Plugins Quick Paypal Payments quick-paypal-payments allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-108493 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Secu |
| CVE-2026-108495 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureForms sureforms allows Stored XSS.This issue affects Sure |
| CVE-2026-108496 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP |
| CVE-2026-108497 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from |
| CVE-2026-108498 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Stored XSS.This issue affects |
| CVE-2026-108499 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge |
| CVE-2026-108501 | Deferred | 未確認 | CWE-269 | ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the |
| CVE-2026-108502 | Deferred | 未確認 | CWE-269 | ZTE Z80 Ultra contains an information disclosure vulnerability, through which third-party applications can read relevant information by hooking system APIs. |
| CVE-2026-108503 | Deferred | 未確認 | CWE-276 | ZTE Z80 Ultra has an interface permission validation vulnerability. The callable functions provided by the system lack sufficient access control. An attacker can leverage these fun |
| CVE-2026-108504 | Deferred | 未確認 | CWE-269 | ZTE Z80 Ultra has an unauthorized information disclosure vulnerability. The access control for methods within the framework is insufficient. An attacker can exploit this method to |
| CVE-2026-108505 | Deferred | 未確認 | CWE-269 | ZTE Z80 Ultra has a local information disclosure vulnerability. Third-party applications can capture data returned by system interfaces to obtain device-related information. |
| CVE-2026-108506 | Deferred | 未確認 | CWE-269 | ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retr |
| CVE-2026-108518 | Awaiting Analysis | 未確認 | CWE-843 | DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element. An {attr} element names |
| CVE-2026-108519 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-108521 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in Studio-Saelix Sencho up to 0.97.1. Affected by this issue is the function isValidRemoteUrl of the file backend/src/utils/validation.ts of the comp |
| CVE-2026-108522 | Deferred | 未確認 | CWE-287 | A vulnerability was found in Studio-Saelix Sencho up to 0.94.1. This affects an unknown part of the file /api/auth/login of the component Login Endpoint. Performing a manipulation |
| CVE-2026-108523 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in Studio-Saelix Sencho up to 0.94.1. This vulnerability affects unknown code of the file outboundTarget.ts of the component git-sources Browse API E |
| CVE-2026-108537 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-108538 | Deferred | 未確認 | CWE-119, CWE-416 | A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gf_mx_v of the file utils/os_thread.c of the component MP4Box. Such manipulat |
| CVE-2026-108539 | Deferred | 未確認 | CWE-119, CWE-416 | A vulnerability was detected in GPAC up to 26.07.0. This affects the function gf_fq_pop of the file filter_core/filter_queue.c of the component MP4Box. Performing a manipulation re |
| CVE-2026-108540 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in OpenSpug Spug up to 3.4.0/4.0.1. This impacts an unknown function of the file /exec/transfer of the component File Transfer. Executing a manipulation can l |
| CVE-2026-108541 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in highwarden Super Store Finder up to 3.8. Affected is an unknown function of the file /products/superstorefinder/index.php. The manipulation of the |
| CVE-2026-108542 | Deferred | 未確認 | CWE-918 | A vulnerability was found in 021is elvix-sdk up to 0.10.1. Affected by this vulnerability is an unknown functionality of the file src/mcp/index.ts of the component MCP Request Hand |
| CVE-2026-108543 | Deferred | 未確認 | CWE-22 | A vulnerability was determined in ag2ai ag2 up to 0.13.4. Affected by this issue is the function os.path.join of the component UserProxyAgent. This manipulation of the argument fil |
| CVE-2026-108544 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in Lippu Docx Reader Office Viewer App up to 1.4.5 on Android. This affects the function word.office.docxviewer.document.docx.reader.ViewTxt. Such ma |
| CVE-2026-108545 | Deferred | 未確認 | CWE-400 | SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs |
| CVE-2026-108546 | Deferred | 未確認 | CWE-78 | Spotweb through 1.5.8 contains an OS command injection vulnerability in the runcommand NZB handler that allows remote attackers to execute commands by publishing spots with malicio |
| CVE-2026-108547 | Deferred | 未確認 | CWE-639 | AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-sha |
| CVE-2026-108548 | Deferred | 未確認 | CWE-287 | AstronRPA through 1.1.6 contains an authentication bypass vulnerability in the OpenResty gateway's auth_handler.lua that accepts any Bearer token without validation. Unauthenticate |
| CVE-2026-108549 | Deferred | 未確認 | CWE-306 | cc-connect through 1.5.0 contains a missing authentication vulnerability in the MAX platform adapter webhook mode in platform/max/max.go that accepts unauthenticated updates when n |
| CVE-2026-108550 | Deferred | 未確認 | CWE-863 | SkillHub before 0.2.22 contains an incorrect authorization vulnerability in AccountMergeService and AccountMergeController that allows authenticated attackers to take over other ac |
| CVE-2026-108551 | Deferred | 未確認 | CWE-94 | openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped |
| CVE-2026-108553 | Awaiting Analysis | 未確認 | CWE-352 | OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers ca |
| CVE-2026-108554 | Deferred | 未確認 | CWE-918 | PDFMathTranslate (pdf2zh) through 1.9.11 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the |
| CVE-2026-108555 | Deferred | 未確認 | CWE-348 | PairDrop through 1.11.2 contains an IP spoofing vulnerability in Peer._setIP that allows remote attackers to join other networks' discovery rooms by supplying a forged cf-connectin |
| CVE-2026-108566 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in InstantSoft icms2 up to 2.18.2. This issue affects the function index of the file templates/default/controllers/messages/index.tpl.php of the comp |
| CVE-2026-108567 | Deferred | 未確認 | CWE-22 | A vulnerability was found in InstantSoft icms2 up to 2.18.2. Impacted is the function files_delete_file of the file system/fields/image.php of the component Image Handler. Performi |
| CVE-2026-108568 | Deferred | 未確認 | CWE-345 | A vulnerability was determined in InstantSoft icms2 up to 2.18.2. The affected element is the function validatePaypalOrder of the file system/controllers/billing/actions/paypal.php |
| CVE-2026-108569 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Furion .NET Framework up to 4.9.9.92. The impacted element is the function String.Replace of the file framework/Furion/Templates/Extensions/String |
| CVE-2026-108570 | Deferred | 未確認 | CWE-1336, CWE-791 | A security flaw has been discovered in Furion .NET Framework up to 4.9.9.95. This affects the function RunCompile of the file framework/Furion/ViewEngine/Engines/ViewEngine.cs of t |
| CVE-2026-108571 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/task/openapi/openkqjAction.php of the co |
| CVE-2026-108572 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in Casdoor up to 3.164.0/4.10.0. Affected is the function CasP3ProxyValidate of the file controllers/cas.go of the component Proxy Valida |
| CVE-2026-108573 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File |
| CVE-2026-108574 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in BerriAI LiteLLM up to 1.95.0. Affected by this issue is the function ui_view_session_spend_logs of the file litellm/proxy/spend_tracking/spend_management_e |
| CVE-2026-108575 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function get_secret of the file secret_managers/main.py of the component Secret Resolution. The man |
| CVE-2026-108576 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process_ping of the component IPPingDiagnostics Handler. The manipulation of the argum |
| CVE-2026-108577 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was determined in Konstanty Bialkowski libmodplug up to 0.8.9.1. This issue affects the function abc_add_gchord of the file src/load_abc.cpp of the component ABC Mu |
| CVE-2026-108578 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.json of the component Embedded Web Server. Such manipulation leads to |
| CVE-2026-108579 | Deferred | 未確認 | CWE-1236 | OpenPanel through 2.3.0 contains a CSV formula injection vulnerability that allows unauthenticated attackers to embed spreadsheet formulas by supplying crafted profile IDs to the / |
| CVE-2026-108580 | Deferred | 未確認 | CWE-307 | AniWorld Downloader before 5.3.0 contains an improper restriction of authentication attempts vulnerability in the WebUI /login POST handler that allows unauthenticated attackers to |
| CVE-2026-108581 | Deferred | 未確認 | CWE-862 | TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/provi |
| CVE-2026-108582 | Deferred | 未確認 | CWE-732 | GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated doc |
| CVE-2026-108583 | Deferred | 未確認 | CWE-918 | zotero-mcp 0.10.0 through 0.14.1 contains a server-side request forgery vulnerability that allows attackers to reach internal services because _fetch_embedded_metadata fetches URLs |
| CVE-2026-108584 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in FunnyWolf Viper up to 3.1.11. The affected element is an unknown function of the file /root/viper/.git/config. Performing a manipulation resu |
| CVE-2026-108585 | Deferred | 未確認 | CWE-22 | argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints via u |
| CVE-2026-108586 | Deferred | 未確認 | CWE-863 | 1MCP Agent (@1mcp/agent) 0.20.0 through 0.39.0 contains an incorrect authorization vulnerability that allows authenticated clients to bypass OAuth tag-scope enforcement using negat |
| CVE-2026-108587 | Deferred | 未確認 | CWE-434 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.34. |
| CVE-2026-108591 | Deferred | 未確認 | CWE-73 | InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP |
| CVE-2026-108592 | Deferred | 未確認 | CWE-526 | mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits --clearenv, so sandboxed commands inherit the host e |
| CVE-2026-108593 | Deferred | 未確認 | CWE-94 | 9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that allows authenticated dashboard users to injec |
| CVE-2026-108594 | Deferred | 未確認 | CWE-918 | Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports when allowlisting the identity provider host |
| CVE-2026-108595 | Deferred | 未確認 | CWE-863 | Phi 0.3.0 through 0.28.4 contains a permission bypass vulnerability that allows spawned sub-agents to escape workspace_only_writes and readonly mode by supplying an unchecked workd |
| CVE-2026-108596 | Deferred | 未確認 | CWE-639 | OpenLIT 2.1.0 contains an authorization bypass vulnerability that allows authenticated users to read other projects' telemetry by supplying a forged x-openlit-project-id header. At |
| CVE-2026-108597 | Awaiting Analysis | 未確認 | CWE-22 | Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extr |
| CVE-2026-108598 | Deferred | 未確認 | CWE-94 | Floci 1.1.0 before 2.2.0 contains a code injection vulnerability in VtlTemplateEngine that allows unauthenticated attackers to execute commands via unrestricted Velocity mapping te |
| CVE-2026-108599 | Deferred | 未確認 | CWE-59 | phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspace_only_writes by exploiting lexical-only path check |
| CVE-2026-108600 | Deferred | 未確認 | CWE-59 | open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to create files outside |
| CVE-2026-108602 | Deferred | 未確認 | CWE-918 | Helicone through v2025.08.21-1 contains a server-side request forgery vulnerability in the Jawn webhook sender that allows authenticated organization users to reach internal servic |
| CVE-2026-108603 | Deferred | 未確認 | CWE-22 | slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manifest- |
| CVE-2026-108604 | Deferred | 未確認 | CWE-863 | Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows prompt-injected agents or untrusted MCP clients to bypass re |
| CVE-2026-108605 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController updateById handler that allows any authenticated user to modify global OCR templates. |
| CVE-2026-108606 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiOcrController deleteById handler that allows any authenticated user to delete OCR records. Low-privi |
| CVE-2026-108607 | Deferred | 未確認 | CWE-639 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI video generation records by supplying a |
| CVE-2026-108608 | Deferred | 未確認 | CWE-639 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' AI voice records by supplying an arbitrary |
| CVE-2026-108609 | Deferred | 未確認 | CWE-639 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' AI voice generation history via the userId p |
| CVE-2026-108610 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController edit handler that allows any authenticated user to modify word templates. L |
| CVE-2026-108611 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController delete handler that allows any authenticated user to delete word templates. |
| CVE-2026-108612 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AigcWordTemplateController deleteBatch handler that allows low-privileged authenticated users to delet |
| CVE-2026-108613 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController release handler that allows any authenticated user to publish or unpublish other us |
| CVE-2026-108614 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController exportXls handler that allows any authenticated user to export AI evaluator dat |
| CVE-2026-108615 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController delete handler that allows low-privileged authenticated users to delete AI eval |
| CVE-2026-108616 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragExtDataController deleteBatch handler that allows any authenticated user to delete AI evaluator r |
| CVE-2026-108617 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create message templates by calling POST /sys/message/sysMe |
| CVE-2026-108618 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message templates via PUT /sys/message/sysMessageTem |
| CVE-2026-108619 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete message templates via the DELETE /sys/message/sysMes |
| CVE-2026-108620 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController deleteBatch handler that allows any authenticated user to delete organizational |
| CVE-2026-108621 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController edit handler that allows any authenticated user to modify organizational positio |
| CVE-2026-108622 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController delete handler that allows any authenticated user to delete audit log entries. Low-pr |
| CVE-2026-108623 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysLogController deleteBatch handler that allows any authenticated user to delete system audit log ent |
| CVE-2026-108624 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController deleteBatch handler that allows low-privileged authenticated users to delete mess |
| CVE-2026-108625 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify message push records by calling PUT /sys/message/sys |
| CVE-2026-108626 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController queryById handler that allows low-privileged authenticated users to read any mess |
| CVE-2026-108627 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the loadDatarule handler of SysRoleController that lets any authenticated user query role data rules. Low- |
| CVE-2026-108628 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDeptRolePermission endpoint of SysDepartPermissionController that allows any authenticated user to |
| CVE-2026-108629 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartPermissionController that allows any authenticated user to modify dep |
| CVE-2026-108630 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysDepartPermissionController that allows any authenticated user to modify department permission records b |
| CVE-2026-108631 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController delete handler that allows low-privileged authenticated users to delete |
| CVE-2026-108632 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartPermissionController queryById handler that allows any authenticated user to read department |
| CVE-2026-108633 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create department permission bindings via POST /sys/sysDepa |
| CVE-2026-108634 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete department permission bindings via the DELETE /sys/s |
| CVE-2026-108635 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/sysDepart/getDepartmentHead endpoint of SysDepartController that allows any authenticated use |
| CVE-2026-108636 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartController appImportExcel handler that allows any authenticated user to import departments. L |
| CVE-2026-108637 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove user group members by calling DELETE /sys/user/delet |
| CVE-2026-108638 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove group memberships via the deleteGroupUser handler in |
| CVE-2026-108639 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to permanently delete data dictionaries via the deletePhysic handler of Sy |
| CVE-2026-108640 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController queryById handler that lacks Shiro permission annotations. Low-privileged auth |
| CVE-2026-108641 | Deferred | 未確認 | CWE-639 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' in-application messages via the getOne handl |
| CVE-2026-108642 | Deferred | 未確認 | CWE-639 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysAnnouncementSendController that allows authenticated users to modify other users' message delivery reco |
| CVE-2026-108643 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to delete category dictionary entries via DELETE /sys/category |
| CVE-2026-108644 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController delete handler that allows any authenticated user to delete category dictionary |
| CVE-2026-108645 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in SysCategoryController that allows any authenticated user to edit category dictionary nodes via /sys/catego |
| CVE-2026-108646 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCategoryController importExcel handler that allows any authenticated user to import category dictio |
| CVE-2026-108647 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to create validation rules through the SysCheckRuleController |
| CVE-2026-108648 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the GET /sys/api/getDynamicDbSourceByCode endpoint of SystemApiController, which lacks Shiro permission or |
| CVE-2026-108649 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRolesById handler of SystemApiController that lets authenticated users read any user's role c |
| CVE-2026-108650 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getUserPermissionSet handler of SystemApiController that allows any authenticated user to read other u |
| CVE-2026-108651 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getRolesByUserId handler of SystemApiController that allows authenticated users to retrieve any user's |
| CVE-2026-108652 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController updateAvatar handler that allows any authenticated user to change other users' ava |
| CVE-2026-108653 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryPageList handler of OpenApiController that allows any authenticated user to list OpenAPI registry |
| CVE-2026-108654 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OssFileController queryById handler that allows low-privileged authenticated users to read object stor |
| CVE-2026-108655 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the QuartzJobController queryById handler that allows low-privileged authenticated users to read scheduled |
| CVE-2026-108656 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController GET /sys/tenant/getTenantPackApplyUsers endpoint that allows any authenticated use |
| CVE-2026-108657 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController passApply handler that allows any authenticated user to approve tenant administrat |
| CVE-2026-108658 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController queryTenantAuthInfo handler that allows any authenticated user to read other tenan |
| CVE-2026-108659 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController listPackByTenantUserId handler that allows any authenticated user to query tenant |
| CVE-2026-108660 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to modify tenant settings by calling PUT /sys/tenant/updateApplyStatus. Lo |
| CVE-2026-108661 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to transfer tenant ownership via POST /sys/tenant/changeOwenUserTenant. Lo |
| CVE-2026-108662 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remove users from tenant product packs via PUT /sys/tenant/ |
| CVE-2026-108663 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysTenantController deleteApply handler that allows any authenticated user to reject tenant administra |
| CVE-2026-108664 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController queryById handler that allows low-privileged authenticated users to read any AI |
| CVE-2026-108665 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController edit handler that allows any authenticated user to modify AI prompt templates. |
| CVE-2026-108666 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the deleteBatch handler of AiragPromptsController that allows any authenticated user to delete AI prompt t |
| CVE-2026-108667 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to restore deleted AI prompt templates by calling the revertRe |
| CVE-2026-108668 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController deleteRecycleBin handler that allows any authenticated user to purge AI prompt |
| CVE-2026-108669 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the embeddingSearch handler of AiragKnowledgeController that lacks Shiro permission annotations. Low-privi |
| CVE-2026-108670 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the promptExperiment handler of AiragPromptsController that allows any authenticated user to run AI prompt |
| CVE-2026-108671 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to read MCP server configurations because the queryById permission check i |
| CVE-2026-108672 | Deferred | 未確認 | CWE-639 | JeecgBoot through 3.9.5 contains an authorization bypass vulnerability in the getVideoRecords handler of VideoGenerationController that allows authenticated users to read other use |
| CVE-2026-108673 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragPromptsController exportXls handler that allows any authenticated user to export all AI prompts. |
| CVE-2026-108674 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the OpenApiController queryById handler that allows low-privileged authenticated users to read OpenAPI def |
| CVE-2026-108675 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController editIzTop handler that allows low-privileged authenticated users to change a |
| CVE-2026-108676 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysAnnouncementController downLoadFiles handler that allows low-privileged authenticated users to down |
| CVE-2026-108677 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in GET /sys/api/getUserByName that allows low-privileged authenticated users to retrieve any user's stored pa |
| CVE-2026-108678 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the queryUserRoles handler of SystemApiController that lets authenticated users read any user's role codes |
| CVE-2026-108679 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the sendBusAnnouncement handler of SystemApiController that allows any authenticated user to send announce |
| CVE-2026-108680 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to send template notifications by calling POST /sys/api/sendTemplateAnnoun |
| CVE-2026-108681 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channel/web/web_channel.py of the component Web Console. The manip |
| CVE-2026-108682 | Deferred | 未確認 | CWE-404 | A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /upload of the component Web Console. This manipulation cause |
| CVE-2026-108683 | Deferred | 未確認 | CWE-400, CWE-789 | A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function of the component Media Download Handler. Such manipulation |
| CVE-2026-108684 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/java/com/jeecg/demo/controller/JeecgFormDemoController.java |
| CVE-2026-108688 | Deferred | 未確認 | CWE-862 | Eladmin through 2.7 contains a missing authorization vulnerability in the LocalStorageController uploadPicture handler that allows low-privileged authenticated users to bypass the |
| CVE-2026-108689 | Deferred | 未確認 | CWE-639 | Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows authenticated users to write into other users' AI chat sessions by supplying an arbitrary s |
| CVE-2026-108690 | Deferred | 未確認 | CWE-783 | mall4j through 4.0 contains an information disclosure vulnerability that allows authenticated customers to read other shoppers' cart items due to an operator precedence error in th |
| CVE-2026-108691 | Deferred | 未確認 | CWE-783 | mall4j through 4.0 contains an improper authorization vulnerability that allows authenticated storefront customers to delete other shoppers' cart items through an operator preceden |
| CVE-2026-108692 | Deferred | 未確認 | CWE-862 | 1Panel-dev CordysCRM from 1.9.0 before 1.9.2 contains a missing authorization vulnerability in eight ModuleFieldController /field/source data-source endpoints lacking permission ch |
| CVE-2026-108693 | Awaiting Analysis | 未確認 | CWE-427 | ImageMagick on Windows through 7.1.2-33 and 6.9.13-58 contains an uncontrolled search path vulnerability in NTGhostscriptEXE() that launches gswin64c.exe by bare name when Ghostscr |
| CVE-2026-108694 | Deferred | 未確認 | CWE-73 | ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without t |
| CVE-2026-108695 | Deferred | 未確認 | CWE-863 | MultiVendorX WordPress plugin through 5.0.19 contains an incorrect authorization vulnerability that allows vendor accounts to modify marketplace-wide settings via the settings REST |
| CVE-2026-108696 | Deferred | 未確認 | CWE-639 | CoreShop through 1.5.5 contains an authorization bypass vulnerability in the OrderController that allows authenticated customers to act on other customers' orders by supplying user |
| CVE-2026-108697 | Deferred | 未確認 | CWE-862 | CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to list permission-restricted resources because ResourceController |
| CVE-2026-108698 | Deferred | 未確認 | CWE-367 | hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that verifies the Cosign signature of a separately resolved tag rathe |
| CVE-2026-108699 | Deferred | 未確認 | CWE-347 | hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load malicious WebAssembly plugins because cosign_verify_args() accepts a |
| CVE-2026-108700 | Deferred | 未確認 | CWE-862 | 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability that allows authenticated users to list business titles by calling POST /field/source/business-titl |
| CVE-2026-108701 | Deferred | 未確認 | CWE-862 | 1Panel-dev CordysCRM before 1.9.2 contains a missing authorization vulnerability in the ContractController sortModule handler for POST /contract/sort, which lacks any permission an |
| CVE-2026-108702 | Deferred | 未確認 | CWE-862 | 1Panel-dev CordysCRM through 1.9.3 lacks a PROCESS_SETTING permission check on POST /approval-flow/webhook/test, allowing any authenticated user to trigger server-side requests to |
| CVE-2026-108703 | Deferred | 未確認 | CWE-862 | CordysCRM through 1.9.3 contains a missing authorization vulnerability in POST /approval-resource/push that allows authenticated users to submit any resource for approval without o |
| CVE-2026-108704 | Deferred | 未確認 | CWE-639 | CordysCRM through 1.9.3 contains an authorization bypass vulnerability that allows low-privileged authenticated users to skip permission checks by setting the owner field to their |
| CVE-2026-108705 | Deferred | 未確認 | CWE-862 | CordysCRM through 1.9.3 contains a missing authorization vulnerability in the POST /custom-form/data/import endpoint that allows authenticated users to import data into any custom |
| CVE-2026-108706 | Deferred | 未確認 | CWE-862 | eladmin through commit 55fbf70 contains a missing authorization vulnerability in the downloadS3Storage handler that allows any authenticated user to retrieve stored object URLs wit |
| CVE-2026-108707 | Deferred | 未確認 | CWE-287 | Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthenticated attackers to call every HRM API endpoint by omitting th |
| CVE-2026-108708 | Deferred | 未確認 | CWE-862 | Wukong_HRM through commit 186115e contains a missing authorization vulnerability because EmployeeAspect assigns every caller the HR administrator role and EmployeeUtil data-scope c |
| CVE-2026-108709 | Deferred | 未確認 | CWE-287 | Authentication bypass within in-house network in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin de |
| CVE-2026-108710 | Deferred | 未確認 | CWE-862 | NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb |
| CVE-2026-108711 | Deferred | 未確認 | CWE-863 | Plastic Labs Honcho through 3.3.0 contains an incorrect authorization vulnerability that allows peer- or session-scoped API key holders to read workspace data because get_or_create |
| CVE-2026-108712 | Deferred | 未確認 | CWE-862 | SuiteCRM through 7.15.2 and 8.10.2 contains a missing authorization vulnerability in the DetailUserRole entry point that allows authenticated non-admin users to view other users' A |
| CVE-2026-108713 | Awaiting Analysis | 未確認 | CWE-862 | SuiteCRM through 7.15.2 and 8.x through 8.10.2 contains a missing authorization vulnerability that allows authenticated users to create and modify EmailMarketing records via the se |
| CVE-2026-108714 | Deferred | 未確認 | CWE-770 | MCP Kotlin SDK through 0.15.0 contains an uncontrolled memory allocation vulnerability that allows remote clients to exhaust server memory because Application.mcpWebSocket installs |
| CVE-2026-108715 | Awaiting Analysis | 未確認 | CWE-639 | LibreNMS through 26.9.1.1 contains an authorization bypass vulnerability in includes/html/graphs/smokeping/auth.inc.php that checks the src probe device instead of the rendered tar |
| CVE-2026-108716 | Deferred | 未確認 | CWE-319 | mcp-remote 0.8.0 through 0.14.3 contains a cleartext transmission vulnerability in authorizeWithDeviceCode that sends client secrets and receives tokens without enforcing HTTPS end |
| CVE-2026-108717 | Deferred | 未確認 | CWE-862 | Combodo iTop 3.1.0 through 3.3.0 contains a missing authorization vulnerability in LinkSetController.php that allows authenticated console users to bypass profile grants by supplyi |
| CVE-2026-108718 | Deferred | 未確認 | CWE-862 | Rill 0.77.0 through 0.90.5 contains a missing authorization vulnerability in the admin OAuth server that issues authorization codes to dynamically registered clients without user c |
| CVE-2026-108719 | Deferred | 未確認 | CWE-918 | LLMGateway through 1.20.0 contains a blind server-side request forgery vulnerability that allows API key holders to reach internal hosts via the video-generation callback_url exten |
| CVE-2026-108720 | Deferred | 未確認 | CWE-862 | phpIPAM through 1.8.3 contains a missing authorization vulnerability that allows authenticated low-privilege users to view restricted subnets and addresses because customer, locati |
| CVE-2026-108721 | Deferred | 未確認 | CWE-178 | Open Computer Use through 1.0.0 on macOS contains an improper case sensitivity handling vulnerability that allows local MCP callers to bypass the password-manager denylist using ca |
| CVE-2026-108722 | Deferred | 未確認 | CWE-79 | open-computer-use through commit 610bac8 contains a stored cross-site scripting vulnerability in Logger.write_log_file in os_computer_use/logging.py, which writes transcript text i |
| CVE-2026-108723 | Deferred | 未確認 | CWE-59 | answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text without resolving symlink |
| CVE-2026-108724 | Deferred | 未確認 | CWE-639 | Sylius through 2.3.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unmoderated and rejected product reviews because the AcceptedExten |
| CVE-2026-108725 | Deferred | 未確認 | CWE-79 | Cheshire Cat AI core through 2.0.23 contains a stored cross-site scripting vulnerability in the uploads plugin that allows authenticated users to upload HTML files via POST /upload |
| CVE-2026-108726 | Deferred | 未確認 | CWE-862 | GLPI through 12.0.0 contains a missing authorization vulnerability in ajax/map.php that allows authenticated low-privileged users to search itemtypes they cannot view by omitting t |
| CVE-2026-108727 | Deferred | 未確認 | CWE-862 | EdgeEver through 1.108.0 contains a missing authorization vulnerability in the Hono API memo-template routes that allows holders of scoped API tokens to bypass token scope restrict |
| CVE-2026-108728 | Deferred | 未確認 | CWE-312 | Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variable |
| CVE-2026-108729 | Deferred | 未確認 | CWE-863 | Corteza through 2024.9.10 contains an incorrect authorization vulnerability in compose attachment endpoints that allows unauthenticated attackers to download private attachments by |
| CVE-2026-108730 | Deferred | 未確認 | CWE-862 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py that skip the workspace membership check. Authenticated non |
| CVE-2026-108731 | Deferred | 未確認 | CWE-862 | Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the can_only_join_via_inv |
| CVE-2026-108732 | Deferred | 未確認 | CWE-862 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted get_account_and_amount meth |
| CVE-2026-108733 | Deferred | 未確認 | CWE-862 | Frappe HR (hrms) before 16.11.0, including all 14.x and 15.x releases through 15.64.3, contains a missing authorization vulnerability in the whitelisted expire_allocation method th |
| CVE-2026-108734 | Deferred | 未確認 | CWE-862 | Frappe CRM 1.49.0 through 1.87.0 contains a missing authorization vulnerability in crm.api.doc.get_linked_docs_of_document that allows authenticated users to read linked documents |
| CVE-2026-108735 | Deferred | 未確認 | CWE-918 | Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxy_url. Attacke |
| CVE-2026-108736 | Deferred | 未確認 | CWE-348 | Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attackers to evade ALLOWED_IPS and Prometheus allowlists by spoofi |
| CVE-2026-108737 | Deferred | 未確認 | CWE-640 | Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tokens as session credentials because TokenManager does not bin |
| CVE-2026-108738 | Deferred | 未確認 | CWE-352 | Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into attacker-controlled accounts because the OpenID Connect cal |
| CVE-2026-108739 | Deferred | 未確認 | CWE-306 | OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unauthenticated attackers to list all workspaces via GET /v1/work |
| CVE-2026-108740 | Deferred | 未確認 | CWE-915 | GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that allows logged-in users to modify protected account fields v |
| CVE-2026-108741 | Deferred | 未確認 | CWE-367 | Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the public_url guard validates a resolved address but |
| CVE-2026-108742 | Deferred | 未確認 | CWE-862 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that lets view-only shared-project members persist credentials with |
| CVE-2026-108743 | Deferred | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin. Impact most to the kylin services that are directly expose |
| CVE-2026-108744 | Deferred | 未確認 | CWE-78 | pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sync.py that passes unquoted .pbip paths to cmd /c start when reopening projects. Attackers |
| CVE-2026-108745 | Deferred | 未確認 | CWE-862 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web session holder to read other users' LOB export files from a sha |
| CVE-2026-108746 | Deferred | 未確認 | CWE-863 | Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissionForResources that ignores stored ReadOnly or None privilege levels for resources l |
| CVE-2026-108747 | Deferred | 未確認 | CWE-639 | Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members to delete other users' personal access tokens by supplying t |
| CVE-2026-108748 | Awaiting Analysis | 未確認 | CWE-401 | Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket /_chat/routes endpoint that allows unauthenticated remote c |
| CVE-2026-108749 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-108750 | Deferred | 未確認 | CWE-409 | OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust PHP memory by uploading crafted office documents. Attackers c |
| CVE-2026-108751 | Deferred | 未確認 | CWE-59 | MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite files outside the proje |
| CVE-2026-108752 | Awaiting Analysis | 未確認 | CWE-694 | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite another user's named-server OAuth client by registering a hyphe |
| CVE-2026-108753 | Deferred | 未確認 | CWE-798 | Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which sets a fixed admin password and public JWT secret. Unauthenti |
| CVE-2026-108754 | Deferred | 未確認 | CWE-532 | GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger middleware records the raw query string before extractAuthK |
| CVE-2026-108755 | Deferred | 未確認 | CWE-770 | Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated attackers to exhaust memory via the SNS ingestion endpoint. Att |
| CVE-2026-108756 | Deferred | 未確認 | CWE-862 | Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-scoped MCP API keys to perform human-only binding operations |
| CVE-2026-108757 | Deferred | 未確認 | CWE-306 | Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-router.ts that skips the authToken check on POST /pinclaw/sen |
| CVE-2026-108758 | Deferred | 未確認 | CWE-639 | Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking::register() that allows unauthenticated attackers to modify any appointment by supplying a |
| CVE-2026-108759 | Deferred | 未確認 | CWE-59 | mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outside the sandbox via s |
| CVE-2026-108760 | Deferred | 未確認 | CWE-1327 | LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0.0.0 on port 14345, while the lf CLI silently discards HOST |
| CVE-2026-108762 | Deferred | 未確認 | Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-hous | |
| CVE-2026-108764 | Deferred | 未確認 | CWE-918 | Server-Side request forgery (SSRF) vulnerability in Apache Kylin. Impact most to the kylin job service that are directly exposed to public network, which is not common. In-house ky |
| CVE-2026-108766 | Deferred | 未確認 | Missing authorization on jdbc source config update in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kyl | |
| CVE-2026-108768 | Deferred | 未確認 | CWE-400, CWE-770 | A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of the component Streaming Tool-Call Argument Handler. The manipu |
| CVE-2026-108769 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.tsx of the component Markdown Rendering. The manipulation re |
| CVE-2026-108770 | Deferred | 未確認 | CWE-918 | A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Ge |
| CVE-2026-108771 | Deferred | 未確認 | CWE-306 | Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public n |
| CVE-2026-108772 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in bleenco abstruse up to 2.1.0. This issue affects the function filepath.Join of the file server/api/worker/download_cache.go of the com |
| CVE-2026-108773 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in erzhongxmu JEEWMS up to 2026.09.27-W39. Impacted is the function docheck of the file src/main/java/com/zzjee/wm/controller/WmOmNoticeHController.jav |
| CVE-2026-108774 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The affected element is the function getbinall/getbinallagv of the file src/main/java/com/zzjee/md/controller/MdBin |
| CVE-2026-108775 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in erzhongxmu JEEWMS up to 2026.09.27-W39. The impacted element is the function WvNoticeController.list of the file com/zzjee/wmapi/controller/WvNoti |
| CVE-2026-108776 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. The impact is moderate if kylin service is in query only mode, w |
| CVE-2026-108777 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in erzhongxmu JEEWMS up to 2026.09.27-W39. This affects the function WvGiController.list of the file src/main/java/com/zzjee/wmapi/controller/WvGiControll |
| CVE-2026-108778 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in erzhongxmu JEEWMS up to 2026.09.27-W39. This impacts the function WmInQmIController.list of the file src/main/java/com/zzjee/wm/controller/WmInQmI |
| CVE-2026-108779 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected is the function WmSttInGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmS |
| CVE-2026-108780 | Deferred | 未確認 | Potential JDBC source configuration validation vulnerability in Apache Kylin. The impact is minor, unless the kylin backend services are open to public network. This issue affec | |
| CVE-2026-108781 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java |
| CVE-2026-108782 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this issue is the function CommonServiceImpl.getAutoList of the file src/main/java/org/jeecgfr |
| CVE-2026-108783 | Deferred | 未確認 | CWE-1392 | A security vulnerability has been detected in PRVTPRO Amnezia-Web-Panel up to 1.6.2/1.7.2. This affects an unknown part of the file app.py of the component Backup Download. The man |
| CVE-2026-108784 | Deferred | 未確認 | CWE-840 | A vulnerability was detected in macrozheng mall up to 1.0.3. This vulnerability affects the function AlipayServiceImpl.pay of the file com/macro/mall/portal/service/impl/AlipayServ |
| CVE-2026-108785 | Deferred | 未確認 | CWE-613 | A flaw has been found in macrozheng mall up to 1.0.3. This issue affects the function JwtTokenUtil.refreshHeadToken of the file /admin/refreshToken of the component JwtAuthenticati |
| CVE-2026-108786 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in houtini-ai seo-crawler-mcp up to 2.1.5. Impacted is the function run_seo_audit of the file src/core/CrawlOrchestrator.ts of the component Crawler. |
| CVE-2026-108787 | Deferred | 未確認 | CWE-918 | A vulnerability was found in houtini-ai voice-analyser-mcp up to 2.1.1. The affected element is the function fetch of the file src/utils/crawler.ts of the component collect_corpus. |
| CVE-2026-108788 | Deferred | 未確認 | CWE-264, CWE-265 | A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of th |
| CVE-2026-108789 | Deferred | 未確認 | CWE-840, CWE-841 | A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads |
| CVE-2026-108790 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. This impacts the function TemplateController.save of the file /system/cms/ |
| CVE-2026-108791 | Deferred | 未確認 | CWE-22 | A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Affected is the function TemplateController.input of the file /system/cms/templ |
| CVE-2026-108793 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-108794 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/system |
| CVE-2026-108795 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component |
| CVE-2026-108796 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component Biometric Data Endpoint. Executing |
| CVE-2026-108797 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee |
| CVE-2026-108798 | Deferred | 未確認 | CWE-320, CWE-321 | A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key |
| CVE-2026-108799 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Contr |
| CVE-2026-108800 | Deferred | 未確認 | CWE-352, CWE-862 | A vulnerability was identified in yangzongzhuan RuoYi 4.8.3. The affected element is an unknown function. Such manipulation leads to cross-site request forgery. The attack can be e |
| CVE-2026-108801 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in prasathmani TinyFileManager up to 2.6. The impacted element is the function move_uploaded_file of the file tinyfilemanager.php. Performing a |
| CVE-2026-108802 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawer of the file /system/dict/data/add of the component Dictionary Data Drawer Prev |
| CVE-2026-108803 | Deferred | 未確認 | CWE-613 | A security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The m |
| CVE-2026-108804 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Managem |
| CVE-2026-108805 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query of the file |
| CVE-2026-108806 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysql_query of the fil |
| CVE-2026-108807 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function mysql_query of the file source/adminregi |
| CVE-2026-108808 | Deferred | 未確認 | CWE-598 | A vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file /auth/realms/default/protocol/openid-connect/logo |
| CVE-2026-108809 | Deferred | 未確認 | CWE-613 | A vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file /auth/realms/default/protocol/openid-connect/l |
| CVE-2026-108810 | Deferred | 未確認 | CWE-200, CWE-284 | A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema Validation. The manipulation of the arg |
| CVE-2026-108811 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the argument path/file causes informati |
| CVE-2026-108812 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. Such manipulat |
| CVE-2026-108813 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Performing a manipulation results in sql injection. It is possib |
| CVE-2026-108814 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead to sql injection. It is possible to lau |
| CVE-2026-108815 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross site scripting. The attack can be |
| CVE-2026-108816 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the component PythonTools. The manip |
| CVE-2026-108817 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library libs/agno/agno/tools/coding.py of the |
| CVE-2026-108818 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such manipulation of the argument se |
| CVE-2026-108819 | Deferred | 未確認 | CWE-913 | A security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent Orchestration Layer. Performing a manipu |
| CVE-2026-108820 | Deferred | 未確認 | CWE-250 | A weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library libs/agno/agno/team/_default_tools.py of the comp |
| CVE-2026-108821 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file internal/utils/inject.go of the component SQL Valid |
| CVE-2026-108822 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file src/modules/sipt/ss7_parser.c of the component s |
| CVE-2026-108823 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache Kylin. The impact is minor unless job services are exposed to public network, which is |
| CVE-2026-108824 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file io/dataease/engine/utils/Utils.java. This manipulation of the a |
| CVE-2026-108825 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope. Such manipulation of the argum |
| CVE-2026-108826 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of the component PayPal IPN Handler |
| CVE-2026-108827 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/includes/functions/general.php of the component Administrative |
| CVE-2026-108828 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the component Admin Panel. The manipula |
| CVE-2026-108829 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of the component Module Configuratio |
| CVE-2026-108830 | Deferred | 未確認 | CWE-362 | A weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the component VideoRoom. This manipu |
| CVE-2026-108831 | Deferred | 未確認 | CWE-259, CWE-798 | A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the component Admin API |
| CVE-2026-108833 | Deferred | 未確認 | Default startup profile miss security settings in Apache Kylin. Any deployment has security setting profile turned on does not impact. This issue affects Apache Kylin: from 4.0. | |
| CVE-2026-108834 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component Query Parameter Handler. Perfor |
| CVE-2026-108835 | Deferred | 未確認 | CWE-266, CWE-269 | A flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys. Executing a manipulation of the ar |
| CVE-2026-108836 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component Pull API. The manipulation lead |
| CVE-2026-108837 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Kylin. Given an attacker has got project admin permission, an cache API maybe used to cause computed-co |
| CVE-2026-108839 | Deferred | 未確認 | CWE-59 | thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside the workspace by follow |
| CVE-2026-108850 | Deferred | 未確認 | CWE-918 | Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped |
| CVE-2026-108851 | Deferred | 未確認 | CWE-862 | phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP clients to read restricted FAQs because Search::searchDatab |
| CVE-2026-108852 | Deferred | 未確認 | CWE-79 | Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link |
| CVE-2026-108853 | Deferred | 未確認 | CWE-639 | UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applicat |
| CVE-2026-108854 | Deferred | 未確認 | CWE-639 | Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user to delete other users' legacy AppKeys by supplying a numeri |
| CVE-2026-108855 | Deferred | 未確認 | CWE-862 | UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user to revoke other users' AppKeys for arbitrary apps via the unp |
| CVE-2026-108856 | Deferred | 未確認 | CWE-639 | UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppKeys bound to other users' MCP servers via POST /v1/appspace/ |
| CVE-2026-108857 | Awaiting Analysis | 未確認 | CWE-532 | Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configured api_key because the router's Args struct lacks a redact |
| CVE-2026-108858 | Deferred | 未確認 | CWE-532 | Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied api_token from POST /generate request bodies into router logs |
| CVE-2026-108859 | Deferred | 未確認 | CWE-770 | mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote unauthenticated attackers to exhaust memory by sending oversize |
| CVE-2026-108860 | Deferred | 未確認 | CWE-321 | BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge bearer tokens using the hard-coded Jwt:Key in WebStarte |
| CVE-2026-108861 | Deferred | 未確認 | CWE-200 | Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the field-level ACL by invoking the execute_method tool. Attackers o |
| CVE-2026-108862 | Deferred | 未確認 | CWE-639 | APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to read other applications' credentials by supplying a foreign |
| CVE-2026-108863 | Deferred | 未確認 | CWE-306 | Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attackers to access the Envoy admin interface, which is bound to a |
| CVE-2026-108864 | Deferred | 未確認 | CWE-639 | iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated applications to resume other applications' paused workflows |
| CVE-2026-108865 | Deferred | 未確認 | CWE-287 | AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never auth |
| CVE-2026-108866 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any account's permissions via the queryUserAuths handler. Low-privile |
| CVE-2026-108867 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SystemApiController getUserRoleSetById handler that allows any authenticated user to read other users' |
| CVE-2026-108868 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to publish templated system announcements via POST /sys/api/sendBusTemplat |
| CVE-2026-108869 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to send system announcements by calling POST /sys/api/sendSysA |
| CVE-2026-108870 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysRoleController saveDatarule handler that allows low-privileged authenticated users to modify role d |
| CVE-2026-108871 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the saveDatarule handler of SysDepartRoleController that lets low-privileged authenticated users modify de |
| CVE-2026-108872 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the batchEditUsers handler of SysUserController that allows any authenticated user to edit user department |
| CVE-2026-108873 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to modify any department by calling PUT /sys/user/doUpdateDepa |
| CVE-2026-108874 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows any authenticated user to assign or remove department heads by calling PUT /sys/user/changeDepart |
| CVE-2026-108875 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController addSysUserGroup handler that allows any authenticated user to modify user group memb |
| CVE-2026-108876 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the putCancelQuit handler of SysUserController, allowing any authenticated user to cancel user resignation |
| CVE-2026-108877 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in AiragPromptsController that allows any authenticated user to delete AI prompt templates by calling DELETE |
| CVE-2026-108878 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the AiragAppController queryById handler that allows low-privileged authenticated users to read any AI app |
| CVE-2026-108879 | Deferred | 未確認 | CWE-639 | JeecgBoot through 3.9.5 contains an insecure direct object reference vulnerability in AiragBaseApiController that allows authenticated users to read other users' AI chat variables |
| CVE-2026-108880 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the PUT /sys/dict/editDictByLowAppId endpoint that allows any authenticated user to modify low-code applic |
| CVE-2026-108881 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any authenticated user to read other tenants' product pack membe |
| CVE-2026-108882 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysPositionController removeUserPosition handler that allows any authenticated user to remove position |
| CVE-2026-108883 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the editThirdAppConfig handler that allows any authenticated user to modify third-party application config |
| CVE-2026-108884 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageTemplateController delete handler that allows any authenticated user to delete message templ |
| CVE-2026-108885 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysMessageController delete handler that allows low-privileged authenticated users to delete message r |
| CVE-2026-108886 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController queryChildrenByUsername handler that allows any authenticated user to retrieve other |
| CVE-2026-108887 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler that allows any authenticated user to export all comments. Low- |
| CVE-2026-108888 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler that allows any authenticated user to export department role |
| CVE-2026-108889 | Deferred | 未確認 | CWE-782 | A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library LWBilling64.sys of the component IOCTL |
| CVE-2026-108890 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue is the function terminalManager.spawn of the file packages/server/src/b |
| CVE-2026-108891 | Deferred | 未確認 | CWE-862 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysUserController getUserDetailByUserId handler that allows any authenticated user to read other users |
| CVE-2026-108892 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. |
| CVE-2026-108893 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_set l |
| CVE-2026-108894 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. |
| CVE-2026-108895 | Deferred | 未確認 | CWE-77, CWE-78 | A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MAC_ad |
| CVE-2026-108896 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix/_6 |
| CVE-2026-108897 | Deferred | 未確認 | CWE-749 | A security vulnerability has been detected in Smart Media4U Technology SHAREit App 6.27.38_ww on Android. The impacted element is the function syncInvoke of the component WebView J |
| CVE-2026-108898 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Netis WF2409E 3.3.42541. This affects an unknown function of the component Wireless Settings. The manipulation of the argument SSID results in cross |
| CVE-2026-108899 | Deferred | 未確認 | CWE-266, CWE-285 | A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the component Path Exception Matche |
| CVE-2026-108900 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.php of the component XML-RPC. Such manipulation leads to sql |
| CVE-2026-108901 | Deferred | 未確認 | CWE-1021 | A vulnerability was found in Shenzhen HCC Technology MPOS M6 PLUS 1.31-N. Affected by this vulnerability is an unknown functionality of the component Display QR Code Rendering. Per |
| CVE-2026-108902 | Deferred | 未確認 | CWE-22 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members to delete arbi |
| CVE-2026-108903 | Deferred | 未確認 | CWE-807 | pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to skip form validation by supplying a client-chosen |
| CVE-2026-108904 | Deferred | 未確認 | CWE-522 | pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains an information disclosure vulnerability that allows API clients to obtain sensitive member data because UserController::us |
| CVE-2026-108905 | Deferred | 未確認 | CWE-798 | pH7Builder (pH7 Social Dating CMS) before 18.6.0 contains a hard-coded API key vulnerability in Tool.class.php that allows unauthenticated attackers to bypass API access checks by |
| CVE-2026-108906 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put_file_cgi of the file /router/filter_arp_put_file.cgi. The manipulation of the a |
| CVE-2026-108907 | Deferred | 未確認 | CWE-287 | A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component CGI Execution. This manipulation causes improper authentication. The a |
| CVE-2026-108908 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Netcore NR268 1.7.121109. Affected by this vulnerability is the function eval of the file /router/l7_call_board_user_set.cgi of the component Web |
| CVE-2026-108909 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in Netcore NR268 1.7.121109. Affected by this issue is some unknown functionality of the component CGI Endpoint. Performing a manipulation resul |
| CVE-2026-108913 | Deferred | 未確認 | CWE-829 | omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into ~/.local/state/omarchy/current/theme may include executable |
| CVE-2026-108914 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formWlSiteSurvey. This manipulation of the argument ifname |
| CVE-2026-108915 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formWlanMP. Such manipulation of the argument ateBW leads to buffer overfl |
| CVE-2026-108916 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in Edimax BR-6208AC 1.32. This vulnerability affects unknown code of the file /goform/formAccept. Performing a manipulation of the argument submit-url res |
| CVE-2026-108917 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was determined in Edimax BR-6208AC 1.32. This issue affects some unknown processing of the file /goform/formAutoFWupgrade. Executing a manipulation of the argument |
| CVE-2026-108918 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was identified in Edimax BR-6208AC 1.32. Impacted is an unknown function of the file /goform/formWlanMP. The manipulation of the argument readE2P leads to command i |
| CVE-2026-108919 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in SourceCodester Drug Recommendation System 1.0. The impacted element is an unknown function of the file Auth/add_student.php of the component Stude |
| CVE-2026-108920 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/user_record.php of the component Adm |
| CVE-2026-108921 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This impacts the function mysql_query of the file remove_ann |
| CVE-2026-108922 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file upload_save.php. |
| CVE-2026-108923 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was determined in 1024-lab smart-admin up to 3.30.0. Affected by this vulnerability is an unknown functionality of the file /support/config/queryByKey of the compon |
| CVE-2026-108924 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function OptionsQuery::resolve of the file src/Option/OptionsQuery.php of the comp |
| CVE-2026-108925 | Deferred | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Administration Console web interface. This issue affects NetBacku |
| CVE-2026-108926 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0. This affects an unknown part of the file ebaptism.php. The manipulation of the argume |
| CVE-2026-108927 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Baptism Information Management System 1.0. This vulnerability affects unknown code of the file pbaptism.php. This manipulation of the |
| CVE-2026-108928 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file /admin/sum.php. Such manipulation of |
| CVE-2026-108929 | Deferred | 未確認 | CWE-74, CWE-88 | A flaw has been found in Netcore NR268 1.7.121109. The affected element is the function execvp of the file /router/DDNSset.cgi of the component DDNS. Executing a manipulation of th |
| CVE-2026-108930 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of the file ddns_wan_list_show.cgi of the component DDNS Handler |
| CVE-2026-108931 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cgi of the component DHCP Handler. The manipulation of the arg |
| CVE-2026-108932 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Netcore NR268 1.7.121109. This impacts the function eval of the file filter_hosts_dump.cgi of the component DHCP Hostname Handler. This manipulati |
| CVE-2026-108933 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in Edimax BR-6208AC 1.32. Affected is an unknown function of the file /goform/formFilter. Such manipulation leads to cross site scripting. The attack |
| CVE-2026-108934 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in Edimax BR-6208AC 1.32. Affected by this vulnerability is an unknown functionality of the file /goform/formUrlb of the component HTTP Blocking |
| CVE-2026-108935 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the file /goform/formPortFw of the component Port Forwarding Page. |
| CVE-2026-108936 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/formQoS of the component QoS Page. The manipulation leads to c |
| CVE-2026-108937 | Deferred | 未確認 | CWE-200, CWE-538 | A vulnerability was detected in code-projects Online Ticket Reservation System 1.0. This vulnerability affects unknown code of the file /database/medallion.sql. The manipulation re |
| CVE-2026-108938 | Deferred | 未確認 | CWE-425, CWE-552 | A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of the file db/matrimony.sql. This manipulation causes files or directorie |
| CVE-2026-108939 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function is_global_ip of the file mistralrs-server-core/src/media_source.rs. Such manipulatio |
| CVE-2026-108940 | Deferred | 未確認 | CWE-22 | A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Performi |
| CVE-2026-108941 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parse_cfg_args of the file internal/utils/common.py of the component Sidecar Parsing. T |
| CVE-2026-108942 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function create_html_for_item of the file module |
| CVE-2026-108943 | Deferred | 未確認 | CWE-74, CWE-94 | A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py |
| CVE-2026-108944 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function get_obj_from_str of the |
| CVE-2026-108945 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend. |
| CVE-2026-108947 | Deferred | 未確認 | CWE-20, CWE-502 | A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load_ckpt of the file torchdistill/common/main_util.py. Executing a manipulation of |
| CVE-2026-108948 | Deferred | 未確認 | CWE-913, CWE-915 | A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown code of the file /reviewer/system/system/admins/manage/users/btn_func |
| CVE-2026-108950 | Deferred | 未確認 | CWE-862 | Open Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated attackers to download files via |
| CVE-2026-108951 | Deferred | 未確認 | CWE-863 | LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing the AbstractReq |
| CVE-2026-108952 | Deferred | 未確認 | CWE-843 | RT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a Serial V2 rt_serial_rx_fifo in _fun |
| CVE-2026-108953 | Deferred | 未確認 | CWE-78 | mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell metacharacters into execute_com |
| CVE-2026-108954 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-tran |
| CVE-2026-108955 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function gguf_init_from_file of the file ggml.c of the compone |
| CVE-2026-108956 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btn_ |
| CVE-2026-108957 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in TinyLLaVA TinyLLaVA_Factory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function _load_text_config of the fil |
| CVE-2026-108958 | Deferred | 未確認 | CWE-20, CWE-502 | A weakness has been identified in TensorLayer up to 2.2.4. This affects the function load_hdf5_graph of the file tensorlayer/files/utils.py of the component HDF5 Loading. Executing |
| CVE-2026-108959 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of |
| CVE-2026-108960 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml |
| CVE-2026-108961 | Deferred | 未確認 | CWE-74, CWE-94 | A flaw has been found in PaddlePaddle PaddleX up to 3.7.2. Affected by this vulnerability is the function NormalizeImage.__init__ of the file paddlex/inference/models/text_detectio |
| CVE-2026-108962 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in storyicon comfyui_segment_anything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig._file2dict of t |
| CVE-2026-108963 | Deferred | 未確認 | CWE-88 | databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. F |
| CVE-2026-108964 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/admin/addproduct.php. Performing a manipulation of the |
| CVE-2026-108965 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a m |
| CVE-2026-108966 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation |
| CVE-2026-108967 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in SourceCodester Performance Indicator System 1.0. Impacted is an unknown function of the file /opils/staff/edit_credit.php. The manipulation o |
| CVE-2026-108968 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/staff/sales_history.php. This mani |
| CVE-2026-108969 | Deferred | 未確認 | CWE-697 | A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session: |
| CVE-2026-108970 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::addNewUser of the file i |
| CVE-2026-108971 | Deferred | 未確認 | CWE-345, CWE-347 | A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfd_decode of the file bootloader_region.bin of the component Emergency HTTP Recovery Server. Executing |
| CVE-2026-108972 | Deferred | 未確認 | CWE-287 | A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.php o |
| CVE-2026-108973 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function move_uploaded_file of the file /classes/Users.php?f=save. This m |
| CVE-2026-108974 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in SourceCodester E-Learning System 1.0. This affects the function save_users of the file /classes/Users.php?f=save. Such manipulation of the argumen |
| CVE-2026-108975 | Deferred | 未確認 | CWE-284, CWE-434 | A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Per |
| CVE-2026-108976 | Awaiting Analysis | 未確認 | CWE-184 | GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has an incomplete list of disallowed inputs. NOTE: this issue e |
| CVE-2026-108978 | Deferred | 未確認 | CWE-122 | Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables. This issue affects rlottie: e57b094f03c39a751a1fded6f7d6c1 |
| CVE-2026-108979 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-108980 | Deferred | 未確認 | CWE-24 | Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTr |
| CVE-2026-108981 | Deferred | 未確認 | CWE-61 | ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user accou |
| CVE-2026-108982 | Awaiting Analysis | 未確認 | CWE-459 | VeraCrypt 1.26.29 (FUSE-T build) on macOS sometimes allows unintended access to decrypted data. It does not terminate the FUSE-T auxiliary service (go-nfsv4) and its associated Ver |
| CVE-2026-108983 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . |
| CVE-2026-108984 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . |
| CVE-2026-108985 | Deferred | 未確認 | CWE-787 | ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib/libnfs-zdr.c with libnfs_zdr_bytes(), libnfs_zdr_string(), and libnfs_zdr_array(). The |
| CVE-2026-109080 | Awaiting Analysis | 未確認 | CWE-89 | SQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer organizations' data, including license p |
| CVE-2026-109082 | Awaiting Analysis | 未確認 | CWE-287 | A flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This component handles advanced authenti |
| CVE-2026-109106 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Document In |
| CVE-2026-109107 | Deferred | 未確認 | CWE-404, CWE-476 | A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie |
| CVE-2026-109108 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Ty |
| CVE-2026-109109 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Ex |
| CVE-2026-109110 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection |
| CVE-2026-109114 | Deferred | 未確認 | CWE-287 | A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file Us |
| CVE-2026-109115 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects some unknown processing of the file User |
| CVE-2026-109116 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the component |
| CVE-2026-109118 | Deferred | 未確認 | CWE-22 | Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the |
| CVE-2026-109119 | Deferred | 未確認 | CWE-862 | Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator |
| CVE-2026-109122 | Deferred | 未確認 | CWE-78 | The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web management API. An authentic |
| CVE-2026-109125 | Awaiting Analysis | 未確認 | CWE-205 | In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with 'unwanted-reply-threshold > 0' configurations (not a default c |
| CVE-2026-109126 | Awaiting Analysis | 未確認 | CWE-798 | IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard |
| CVE-2026-109131 | Awaiting Analysis | 未確認 | CWE-79 | The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from upstream ansible-ui, frontend/hub) renders a documentation URL part (form |
| CVE-2026-109143 | Deferred | 未確認 | CWE-266, CWE-269 | A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the |
| CVE-2026-109144 | Deferred | 未確認 | CWE-400, CWE-404 | A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to |
| CVE-2026-109145 | Deferred | 未確認 | CWE-269 | The User Rights Access Manager WordPress plugin through 1.1.3 does not restrict access to one of its AJAX account-registration handlers and assigns newly registered accounts a role |
| CVE-2026-109147 | Deferred | 未確認 | CWE-79 | The WP Booking System WordPress plugin before 2.1.0.3 does not validate and escape one of its parameters before reflecting it back in an admin page, leading to Reflected Cross-Sit |
| CVE-2026-109149 | Deferred | 未確認 | CWE-400, CWE-789 | A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory a |
| CVE-2026-109152 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the component SCP Receive Handler. The man |
| CVE-2026-109153 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint Ex |
| CVE-2026-109155 | Deferred | 未確認 | CWE-22 | A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is pos |
| CVE-2026-109156 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Handler. Suc |
| CVE-2026-109157 | Deferred | 未確認 | CWE-119, CWE-121 | A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulatio |
| CVE-2026-109160 | Deferred | 未確認 | CWE-601 | A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/pub |
| CVE-2026-109162 | Deferred | 未確認 | CWE-552, CWE-696 | Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/user_upload/ instead of the configure |
| CVE-2026-109164 | Deferred | 未確認 | CWE-639 | TDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form submissions by supplying arbitr |
| CVE-2026-109165 | Deferred | 未確認 | CWE-639 | TDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via POST /user/form/item/batch/crea |
| CVE-2026-109166 | Deferred | 未確認 | CWE-639 | lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other users' files by supplying arbi |
| CVE-2026-109167 | Deferred | 未確認 | CWE-639 | TDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler that allows authenticated users to overwrite other users' form |
| CVE-2026-109168 | Deferred | 未確認 | CWE-639 | lamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects' file attachments by supplying a |
| CVE-2026-109169 | Deferred | 未確認 | CWE-89 | LogicalDOC Community Edition through 9.3 contains a sql injection vulnerability that allows authenticated users to execute crafted SQL via the firstLetter parameter of TagsDataServ |
| CVE-2026-109170 | Deferred | 未確認 | CWE-89 | LogicalDOC Community Edition through 9.3 contains an HQL injection vulnerability in DocumentsDataServlet that allows authenticated users to manipulate queries via the unvalidated i |
| CVE-2026-109171 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject contracts by calling POST /admin-api/crm/ |
| CVE-2026-109172 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject receivables records by calling POST /admi |
| CVE-2026-109173 | Deferred | 未確認 | CWE-862 | yshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject invoices via POST /admin-api/crm/invoice/ |
| CVE-2026-109174 | Deferred | 未確認 | CWE-863 | MoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read system credentials via the getSystemConfig endpoint. Attack |
| CVE-2026-109175 | Deferred | 未確認 | CWE-639 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other administrators' network-disk files via POST / |
| CVE-2026-109176 | Deferred | 未確認 | CWE-639 | MoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other administrators' files via POST /networkDisk |
| CVE-2026-109177 | Deferred | 未確認 | CWE-639 | MoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators' network-disk files by supplying |
| CVE-2026-109178 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to forge, modify, or delete audit log entries. Low-privilege u |
| CVE-2026-109179 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation audit log. Low-privilege users |
| CVE-2026-109180 | Deferred | 未確認 | CWE-639 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by supplying depotId or depotIds request p |
| CVE-2026-109181 | Deferred | 未確認 | CWE-863 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users restricted to personal or department data to list other users' bills by adding a p |
| CVE-2026-109182 | Deferred | 未確認 | CWE-863 | jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restrictions enforced by |
| CVE-2026-109183 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to create pre-approved bills by setting status in POST /depotHead/addDepotHeadAndD |
| CVE-2026-109184 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains an improper authorization vulnerability that allows low-privilege authenticated users to read any settlement account ledger by supplying an arbitrary ac |
| CVE-2026-109185 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign arbitrary roles to any user. Lo |
| CVE-2026-109186 | Deferred | 未確認 | CWE-915 | jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows authenticated users to overwrite protected fields including tenant_id a |
| CVE-2026-109187 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains an information disclosure vulnerability that allows any authenticated user to read platform-wide configuration secrets via the getInfoByKey handler of P |
| CVE-2026-109188 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains a missing authorization vulnerability that allows low-privilege authenticated users to create tenant-wide master data via add and import endpoints lacki |
| CVE-2026-109189 | Deferred | 未確認 | CWE-918 | A vulnerability was detected in fit2cloud MeterSphere up to 3.6.9-lts. The affected element is the function Swagger3ParserApiDefinition.testUrlTimeout of the file backend/parser/ap |
| CVE-2026-109190 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in conductor-oss conductor 3.31.2. This affects the function ListApiToolsTask.start of the file ListApiToolsTask.java of the component API Tool Confi |
| CVE-2026-109191 | Deferred | 未確認 | CWE-200 | The Image Hub – Free Images from Unsplash, Pixabay, Pexels, Openverse & Giphy plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includ |
| CVE-2026-109193 | Deferred | 未確認 | CWE-79 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '<custom user attribute slug> (e.g. h |
| CVE-2026-109194 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in Red Hat Quay. The build trigger management application programming interface (API) fails to verify whether a requested trigger belongs to the specified reposito |
| CVE-2026-109195 | Awaiting Analysis | 未確認 | CWE-639 | A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issu |
| CVE-2026-109198 | Deferred | 未確認 | CWE-79 | The Anti-Spam by CleanTalk – Spam Protection Without CAPTCHA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'user_email' parameter in all versions up to, |
| CVE-2026-109199 | Deferred | 未確認 | CWE-94 | LogicalDOC Community Edition through 9.3 contains a code injection vulnerability that allows authenticated users to execute OS commands by submitting Velocity templates in Document |
| CVE-2026-109200 | Deferred | 未確認 | CWE-918 | LogicalDOC Community Edition through 9.3 contains a server-side request forgery vulnerability in the default-enabled XMLConverter that fetches xml-stylesheet href URLs without sche |
| CVE-2026-109201 | Deferred | 未確認 | CWE-862 | LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in SoapDocumentService operations that allows authenticated users to access and modify unaut |
| CVE-2026-109202 | Deferred | 未確認 | CWE-862 | LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the zip-export servlet that allows authenticated users to export restricted folders by su |
| CVE-2026-109203 | Deferred | 未確認 | CWE-862 | LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability in the ConvertPdf servlet that allows authenticated users to download restricted PDF documen |
| CVE-2026-109204 | Deferred | 未確認 | CWE-640 | LogicalDOC Community Edition through 9.3 contains an improper authorization vulnerability in the PswRecovery servlet that fails to bind password recovery tickets to the requesting |
| CVE-2026-109205 | Deferred | 未確認 | CWE-770 | LogicalDOC Community Edition through 9.3 contains an unauthenticated file upload vulnerability in the UploadServlet that allows remote attackers to write files to disk without a se |
| CVE-2026-109206 | Deferred | 未確認 | CWE-204 | LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthenticated attackers to identify valid accounts because the AvatarServlet (/ |
| CVE-2026-109207 | Deferred | 未確認 | CWE-79 | The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'media:th |
| CVE-2026-109208 | Deferred | 未確認 | CWE-79 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'quantity (REST) / order_comments |
| CVE-2026-109219 | Deferred | 未確認 | CWE-434 | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in version 2.4.4 via the mbw_file_upload function. This is due to missing file extension validation on th |
| CVE-2026-109221 | Deferred | 未確認 | CWE-22 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the copy_file |
| CVE-2026-109222 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-109224 | Deferred | 未確認 | CWE-79 | The SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments plugin for WordPress is vulnerable to Stored Cross-Site Sc |
| CVE-2026-109225 | Deferred | 未確認 | CWE-770 | SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/audio |
| CVE-2026-109226 | Deferred | 未確認 | CWE-409 | SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly compressed audio decode |
| CVE-2026-109227 | Deferred | 未確認 | CWE-770 | SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixe |
| CVE-2026-109228 | Deferred | 未確認 | CWE-770 | SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_frames, max_token |
| CVE-2026-109229 | Deferred | 未確認 | CWE-409 | SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNe |
| CVE-2026-109232 | Deferred | 未確認 | CWE-79 | The Salon Booking System – Appointment Booking for Salons, Barbershops & Spas plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sln[<checkout-field-key>]' |
| CVE-2026-109237 | Awaiting Analysis | 未確認 | CWE-502 | Crawl4AI from 0.9.0 before 0.9.4 contains an untrusted-config gate bypass that allows non-admin API clients to construct forbidden config objects by wrapping them in dict-type wrap |
| CVE-2026-109238 | Deferred | 未確認 | CWE-918 | Crawl4AI 0.7.0 before 0.9.4 contains a server-side request forgery vulnerability that allows API clients to reach internal addresses by enabling link_preview_config on /crawl reque |
| CVE-2026-109239 | Deferred | 未確認 | CWE-918 | Crawl4AI before 0.9.4 contains a blind server-side request forgery vulnerability in RobotsParser.can_fetch that lets unauthenticated attackers bypass Docker server egress controls. |
| CVE-2026-109240 | Undergoing Analysis | 未確認 | CWE-617 | FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows malicious RDP servers to crash clients by sending unvalidated OutputBuff |
| CVE-2026-109241 | Undergoing Analysis | 未確認 | CWE-476 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients by sending out-of-ord |
| CVE-2026-109242 | Undergoing Analysis | 未確認 | CWE-908 | FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A ma |
| CVE-2026-109243 | Undergoing Analysis | 未確認 | CWE-732 | FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by crypto_write_pem without owner-on |
| CVE-2026-109244 | Undergoing Analysis | 未確認 | CWE-732 | FreeRDP from 2.0.0 before 3.32.0 contains an insecure permission vulnerability in winpr-makecert that creates unencrypted private keys without owner-only file modes. Local users on |
| CVE-2026-109245 | Undergoing Analysis | 未確認 | CWE-295 | FreeRDP 3.0.0 before 3.32.0 contains an improper certificate validation vulnerability in freerdp_http_request() in libfreerdp/utils/http.c that completes TLS handshakes without ver |
| CVE-2026-109246 | Undergoing Analysis | 未確認 | CWE-191 | FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range ch |
| CVE-2026-109247 | Undergoing Analysis | 未確認 | CWE-22 | FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenates server-supp |
| CVE-2026-109248 | Undergoing Analysis | 未確認 | CWE-125 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in the WinPR clipboard function convert_filedescriptors_to_file_list(), which scans a server-controlled FILEDESCRIPTO |
| CVE-2026-109249 | Undergoing Analysis | 未確認 | CWE-125 | FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp_assistance_parse_all_elements_of() because it advances its parsing cursor without reducing the remaining l |
| CVE-2026-109250 | Undergoing Analysis | 未確認 | CWE-129 | FreeRDP 3.0.0 before 3.32.0 contains a heap buffer overflow vulnerability in collect_keys() that allows local attackers to write past the fixed 64-entry keys array during PKCS#11 k |
| CVE-2026-109251 | Undergoing Analysis | 未確認 | CWE-129 | FreeRDP before 3.32.0 stores the server-supplied signed MS-RDPEGT geometry origin unchecked in an unsigned video surface coordinate, so the blit clamp in gdiVideoShowSurface() wrap |
| CVE-2026-109252 | Undergoing Analysis | 未確認 | CWE-476 | FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via truncated KERB_RPC_IN |
| CVE-2026-109253 | Undergoing Analysis | 未確認 | CWE-125 | FreeRDP from 3.9.0 before 3.32.0 contains an out-of-bounds read vulnerability in the RDPEAR NDR scalar readers, which check value length before consuming alignment padding. Malicio |
| CVE-2026-109254 | Undergoing Analysis | 未確認 | CWE-416 | FreeRDP 2.1.0 before 3.32.0 contains a use-after-free vulnerability in the static rdpsnd channel disconnect path, which frees audio formats and device without joining play_thread. |
| CVE-2026-109255 | Undergoing Analysis | 未確認 | CWE-122 | FreeRDP 3.0.0 before 3.32.0 contains an integer truncation vulnerability in license_check_stream_length that allows a malicious RDP server to trigger a heap buffer overflow on 32-b |
| CVE-2026-109256 | Undergoing Analysis | 未確認 | CWE-122 | FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR png_write_data callback that writes past the buffer after a realloc failure. A malicious RDP clipboard pe |
| CVE-2026-109257 | Undergoing Analysis | 未確認 | CWE-415 | FreeRDP before 3.32.0 contains a double-free vulnerability in nsc_context_initialize_encode() that leaves dangling plane pointers after a partial buffer growth failure. Attackers u |
| CVE-2026-109258 | Awaiting Analysis | 未確認 | CWE-476 | ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry fails. Attackers can t |
| CVE-2026-109259 | Awaiting Analysis | 未確認 | CWE-200 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an uninitialized memory read in the TGA image decoder that can expose memory contents. Attackers can supply a crafted |
| CVE-2026-109260 | Awaiting Analysis | 未確認 | CWE-401 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the PNG encoder, which does not release allocated memory when libpng initialization fails. Attackers |
| CVE-2026-109261 | Awaiting Analysis | 未確認 | CWE-401 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the GIF encoder because allocated memory is not released when color quantization fails during encodin |
| CVE-2026-109262 | Awaiting Analysis | 未確認 | CWE-401 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the SVG encoder (WriteSVGImage) that fails to release allocated memory when handling crafted images. |
| CVE-2026-109263 | Awaiting Analysis | 未確認 | CWE-401 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the YUV encoder, which fails to release allocated memory when a specific operation fails. Attackers c |
| CVE-2026-109264 | Awaiting Analysis | 未確認 | CWE-674 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains uncontrolled recursion in the MVG decoder that can exhaust the program stack. An attacker who controls a file name pro |
| CVE-2026-109265 | Awaiting Analysis | 未確認 | CWE-125 | ImageMagick 7.1.1-7 before 7.1.2-32 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory due to incorrect string termination in XMP |
| CVE-2026-109266 | Awaiting Analysis | 未確認 | CWE-79 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an XML injection vulnerability in the CIP encoder, which does not properly escape input-derived data when writing Cisc |
| CVE-2026-109267 | Awaiting Analysis | 未確認 | CWE-674 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a stack overflow in the MSL decoder caused by an incorrect depth check that fails to limit recursion. Attackers can su |
| CVE-2026-109268 | Awaiting Analysis | 未確認 | CWE-416 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a use after free vulnerability in the PDF writer when writing CMYK images with JPEG2000 compression. Attackers can sup |
| CVE-2026-109269 | Awaiting Analysis | 未確認 | CWE-125 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the JPEG decoder, which performs a read that exposes uninitialized memory w |
| CVE-2026-109270 | Awaiting Analysis | 未確認 | CWE-401 | ImageMagick before 7.1.2-32 contains a memory leak vulnerability in the -process option that allows attackers to cause unreleased memory allocations by supplying certain arguments. |
| CVE-2026-109271 | Awaiting Analysis | 未確認 | CWE-415 | ImageMagick 7.1.2-30 before 7.1.2-32 contains a use after free vulnerability in the WBINFO decoder that occurs when a memory allocation fails during image decoding. Attackers can s |
| CVE-2026-109272 | Awaiting Analysis | 未確認 | CWE-476 | ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted |
| CVE-2026-109273 | Awaiting Analysis | 未確認 | CWE-908 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the d |
| CVE-2026-109274 | Awaiting Analysis | 未確認 | CWE-59 | ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when executing a magick script. |
| CVE-2026-109275 | Awaiting Analysis | 未確認 | CWE-74 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a code injection vulnerability in the MVG decoder when a PostScript renderer is used. Attackers can supply a crafted M |
| CVE-2026-109276 | Awaiting Analysis | 未確認 | CWE-459 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Atta |
| CVE-2026-109277 | Awaiting Analysis | 未確認 | CWE-404 | ImageMagick before 7.1.2-32 contains a policy bypass vulnerability in the -script operation due to missing checks on file descriptor handling. Attackers can use the -script operati |
| CVE-2026-109278 | Awaiting Analysis | 未確認 | CWE-401 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a memory leak in the wavelet-denoise operation, which fails to release allocated memory when a required resource canno |
| CVE-2026-109279 | Awaiting Analysis | 未確認 | CWE-362 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 lacks proper synchronization when the security policy is accessed, so simultaneous reads and writes of the policy by multiple t |
| CVE-2026-109280 | Awaiting Analysis | 未確認 | CWE-476 | ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific operation. Attackers who |
| CVE-2026-109281 | Awaiting Analysis | 未確認 | CWE-125 | ImageMagick 7.1.0-21 before 7.1.2-32 contains a heap buffer over-read in its handling of the -fx option, where a certain -fx operation reads beyond the bounds of an allocated heap |
| CVE-2026-109282 | Awaiting Analysis | 未確認 | CWE-843 | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains a type confusion flaw in the INFO, JSON and YAML encoders, where an internal method receives a pointer of an unexpecte |
| CVE-2026-109283 | Awaiting Analysis | 未確認 | CWE-863 | Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and k |
| CVE-2026-109284 | Awaiting Analysis | 未確認 | CWE-862 | Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checki |
| CVE-2026-109285 | Awaiting Analysis | 未確認 | CWE-863 | Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base collaborators keep file access via stale |
| CVE-2026-109286 | Awaiting Analysis | 未確認 | CWE-346 | Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by po |
| CVE-2026-109287 | Awaiting Analysis | 未確認 | CWE-639, CWE-863 | Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied directory_id belongs to the requested knowl |
| CVE-2026-109288 | Awaiting Analysis | 未確認 | CWE-79 | Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating |
| CVE-2026-109289 | Awaiting Analysis | 未確認 | CWE-613 | Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open termi |
| CVE-2026-109290 | Awaiting Analysis | 未確認 | CWE-1021, CWE-79 | Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading craft |
| CVE-2026-109291 | Awaiting Analysis | 未確認 | CWE-79 | Open WebUI from 0.6.33 before 0.11.4 contains a cross-site scripting vulnerability that allows authenticated users to execute script in victims' sessions by storing javascript: URL |
| CVE-2026-109292 | Awaiting Analysis | 未確認 | CWE-200 | Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser c |
| CVE-2026-109293 | Awaiting Analysis | 未確認 | CWE-200 | Open WebUI from 0.11.0 before 0.11.4 contains an information disclosure vulnerability that allows authenticated non-admin users with tool export permission to obtain tool source co |
| CVE-2026-109294 | Awaiting Analysis | 未確認 | CWE-400, CWE-409 | Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed re |
| CVE-2026-109295 | Awaiting Analysis | 未確認 | CWE-1333 | Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns. |
| CVE-2026-109296 | Awaiting Analysis | 未確認 | CWE-639, CWE-862 | Open WebUI before 0.11.4 contains a missing authorization vulnerability that allows authenticated users to reach disabled model provider backends by supplying an explicit backend i |
| CVE-2026-109297 | Awaiting Analysis | 未確認 | CWE-400, CWE-436 | Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strict |
| CVE-2026-109298 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded |
| CVE-2026-109299 | Awaiting Analysis | 未確認 | CWE-400, CWE-834 | Open WebUI from 0.9.0 before 0.11.4 contains a denial of service vulnerability that allows authenticated users with automations permission to stall the instance by submitting unsat |
| CVE-2026-109300 | Awaiting Analysis | 未確認 | CWE-79 | Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool outp |
| CVE-2026-109301 | Awaiting Analysis | 未確認 | CWE-248 | Parse Server before 8.6.95 and 9.0.0 before 9.10.2-alpha.3 does not resolve file references lacking a URL before passing objects to Cloud Code triggers and LiveQuery, causing an un |
| CVE-2026-109302 | Awaiting Analysis | 未確認 | CWE-863 | Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 applies its GraphQL introspection control only to operation text sent directly with a request, not to operations r |
| CVE-2026-109303 | Awaiting Analysis | 未確認 | CWE-639 | Parse Server before 8.6.93 and 9.0.0 before 9.10.1-alpha.13 does not enforce identity-scoped protectedFields (authenticated, role, or per-user groups) on count queries using the $r |
| CVE-2026-109304 | Awaiting Analysis | 未確認 | CWE-200 | Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 contains an arbitrary file read vulnerability because the Twig create() class blocklist does not cover DOMDocument. Attackers |
| CVE-2026-109305 | Awaiting Analysis | 未確認 | CWE-1336 | Craft CMS from 5.10.2 before 5.10.14 contains a Twig sandbox bypass that allows non-admin users to invoke PHP callables through the "has some" and "has every" operators. Users with |
| CVE-2026-109306 | Awaiting Analysis | 未確認 | CWE-862 | Craft CMS from 5.0.0 before 5.10.14 contains a missing authorization vulnerability in AppController::actionSwitchToLicensedEdition() that lets any authenticated user change the ins |
| CVE-2026-109307 | Awaiting Analysis | 未確認 | CWE-79 | Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripting vulnerability in the control panel login and 2FA verification flow, where a user-controlled returnUrl accep |
| CVE-2026-109308 | Awaiting Analysis | 未確認 | CWE-94 | Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::actionCacheUpdates to UpdatesModel without Component::cleanseCon |
| CVE-2026-109309 | Deferred | 未確認 | CWE-22 | SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path t |
| CVE-2026-109310 | Deferred | 未確認 | CWE-770 | SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or |
| CVE-2026-109311 | Awaiting Analysis | 未確認 | CWE-20 | vLLM before 0.29.0 passes uploaded audio to the PyAV/FFmpeg av.open() fallback with only a file-size check, exposing FFmpeg's IAMF parser heap overflow. Authenticated remote attack |
| CVE-2026-109312 | Deferred | 未確認 | CWE-287 | Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass in processUserProfile(), which checks that the session user exists but not that a pending front-end 2FA sessi |
| CVE-2026-109313 | Deferred | 未確認 | CWE-287 | Grav Login plugin 2.7.0 before 3.9.9 contains an authentication bypass vulnerability that allows attackers with a valid password to skip two-factor authentication through remember- |
| CVE-2026-109314 | Deferred | 未確認 | CWE-200 | Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route. |
| CVE-2026-109315 | Deferred | 未確認 | CWE-200 | Grav from 2.0.22 before 2.1.7 contains an information disclosure vulnerability that allows page editors to read the Clockwork debugger token because the sandbox redaction list omit |
| CVE-2026-109316 | Deferred | 未確認 | CWE-862 | Grav Data Manager plugin 1.4.0 through 1.4.5 contains a missing authorization vulnerability that allows unauthenticated attackers to delete stored data files via the classic Admin |
| CVE-2026-109317 | Deferred | 未確認 | CWE-269 | Grav grav-plugin-api before 1.0.36 contains a privilege escalation vulnerability that allows delegated user managers to obtain super-admin access by storing positive scalar admin o |
| CVE-2026-109318 | Deferred | 未確認 | CWE-78 | Grav Git Sync 1.0.2 through 3.4.12 contains a command injection vulnerability that allows authenticated content editors to execute OS commands by injecting shell substitutions into |
| CVE-2026-109319 | Deferred | 未確認 | CWE-862 | Grav Guestbook plugin 0.5.0 and 0.5.1 contains missing authorization and cross-site request forgery vulnerabilities in Admin moderation actions delete, approve, and approveAll. Aut |
| CVE-2026-109320 | Deferred | 未確認 | CWE-613 | The Grav API plugin (grav-plugin-api) before 1.0.36 contains an improper session validation vulnerability that allows disabled accounts to keep API access, because SessionAuthentic |
| CVE-2026-109321 | Deferred | 未確認 | CWE-1391 | Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic <provider>.<id> username and an unsalted MD5 ha |
| CVE-2026-109322 | Deferred | 未確認 | CWE-79 | Grav Guestbook plugin before 0.5.2 contains a stored cross-site scripting vulnerability because its AJAX Load more and Admin Load all handlers insert stored author and message fiel |
| CVE-2026-109323 | Deferred | 未確認 | CWE-862 | Grav Star Ratings 2.0.1 through 2.0.3 contains a missing authorization vulnerability that allows unauthenticated visitors to vote by bypassing client-only vote_access and readonly |
| CVE-2026-109324 | Deferred | 未確認 | CWE-409 | Grav before 2.1.7 contains a denial of service vulnerability that allows authenticated media authors to exhaust memory by uploading compressed oversized raster images. Attackers ca |
| CVE-2026-109325 | Deferred | 未確認 | CWE-200 | Grav from 2.0.22 before 2.1.7 contains an authentication bypass vulnerability in the Clockwork profiler that trusts loopback REMOTE_ADDR values. Unauthenticated attackers behind a |
| CVE-2026-109326 | Deferred | 未確認 | CWE-527 | Grav before 2.1.7 contains an information disclosure vulnerability because bundled nginx, lighttpd, IIS, and Caddy 2 configurations block .git only at document root. Unauthenticate |
| CVE-2026-109327 | Deferred | 未確認 | CWE-79 | Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 contains a reflected cross-site scripting vulnerability in system/redirect.php that allows unauthenticated attackers to inject |
| CVE-2026-109328 | Deferred | 未確認 | CWE-79 | Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME registration value |
| CVE-2026-109329 | Deferred | 未確認 | CWE-639 | Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations. |
| CVE-2026-109330 | Deferred | 未確認 | CWE-1385 | Network-AI 5.0.0 before 5.15.2 contains a cross-site WebSocket hijacking vulnerability in DashboardServer that allows remote attackers to read live agent topology because handleUpg |
| CVE-2026-109331 | Deferred | 未確認 | CWE-436 | Network-AI from 5.14.0 before 5.15.2 contains a security control bypass vulnerability in the ClaudeHookBridge PreToolUse hook, which matches deny patterns only against the first pr |
| CVE-2026-109332 | Deferred | 未確認 | CWE-346 | Network-AI (npm network-ai) before 5.15.2 contains an origin validation error in McpSseServer._handleRequest in lib/mcp-transport-sse.ts that reflects localhost Origins into Access |
| CVE-2026-109333 | Deferred | 未確認 | CWE-862 | SurrealDB from 3.0.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated record users to read records in other namespaces or databases by resolvin |
| CVE-2026-109334 | Deferred | 未確認 | CWE-639 | SurrealDB before 3.3.0 does not check the caller-selected namespace or database against the level at which a namespace- or database-level system user authenticated, allowing cross- |
| CVE-2026-109335 | Deferred | 未確認 | CWE-200 | SurrealDB from 3.0.0 before 3.3.0 contains an information disclosure vulnerability that allows record users to read values hidden by field-level SELECT permissions through COMPUTED |
| CVE-2026-109336 | Deferred | 未確認 | CWE-863 | SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to read fields hidden by field-level SELECT permissions through LIVE SELECT projectio |
| CVE-2026-109337 | Deferred | 未確認 | CWE-203 | SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field values hidden by field-level SELECT permissions using LIVE SELECT WHER |
| CVE-2026-109338 | Deferred | 未確認 | CWE-248 | SurrealDB before 3.3.0 contains a denial of service vulnerability that allows query-capable users to crash the server by reading non-ASCII header values in embedded JavaScript. Att |
| CVE-2026-109339 | Awaiting Analysis | 未確認 | CWE-770 | SurrealDB 3.1.0 before 3.3.0 lets Surrealism modules exhaust server memory because module stdout/stderr lines are buffered unbounded in host memory, bypassing the configured module |
| CVE-2026-109340 | Deferred | 未確認 | CWE-862 | SurrealDB from 3.1.0 before 3.3.0 contains an authorization bypass vulnerability that allows authenticated users to delete protected graph edges by triggering a REFERENCE ON DELETE |
| CVE-2026-109341 | Deferred | 未確認 | CWE-200 | SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows callers with table-level write permission to read SELECT-restricted fields by resolving JSON Patch |
| CVE-2026-109342 | Deferred | 未確認 | CWE-306 | SurrealDB from 3.0.0 before 3.3.0 contains a missing authentication vulnerability in the revoke RPC method that allows low-privileged or unauthenticated callers to invalidate other |
| CVE-2026-109343 | Deferred | 未確認 | CWE-639 | SurrealDB before 3.3.0 allows cross-tenant access because the SurrealQL USE statement switches a session to any namespace/database without checking that the caller's authenticated |
| CVE-2026-109344 | Awaiting Analysis | 未確認 | CWE-79 | DOMPurify from 3.4.13 before 3.4.16 contains a cross-site scripting vulnerability because IN_PLACE mode fails to neutralize subtrees detached by afterSanitizeElements or afterSanit |
| CVE-2026-109345 | Awaiting Analysis | 未確認 | CWE-79 | DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because IN_PLACE mode returns a force-removed style element whose |
| CVE-2026-109346 | Deferred | 未確認 | CWE-451 | better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id a |
| CVE-2026-109347 | Awaiting Analysis | 未確認 | CWE-94 | Adminer before 6.1.1 contains a remote code execution vulnerability that allows authenticated SQLite users to bypass ATTACH and VACUUM INTO restrictions by prefixing statements wit |
| CVE-2026-109348 | Awaiting Analysis | 未確認 | CWE-407 | Gitoxide gix-mailmap before 0.35.0 contains a denial of service vulnerability that allows attackers to exhaust CPU through quadratic-time parsing in Snapshot::from_bytes. Attackers |
| CVE-2026-109349 | Awaiting Analysis | 未確認 | CWE-617 | gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decoder accepts version 3, but a release-enabled assert_eq! r |
| CVE-2026-109350 | Awaiting Analysis | 未確認 | CWE-617 | Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch operations by sending crafted thin-pack OFS_DELTA entries. A |
| CVE-2026-109351 | Awaiting Analysis | 未確認 | CWE-770 | Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abort the process by supplying a huge pack-header object co |
| CVE-2026-109352 | Awaiting Analysis | 未確認 | CWE-79 | LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensor_descr values, popula |
| CVE-2026-109353 | Awaiting Analysis | 未確認 | CWE-89 | LibreNMS before 26.9.0 contains an SQL injection vulnerability that allows unprivileged users to inject SQL by supplying an array-valued notification_id parameter to notifications. |
| CVE-2026-109354 | Awaiting Analysis | 未確認 | CWE-22 | LibreNMS before 26.9.0 contains a path traversal vulnerability in nfsen_channel_common.inc.php that allows authenticated users to read unauthorized RRD data by injecting ../ sequen |
| CVE-2026-109355 | Awaiting Analysis | 未確認 | CWE-79 | LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in get_oxidized_nodes_list() that renders Oxidized API fields and SNMP sysName unescaped. Attackers cont |
| CVE-2026-109356 | Awaiting Analysis | 未確認 | CWE-862 | LibreNMS before 26.9.0 contains a missing authorization vulnerability in PortsController::purge that allows global-read users to physically delete ports without delete privileges. |
| CVE-2026-109357 | Awaiting Analysis | 未確認 | CWE-90 | LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization modes because usernames are inserted unescaped into LDAP search filters and auth |
| CVE-2026-109358 | Deferred | 未確認 | CWE-732 | Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable (0666). Local unp |
| CVE-2026-109359 | Deferred | 未確認 | CWE-345 | Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation. |
| CVE-2026-109360 | Deferred | 未確認 | CWE-502 | MONAI 0.4.0 before 1.6.1 contains a remote code execution vulnerability that allows on-path attackers to execute code by tampering with SENet pretrained weights fetched over plaint |
| CVE-2026-109361 | Deferred | 未確認 | CWE-502 | MONAI 1.2.0 before 1.6.1 contains an insecure deserialization vulnerability in nnUNetV2Runner that unpickles the postprocessing_file path read from inference_information.json witho |
| CVE-2026-109362 | Deferred | 未確認 | CWE-613 | Heym v0.0.5 before v0.0.113 contains a broken access control vulnerability that allows former collaborators to keep executing JWT-auth workflows by reusing scoped workflow:execute |
| CVE-2026-109363 | Deferred | 未確認 | CWE-617 | ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch ID, but the size computation during UnminedTx construction treats re-se |
| CVE-2026-109364 | Deferred | 未確認 | CWE-693 | Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses |
| CVE-2026-109365 | Deferred | 未確認 | CWE-345 | Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies wit |
| CVE-2026-109366 | Deferred | 未確認 | CWE-354 | Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path that allows unauthenticated peers to force dropping of new blocks wit |
| CVE-2026-109368 | Deferred | 未確認 | CWE-862 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.0.3 via the 'id' parameter. |
| CVE-2026-109369 | Deferred | 未確認 | CWE-862 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.1.0.3 This is due to the plugin not prop |
| CVE-2026-109371 | Deferred | 未確認 | CWE-306 | ZITADEL 3.0.0 before 4.18.0 contains a missing authentication vulnerability in the hosted Login V1 UI, where the change-username handler acts on the account bound to a login flow b |
| CVE-2026-109372 | Deferred | 未確認 | CWE-287 | ZITADEL 4.x before 4.19.2 and 3.x through 3.4.15 contains an authentication bypass in the SAML identity-provider intent callback, which verifies the assertion signature using the p |
| CVE-2026-109373 | Deferred | 未確認 | CWE-441 | ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' session tokens by forgin |
| CVE-2026-109374 | Deferred | 未確認 | CWE-863 | ZITADEL 3.0.0 before 4.19.2 contains a privilege escalation vulnerability in OIDC token exchange that allows end-user impersonators to impersonate administrators including IAM_OWNE |
| CVE-2026-109375 | Deferred | 未確認 | CWE-59 | Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting l |
| CVE-2026-109376 | Deferred | 未確認 | CWE-863 | ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesheet_html method that lets authenticated portal users view project Timesheets. The |
| CVE-2026-109377 | Deferred | 未確認 | CWE-862 | ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view stock quantities via whitelisted batch methods. Attackers, incl |
| CVE-2026-109378 | Deferred | 未確認 | CWE-918 | SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php that follows up to 10 redirects without re-validating targets w |
| CVE-2026-109379 | Deferred | 未確認 | CWE-208 | Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enumerate accounts due to an incomplete timing fix in /auth/chec |
| CVE-2026-109380 | Deferred | 未確認 | CWE-1284 | modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entry sizes via non-octal bytes parsed by readOctal(). Attackers |
| CVE-2026-109382 | Deferred | 未確認 | CWE-863 | The WSP MCP AI Agents Connector plugin for WordPress is vulnerable to Sensitive Information Disclosure in versions up to, and including, 2.9.5. This is due to the wsp_get_posts MCP |
| CVE-2026-109383 | Analyzed | 未確認 | CWE-295 | undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its constructor options |
| CVE-2026-109388 | Deferred | 未確認 | CWE-79 | The HivePress – Business Directory, Listings & Classified Ads Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'message' parameter in all versions u |
| CVE-2026-109390 | Awaiting Analysis | 未確認 | CWE-130 | AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated on Linux for command execution as root with |
| CVE-2026-109391 | Deferred | 未確認 | CWE-502 | Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the POST /api/1.0/symbolicat |
| CVE-2026-109392 | Deferred | 未確認 | CWE-79 | Pimcore through 2026.3.1 contains a stored cross-site scripting vulnerability that allows authenticated backend users to inject scripts by storing unescaped URLs in ExternalImage f |
| CVE-2026-109393 | Deferred | 未確認 | CWE-639 | QloApps through 1.7.0 contains an insecure direct object reference vulnerability in back-office AJAX handlers of AdminOrdersController, AdminBookingDocumentController, AdminProduct |
| CVE-2026-109394 | Deferred | 未確認 | CWE-639 | Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered custome |
| CVE-2026-109395 | Awaiting Analysis | 未確認 | CWE-125 | Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and lite |
| CVE-2026-109396 | Deferred | 未確認 | CWE-1236 | Thelia before 3.1.2 and 3.2.x before 3.2.1 contains a CSV formula injection vulnerability that allows unauthenticated visitors to inject spreadsheet formulas by supplying crafted r |
| CVE-2026-109397 | Deferred | 未確認 | CWE-434 | Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files by appending a trailin |
| CVE-2026-109398 | Deferred | 未確認 | CWE-409 | Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* func |
| CVE-2026-109399 | Deferred | 未確認 | CWE-295 | SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CM |
| CVE-2026-109400 | Deferred | 未確認 | CWE-269 | The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 0.1.4.1 This is due to the plu |
| CVE-2026-109401 | Deferred | 未確認 | CWE-200 | The WP Mail Logging plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.17.0 via the 'email_address' parameter. This makes |
| CVE-2026-109402 | Deferred | 未確認 | CWE-918 | A vulnerability was found in conductor-oss conductor 3.22.0. Affected is the function MCPService.listTools of the file ai/src/main/java/org/conductoross/conductor/ai/mcp/MCPService |
| CVE-2026-109403 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/cond |
| CVE-2026-109404 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in conductor-oss conductor up to 3.33.0-rc10. Affected by this issue is some unknown functionality of the file AgentController.java of the component |
| CVE-2026-109405 | Deferred | 未確認 | CWE-918 | A security flaw has been discovered in conductor-oss conductor up to 3.33.0-rc10. This affects the function KafkaPublishTask.start of the file kafka/src/main/java/com/netflix/condu |
| CVE-2026-109406 | Deferred | 未確認 | CWE-840 | A weakness has been identified in macrozheng mall up to 1.0.3. This vulnerability affects the function OmsPortalOrderServiceImpl of the file /order/generateOrder of the component m |
| CVE-2026-109407 | Deferred | 未確認 | CWE-362 | A security vulnerability has been detected in macrozheng mall up to 1.0.3. This issue affects some unknown processing of the file /order/generateOrder of the component Coupon Redem |
| CVE-2026-109409 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file src/routes/setting/fileManagement/openFolder.ts of t |
| CVE-2026-109410 | Deferred | 未確認 | CWE-682 | A vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file /order/update/moneyInfo of the |
| CVE-2026-109412 | Awaiting Analysis | 未確認 | CWE-749 | An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information. |
| CVE-2026-109413 | Awaiting Analysis | 未確認 | CWE-674 | In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for every { and [ |
| CVE-2026-109414 | Deferred | 未確認 | CWE-89 | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to blind SQL Injection via the 'src_by[].val.start / src_by[].val.end (operator 'bt')' paramete |
| CVE-2026-109415 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-109422 | Deferred | 未確認 | CWE-749 | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a remote code execution vulnerability in the renderer-process IPC bridge os.navig |
| CVE-2026-109423 | Deferred | 未確認 | CWE-295 | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacke |
| CVE-2026-109424 | Deferred | 未確認 | CWE-321 | NetEase Cloud Music client for Windows (cloudmusic.exe) versions 3.1.38 and 3.1.39.205426 contains a weak encryption vulnerability where /eapi/ and /xeapi/ API response bodies are |
| CVE-2026-109425 | Awaiting Analysis | 未確認 | CWE-1286 | Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() and ReadWithNoSecrets() skip the structural Validate() |
| CVE-2026-109426 | Deferred | 未確認 | CWE-312 | Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the MongoDB database, backups, or logs to recover the operator's auth |
| CVE-2026-109427 | Deferred | 未確認 | CWE-639, CWE-862 | Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated token holders to access arbitrary chat messages by forging unsig |
| CVE-2026-109428 | Awaiting Analysis | 未確認 | CWE-436 | Mistral Vibe before 2.25.5 contains a permission validation bypass vulnerability that allows attackers to execute unauthorized commands by exploiting a parsing discrepancy between |
| CVE-2026-109429 | Awaiting Analysis | 未確認 | CWE-436 | Mistral Vibe before 2.25.4 contains a command permission gate bypass vulnerability that allows attackers to execute arbitrary commands by hiding a command substitution inside a sin |
| CVE-2026-109430 | Awaiting Analysis | 未確認 | CWE-611 | Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote attackers to submit crafted XML POST requests to the /WebAd |
| CVE-2026-109431 | Awaiting Analysis | 未確認 | CWE-639, CWE-862 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that allows authenticated attackers w |
| CVE-2026-109432 | Deferred | 未確認 | CWE-78, CWE-917 | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to check sub-query expression maps |
| CVE-2026-109433 | Deferred | 未確認 | CWE-863 | Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permissio |
| CVE-2026-109434 | Deferred | 未確認 | CWE-451 | Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering full |
| CVE-2026-109437 | Deferred | 未確認 | CWE-1188, CWE-306 | Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent sandbox backend to local execution and shipping no authenticatio |
| CVE-2026-109438 | Deferred | 未確認 | CWE-908 | 3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes |
| CVE-2026-109439 | Awaiting Analysis | 未確認 | CWE-306 | Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently ov |
| CVE-2026-109440 | Deferred | 未確認 | LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands or Python by planting instructions in web co | |
| CVE-2026-109441 | Deferred | 未確認 | CWE-653 | LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on Docker's shared default bridge network with inter-container |
| CVE-2026-109442 | Deferred | 未確認 | CWE-306 | piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat and POST /chat/stream endpoints lack authentication. Attack |
| CVE-2026-109443 | Deferred | 未確認 | CWE-653 | JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating system commands via an unsandboxed execute tool in Copilot |
| CVE-2026-109444 | Deferred | 未確認 | CWE-862 | OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands without confirmation because the headless presente |
| CVE-2026-109447 | Deferred | 未確認 | CWE-269 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and |
| CVE-2026-109448 | Awaiting Analysis | 未確認 | CWE-124, CWE-190 | Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, to corrupt heap memor |
| CVE-2026-109449 | Awaiting Analysis | 未確認 | CWE-674 | In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. A |
| CVE-2026-109453 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-109461 | Awaiting Analysis | 未確認 | CWE-346 | Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-109468 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-109506 | Deferred | 未確認 | CWE-287 | Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow. An unauthenticated attacker on the same loc |
| CVE-2026-109512 | Deferred | 未確認 | CWE-79 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.4 due to insufficient input s |
| CVE-2026-109513 | Deferred | 未確認 | CWE-79 | The NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar plugin for WordPress is vulnerable t |
| CVE-2026-109515 | Deferred | 未確認 | CWE-269 | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and inc |
| CVE-2026-109519 | Deferred | 未確認 | CWE-22 | A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipul |
| CVE-2026-109520 | Deferred | 未確認 | CWE-266, CWE-267 | A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatc |
| CVE-2026-109521 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changeboo |
| CVE-2026-109522 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an unknown function of the file Admin/de |
| CVE-2026-109523 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionalit |
| CVE-2026-109524 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this issue is some unknown functionality |
| CVE-2026-109525 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was identified in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown part of the file changebooki |
| CVE-2026-109526 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information d |
| CVE-2026-109527 | Awaiting Analysis | 未確認 | CWE-770 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the S |
| CVE-2026-109553 | Awaiting Analysis | 未確認 | Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only principal keys. When Gitea trusts a user certificate authorit | |
| CVE-2026-109556 | Deferred | 未確認 | CWE-749 | EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC handler, which lacks a sender check and spawns a caller-supplied |
| CVE-2026-109557 | Deferred | 未確認 | CWE-79 | EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attackers to inject script through notebook names or memo titles. At |
| CVE-2026-109558 | Deferred | 未確認 | CWE-79 | EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInner |
| CVE-2026-109559 | Deferred | 未確認 | CWE-863 | EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origins in the main window via string-prefix URL matching. Attacke |
| CVE-2026-109560 | Deferred | 未確認 | CWE-863 | Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run unapproved commands by chaining them after allowed Bash prefi |
| CVE-2026-109561 | Deferred | 未確認 | CWE-863 | goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user approval in Manual Approval mode because persisted read-only an |
| CVE-2026-109562 | Deferred | 未確認 | CWE-862 | SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal to call the /api/v1/upload, /api/v1/preview and /api/v1/previ |
| CVE-2026-109563 | Awaiting Analysis | 未確認 | CWE-1333 | N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that backtracks quadratically on long digit runs. Attackers can supp |
| CVE-2026-109564 | Deferred | 未確認 | CWE-862 | LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that skips the read-access and draft checks enforced by get_play |
| CVE-2026-109565 | Deferred | 未確認 | CWE-79 | Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through self-registered display na |
| CVE-2026-109566 | Deferred | 未確認 | CWE-798 | Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated attackers to gain super-admin access through an AuthSeeder-c |
| CVE-2026-109567 | Deferred | 未確認 | CWE-269 | Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire component that allows users with the edit users permission to |
| CVE-2026-109568 | Deferred | 未確認 | CWE-639 | Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API controllers that skips ownership checks. Authenticated non-admin |
| CVE-2026-109569 | Deferred | 未確認 | CWE-1188 | sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access the host filesystem because nsenter attaches without --root. |
| CVE-2026-109570 | Deferred | 未確認 | CWE-306 | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the propri |
| CVE-2026-109571 | Deferred | 未確認 | CWE-306 | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired BLE devices to subscribe to the Heart Rate Measurement cha |
| CVE-2026-109572 | Awaiting Analysis | 未確認 | CWE-862 | Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API wit |
| CVE-2026-109573 | Deferred | 未確認 | CWE-89 | phpMyFAQ before 4.1.9 contains an SQL injection vulnerability in PdoMysql::escape(), which escapes single quotes with backslashes that are treated literally when MySQL or MariaDB r |
| CVE-2026-109574 | Awaiting Analysis | 未確認 | CWE-22 | Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through the Sass compiler's |
| CVE-2026-109575 | Awaiting Analysis | 未確認 | CWE-306 | In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global authentication logic that improperly drops s |
| CVE-2026-109576 | Awaiting Analysis | 未確認 | CWE-787 | The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list advanced its processed-bytes counter even when a record had be |
| CVE-2026-109587 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on MPU-enabled builds to read and w |
| CVE-2026-109588 | Awaiting Analysis | 未確認 | CWE-125, CWE-197, CWE-787 | Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R AArch64) MPU port might allow, u |
| CVE-2026-109595 | Awaiting Analysis | 未確認 | CWE-22 | Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ESBuild's fallback reso |
| CVE-2026-109596 | Awaiting Analysis | 未確認 | CWE-59 | Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via nested-mount ancesto |
| CVE-2026-109597 | Awaiting Analysis | 未確認 | CWE-79 | Hugo from v0.60.0 before v0.167.0 contains a stored cross-site scripting vulnerability that allows Markdown content authors to inject HTML by supplying crafted explicit heading IDs |
| CVE-2026-109598 | Deferred | 未確認 | CWE-862 | Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted send_sms API endpoint, which does not verify that the cal |
| CVE-2026-109599 | Deferred | 未確認 | CWE-862 | Frappe before 15.113.3 and 16.x before 16.25.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks. Authenticated |
| CVE-2026-109600 | Deferred | 未確認 | CWE-862 | Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who p |
| CVE-2026-109601 | Deferred | 未確認 | CWE-73 | Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling of attributes in outgoing email HTML. Attackers who can suppl |
| CVE-2026-109602 | Deferred | 未確認 | CWE-79 | Frappe before 15.118.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability in dashboard chart filters because jQuery renders entered filter values as rich |
| CVE-2026-109603 | Deferred | 未確認 | CWE-918 | Frappe Framework 15.x before 15.107.3 and 16.x before 16.17.0 relies on a vulnerable pdfkit library (CVE-2025-26240) for PDF generation, enabling server-side request forgery and lo |
| CVE-2026-109604 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability because a tool view interpolates stored record names into markup without |
| CVE-2026-109605 | Deferred | 未確認 | CWE-266, CWE-285 | A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the function Action::save_user of the file admin_class.php of the componen |
| CVE-2026-109606 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save_user of the file admin/admin_class.php of the component Acc |
| CVE-2026-109607 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. Thi |
| CVE-2026-109608 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in several endpoints that lack input validation. Any authenticated user, including on |
| CVE-2026-109609 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation. Authenticated attackers with low privil |
| CVE-2026-109610 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a missing authorization vulnerability because certain endpoints fail to enforce proper permission checks. Authentica |
| CVE-2026-109611 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks. Authent |
| CVE-2026-109612 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a stored cross-site scripting vulnerability in a report view that interpolates stored record names into markup witho |
| CVE-2026-109613 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks on docu |
| CVE-2026-109614 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 16.34.0 contains a missing authorization vulnerability that allows authenticated users to read financial data beyond their permitted role. Attackers can query |
| CVE-2026-109615 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks during docu |
| CVE-2026-109616 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks. Authen |
| CVE-2026-109617 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks during d |
| CVE-2026-109618 | Analyzed | 未確認 | CWE-1325, CWE-416, CWE-755, CWE-824 | PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave |
| CVE-2026-109619 | Analyzed | 未確認 | CWE-1325, CWE-416, CWE-755, CWE-824 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The g |
| CVE-2026-109620 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in SourceCodester Online Reviewer System 1.0. Affected by this vulnerability is the function PDO::prepare of the file login/index.php. Such manipulat |
| CVE-2026-109621 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.120.0 and 16.x before 16.23.0 contains an authorization bypass in an endpoint that honours a caller-supplied flag disabling its own permission enforcement. |
| CVE-2026-109622 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks. Authen |
| CVE-2026-109623 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.1 and 16.x before 16.34.2 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks. Authent |
| CVE-2026-109624 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks. Authentica |
| CVE-2026-109625 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce role-based authorization checks. Aut |
| CVE-2026-109626 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 16.34.2 contains an SQL injection vulnerability caused by missing input validation in multiple endpoints. Authenticated attackers with low privileges can send |
| CVE-2026-109627 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper permission checks. Authentic |
| CVE-2026-109628 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper role checks when modifying re |
| CVE-2026-109629 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.3 and 16.x before 16.35.0 contains a missing authorization vulnerability in an endpoint that sends transactional email through the site's configured ou |
| CVE-2026-109630 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper permission checks. Authentic |
| CVE-2026-109631 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains an SQL injection vulnerability in some endpoints that lack input validation, allowing crafted input to alter databas |
| CVE-2026-109632 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.121.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks. Authen |
| CVE-2026-109633 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a stored cross-site scripting vulnerability because content submitted through a public-facing booking page is stored |
| CVE-2026-109634 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.121.0 and 16.x before 16.34.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers with high |
| CVE-2026-109635 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.105.0 and 16.x before 16.15.0 contains a missing authorization vulnerability in certain document creation endpoints that fail to verify that the requesting |
| CVE-2026-109636 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability because certain endpoints fail to enforce proper permission checks. Authentica |
| CVE-2026-109637 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 16.14.0 contains a missing authorization vulnerability that allows authenticated users to modify master data beyond their permitted role. Attackers can send r |
| CVE-2026-109638 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Authenticated attackers can send |
| CVE-2026-109639 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.102.0 and 16.x before 16.8.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database q |
| CVE-2026-109640 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 16.22.0 contains a missing authorization vulnerability that allows authenticated users to modify records by invoking endpoints lacking proper authorization ch |
| CVE-2026-109641 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce authorization checks. Unauthenticate |
| CVE-2026-109642 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks. Authen |
| CVE-2026-109643 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a missing authorization vulnerability in certain project-related endpoints that fail to enforce permission checks. A |
| CVE-2026-109644 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks on valua |
| CVE-2026-109645 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks. Authentica |
| CVE-2026-109646 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated low-privileged attac |
| CVE-2026-109647 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in multiple endpoints caused by missing input validation. Authenticated attackers can |
| CVE-2026-109648 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.106.0 and 16.x before 16.16.0 contains an SQL injection vulnerability in some endpoints due to missing input validation. Authenticated attackers can send s |
| CVE-2026-109649 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.102.0 and 16.x before 16.11.0 contains an SQL injection vulnerability in some endpoints due to missing input validation, allowing manipulation of database |
| CVE-2026-109650 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks. Authent |
| CVE-2026-109651 | Deferred | 未確認 | CWE-918 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a server-side request forgery vulnerability caused by a configuration field, writable by common operational roles, t |
| CVE-2026-109652 | Deferred | 未確認 | CWE-1336 | Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before templ |
| CVE-2026-109653 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability because record fields are rendered into an HTML attribute context withou |
| CVE-2026-109654 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a missing authorization vulnerability in which certain endpoints fail to verify that the caller may read a document |
| CVE-2026-109655 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper role-based authorization chec |
| CVE-2026-109656 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.118.2 and 16.x before 16.30.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks on item |
| CVE-2026-109657 | Deferred | 未確認 | CWE-79 | Frappe ERPNext 16.x before 16.27.0 contains a stored cross-site scripting vulnerability that allows users with edit rights to inject script through a record name rendered without e |
| CVE-2026-109658 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.115.0 and 16.x before 16.26.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks. Authen |
| CVE-2026-109659 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper permission checks. Authentic |
| CVE-2026-109660 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 has certain endpoints that do not enforce proper authorization checks on operations that modify production records. An authen |
| CVE-2026-109661 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.116.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks, exposin |
| CVE-2026-109662 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.112.0 and 16.x before 16.23.0 contains a stored cross-site scripting vulnerability in a public portal form that accepts unauthenticated submissions and sto |
| CVE-2026-109663 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.113.0 and 16.x before 16.22.0 contains an SQL injection vulnerability caused by missing input validation in some endpoints. Authenticated remote attackers |
| CVE-2026-109664 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.112.0 contains a missing authorization vulnerability that allows authenticated users with a common operational role to modify records beyond their permissi |
| CVE-2026-109665 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.108.0 and 16.x before 16.18.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks. Authentica |
| CVE-2026-109666 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper permission checks on inventor |
| CVE-2026-109667 | Deferred | 未確認 | CWE-269 | Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability in a record-creation endpoint that takes the record type from the request and i |
| CVE-2026-109668 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in certain endpoints that handle party records, allowing authenticated users t |
| CVE-2026-109669 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a missing authorization vulnerability in which certain endpoints fail to enforce proper authorization checks on reco |
| CVE-2026-109670 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.110.0 and 16.x before 16.21.0 contains a stored cross-site scripting vulnerability caused by record names being rendered without escaping. Attackers with w |
| CVE-2026-109671 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.113.0 and 16.x before 16.24.0 contains a stored cross-site scripting vulnerability in a profile field that is rendered without escaping into portal pages. |
| CVE-2026-109672 | Deferred | 未確認 | CWE-862 | Frappe ERPNext before 15.118.0 and 16.x before 16.27.0 contains a missing authorization vulnerability in certain endpoints that fail to enforce proper authorization checks. Authent |
| CVE-2026-109673 | Deferred | 未確認 | CWE-79 | Frappe ERPNext before 15.103.0 and 16.x before 16.12.0 contains a stored cross-site scripting vulnerability because the names of certain records are not properly neutralized when r |
| CVE-2026-109674 | Deferred | 未確認 | CWE-89 | Frappe ERPNext before 15.98.0 and 16.x before 16.6.0 contains an SQL injection vulnerability in some endpoints caused by missing input validation. Remote authenticated attackers ca |
| CVE-2026-109675 | Deferred | 未確認 | CWE-639 | Frappe Suite before commit 2697564a9c46da6acc614743eaf9915fe5238f4f contains a broken access control vulnerability in the get_mailboxes and get_quota APIs that allows authenticated |
| CVE-2026-109676 | Undergoing Analysis | 未確認 | CWE-416 | FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invali |
| CVE-2026-109677 | Undergoing Analysis | 未確認 | CWE-125 | FreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr byte count is not capped. Mali |
| CVE-2026-109678 | Analyzed | 未確認 | CWE-617 | FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated SCardStatusA passes a NULL reader |
| CVE-2026-109679 | Analyzed | 未確認 | CWE-476 | FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the config |
| CVE-2026-109680 | Analyzed | 未確認 | CWE-787 | FreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to 32 bytes while keeping a pre-filled suggested usern |
| CVE-2026-109681 | Awaiting Analysis | 未確認 | CWE-918 | The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mod |
| CVE-2026-109682 | Awaiting Analysis | 未確認 | CWE-918 | Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a different host without restricting the redirect destination. |
| CVE-2026-109684 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through |
| CVE-2026-109685 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Reflected XSS.This issu |
| CVE-2026-109686 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Object Injection.This issue affects Link Whisper Free: from n/a through 0. |
| CVE-2026-109687 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.Thi |
| CVE-2026-109688 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Link Whisper INC Link Whisper Free link-whisper allows Blind SQL Injection.Thi |
| CVE-2026-109689 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-109691 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows |
| CVE-2026-109692 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Use |
| CVE-2026-109693 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5. |
| CVE-2026-109694 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5. |
| CVE-2026-109695 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve Embedded Sensitive Data.This issue affects FluentCart: from |
| CVE-2026-109696 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP ManageNinja LLC FluentBoards fluent-boards allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flue |
| CVE-2026-109697 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Stored XSS.This issue affects SureCa |
| CVE-2026-109698 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Man |
| CVE-2026-109699 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Use |
| CVE-2026-109700 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-109701 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PAYCOMET PAYCOMET for WooCommerce paytpv-for-woocommerce allows Reflected XSS. |
| CVE-2026-109702 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in maxfoundry Social Share Buttons share-button allows Stored XSS.This issue affe |
| CVE-2026-109703 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2.23.1. |
| CVE-2026-109704 | Deferred | 未確認 | CWE-269 | Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109705 | Deferred | 未確認 | CWE-416 | Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153. |
| CVE-2026-109706 | Deferred | 未確認 | CWE-416 | Use-after-free in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109707 | Deferred | 未確認 | CWE-416 | Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109708 | Deferred | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 15 |
| CVE-2026-109709 | Deferred | 未確認 | CWE-200 | Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thu |
| CVE-2026-109710 | Deferred | 未確認 | CWE-416 | Use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109711 | Deferred | 未確認 | CWE-416 | Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109712 | Deferred | 未確認 | CWE-908 | Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thund |
| CVE-2026-109713 | Deferred | 未確認 | CWE-416 | Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109714 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109715 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbi |
| CVE-2026-109716 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbi |
| CVE-2026-109717 | Deferred | 未確認 | CWE-416 | Use-after-free in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109718 | Deferred | 未確認 | CWE-416 | Use-after-free in the XML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109719 | Deferred | 未確認 | CWE-362, CWE-416 | Race condition, use-after-free in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thun |
| CVE-2026-109720 | Deferred | 未確認 | CWE-843 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109721 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109722 | Deferred | 未確認 | CWE-670 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153 |
| CVE-2026-109723 | Deferred | 未確認 | CWE-190 | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109724 | Deferred | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109725 | Deferred | 未確認 | CWE-416 | Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109726 | Deferred | 未確認 | CWE-416 | Use-after-free in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109727 | Deferred | 未確認 | CWE-416 | Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109728 | Deferred | 未確認 | CWE-416 | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109729 | Deferred | 未確認 | CWE-416 | Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109730 | Deferred | 未確認 | CWE-190 | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109731 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109732 | Deferred | 未確認 | CWE-416 | Use-after-free in the DOM: Streams component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109733 | Deferred | 未確認 | CWE-843 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153 |
| CVE-2026-109734 | Deferred | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109735 | Deferred | 未確認 | CWE-416 | Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109736 | Deferred | 未確認 | CWE-451 | Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109737 | Deferred | 未確認 | CWE-693 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109738 | Deferred | 未確認 | CWE-416 | Use-after-free in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109739 | Deferred | 未確認 | CWE-269 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109740 | Deferred | 未確認 | CWE-119 | Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird |
| CVE-2026-109741 | Deferred | 未確認 | CWE-416 | Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109742 | Deferred | 未確認 | CWE-200 | Information disclosure in the PDF Viewer component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109743 | Deferred | 未確認 | CWE-269 | Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109744 | Deferred | 未確認 | CWE-79 | Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109745 | Deferred | 未確認 | CWE-908 | Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109746 | Deferred | 未確認 | CWE-693 | Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109747 | Deferred | 未確認 | CWE-451 | Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109748 | Deferred | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109749 | Deferred | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109750 | Deferred | 未確認 | CWE-862 | Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109751 | Deferred | 未確認 | CWE-200 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109752 | Deferred | 未確認 | CWE-416 | Use-after-free in the DOM: Workers component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109753 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109754 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the DOM: Editor component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109755 | Deferred | 未確認 | CWE-693 | Sandbox escape in the DOM: Content Processes component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109756 | Deferred | 未確認 | CWE-269 | Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109757 | Deferred | 未確認 | CWE-362 | Sandbox escape due to race condition in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109758 | Awaiting Analysis | 未確認 | CWE-1321, CWE-798 | Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable |
| CVE-2026-109759 | Deferred | 未確認 | CWE-346 | Site isolation issue in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109760 | Deferred | 未確認 | CWE-693 | Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109761 | Deferred | 未確認 | CWE-416 | Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109762 | Deferred | 未確認 | CWE-119 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109763 | Deferred | 未確認 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. | |
| CVE-2026-109764 | Deferred | 未確認 | CWE-862 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109765 | Deferred | 未確認 | CWE-362, CWE-416 | Race condition, use-after-free in the Graphics: Text component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109766 | Deferred | 未確認 | CWE-693 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109767 | Deferred | 未確認 | CWE-200 | Information disclosure in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109768 | Deferred | 未確認 | CWE-400 | Denial-of-service in the Site Reports component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109769 | Deferred | 未確認 | CWE-200 | Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109770 | Deferred | 未確認 | CWE-20 | Spoofing issue in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109771 | Deferred | 未確認 | CWE-200 | Information disclosure in the WebRTC: Networking component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109772 | Deferred | 未確認 | Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109773 | Deferred | 未確認 | CWE-400 | Denial-of-service in the Sync component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109774 | Deferred | 未確認 | Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109775 | Deferred | 未確認 | CWE-400 | Denial-of-service in the WebRTC component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109776 | Deferred | 未確認 | CWE-362 | Race condition in the XPCOM component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109777 | Deferred | 未確認 | CWE-200 | Information disclosure in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109778 | Deferred | 未確認 | CWE-269 | Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109779 | Deferred | 未確認 | CWE-362 | Race condition in the Networking: DNS component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. |
| CVE-2026-109780 | Deferred | 未確認 | Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. | |
| CVE-2026-109781 | Deferred | 未確認 | CWE-400 | Denial-of-service in the Printing: Output component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109782 | Deferred | 未確認 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5. | |
| CVE-2026-109783 | Deferred | 未確認 | Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5. | |
| CVE-2026-109786 | Awaiting Analysis | 未確認 | CWE-117 | In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <token>" suffix after the host address. Because OpenSSH logs the offered |
| CVE-2026-109812 | Deferred | 未確認 | CWE-862 | A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial computing products. A low-privileged authenticated attacker with ad |
| CVE-2026-109813 | Deferred | 未確認 | CWE-321 | A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing products. An unauthenticated attacker with adjacent network acce |
| CVE-2026-109827 | Deferred | 未確認 | CWE-119, CWE-787 | A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such |
| CVE-2026-109828 | Deferred | 未確認 | CWE-453, CWE-457 | A vulnerability was found in libsndfile up to 1.2.2. This issue affects the function wavlike_subchunk_parse of the file src/wavlike.c of the component WAV Parsing. Performing a man |
| CVE-2026-109829 | Analyzed | 未確認 | CWE-346, CWE-524 | undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in th |
| CVE-2026-109831 | Deferred | 未確認 | CWE-787 | UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service (DoS) condition. |
| CVE-2026-109832 | Awaiting Analysis | 未確認 | CWE-835 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are |
| CVE-2026-109833 | Awaiting Analysis | 未確認 | CWE-121 | A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS read path, partial consumption of the internal peek buffer incorrectly moves remaini |
| CVE-2026-109838 | Awaiting Analysis | 未確認 | CWE-347 | IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature. |
| CVE-2026-109839 | Awaiting Analysis | 未確認 | CWE-325 | IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the cryptographic algorithm. |
| CVE-2026-109841 | Analyzed | 未確認 | CWE-178 | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its fetch() implementation verifies Subresource Integrity metadata by matc |
| CVE-2026-109844 | Awaiting Analysis | 未確認 | CWE-862 | `GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that the user still had access to it. A user who watched a private r |
| CVE-2026-109854 | Awaiting Analysis | 未確認 | CWE-457 | A flaw was found in m17n-lib. An attacker who supplies crafted input to an application processing ISO-2022 encoded text can cause the library to read uninitialized memory from the |
| CVE-2026-109855 | Analyzed | 未確認 | CWE-248, CWE-754 | undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client, which is enabled by default when HTTP/2 is allowed, mishandles a fai |
| CVE-2026-109869 | Analyzed | 未確認 | CWE-248, CWE-459 | undici is an HTTP client library for Node.js. In versions 6.23.0 through 6.29.0, 7.18.0 through 7.30.0, and 8.0.0 through 8.12.1, its fetch() implementation crashes the Node.js pro |
| CVE-2026-109890 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-109892 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin b |
| CVE-2026-109893 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.This issue affe |
| CVE-2026-109894 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: |
| CVE-2026-109895 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics Booktics booktics allows DOM-Based XSS.This issue affects Booktics: |
| CVE-2026-109896 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured A |
| CVE-2026-109897 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S |
| CVE-2026-109898 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP E |
| CVE-2026-109901 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Codepeople CP Multi View Event Calendar cp-multi-view-calendar allows SQL Inj |
| CVE-2026-109924 | Analyzed | 未確認 | CWE-770 | undici is an HTTP client library for Node.js. In versions 6.5.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its EventSource client can be driven to exhaust proc |
| CVE-2026-109926 | Deferred | 未確認 | CWE-862 | The Productive Commerce WordPress plugin before 1.1.49 does not perform a capability check in one of its AJAX actions and exposes the nonce that guards it on every admin-area page |
| CVE-2026-109927 | Deferred | 未確認 | CWE-269 | The HIPAA Forms WordPress plugin before 3.3.2 does not perform a capability check when handling a request that rebuilds its own custom user role, allowing a user who already holds |
| CVE-2026-109930 | Deferred | 未確認 | CWE-200 | The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid AP |
| CVE-2026-109931 | Deferred | 未確認 | CWE-862 | The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action available to unauthenticated users, allowing any visitor to |
| CVE-2026-109932 | Analyzed | 未確認 | CWE-400, CWE-405, CWE-770 | undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSocket client, including the bundled WebSock |
| CVE-2026-109933 | Deferred | 未確認 | CWE-79 | The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values before writing them into an inline stylesheet, allowing use |
| CVE-2026-109934 | Deferred | 未確認 | CWE-200 | The Otter Blocks WordPress plugin before 3.2.8 does not correctly determine whether a post is publicly readable before returning its data through a REST API endpoint, treating any |
| CVE-2026-109935 | Deferred | 未確認 | CWE-200 | The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post is rendered through the WordPress REST API, allowing unauthen |
| CVE-2026-109936 | Deferred | 未確認 | CWE-79 | The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrite its dynamic-content tokens while rendering blocks, so the pattern can consume |
| CVE-2026-109937 | Deferred | 未確認 | CWE-601 | The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before using it to build the return destination of a Stripe Ch |
| CVE-2026-109938 | Undergoing Analysis | 未確認 | CWE-190 | Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirec |
| CVE-2026-109939 | Undergoing Analysis | 未確認 | CWE-476 | FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/orders.c, which accesses the client bitmap cache when the |
| CVE-2026-109940 | Undergoing Analysis | 未確認 | CWE-121 | FreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11 provider. It hex-encodes a key' |
| CVE-2026-109941 | Undergoing Analysis | 未確認 | CWE-835 | FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang clients by sending incomplete chunked respo |
| CVE-2026-109942 | Undergoing Analysis | 未確認 | CWE-476 | FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c because rdg_process_control_packet accepts a header-only PKT_TYP |
| CVE-2026-109943 | Undergoing Analysis | 未確認 | CWE-415 | FreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or PolygonCB points array when numPo |
| CVE-2026-109944 | Undergoing Analysis | 未確認 | CWE-617 | FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation context, so Emulate_SCardTransmit later looks up the delete |
| CVE-2026-109945 | Analyzed | 未確認 | CWE-362 | FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT operate concurrently on one car |
| CVE-2026-109946 | Analyzed | 未確認 | CWE-617 | FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an assertion and aborts the client. |
| CVE-2026-109947 | Analyzed | 未確認 | CWE-770 | FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirect |
| CVE-2026-109948 | Analyzed | 未確認 | CWE-200 | FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory. Serve |
| CVE-2026-109949 | Analyzed | 未確認 | CWE-307 | FreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartcard GIDS implementation, which stores the PIN retry counter p |
| CVE-2026-109950 | Analyzed | 未確認 | CWE-125 | FreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending mismatched message lengths. Attacke |
| CVE-2026-109951 | Analyzed | 未確認 | CWE-125 | FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backe |
| CVE-2026-109952 | Analyzed | 未確認 | CWE-757 | The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set in nego_process_negotiation_response( |
| CVE-2026-109953 | Analyzed | 未確認 | CWE-522 | FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential delegation, sendi |
| CVE-2026-109954 | Awaiting Analysis | 未確認 | CWE-362 | Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request inter |
| CVE-2026-109955 | Deferred | 未確認 | CWE-174 | Hono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated attackers to skip prefix middleware by exploiting double path |
| CVE-2026-109956 | Awaiting Analysis | 未確認 | CWE-22 | NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attacke |
| CVE-2026-109957 | Deferred | 未確認 | CWE-639 | EspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read other users' attachments by supply |
| CVE-2026-109958 | Deferred | 未確認 | CWE-200 | EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read restricted emailAddress values via the address-book search API |
| CVE-2026-109959 | Deferred | 未確認 | CWE-200 | EspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability that allows authenticated users to read audited field values restricted by field-level security by fetching ind |
| CVE-2026-109960 | Deferred | 未確認 | CWE-79 | Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a malicious theme valu |
| CVE-2026-109961 | Deferred | 未確認 | CWE-74 | Froxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the root-owned NSS group database via t |
| CVE-2026-109962 | Deferred | 未確認 | CWE-285 | Froxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and cronjob configuration via API rea |
| CVE-2026-109963 | Deferred | 未確認 | CWE-639 | Froxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor (admin_templates.php) because the mail body is fetched by mailbodyid w |
| CVE-2026-109964 | Awaiting Analysis | 未確認 | CWE-124 | ImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to pointer arithmetic overflow. Att |
| CVE-2026-109965 | Deferred | 未確認 | CWE-59 | Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks inside a repository. Pr |
| CVE-2026-109966 | Deferred | 未確認 | CWE-88 | yt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated remote attackers to inject yt-dlp options by supplying a dash-prefixed url para |
| CVE-2026-109967 | Deferred | 未確認 | CWE-476 | yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the serve |
| CVE-2026-109968 | Awaiting Analysis | 未確認 | CWE-532 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encryption passphrases in plaintext to a log file. The log file is created |
| CVE-2026-109969 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon creates AF_UNIX sockets without explicit permission restrictions or peer credential verifi |
| CVE-2026-109970 | Awaiting Analysis | 未確認 | CWE-538 | A flaw was found in the clevis PKCS#11 pin. The clevis-luks-pkcs11-askpin script writes the PKCS#11 token PIN in plaintext to a file without setting restrictive permissions. Under |
| CVE-2026-109971 | Awaiting Analysis | 未確認 | CWE-214 | A flaw was found in the clevis PKCS#11 pin. The clevis-decrypt-pkcs11 script passes the PKCS#11 token PIN as a command-line argument to pkcs11-tool, making it visible to any local |
| CVE-2026-109976 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF_UNIX client connects to the data socket without a bound address, due to |
| CVE-2026-109982 | Deferred | 未確認 | CWE-862 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.2 does not perform a capability check or validate a nonce on its migration actions, allowing any authentic |
| CVE-2026-109983 | Deferred | 未確認 | CWE-79 | The YMC Filter plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'post_title' parameter in all versions up to, and including, 3.12.19 due to insuf |
| CVE-2026-109985 | Deferred | 未確認 | CWE-79 | The xSpeed Cache: AI-Powered Performance Hub with MCP, Caching & CDN plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions u |
| CVE-2026-109987 | Deferred | 未確認 | CWE-79 | The PixelYourSite WordPress plugin before 11.4.3, PixelYourSite Pro WordPress plugin before 12.6.8 do not sanitise and escape a cookie value before printing it into the page outpu |
| CVE-2026-109989 | Deferred | 未確認 | CWE-79 | The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_width_unit' parameter in all versions up to, and including, 1.4.7 due to insuffic |
| CVE-2026-109990 | Deferred | 未確認 | CWE-79 | The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versio |
| CVE-2026-109998 | Deferred | 未確認 | CWE-79 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 2.4.3 due to insufficient input s |
| CVE-2026-110002 | Deferred | 未確認 | CWE-434 | The Snazzy Social Media Feed plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.5 via the (file scope) function. This is due to mis |
| CVE-2026-110005 | Deferred | 未確認 | CWE-78 | The `periphery` agent's container-management functionality of Komodo version 2.2.0 contains an OS command injection vulnerability. An authenticated low-privileged user with `Execut |
| CVE-2026-110008 | Awaiting Analysis | 未確認 | CWE-352, CWE-459, CWE-613 | @fastify/oauth2 is a Fastify wrapper for OAuth2 login flows. In versions 7.2.0 through 8.3.1, the state and code-verifier cookies are set without a Path attribute at a login route |
| CVE-2026-110010 | Deferred | 未確認 | CWE-862 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform any capability or authentication check before allowing an unauthenticated request to re |
| CVE-2026-110011 | Deferred | 未確認 | CWE-863 | The MB Custom Post Types & Custom Taxonomies WordPress plugin before 2.12.3 does not perform a capability check in its export feature, allowing users with a role as low as Contribu |
| CVE-2026-110012 | Deferred | 未確認 | CWE-200 | The Salon Booking System WordPress plugin before 10.31.3 does not restrict several of its booking REST API routes to users with the appropriate capability, allowing any authentica |
| CVE-2026-110013 | Deferred | 未確認 | CWE-287 | The Salon Booking System WordPress plugin before 10.31.9 does not generate its booking-API access tokens from a secure random source, instead deriving them from a value hardcoded |
| CVE-2026-110014 | Deferred | 未確認 | CWE-862 | The Salon Booking System WordPress plugin before 10.31.9 does not properly check authorization before creating a booking and trusts a caller-supplied user identifier and booking s |
| CVE-2026-110015 | Deferred | 未確認 | CWE-352 | The Salon Booking System WordPress plugin before 10.31.9 does not correctly verify the authenticity of REST API requests and discards WordPress core's nonce check for cookie-authe |
| CVE-2026-110017 | Deferred | 未確認 | CWE-79 | The Quick PayPal Payments: Payment Button & Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'form' parameter in all versions up to, and including, 6. |
| CVE-2026-110018 | Received | 未確認 | CWE-269 | The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions u |
| CVE-2026-110019 | Deferred | 未確認 | CWE-862 | The Bulk Page Generator – LPagery plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.0 This is due to the plugin not properly veri |
| CVE-2026-110024 | Awaiting Analysis | 未確認 | CWE-613 | @fastify/jwt is a JWT utility plugin for Fastify. In versions prior to 10.2.5, the top-level sign and verify methods replace the globally configured defaults with the per-call opti |
| CVE-2026-110025 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the compone |
| CVE-2026-110026 | Deferred | 未確認 | CWE-862 | The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating, renaming and deleting taxonomy terms, allowing users with a role as |
| CVE-2026-110029 | Deferred | 未確認 | CWE-862 | The Squeeze WordPress plugin before 1.8.1 does not perform a capability check on one of its AJAX actions, allowing authenticated users with a role as low as Subscriber to revert an |
| CVE-2026-110031 | Deferred | 未確認 | CWE-269 | The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role from assigning arbitrary capabilities to other accounts when e |
| CVE-2026-110032 | Deferred | 未確認 | CWE-863 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles may edit through the customers management screen, allowing use |
| CVE-2026-110033 | Deferred | 未確認 | CWE-79 | The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching it server-side and writing the response to a publicly accessi |
| CVE-2026-110034 | Deferred | 未確認 | CWE-20 | The Salon Booking System WordPress plugin before 10.31.11 does not enforce a minimum of zero when subtracting a fixed-amount discount from a booking's total, allowing an unauthenti |
| CVE-2026-110035 | Deferred | 未確認 | CWE-284 | The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon staff, allowing any authenticated user, such as a subscriber, to |
| CVE-2026-110036 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata contain |
| CVE-2026-110037 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-110039 | Deferred | 未確認 | CWE-863 | The Smush WordPress plugin before 4.3.4 does not restrict changes to a network-wide access setting to network administrators, allowing an administrator of a single site on a multi |
| CVE-2026-110063 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-110069 | Deferred | 未確認 | CWE-200 | The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing an |
| CVE-2026-110070 | Deferred | 未確認 | CWE-639 | The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users wi |
| CVE-2026-110073 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-110074 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-110075 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-110076 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-110077 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-110078 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-110079 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-110080 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-110081 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnera |
| CVE-2026-110082 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a |
| CVE-2026-110083 | Undergoing Analysis | 未確認 | CWE-89 | Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Security featur |
| CVE-2026-110084 | Undergoing Analysis | 未確認 | CWE-91 | Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A low-privileged attacker could l |
| CVE-2026-110095 | Awaiting Analysis | 未確認 | CWE-41 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, the normalize() and |
| CVE-2026-110097 | Deferred | 未確認 | CWE-287 | Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token. At |
| CVE-2026-110098 | Deferred | 未確認 | CWE-639 | Jorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other employees' requests by authorizing |
| CVE-2026-110099 | Deferred | 未確認 | CWE-862 | Jorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime and exportEmployees actions, allowing any authenticated user |
| CVE-2026-110100 | Deferred | 未確認 | CWE-862 | Jorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated user to import days off into any contract from an arbitrary |
| CVE-2026-110101 | Deferred | 未確認 | CWE-79 | Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restricti |
| CVE-2026-110102 | Deferred | 未確認 | CWE-494 | Powerlevel10k through 1.20.0 contains an insecure download vulnerability in the gitstatus/install script that disables TLS certificate verification with curl -k and skips integrity |
| CVE-2026-110103 | Deferred | 未確認 | CWE-79 | bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the multipart Content-Type in POST |
| CVE-2026-110104 | Deferred | 未確認 | CWE-916 | Xxyopen novel through 3.5.0 contains a weak password hashing vulnerability that allows attackers to recover plaintext passwords because UserServiceImpl.register() stores unsalted M |
| CVE-2026-110105 | Deferred | 未確認 | CWE-862 | B3log Symphony through 3.6.4 contains a missing authorization vulnerability that allows unauthenticated attackers to reach admin routes because PermissionMidware.check permits rout |
| CVE-2026-110106 | Deferred | 未確認 | CWE-639 | RuoYi-Vue-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying th |
| CVE-2026-110107 | Deferred | 未確認 | CWE-639 | RuoYi-Cloud-Plus through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' social login bindings by supplying |
| CVE-2026-110108 | Deferred | 未確認 | CWE-862 | MateCloud through 5.0.8 contains a missing authorization vulnerability that allows any authenticated user to manage object storage by calling the unprotected /api/v1/admin/storage |
| CVE-2026-110109 | Deferred | 未確認 | CWE-862 | JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access on transparent-codec to overwrite product codecs via POST |
| CVE-2026-110110 | Deferred | 未確認 | CWE-862 | JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query access to enable or disable any alarm configuration. Because the |
| CVE-2026-110111 | Awaiting Analysis | 未確認 | CWE-1321 | Xen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by abusing the unprotected vm.importF |
| CVE-2026-110112 | Awaiting Analysis | 未確認 | CWE-863 | Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not |
| CVE-2026-110113 | Deferred | 未確認 | CWE-639 | PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController tradeAddress/save handler that allows authenticated members t |
| CVE-2026-110114 | Deferred | 未確認 | CWE-306 | FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by calling public es-t |
| CVE-2026-110115 | Deferred | 未確認 | CWE-22 | Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthentica |
| CVE-2026-110116 | Deferred | 未確認 | CWE-22 | Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write |
| CVE-2026-110117 | Deferred | 未確認 | CWE-862 | SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authenticated low-privileged employees to modify system-wide level-3 |
| CVE-2026-110118 | Deferred | 未確認 | CWE-639 | WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complete or reassign other users' workflow tasks via /vue/buttonOpe |
| CVE-2026-110119 | Deferred | 未確認 | CWE-639 | Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows authenticated members to read, overwrite and delete other m |
| CVE-2026-110120 | Deferred | 未確認 | CWE-639 | Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows authenticated members to access other members' data by supplyi |
| CVE-2026-110121 | Deferred | 未確認 | CWE-639 | PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another sto |
| CVE-2026-110122 | Deferred | 未確認 | CWE-639 | PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to change other stores' product freight templates via PUT |
| CVE-2026-110123 | Deferred | 未確認 | CWE-862 | Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to read mail and SMS configurations by calling /sys/mail/config |
| CVE-2026-110124 | Deferred | 未確認 | CWE-639 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authenticated low-privilege users to read and modify other tenants' |
| CVE-2026-110125 | Deferred | 未確認 | CWE-639 | Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members to access and modify other members' orders by supplying the |
| CVE-2026-110126 | Deferred | 未確認 | CWE-639 | waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows authenticated members to modify or delete other members' shi |
| CVE-2026-110127 | Deferred | 未確認 | CWE-639 | waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that allows authenticated members to modify or delete other memb |
| CVE-2026-110128 | Deferred | 未確認 | CWE-306 | fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to retrieve any member's order details via the /clientApi/order/d |
| CVE-2026-110129 | Deferred | 未確認 | CWE-639 | fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundController refund detail endpoint that lets authenticated members |
| CVE-2026-110130 | Awaiting Analysis | 未確認 | CWE-288 | Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including / |
| CVE-2026-110131 | Deferred | 未確認 | CWE-862 | ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpu |
| CVE-2026-110135 | Deferred | 未確認 | CWE-287 | The OTP Login & Register Woocommerce WordPress plugin before 2.7.3 does not adequately limit one-time-password verification attempts, because the attempt limit is tracked against a |
| CVE-2026-110136 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-110137 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-110138 | Analyzed | 未確認 | CWE-416 | Use after free in ShapeDetection in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sa |
| CVE-2026-110139 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-110140 | Analyzed | 未確認 | CWE-843 | Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-110141 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Hi |
| CVE-2026-110142 | Analyzed | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-110143 | Analyzed | 未確認 | CWE-457 | Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted f |
| CVE-2026-110144 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local |
| CVE-2026-110145 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox |
| CVE-2026-110146 | Analyzed | 未確認 | CWE-200 | Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML pag |
| CVE-2026-110147 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-110148 | Analyzed | 未確認 | CWE-416 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-110149 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-110150 | Analyzed | 未確認 | CWE-250 | Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium secur |
| CVE-2026-110151 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-110152 | Analyzed | 未確認 | CWE-122 | Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM |
| CVE-2026-110153 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-110154 | Analyzed | 未確認 | CWE-416 | Use after free in Canvas in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-110155 | Analyzed | 未確認 | CWE-122 | Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-110156 | Analyzed | 未確認 | CWE-706 | Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitra |
| CVE-2026-110157 | Analyzed | 未確認 | CWE-416 | Use after free in SVG in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-110158 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox |
| CVE-2026-110159 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium sec |
| CVE-2026-110160 | Analyzed | 未確認 | CWE-862 | Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to |
| CVE-2026-110161 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium sec |
| CVE-2026-110162 | Analyzed | 未確認 | CWE-416 | Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-110163 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-110164 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-110165 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-110166 | Analyzed | 未確認 | CWE-122 | Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-110167 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-110168 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-110169 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-110170 | Analyzed | 未確認 | CWE-416 | Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: |
| CVE-2026-110171 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-110172 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-110179 | Deferred | 未確認 | CWE-89 | The affiliate-toolkit WordPress plugin before 3.8.9 does not validate a user-supplied sort value against an allowlist before using it in a database query, and the affected adminis |
| CVE-2026-110180 | Awaiting Analysis | 未確認 | CWE-20, CWE-436 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP |
| CVE-2026-110191 | Deferred | 未確認 | CWE-200 | The Product Delivery Date for WooCommerce WordPress plugin before 3.3.2 does not perform a capability check before disclosing order details through its calendar view AJAX actions, |
| CVE-2026-110202 | Analyzed | 未確認 | CWE-436 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers to auto-approve denied shell commands by prefixing them with |
| CVE-2026-110203 | Analyzed | 未確認 | CWE-436 | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied shell commands by abusing quote-masking regex in parseCommandL |
| CVE-2026-110204 | Analyzed | 未確認 | CWE-436 | Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell commands because parseCommandLine() treats ${ command; } substitu |
| CVE-2026-110205 | Analyzed | 未確認 | CWE-184 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command substitutions placed next to * or ? glob characters. Attackers |
| CVE-2026-110206 | Analyzed | 未確認 | CWE-436 | Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to auto-approve arbitrary shell commands by placing a command s |
| CVE-2026-110207 | Awaiting Analysis | 未確認 | CWE-862 | Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call user, role, department and agent administration APIs because |
| CVE-2026-110208 | Awaiting Analysis | 未確認 | CWE-862 | Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows any authenticated user to read the stored AI provider API k |
| CVE-2026-110209 | Awaiting Analysis | 未確認 | CWE-862 | Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admin users to read stored secrets through unprotected ApiConfig |
| CVE-2026-110210 | Awaiting Analysis | 未確認 | CWE-862 | Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Secrets read permission to read secret history via the secretHi |
| CVE-2026-110211 | Awaiting Analysis | 未確認 | CWE-862 | iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to permanently delete other users' skills via DELETE /api/cli/v1/s |
| CVE-2026-110212 | Awaiting Analysis | 未確認 | CWE-22 | Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write uploaded files outside the media directory via the subDir pa |
| CVE-2026-110213 | Awaiting Analysis | 未確認 | CWE-639 | Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' generation results by supplyi |
| CVE-2026-110214 | Awaiting Analysis | 未確認 | CWE-321 | Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the publish |
| CVE-2026-110215 | Awaiting Analysis | 未確認 | CWE-862 | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbitrary menu and button permissions to roles via PUT /api/v1/r |
| CVE-2026-110216 | Awaiting Analysis | 未確認 | CWE-862 | youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable or disable accounts because the updateUserStatus handler lack |
| CVE-2026-110217 | Awaiting Analysis | 未確認 | CWE-200 | Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retrieve other operators' BCrypt password hashes via GET /ch |
| CVE-2026-110218 | Deferred | 未確認 | CWE-862 | Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read unpublished draft blog posts via the customer-facing post view |
| CVE-2026-110219 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject scripts through the price parameter of the back-office Addition |
| CVE-2026-110220 | Awaiting Analysis | 未確認 | CWE-918 | Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelre |
| CVE-2026-110221 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeaturePricesSettings form that echoes feature_price_name and impact_value POST value |
| CVE-2026-110222 | Awaiting Analysis | 未確認 | CWE-918 | Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC code to IFSC.f |
| CVE-2026-110223 | Awaiting Analysis | 未確認 | CWE-918 | Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through DNS rebinding or HTTPS redire |
| CVE-2026-110224 | Deferred | 未確認 | CWE-79 | QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave() that echoes rejected alias and search values unescaped in |
| CVE-2026-110225 | Deferred | 未確認 | CWE-918 | Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumb |
| CVE-2026-110226 | Deferred | 未確認 | CWE-639 | QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned hotels by supplying an |
| CVE-2026-110227 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in 10up Restricted Site Access restricted-site-access allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-110228 | Awaiting Analysis | 未確認 | CWE-79 | wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocke |
| CVE-2026-110229 | Deferred | 未確認 | CWE-862 | QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restricted back-office employees to access credit slips of all hote |
| CVE-2026-110230 | Awaiting Analysis | 未確認 | CWE-862 | XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other users' upload share codes via the POST /upload/{id}/vanity ro |
| CVE-2026-110231 | Awaiting Analysis | 未確認 | CWE-22 | muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check wi |
| CVE-2026-110232 | Awaiting Analysis | 未確認 | CWE-22 | Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by bypassing an unanchored |
| CVE-2026-110233 | Awaiting Analysis | 未確認 | CWE-78 | Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands by crafting malicious file names. Attackers can deliver a fi |
| CVE-2026-110234 | Awaiting Analysis | 未確認 | CWE-377 | Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable captur |
| CVE-2026-110235 | Awaiting Analysis | 未確認 | CWE-22 | MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName |
| CVE-2026-110236 | Awaiting Analysis | 未確認 | CWE-78 | KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into the |
| CVE-2026-110237 | Awaiting Analysis | 未確認 | CWE-283 | Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user |
| CVE-2026-110238 | Awaiting Analysis | 未確認 | CWE-639 | Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company members with the default customer role to modify or delete arb |
| CVE-2026-110239 | Awaiting Analysis | 未確認 | CWE-79 | Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisat |
| CVE-2026-110240 | Awaiting Analysis | 未確認 | CWE-918 | Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 private, link-local, CGNAT and transition addresses as externa |
| CVE-2026-110243 | Deferred | 未確認 | CWE-78 | The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance address configuration endp |
| CVE-2026-110247 | Awaiting Analysis | 未確認 | CWE-190 | Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the b |
| CVE-2026-110248 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated |
| CVE-2026-110249 | Awaiting Analysis | 未確認 | CWE-400 | A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main t |
| CVE-2026-110252 | Deferred | 未確認 | CWE-79 | The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.9 This is due to the plugin removing WordPress' |
| CVE-2026-110253 | Deferred | 未確認 | CWE-22 | The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the |
| CVE-2026-110254 | Awaiting Analysis | 未確認 | CWE-918 | Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to check NAT64, 6to4, a |
| CVE-2026-110255 | Awaiting Analysis | 未確認 | CWE-918 | Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by su |
| CVE-2026-110256 | Awaiting Analysis | 未確認 | CWE-90 | Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/auth.ts, which inserts the login username into the LDAP search |
| CVE-2026-110257 | Awaiting Analysis | 未確認 | CWE-789 | OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_bootstrap_methods with |
| CVE-2026-110258 | Awaiting Analysis | 未確認 | CWE-789 | OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule. Attackers can |
| CVE-2026-110259 | Awaiting Analysis | 未確認 | CWE-674 | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in ClassWriter.replaceAsmInstructions() that allows attackers to cause denial of service through crafted cl |
| CVE-2026-110260 | Awaiting Analysis | 未確認 | CWE-407 | OW2 ASM 3.0 before 9.11 contains a quadratic memory allocation vulnerability in MethodWriter.computeMaxStackAndLocal() and computeAllFrames() when using COMPUTE_MAXS or COMPUTE_FRA |
| CVE-2026-110261 | Awaiting Analysis | 未確認 | CWE-407 | OW2 ASM 3.0 before 9.11 contains a denial of service vulnerability that allows attackers to exhaust CPU by supplying crafted class files processed with ClassWriter.COMPUTE_FRAMES. |
| CVE-2026-110262 | Awaiting Analysis | 未確認 | CWE-770 | OW2 ASM 3.1 before 9.11 contains an excessive memory allocation vulnerability in the asm-commons AdviceAdapter that allows attackers to exhaust memory by supplying crafted class fi |
| CVE-2026-110263 | Awaiting Analysis | 未確認 | CWE-674 | OW2 ASM 3.0 before 9.11 contains an uncontrolled recursion vulnerability in SignatureReader.parseType() that allows attackers to exhaust the stack via deeply nested generic type si |
| CVE-2026-110264 | Undergoing Analysis | 未確認 | CWE-190 | An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 |
| CVE-2026-110268 | Deferred | 未確認 | CWE-22 | The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.2 via the 'theme_slug' parameter. This makes |
| CVE-2026-110270 | Awaiting Analysis | 未確認 | CWE-407 | OW2 ASM 3.0 before 9.11 contains an uncontrolled memory allocation vulnerability in the asm-commons JSRInlinerAdapter that inlines JSR/RET subroutines without memory or work limits |
| CVE-2026-110284 | Deferred | 未確認 | CWE-98 | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-con |
| CVE-2026-110287 | Analyzed | 未確認 | CWE-863 | Improper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but without Edit asset permission to m |
| CVE-2026-110290 | Deferred | 未確認 | CWE-79 | The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes (parsed to inject instance_id) + undeclared is_wid |
| CVE-2026-110306 | Awaiting Analysis | 未確認 | CWE-172, CWE-180 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-dec |
| CVE-2026-110310 | Awaiting Analysis | 未確認 | CWE-204, CWE-757 | A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by altering the padding scheme recorded in an object's metadata to legacy PKCS#1 v1.5. S |
| CVE-2026-110311 | Awaiting Analysis | 未確認 | CWE-200 | Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which matched every attachment that was not linked to a release. A u |
| CVE-2026-110322 | Awaiting Analysis | 未確認 | CWE-822 | The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing. |
| CVE-2026-110324 | Awaiting Analysis | 未確認 | CWE-200 | The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and unfollow) required only a signed-in user. Any authenticated user |
| CVE-2026-110353 | Awaiting Analysis | 未確認 | CWE-252 | HAProxy 3.2 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (worker-thread CPU exhaustion) via a truncated HTTP/2 PING frame. h2c_handle_ping in |
| CVE-2026-110354 | Awaiting Analysis | 未確認 | CWE-835 | HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persistent worker-thread CPU exhaustion) via an HTTP/1.1 chunked request. Although the |
| CVE-2026-110359 | Deferred | 未確認 | CWE-276 | Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\ |
| CVE-2026-110360 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ajax Se |
| CVE-2026-110361 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects Infinite Uplo |
| CVE-2026-110362 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control Security Leve |
| CVE-2026-110363 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n |
| CVE-2026-110364 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-woocommerce allow |
| CVE-2026-110365 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPExperts Advanced File Manager file-manager-advanced allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-110366 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Gemini Labs Site Reviews site-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Reviews |
| CVE-2026-110367 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-110369 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in GS Plugins WordPress Team Members – GS Plugins gs-team-members allows Object Injection.This issue affects WordPress Team Members |
| CVE-2026-110370 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Object Injection.This issue affects GS Pins for Pinterest: from n/ |
| CVE-2026-110371 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S |
| CVE-2026-110372 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Brainstorm Force OttoKit suretriggers allows Privilege Escalation.This issue affects OttoKit: from n/a through 1.1.40. |
| CVE-2026-110373 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Privilege Escalation.This issue affects Login with phone number: |
| CVE-2026-110374 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This iss |
| CVE-2026-110375 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This issue affect |
| CVE-2026-110378 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exploiting Incorrectly Configured Access Co |
| CVE-2026-110379 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Quiz Maker quiz-maker allows Reflected XSS.This issue affects Quiz Mak |
| CVE-2026-110380 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP E |
| CVE-2026-110381 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Configured Access |
| CVE-2026-110382 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Stor |
| CVE-2026-110383 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in WP E-Signature Electronic Signature Add-on for Fluent Forms signature-fluent-contract-forms-add-on allows Exploiti |
| CVE-2026-110384 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Fancy Comments WordPress fancy-facebook-comments allows Reflec |
| CVE-2026-110385 | Awaiting Analysis | 未確認 | CWE-73 | A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute arbitrary op |
| CVE-2026-110392 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Samsung Open Source QA-Board allows : OS Command Injection. |
| CVE-2026-110444 | Deferred | 未確認 | CWE-94 | TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into opening a crafted link to inject and e |
| CVE-2026-110445 | Deferred | 未確認 | CWE-94 | TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability. Unauthenticated remote attackers can trick users into interacting with crafted content to in |
| CVE-2026-110447 | Deferred | 掲載 | CWE-78 | Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in the wild in September and October 2026, a |
| CVE-2026-110449 | Deferred | 未確認 | CWE-190 | Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocation is mishandled. |
| CVE-2026-110450 | Deferred | 未確認 | CWE-696 | Nix before 2.35.3 and Lix before 2.95.4 allow privilege escalation via a repair operation because it could destroy and then replace a store path before content verification. |
| CVE-2026-110451 | Deferred | 未確認 | CWE-863 | Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled. |
| CVE-2026-110452 | Deferred | 未確認 | CWE-708 | The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership. |
| CVE-2026-110453 | Deferred | 未確認 | CWE-863 | Nix before 2.35.3, when unsandboxed on macOS or FreeBSD, incorrectly allows connections made by build users from daemon clients. |
| CVE-2026-110454 | Awaiting Analysis | 未確認 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device. |
| CVE-2026-110455 | Awaiting Analysis | 未確認 | CWE-20 | A malicious actor with access to the network and under certain conditions could exploit an Improper Input Validation vulnerability found in UniFi Protect AI Key to execute a Comman |
| CVE-2026-110456 | Awaiting Analysis | 未確認 | CWE-284 | A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal re |
| CVE-2026-110457 | Awaiting Analysis | 未確認 | CWE-22 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain information about fil |
| CVE-2026-110458 | Awaiting Analysis | 未確認 | CWE-22 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create or truncate files on |
| CVE-2026-110459 | Awaiting Analysis | 未確認 | CWE-284 | A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to obtain information, make unauthorized changes, |
| CVE-2026-110465 | Deferred | 未確認 | CWE-639 | Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review sc |
| CVE-2026-110466 | Deferred | 未確認 | CWE-497 | Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous stude |
| CVE-2026-110467 | Deferred | 未確認 | CWE-639 | Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review sco |
| CVE-2026-110491 | Deferred | 未確認 | CWE-476 | The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections whi |
| CVE-2026-110494 | Awaiting Analysis | 未確認 | CWE-639 | Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. A user with write access to the re |
| CVE-2026-110510 | Deferred | 未確認 | CWE-345 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not validate the HTML tag setting of some of its widgets before using it to build markup, which could allow u |
| CVE-2026-110514 | Deferred | 未確認 | CWE-639 | The WPZOOM Portfolio Lite WordPress plugin before 1.4.34 does not check that a user is allowed to edit a post before changing its type and order, which could allow users with the |
| CVE-2026-110523 | Deferred | 未確認 | CWE-269 | The WP User Manager WordPress plugin before 2.9.26 does not keep its paid-registration capability restrictions in force once the payment gateway is disconnected, while a published |
| CVE-2026-110527 | Deferred | 未確認 | CWE-284 | The WP User Manager WordPress plugin before 2.9.20 does not roll back the WordPress account it creates during payment-gated registration when the subsequent payment step fails, al |
| CVE-2026-110536 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI Handler. Executing a manipulation o |
| CVE-2026-110537 | Deferred | 未確認 | CWE-863 | The Essential Addons for Elementor WordPress plugin before 6.8.7 does not verify that an administrator may manage the specific user accounts targeted by its login-approval feature |
| CVE-2026-110590 | Deferred | 未確認 | CWE-862 | The Klarna for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.13.3 This is due to the plugin not properly verifying |
| CVE-2026-110591 | Awaiting Analysis | 未確認 | CWE-770 | OW2 ASM 1.4.3 before 9.11 contains an excessive resource consumption vulnerability in Analyzer.analyze() that allows attackers to exhaust memory and CPU via crafted class files. At |
| CVE-2026-110592 | Deferred | 未確認 | CWE-116 | BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to inject markup into custom-temp |
| CVE-2026-110593 | Deferred | 未確認 | CWE-1336 | BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_body with djan |
| CVE-2026-110594 | Deferred | 未確認 | CWE-1333 | BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers via unbounded |
| CVE-2026-110595 | Deferred | 未確認 | CWE-770 | BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before enforcing the 5 MB limit. Authenticate |
| CVE-2026-110596 | Deferred | 未確認 | CWE-834 | quirc through 1.2 contains an excessive-iteration vulnerability in find_alignment_pattern() in lib/identify.c that allows attackers to hang quirc_end() with a crafted image. Attack |
| CVE-2026-110597 | Deferred | 未確認 | CWE-125 | Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining- |
| CVE-2026-110598 | Deferred | 未確認 | CWE-125 | Libyal libpff through 20260926 contains an integer underflow in libpff_record_entry_get_multi_value() that allows attackers to trigger heap out-of-bounds reads via non-monotonic mu |
| CVE-2026-110599 | Deferred | 未確認 | CWE-415 | L-SMASH through 2.14.5 contains a double free vulnerability in hevc_setup_first_summary() and h264_setup_first_summary() in importer/nalu_imp.c that frees borrowed codec-specific o |
| CVE-2026-110600 | Deferred | 未確認 | CWE-476 | xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attackers to cra |
| CVE-2026-110601 | Deferred | 未確認 | CWE-787 | libsixel before 1.8.7-r1 and 1.9.0 through 1.10.5 contains a heap out-of-bounds write vulnerability in gif_init_frame() in src/fromgif.c, which never checks the GIF transparent col |
| CVE-2026-110602 | Deferred | 未確認 | CWE-824 | libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajd_open() in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read er |
| CVE-2026-110603 | Awaiting Analysis | 未確認 | CWE-824 | LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record d |
| CVE-2026-110604 | Deferred | 未確認 | CWE-193 | Mini-XML 4.0.0 through 4.0.6 contains an off-by-one stack out-of-bounds write in mxml_strtod() when the locale decimal point is not '.'. Attackers can supply XML with a 63-digit RE |
| CVE-2026-110605 | Deferred | 未確認 | CWE-369 | libschrift through 0.10.2 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a font with unitsPerEm of 0 in the head table. Attackers |
| CVE-2026-110606 | Awaiting Analysis | 未確認 | CWE-125 | LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader() caused by calling strlen on no |
| CVE-2026-110607 | Deferred | 未確認 | CWE-345 | BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the PaymentControlle |
| CVE-2026-110608 | Deferred | 未確認 | CWE-639 | BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the OrderController cancel and receive handlers that allows authenticated m |
| CVE-2026-110609 | Deferred | 未確認 | CWE-89 | Dromara Skyeye through commit 65d3ddcede70 contains an sql injection vulnerability that allows authenticated low-privileged users to inject SQL via the keyword parameter in the que |
| CVE-2026-110610 | Deferred | 未確認 | CWE-918 | ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenticated users to make the server fetch arb |
| CVE-2026-110611 | Deferred | 未確認 | CWE-639 | REBUILD through 4.5.0 contains an authorization bypass vulnerability in AiBot2Controller /aibot2 endpoints that act on a caller-supplied chatid without verifying ownership. Authent |
| CVE-2026-110612 | Deferred | 未確認 | CWE-321 | vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attacker |
| CVE-2026-110613 | Deferred | 未確認 | CWE-639 | youlai-mall through commit 9f62de8 contains a missing authorization vulnerability that allows authenticated members to view every customer's orders via the app order list endpoint. |
| CVE-2026-110614 | Deferred | 未確認 | CWE-89 | Yiuman citrus through 0.15.0 contains an ORDER BY sql injection vulnerability in the citrus-support generic query framework that allows users to inject SQL via the sortBy request p |
| CVE-2026-110615 | Deferred | 未確認 | CWE-862 | jshERP through 3.6 contains a missing authorization vulnerability in the POST /user/batchSetStatus endpoint that allows authenticated low-privilege users to change other users' acc |
| CVE-2026-110616 | Deferred | 未確認 | CWE-306 | NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_token field def |
| CVE-2026-110617 | Deferred | 未確認 | CWE-862 | we-mp-rss through 1.5.3 contains a missing authorization vulnerability in the /api/v1/wx/tools/export/download endpoint that allows unauthenticated attackers to download export arc |
| CVE-2026-110618 | Deferred | 未確認 | CWE-306 | SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs. |
| CVE-2026-110619 | Deferred | 未確認 | CWE-306 | frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers are register |
| CVE-2026-110620 | Deferred | 未確認 | CWE-639 | Formbricks before 4.9.0 contains an authorization bypass vulnerability in server actions like resetSurveyAction and updateSegmentAction that fail to verify resource ownership again |
| CVE-2026-110621 | Deferred | 未確認 | CWE-862 | Swetrix Cloud before 5.1.0 contains a missing authorization vulnerability in ProjectController.addProject that allows authenticated users to hijack arbitrary projects by moving the |
| CVE-2026-110622 | Deferred | 未確認 | CWE-862 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because page management and OCR endpoi |
| CVE-2026-110623 | Deferred | 未確認 | CWE-862 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other users' documents by supplying ar |
| CVE-2026-110624 | Deferred | 未確認 | CWE-862 | Papermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document types by supplying a group_id p |
| CVE-2026-110625 | Deferred | 未確認 | CWE-79 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter. Attackers can send cra |
| CVE-2026-110626 | Deferred | 未確認 | CWE-79 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter. Attacker |
| CVE-2026-110627 | Deferred | 未確認 | CWE-79 | ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/index.php that allows attackers to inject HTML via the val parameter in mode= |
| CVE-2026-110628 | Deferred | 未確認 | CWE-918 | Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255. Wh |
| CVE-2026-110629 | Deferred | 未確認 | CWE-862 | VentureDrake Laravel CRM before 2.4.0 contains a missing authorization vulnerability that allows authenticated users to bypass Spatie role permissions through Livewire action metho |
| CVE-2026-110630 | Deferred | 未確認 | CWE-863 | VentureDrake Laravel CRM before 2.4.0 contains an incorrect authorization vulnerability in user management that allows authenticated administrators to assign unrestricted roles via |
| CVE-2026-110631 | Deferred | 未確認 | CWE-1188 | Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because empty core_pu |
| CVE-2026-110632 | Deferred | 未確認 | CWE-306 | Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invoking the Updat |
| CVE-2026-110633 | Deferred | 未確認 | CWE-269 | MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied arc |
| CVE-2026-110634 | Deferred | 未確認 | CWE-78 | git-diff before 2.0.7 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted strings to the gitDiff API. Attackers who |
| CVE-2026-110635 | Deferred | 未確認 | CWE-78 | webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers cont |
| CVE-2026-110636 | Deferred | 未確認 | CWE-78 | pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that builds shell commands from caller-supplied paths. A |
| CVE-2026-110637 | Deferred | 未確認 | CWE-78 | buildebooks before 0.2.2 contains an OS command injection vulnerability in lib/kindle.js that allows attackers to execute commands by supplying a crafted EPUB file name passed to k |
| CVE-2026-110638 | Deferred | 未確認 | CWE-78 | doc-recog through 1.1.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted document paths to recog() or tag(). Attackers |
| CVE-2026-110639 | Deferred | 未確認 | CWE-78 | @mborne/extract before 0.2.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying shell metacharacters in archivePath or targetDir |
| CVE-2026-110640 | Deferred | 未確認 | CWE-78 | Whisper-node through 1.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted filePath or whisperOptions.language values |
| CVE-2026-110641 | Deferred | 未確認 | CWE-78 | @runnerty/executor-decompress through 3.1.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted archive file names to comp |
| CVE-2026-110642 | Deferred | 未確認 | CWE-78 | xhtml2pdf before 0.2.19 contains an OS command injection vulnerability in pisa.startViewer() that allows attackers to execute commands by interpolating unescaped file names into os |
| CVE-2026-110643 | Deferred | 未確認 | CWE-78 | transcribe2texts through 1.0.6 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted audioPath values to transcribeAudio(). |
| CVE-2026-110644 | Deferred | 未確認 | CWE-78 | nodejs-whisper through 0.3.1 contains an OS command injection vulnerability in convertToWavType() that allows attackers to execute commands by supplying crafted audio file paths. A |
| CVE-2026-110645 | Deferred | 未確認 | CWE-78 | Video-stitch before 2.0.0-beta.1 contains an OS command injection vulnerability that allows attackers to execute commands by supplying file names interpolated unquoted into shell-e |
| CVE-2026-110646 | Deferred | 未確認 | CWE-78 | Beganovich snappdf from 1.1.0 before 6.1.0 contains an OS command injection vulnerability on Windows that allows attackers to run commands by influencing the rendered URL. Attacker |
| CVE-2026-110647 | Deferred | 未確認 | CWE-78 | Turnpress through 0.4.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying .docx files with crafted names. The convertDocxT |
| CVE-2026-110648 | Deferred | 未確認 | CWE-78 | @offactory/compress-fonts before 1.1.1 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying font files with crafted names. Fo |
| CVE-2026-110649 | Deferred | 未確認 | CWE-78 | Stills before 25.24.2 contains an OS command injection vulnerability that allows attackers to execute shell commands by supplying crafted media file paths. Attackers can name a med |
| CVE-2026-110650 | Deferred | 未確認 | CWE-78 | The thumbnail Python package through 1.5 contains an OS command injection vulnerability in generate_thumbnail() that allows attackers to execute commands by supplying shell metacha |
| CVE-2026-110651 | Deferred | 未確認 | CWE-89 | The Swift Performance Lite WordPress plugin before 2.3.7.4 does not properly sanitize and escape a value before using it in a SQL statement, which could allow users with the author |
| CVE-2026-110652 | Awaiting Analysis | 未確認 | CWE-918 | ONLYOFFICE DocumentServer before 10.0.0 contains an unauthenticated server-side request forgery vulnerability in the /downloadfile/:docid endpoint that allows remote attackers to b |
| CVE-2026-110653 | Deferred | 未確認 | CWE-287 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass via Race Condition in all versions up t |
| CVE-2026-110654 | Deferred | 未確認 | CWE-787 | libzvbi through 0.2.45 contains an out-of-bounds write vulnerability in the Teletext decoder that allows attackers to corrupt memory by supplying unvalidated DRCS pixel-mode values |
| CVE-2026-110655 | Deferred | 未確認 | CWE-125 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds vi |
| CVE-2026-110656 | Deferred | 未確認 | CWE-125 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check aft |
| CVE-2026-110657 | Deferred | 未確認 | CWE-22 | Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the model directory via cra |
| CVE-2026-110658 | Deferred | 未確認 | CWE-125 | Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg_multipart_parse() that allows unauthenticated remote attackers to crash the process by sending ove |
| CVE-2026-110659 | Deferred | 未確認 | CWE-476 | ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh_li |
| CVE-2026-110660 | Deferred | 未確認 | CWE-125 | vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221_lib.c, whose bit reader refills without checking the data_u32 arra |
| CVE-2026-110661 | Deferred | 未確認 | CWE-125 | CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers. Att |
| CVE-2026-110664 | Deferred | 未確認 | CWE-79 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'note' parameter in all versions up to, and includin |
| CVE-2026-110666 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulation leads to path trav |
| CVE-2026-110667 | Deferred | 未確認 | CWE-259, CWE-798 | A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality of the file sar2html.py. The manipulation of the argument S |
| CVE-2026-110668 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function index of the file sar2html.py. This manipulation of the argument sort causes sql inj |
| CVE-2026-110669 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/deleteRange/deleteAll of the file sar2html.py. Such manipulation leads to |
| CVE-2026-110670 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in cemtan sar2html 4.0.0. The affected element is the function updateDb of the file sar2html.py of the component Archive Processing. The manipulation of t |
| CVE-2026-110672 | Awaiting Analysis | 未確認 | CWE-401 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded key of an object rejected for a duplicate key or a missing colon in decode_hv. A quoted key of 24 or more bytes, or |
| CVE-2026-110673 | Awaiting Analysis | 未確認 | CWE-674 | Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allow_tags in decode_tag. With allow_tags, "(" starts a tagged value. Its tag |
| CVE-2026-110674 | Awaiting Analysis | 未確認 | CWE-176, CWE-843 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl miss duplicate non-ASCII bare keys, allowing type confusion under dupkeys_as_arrayref in decode_hv. With allow_barekey, wh |
| CVE-2026-110675 | Awaiting Analysis | 未確認 | CWE-1286 | Cpanel::JSON::XS versions from 4.33 before 4.80 for Perl accept malformed UTF-8 in bare hash keys under allow_barekey in decode_hv. With utf8 and allow_barekey, which relaxed enab |
| CVE-2026-110676 | Awaiting Analysis | 未確認 | CWE-405 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum. With allow_bignum, a JSON number wi |
| CVE-2026-110677 | Awaiting Analysis | 未確認 | CWE-401 | Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv. With dupkeys_as_arrayref, the value |
| CVE-2026-110678 | Awaiting Analysis | 未確認 | CWE-770 | Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. The parser appends each chunk to its buffer. In |
| CVE-2026-110679 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxy_offer/rtpproxy_answer of the component rtpproxy. This manipulation cause |
| CVE-2026-110680 | Awaiting Analysis | 未確認 | CWE-787 | Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv. With canonical, the keys of a |
| CVE-2026-110681 | Awaiting Analysis | 未確認 | CWE-416 | Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. A parser object holds its callbacks and its inc |
| CVE-2026-110682 | Awaiting Analysis | 未確認 | CWE-436 | Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. allow_nonref is enabled by default and inc |
| CVE-2026-110684 | Awaiting Analysis | 未確認 | CWE-401 | Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify. encode_stringify writes a |
| CVE-2026-110685 | Awaiting Analysis | 未確認 | CWE-401 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag. With allow_tags, a tagged value's class name a |
| CVE-2026-110686 | Awaiting Analysis | 未確認 | CWE-416 | Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. A decode copies the parser's filter_json_objec |
| CVE-2026-110687 | Awaiting Analysis | 未確認 | CWE-176 | Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp. canonical sorts keys by UTF-16 code units. When any key |
| CVE-2026-110688 | Awaiting Analysis | 未確認 | CWE-407 | Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse. At the first non-ASCII byte in a str |
| CVE-2026-110689 | Deferred | 未確認 | CWE-693 | A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6. This impacts the function shouldSkipTargetPath of the file internal/runner/runner.go of the component Static S |
| CVE-2026-110690 | Deferred | 未確認 | CWE-23 | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js |
| CVE-2026-110694 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the |
| CVE-2026-110695 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Lo |
| CVE-2026-110696 | Deferred | 未確認 | CWE-200, CWE-284 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is an unknown function of the file d |
| CVE-2026-110698 | Deferred | 未確認 | CWE-119, CWE-787 | A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loa |
| CVE-2026-110701 | Deferred | 未確認 | CWE-79 | The CP Multi View Events Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'CalendarTitle' parameter in all versions up to, and including, 1.4.42 d |
| CVE-2026-110703 | Deferred | 未確認 | CWE-79 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content' parameter |
| CVE-2026-110712 | Deferred | 未確認 | CWE-125 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_all_info that allows malicious SMB servers to crash clients by sending an unchecked FileNam |
| CVE-2026-110713 | Deferred | 未確認 | CWE-125 | libsmb2 through 6.2 contains a heap out-of-bounds read vulnerability in smb2_decode_file_fs_volume_info and smb2_decode_file_fs_attribute_info that allows malicious SMB servers to |
| CVE-2026-110714 | Deferred | 未確認 | CWE-191 | libsmb2 through 6.2 contains an integer underflow vulnerability in decode_acl that allows malicious SMB servers to trigger heap out-of-bounds reads via crafted security descriptors |
| CVE-2026-110715 | Deferred | 未確認 | CWE-787 | MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows attackers to corrupt memory by inflating a simple array's len |
| CVE-2026-110716 | Deferred | 未確認 | CWE-125 | unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet heade |
| CVE-2026-110717 | Awaiting Analysis | 未確認 | CWE-22 | Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordings_path via |
| CVE-2026-110718 | Deferred | 未確認 | CWE-918 | TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src a |
| CVE-2026-110719 | Deferred | 未確認 | CWE-918 | Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host services becau |
| CVE-2026-110721 | Deferred | 未確認 | CWE-862 | The NotificationX plugin for WordPress is vulnerable to Missing Authorization leading to arbitrary content injection in versions up to, and including, 3.3.3 The /notificationx/v1/p |
| CVE-2026-110723 | Awaiting Analysis | 未確認 | CWE-290, CWE-644 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded- |
| CVE-2026-110724 | Awaiting Analysis | 未確認 | CWE-269, CWE-639, CWE-863 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded- |
| CVE-2026-110725 | Awaiting Analysis | 未確認 | CWE-116, CWE-41 | fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, when serialize(), no |
| CVE-2026-110726 | Awaiting Analysis | 未確認 | CWE-348, CWE-770, CWE-807 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the `X-Forwarded- |
| CVE-2026-110734 | Awaiting Analysis | 未確認 | CWE-787 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR (.hdr) image decoder (modules/hdr/image_loader_hdr.cpp). The run-length decoding loop expands RLE inst |
| CVE-2026-110735 | Awaiting Analysis | 未確認 | CWE-195 | Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ResourceLoaderBinary::get_unicode_string). A string len |
| CVE-2026-110736 | Awaiting Analysis | 未確認 | CWE-1285 | Godot Engine through 4.7.2 has an out-of-bounds read in the optimized translation loader (core/string/optimized_translation.cpp, OptimizedTranslation::get_message). Offsets read fr |
| CVE-2026-110744 | Awaiting Analysis | 未確認 | CWE-269 | A flaw was found in multicluster-global-hub-operator-bundle. The operator is configured with overly broad role-based access control (RBAC) permissions that grant cluster-wide imper |
| CVE-2026-110746 | Awaiting Analysis | 未確認 | CWE-22, CWE-23 | A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM ser |
| CVE-2026-110752 | Awaiting Analysis | 未確認 | CWE-770 | Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. fragment expands a row= or col= selector |
| CVE-2026-110753 | Awaiting Analysis | 未確認 | CWE-416, CWE-911 | Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline. With bind_columns, the pa |
| CVE-2026-110754 | Awaiting Analysis | 未確認 | CWE-401 | Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline. getline collects the fields of a record into a new array and returns |
| CVE-2026-110755 | Awaiting Analysis | 未確認 | CWE-407 | Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. With eol unset, the default, getline r |
| CVE-2026-110756 | Awaiting Analysis | 未確認 | CWE-116 | Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print. When a record contains a |
| CVE-2026-110757 | Awaiting Analysis | 未確認 | CWE-116 | Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine. combine and print do not check whether a field need |
| CVE-2026-110758 | Awaiting Analysis | 未確認 | CWE-127 | Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace. Under allow_whitespace, strip_trail_whites |
| CVE-2026-110759 | Awaiting Analysis | 未確認 | CWE-1286 | Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse. When the input to parse ends in a se |
| CVE-2026-110761 | Deferred | 未確認 | CWE-502 | ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import permission to deserialize arbitrary ob |
| CVE-2026-110762 | Deferred | 未確認 | CWE-863 | bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because hide_sitewide ignores ancestor |
| CVE-2026-110763 | Deferred | 未確認 | CWE-639 | lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth module's /anyone/findDeptByCompany endpoint that skips URI per |
| CVE-2026-110764 | Deferred | 未確認 | CWE-639 | AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/download endpoint that allows authenticated users to download other |
| CVE-2026-110765 | Deferred | 未確認 | CWE-347 | FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. U |
| CVE-2026-110766 | Deferred | 未確認 | CWE-22 | Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded traversal sequence in av |
| CVE-2026-110767 | Deferred | 未確認 | CWE-59 | Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read server files by submitti |
| CVE-2026-110768 | Deferred | 未確認 | CWE-290 | holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that authorizes senders by mutable username rather than only nume |
| CVE-2026-110769 | Deferred | 未確認 | CWE-1188 | holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any messaging-platform user to submit agent tasks because the #is |
| CVE-2026-110770 | Deferred | 未確認 | CWE-307 | Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/rese |
| CVE-2026-110771 | Deferred | 未確認 | CWE-639 | Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field. Attack |
| CVE-2026-110772 | Deferred | 未確認 | CWE-862 | Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create that allows family members to bypass account sharing p |
| CVE-2026-110773 | Deferred | 未確認 | CWE-862 | GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because |
| CVE-2026-110774 | Deferred | 未確認 | CWE-639 | Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated users to read other users' private attachments due to a flawed |
| CVE-2026-110775 | Deferred | 未確認 | CWE-639 | Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users to read other tenants' knowledge-base files by skipping ten |
| CVE-2026-110777 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents |
| CVE-2026-110803 | Awaiting Analysis | 未確認 | CWE-400, CWE-667 | VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter outside the block that releases the lock. A request carrying a non-nu |
| CVE-2026-110804 | Analyzed | 未確認 | CWE-915 | Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with PAM checkout access to d |
| CVE-2026-110805 | Analyzed | 未確認 | CWE-918 | Server-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to exfiltrate the stored PingOne app |
| CVE-2026-110806 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to obtain add-on passwords via the |
| CVE-2026-110807 | Deferred | 未確認 | CWE-404 | A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of |
| CVE-2026-110809 | Deferred | 未確認 | CWE-404 | A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/sessi |
| CVE-2026-110810 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing |
| CVE-2026-110812 | Awaiting Analysis | 未確認 | CWE-502, CWE-918 | Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database permissions t |
| CVE-2026-110814 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-110816 | Awaiting Analysis | 未確認 | CWE-248, CWE-704 | ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value` when an array element cannot be coerced to a string, such as |
| CVE-2026-110825 | Deferred | 未確認 | CWE-306 | The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentication, regardless of |
| CVE-2026-110829 | Analyzed | 未確認 | CWE-476 | FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST. A malicious RD |
| CVE-2026-110830 | Analyzed | 未確認 | CWE-400 | FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors. Attackers can send repeated ser |
| CVE-2026-110831 | Analyzed | 未確認 | CWE-775 | FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary before applying th |
| CVE-2026-110832 | Analyzed | 未確認 | CWE-400 | FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memory |
| CVE-2026-110833 | Analyzed | 未確認 | CWE-400 | FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy. Attackers can send a FIRST fragme |
| CVE-2026-110834 | Analyzed | 未確認 | CWE-476 | FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attac |
| CVE-2026-110835 | Analyzed | 未確認 | CWE-93 | FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is written by h |
| CVE-2026-110836 | Analyzed | 未確認 | CWE-835 | FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Content-Type heade |
| CVE-2026-110837 | Analyzed | 未確認 | CWE-122 | FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel PCM pointer |
| CVE-2026-110838 | Analyzed | 未確認 | CWE-306 | FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to inject keyboard in |
| CVE-2026-110839 | Analyzed | 未確認 | CWE-787 | FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers are sized fro |
| CVE-2026-110840 | Deferred | 未確認 | CWE-89 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression values directly |
| CVE-2026-110841 | Deferred | 未確認 | CWE-639 | n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying that the sus |
| CVE-2026-110842 | Deferred | 未確認 | CWE-1321 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplied code in the |
| CVE-2026-110843 | Deferred | 未確認 | CWE-770 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an uncontrolled resource consumption vulnerability in the unauthenticated OAuth authorize endpoint, which resolves clients by UR |
| CVE-2026-110844 | Deferred | 未確認 | CWE-863 | n8n before 1.123.83 contains an authorization bypass vulnerability that allows shared-workflow editors to use credentials they cannot access by embedding them in nested or tool inl |
| CVE-2026-110845 | Deferred | 未確認 | CWE-15 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a code execution vulnerability in the Git node Log operation, which fails to strip a repository's local gi |
| CVE-2026-110846 | Deferred | 未確認 | CWE-180 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a signature bypass in the waiting-webhook endpoint, which selects Send-and-Wait validation before normalising an alternate node |
| CVE-2026-110847 | Deferred | 未確認 | CWE-79 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a stored cross-site scripting vulnerability in the Chat Trigger hosted-chat page, where insufficiently san |
| CVE-2026-110848 | Deferred | 未確認 | CWE-1321 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the AI workflow builder, which merges workflow connections using no |
| CVE-2026-110849 | Deferred | 未確認 | CWE-79 | n8n before 1.123.83, 2.41.4, and 2.42.1 contains a stored cross-site scripting vulnerability in the file-preview modal, which re-publishes binary data as an unsandboxed same-origin |
| CVE-2026-110850 | Deferred | 未確認 | CWE-863 | n8n before 2.41.4 and 2.42.0 before 2.42.1 does not validate credential ids stored in agent node parameters when an editor saves a shared workflow, because the check inspects only |
| CVE-2026-110851 | Deferred | 未確認 | CWE-639 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains an authorization bypass in the Agents create endpoint, which accepts a caller-supplied Agent ID, checks permissions only against |
| CVE-2026-110852 | Deferred | 未確認 | CWE-288 | n8n before 1.123.83, 2.x before 2.41.4, and 2.42.x before 2.42.1 contains an authentication bypass because dynamic-path webhook resolution matched requests on the path alone, ignor |
| CVE-2026-110853 | Deferred | 未確認 | CWE-639 | n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-wor |
| CVE-2026-110854 | Awaiting Analysis | 未確認 | CWE-248 | Parse Server before 8.6.97 and 9.0.0 before 9.10.2-alpha.6 does not handle errors raised while sending verification or password reset emails, causing the server process to exit. A |
| CVE-2026-110855 | Awaiting Analysis | 未確認 | CWE-200 | GitPython before 3.2.0 contains an information disclosure vulnerability that allows malicious repositories to expand environment variables via separate_git_dir in Repo._clone(), wh |
| CVE-2026-110856 | Awaiting Analysis | 未確認 | CWE-1333 | GitPython before 3.2.0 contains a regular expression denial of service vulnerability in the _re_actor_epoch pattern used by parse_actor_and_date on author, committer, and tagger li |
| CVE-2026-110857 | Awaiting Analysis | 未確認 | CWE-1287 | GitPython before 3.2.0 contains a remote code execution vulnerability that allows attackers to run commands because Git.ls_remote forwards URLs without check_unsafe_protocols valid |
| CVE-2026-110858 | Awaiting Analysis | 未確認 | CWE-88 | GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard inspects only keyword arguments, not the positional ref |
| CVE-2026-110859 | Awaiting Analysis | 未確認 | CWE-88 | GitPython before 3.2.0 contains an argument injection vulnerability in Head.checkout() that allows remote attackers to read arbitrary files by supplying a branch name parsed as a g |
| CVE-2026-110860 | Awaiting Analysis | 未確認 | CWE-59 | GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbolic links in intermed |
| CVE-2026-110861 | Awaiting Analysis | 未確認 | CWE-307 | Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.17 before 1.7.0, contain a race condition in database-ba |
| CVE-2026-110862 | Deferred | 未確認 | CWE-287 | Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state v |
| CVE-2026-110863 | Awaiting Analysis | 未確認 | CWE-287 | Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authenticated users to sign in as other users by registering a |
| CVE-2026-110864 | Deferred | 未確認 | CWE-287 | Better Auth from 1.5.0-beta.12 before 1.7.7 contains an authentication bypass vulnerability in the OAuth Proxy plugin that allows unauthenticated attackers to sign in as other user |
| CVE-2026-110865 | Awaiting Analysis | 未確認 | CWE-424 | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repository users to evade the allowedHeaders restriction by placing hostRules headers inside shared p |
| CVE-2026-110866 | Awaiting Analysis | 未確認 | CWE-693 | Renovate before 44.61.3 contains a protection mechanism bypass vulnerability that allows minimumReleaseAge checks to be skipped when a user requests a PR rebase via the rebase/retr |
| CVE-2026-110867 | Awaiting Analysis | 未確認 | CWE-863 | Renovate before 44.60.1 contains an allowlist bypass vulnerability that allows repositories to set restricted environment variables by placing env inside a shared preset. Attackers |
| CVE-2026-110868 | Awaiting Analysis | 未確認 | CWE-918 | Renovate before 44.79.0 contains a server-side request forgery vulnerability that allows users to make the shared HTTP client request arbitrary internal URLs via extends presets or |
| CVE-2026-110869 | Awaiting Analysis | 未確認 | CWE-1333 | Nodemailer 3.0.0 before 10.0.13 has a regular expression denial of service in SMTPConnection._actionEHLO, whose four AUTH mechanism detection regexes contain overlapping whitespace |
| CVE-2026-110870 | Awaiting Analysis | 未確認 | CWE-20 | Nodemailer from 3.0.0 before 10.0.13 contains an improper input validation vulnerability in its address parser that fails to strip RFC 5322 comments inside angle-bracket addresses. |
| CVE-2026-110871 | Awaiting Analysis | 未確認 | CWE-400 | Nodemailer from 3.0.0 before 10.0.10 contains a denial of service vulnerability in MessageParser.parseHeaders that allows users to exhaust CPU through quadratic header unfolding. A |
| CVE-2026-110872 | Awaiting Analysis | 未確認 | CWE-400 | Nodemailer from 3.0.0 before 10.0.10 contains a quadratic complexity denial of service vulnerability in the SMTP client reply parser in SMTPConnection._onData and isPartialResponse |
| CVE-2026-110873 | Deferred | 未確認 | CWE-863 | Heym from 0.0.55 before 0.0.121 contains a privilege escalation vulnerability that allows shared collaborators to overwrite a workflow's error_workflow_id because the field is miss |
| CVE-2026-110874 | Deferred | 未確認 | CWE-502 | Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which calls unserialize() without class restrictions when json_dec |
| CVE-2026-110875 | Deferred | 未確認 | CWE-787 | AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds checking. Attackers ca |
| CVE-2026-110876 | Deferred | 未確認 | CWE-125 | AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index. Attackers can cra |
| CVE-2026-110877 | Deferred | 未確認 | CWE-125 | AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncat |
| CVE-2026-110878 | Deferred | 未確認 | CWE-79 | Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts via unescaped Operation Type and Location names in R |
| CVE-2026-110880 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kit Kit (formerly ConvertKit) convertkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Kit (form |
| CVE-2026-110882 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Exploiting Incorrectly Configured Access Control Security L |
| CVE-2026-110883 | Deferred | 未確認 | CWE-305 | Authentication Bypass by Primary Weakness vulnerability in VideoWhisper.com 2Way VideoCalls and Random Chat webcam-2way-videochat allows Authentication Abuse.This issue affects 2Wa |
| CVE-2026-110884 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in geekontheroad Live Summary for Gravity Forms live-summary-for-gravity-forms al |
| CVE-2026-110885 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Code Injection.This issue affects HivePress: from n/a through 1.7.32 |
| CVE-2026-110886 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Form |
| CVE-2026-110887 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in HivePress HivePress hivepress allows Remote Code Inclusion.This issue affects HivePress: from n/a through |
| CVE-2026-110888 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engine: from n/a |
| CVE-2026-110889 | Deferred | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry5 allows Retrieve Embedded Sensitive Data.This issue affects Gantry 5 |
| CVE-2026-110890 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.This issue affe |
| CVE-2026-110891 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WordLift Srl WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a |
| CVE-2026-110892 | Received | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from |
| CVE-2026-110893 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from |
| CVE-2026-110894 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from |
| CVE-2026-110895 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in DevItems Support Genix support-genix-lite allows SQL Injection.This issue affe |
| CVE-2026-110896 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from |
| CVE-2026-110897 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver |
| CVE-2026-110898 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Privilege Escalation.This issue affects Essent |
| CVE-2026-110899 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninj |
| CVE-2026-110900 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from |
| CVE-2026-110901 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in WPMU DEV SmartCrawl smartcrawl-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-110902 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-110903 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored X |
| CVE-2026-110904 | Deferred | 未確認 | CWE-863 | ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call. |
| CVE-2026-110907 | Awaiting Analysis | 未確認 | CWE-669 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens. A token is a small placeholder string (like [node:title] or [user:name]) used to automatically in |
| CVE-2026-110908 | Awaiting Analysis | 未確認 | CWE-78 | Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter. An authenticated WebGUI us |
| CVE-2026-110909 | Deferred | 未確認 | CWE-923 | Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project. A process listening on a port targeted by the |
| CVE-2026-110911 | Deferred | 未確認 | CWE-89 | Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders (such as findOneByEmail), the query builder's where(pr |
| CVE-2026-110912 | Deferred | 未確認 | CWE-130 | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length (ar_hln) and |
| CVE-2026-110913 | Analyzed | 未確認 | CWE-119 | Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-110914 | Analyzed | 未確認 | CWE-119 | Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-110915 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-110916 | Analyzed | 未確認 | CWE-20 | Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-110917 | Analyzed | 未確認 | CWE-119 | Memory corruption in SVG in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-110918 | Analyzed | 未確認 | CWE-119 | Memory corruption in Core in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-110919 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-110920 | Analyzed | 未確認 | CWE-119 | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-110921 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-110922 | Analyzed | 未確認 | CWE-416 | Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-110923 | Rejected | 未確認 | Rejected reason: CVE-2026-110923 has been marked as a duplicate of CVE-2026-106552. | |
| CVE-2026-110924 | Rejected | 未確認 | Rejected reason: CVE-2026-110924 has been marked as a duplicate of CVE-2026-106553. | |
| CVE-2026-110925 | Rejected | 未確認 | Rejected reason: CVE-2026-110925 has been marked as a duplicate of CVE-2026-106583. | |
| CVE-2026-110926 | Rejected | 未確認 | Rejected reason: CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582. | |
| CVE-2026-110927 | Rejected | 未確認 | Rejected reason: CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585. | |
| CVE-2026-110933 | Deferred | 未確認 | CWE-248 | Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before fb10a5c8b833df7f152d4a563a61d6090a1790d7. |
| CVE-2026-110934 | Deferred | 未確認 | CWE-129 | Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496 |
| CVE-2026-110936 | Analyzed | 掲載 | CWE-427 | A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search p |
| CVE-2026-110938 | Awaiting Analysis | 未確認 | CWE-125, CWE-20 | In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An u |
| CVE-2026-110956 | Received | 未確認 | CWE-287 | The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine second factor before authenticating a user, treating an empty stored value as a match |
| CVE-2026-110957 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Processing. |
| CVE-2026-110958 | Deferred | 未確認 | CWE-119, CWE-122 | A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overf |
| CVE-2026-110974 | Awaiting Analysis | 未確認 | CWE-674 | The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth limit: JSONTokener.nextValue() calls readArray() and readObject(), whic |
| CVE-2026-110975 | Awaiting Analysis | 未確認 | CWE-256 | A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint (GET |
| CVE-2026-110976 | Deferred | 未確認 | CWE-862 | The AI Engine WordPress plugin before 3.7.9 does not check that the item passed to one of its media actions belongs to the requesting user before converting it to an attachment an |
| CVE-2026-110981 | Deferred | 未確認 | CWE-79 | The WP Photo Album Plus WordPress plugin before 9.2.11.002 does not properly escape a category navigation value before reflecting it into a JavaScript event handler on its gallery |
| CVE-2026-110982 | Deferred | 未確認 | CWE-862 | The AI Engine WordPress plugin before 3.8.6 does not check that the caller is allowed to edit the targeted object before updating its title and excerpt, allowing users with the Ed |
| CVE-2026-111041 | Deferred | 未確認 | CWE-862 | The AI Engine WordPress plugin before 3.7.9 does not verify that the user performing certain AI media management actions owns or is otherwise allowed to edit the targeted object, |
| CVE-2026-111044 | Deferred | 未確認 | CWE-863 | Sunshine is a self-hosted game stream host for Moonlight. From 2026.329.165800 until 2026.906.222525, Sunshine accepted any client certificate that chained to a stored paired-clien |
| CVE-2026-111045 | Deferred | 未確認 | CWE-59 | CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync |
| CVE-2026-111046 | Deferred | 未確認 | CWE-862, CWE-863 | FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early return |
| CVE-2026-111053 | Deferred | 未確認 | CWE-200, CWE-22 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/guest/system/template_exists endpoint permits path traversal b |
| CVE-2026-111056 | Deferred | 未確認 | CWE-200, CWE-204, CWE-307 | FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create endpoint reveals whether a submitted |
| CVE-2026-111057 | Deferred | 未確認 | CWE-185, CWE-284 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab an |
| CVE-2026-111058 | Awaiting Analysis | 未確認 | CWE-862 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupy |
| CVE-2026-111059 | Awaiting Analysis | 未確認 | CWE-116, CWE-79 | Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts attacker-controlled Markdown to HTML w |
| CVE-2026-111061 | Deferred | 未確認 | CWE-770 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate long-lived task for every SSH_ |
| CVE-2026-111063 | Undergoing Analysis | 未確認 | CWE-1004, CWE-311 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not enforced. An attacker can consequen |
| CVE-2026-111064 | Undergoing Analysis | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An at |
| CVE-2026-111065 | Undergoing Analysis | 未確認 | CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a connection. An attacker can cons |
| CVE-2026-111066 | Undergoing Analysis | 未確認 | CWE-400, CWE-770 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an unbounded number of open file de |
| CVE-2026-111069 | Deferred | 未確認 | CWE-79 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'twitterusername' parame |
| CVE-2026-111074 | Awaiting Analysis | 未確認 | CWE-190, CWE-835 | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field |
| CVE-2026-111075 | Awaiting Analysis | 未確認 | CWE-125, CWE-191 | In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`, `_paddingSize`, and `_dataOffset` fields |
| CVE-2026-111079 | Awaiting Analysis | 未確認 | CWE-497 | A flaw was found in Goose. When the terminal integration feature is enabled, the application captures shell command history and sends it verbatim without sanitization to configured |
| CVE-2026-111088 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen. |
| CVE-2026-111090 | Deferred | 未確認 | CWE-287 | A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers |
| CVE-2026-111091 | Awaiting Analysis | 未確認 | CWE-829 | In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configuration |
| CVE-2026-111092 | Awaiting Analysis | 未確認 | CWE-862 | In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commands |
| CVE-2026-111093 | Awaiting Analysis | 未確認 | CWE-23 | In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files |
| CVE-2026-111094 | Analyzed | 未確認 | CWE-502 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possible |
| CVE-2026-111095 | Analyzed | 未確認 | CWE-79 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possible |
| CVE-2026-111096 | Analyzed | 未確認 | CWE-79 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possible |
| CVE-2026-111100 | Deferred | 未確認 | CWE-306 | The ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can retrieve detailed device identif |
| CVE-2026-111105 | Awaiting Analysis | 未確認 | CWE-197 | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Telegram. |
| CVE-2026-111106 | Deferred | 未確認 | CWE-89 | The Mail Mint plugin for WordPress is vulnerable to SQL Injection via the 'filters' parameter of the /wp-json/mrm/v1/segments/contacts REST endpoint in versions up to, and includin |
| CVE-2026-111110 | Deferred | 未確認 | CWE-79 | The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mmdwqzpoxadd' parameter in all version |
| CVE-2026-111114 | Deferred | 未確認 | CWE-269 | The Nexter Extension – Security, Performance, Code Snippets & Site Toolkit plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.7.11 T |
| CVE-2026-111122 | Deferred | 未確認 | CWE-79 | The SiteOrigin CSS plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'href' parameter in all versions up to, and including, 1.6.7 due to insuffici |
| CVE-2026-111123 | Deferred | 未確認 | CWE-787 | FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulator destinati |
| CVE-2026-111124 | Analyzed | 未確認 | CWE-125 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fits_rand_value |
| CVE-2026-111125 | Analyzed | 未確認 | CWE-125 | CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffer via input_n |
| CVE-2026-111126 | Deferred | 未確認 | CWE-125 | catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the static rec b |
| CVE-2026-111127 | Deferred | 未確認 | CWE-125 | catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked string chara |
| CVE-2026-111128 | Deferred | 未確認 | CWE-476 | Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStruct |
| CVE-2026-111129 | Deferred | 未確認 | CWE-476 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames |
| CVE-2026-111130 | Deferred | 未確認 | CWE-125 | OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted Slidedat.ini v |
| CVE-2026-111131 | Deferred | 未確認 | CWE-125 | libxmp through 4.7.4 contains an off-by-one stack out-of-bounds read vulnerability in the prowizard P61A depacker depack_p61a() in src/loaders/prowizard/p61a.c. Attackers can suppl |
| CVE-2026-111132 | Awaiting Analysis | 未確認 | CWE-125 | GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in path_geometry_start_element() that allows attackers to read past allocations via crafted PolyBezierSegment or Poly |
| CVE-2026-111133 | Deferred | 未確認 | CWE-125 | libfsapfs through 20260921 contains an integer underflow in libfsapfs_key_encrypted_key_read_data() that allows attackers to trigger heap out-of-bounds reads via crafted KEK attrib |
| CVE-2026-111134 | Deferred | 未確認 | CWE-125 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_file_entry_values_read_data() that allows attackers to read past buffer bounds via crafted |
| CVE-2026-111135 | Deferred | 未確認 | CWE-125 | libfwsi through 20260522 contains a heap out-of-bounds read vulnerability in libfwsi_mtp_volume_values_read_data() that allows attackers to read past buffer bounds via crafted MTP |
| CVE-2026-111136 | Deferred | 未確認 | CWE-787 | libInstPatch through 1.1.7 contains a heap out-of-bounds write vulnerability in the SoundFont 2 loader because ipatch_sf2_gen_is_valid() does not range-check generator IDs before t |
| CVE-2026-111137 | Deferred | 未確認 | CWE-787 | libsmi through 0.5.0 contains an out-of-bounds write vulnerability in smiValueAsString() in lib/smi.c that allows attackers to overflow a fixed 1024-byte static buffer through hex |
| CVE-2026-111138 | Deferred | 未確認 | CWE-125 | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() because absolute-run bound checks omit the word-alignment pad |
| CVE-2026-111139 | Deferred | 未確認 | CWE-125 | NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_mask() that allows attackers to read one byte past the image buffer by supplying crafted I |
| CVE-2026-111140 | Deferred | 未確認 | CWE-125 | libregf through 20260526 contains a heap out-of-bounds read in libregf_value_item_read_value_data() because it bounds value data size without subtracting the 4-byte old-format cell |
| CVE-2026-111141 | Awaiting Analysis | 未確認 | CWE-125 | zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped central directory |
| CVE-2026-111142 | Awaiting Analysis | 未確認 | CWE-125 | Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers |
| CVE-2026-111143 | Deferred | 未確認 | CWE-125 | Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. |
| CVE-2026-111144 | Deferred | 未確認 | CWE-476 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a crafted XBIN file. A |
| CVE-2026-111145 | Deferred | 未確認 | CWE-125 | ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in DecompressRTF() in lib/ytnef.c that never validates uncompressedSize for uncompressed RTF streams. Attackers |
| CVE-2026-111146 | Deferred | 未確認 | CWE-125 | ytnef through 2.1.2 contains a heap out-of-bounds read vulnerability in MAPIPrint() that allows attackers to read past heap allocations by supplying compressed RTF properties. Atta |
| CVE-2026-111147 | Deferred | 未確認 | CWE-125 | Libyal libesedb through 20260704 contains a heap out-of-bounds read vulnerability in libesedb_record_get_multi_value() that allows attackers to read past buffers via unbounded mult |
| CVE-2026-111148 | Deferred | 未確認 | CWE-125 | libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset. |
| CVE-2026-111149 | Deferred | 未確認 | CWE-125 | FreeImage (danoli3 fork) through 3.19.23 contains a heap out-of-bounds read vulnerability in Unpack32Bits() in PluginPICT.cpp because rowBytes is never checked against the file-con |
| CVE-2026-111150 | Deferred | 未確認 | CWE-125 | ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attack |
| CVE-2026-111151 | Deferred | 未確認 | CWE-787 | OpenJPH through 0.32.0 contains a heap out-of-bounds write vulnerability in the HTJ2K cleanup-pass decoder that allows attackers to corrupt memory via one-row codeblocks. Attackers |
| CVE-2026-111152 | Deferred | 未確認 | CWE-125 | Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds c |
| CVE-2026-111153 | Deferred | 未確認 | CWE-125 | Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF f |
| CVE-2026-111154 | Deferred | 未確認 | CWE-787 | libTiMidity through 0.2.8 contains a stack out-of-bounds write vulnerability in the SoundFont loader that allows attackers to corrupt stack memory via unchecked generator operators |
| CVE-2026-111155 | Deferred | 未確認 | CWE-125 | libTiMidity through 0.2.8 contains a heap out-of-bounds read vulnerability in the SoundFont loader in src/sndfont.c that uses unvalidated sampleId and instrument generator values a |
| CVE-2026-111156 | Deferred | 未確認 | CWE-787 | libTiMidity through 0.2.8 contains an out-of-bounds access vulnerability in init_soundfont() in src/sndfont.c that allows attackers to corrupt memory by supplying unvalidated SF2 p |
| CVE-2026-111157 | Awaiting Analysis | 未確認 | CWE-787 | SoX through 14.4.2 contains a heap out-of-bounds write vulnerability in lsx_ms_adpcm_block_expand_i() in src/adpcm.c, triggered by an odd samplesPerBlock value in the WAV fmt chunk |
| CVE-2026-111158 | Deferred | 未確認 | CWE-125 | EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated miniSEED 2 record buffers. Attackers ca |
| CVE-2026-111159 | Deferred | 未確認 | CWE-125 | libewf through 20260924 contains a heap out-of-bounds read vulnerability in libewf_lef_extended_attribute_read_data() because UTF-16 name and value sizes are validated before being |
| CVE-2026-111160 | Deferred | 未確認 | CWE-502 | LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference worker by supplying the internal pd_kv_trans_params f |
| CVE-2026-111161 | Deferred | 未確認 | CWE-787 | libADLMIDI 1.6.2 through 1.6.2.1 contains an off-by-one stack out-of-bounds write vulnerability in BW_MidiSequencer that allows attackers to corrupt stack memory via crafted MIDI f |
| CVE-2026-111162 | Deferred | 未確認 | CWE-125 | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser _WM_ParseNewHmp() that allows attackers to read beyond buffers via underflowed chunk lengt |
| CVE-2026-111163 | Deferred | 未確認 | CWE-125 | WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events. Attackers can sup |
| CVE-2026-111164 | Deferred | 未確認 | CWE-125 | UADE through 3.05 contains an out-of-bounds read vulnerability in uade_filemagic() in amifilemagic.c caused by unsigned bufsize subtraction wrapping on short inputs. Attackers can |
| CVE-2026-111165 | Deferred | 未確認 | CWE-125 | libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can s |
| CVE-2026-111166 | Deferred | 未確認 | CWE-125 | libmikmod through 3.3.15 contains a heap out-of-bounds read vulnerability in the IMF_Load() loader that allows attackers to read beyond allocated memory by supplying a crafted IMF |
| CVE-2026-111167 | Deferred | 未確認 | CWE-125 | GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static table via an unch |
| CVE-2026-111168 | Deferred | 未確認 | CWE-79 | LibreDesk before 2.9.0-rc.8 contains a stored cross-site scripting vulnerability that allows authenticated agents to execute script by uploading SVGs with malformed Content-Type pa |
| CVE-2026-111169 | Deferred | 未確認 | CWE-639 | La Suite Docs through 6.0.1 contains an authorization bypass vulnerability that allows authenticated users to write comments into threads of documents they cannot access. Attackers |
| CVE-2026-111170 | Deferred | 未確認 | CWE-22 | kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the dataset directory by su |
| CVE-2026-111171 | Deferred | 未確認 | CWE-918 | Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 contains a server-side request forgery vulnerability because _check_ip_blocked() does not unwrap IPv4-mapped IPv6 addresses |
| CVE-2026-111172 | Deferred | 未確認 | CWE-1321 | @casl/ability 6.7.5 before 7.0.2 contains a prototype pollution vulnerability in rulesToFields() that allows attackers to modify inherited builtins via dotted condition keys. Attac |
| CVE-2026-111178 | Deferred | 未確認 | CWE-89 | The WP Booking System – Booking Calendar plugin for WordPress is vulnerable to generic SQL Injection via the 'data[orderby]' parameter in all versions up to, and including, 2.1.0.1 |
| CVE-2026-111181 | Awaiting Analysis | 未確認 | CWE-248 | body-parser is body parsing middleware for Node.js and Express. In versions before 1.20.9 and in versions from 2.0.0 before 2.4.0, a single request can crash any application using |
| CVE-2026-111183 | Awaiting Analysis | 未確認 | CWE-122 | GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations |
| CVE-2026-111184 | Awaiting Analysis | 未確認 | CWE-732 | NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installa |
| CVE-2026-111210 | Awaiting Analysis | 未確認 | CWE-918 | A vulnerability was determined in bitcoinj up to 0.17. Affected is the function url.openConnection of the file PaymentSession.java of the component Payment Request Handler. Executi |
| CVE-2026-111212 | Deferred | 未確認 | CWE-94, CWE-95 | A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.0. Affected by this issue is the function session.get_modelmeta.custom_metadata_map of the fil |
| CVE-2026-111214 | Analyzed | 未確認 | CWE-78 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with QinQ edit privilege to run commands by storing an unvalid |
| CVE-2026-111215 | Analyzed | 未確認 | CWE-78 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users to execute commands as root by supplying a crafted wireless parent i |
| CVE-2026-111216 | Analyzed | 未確認 | CWE-78 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as root by injectin |
| CVE-2026-111217 | Analyzed | 未確認 | CWE-78 | Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Virtual IP edit privileges to execute commands as root by stori |
| CVE-2026-111218 | Analyzed | 未確認 | CWE-78 | Netgate pfSense CE 2.7.0 through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with Traffic Shaper Limiters privileges to execute root comman |
| CVE-2026-111219 | Analyzed | 未確認 | CWE-93 | Netgate pfSense CE through 2.9.0 contains a newline injection vulnerability in services_pppoe_edit.php that allows privileged users to inject mpd.secret entries via unvalidated use |
| CVE-2026-111220 | Awaiting Analysis | 未確認 | CWE-93 | pfSense CE through 2.9.0 contains a crontab injection vulnerability in interfaces_ppps_edit.php that allows authenticated users to execute commands as root by injecting newlines in |
| CVE-2026-111221 | Analyzed | 未確認 | CWE-93 | Netgate pfSense CE through 2.9.0 contains a configuration injection vulnerability that allows authenticated WebGUI users to inject mpd5 commands by submitting an unescaped RADIUS s |
| CVE-2026-111222 | Analyzed | 未確認 | CWE-93 | Netgate pfSense CE through 2.9.0 contains a php.ini injection vulnerability that allows authenticated users with General Setup privileges to inject directives by submitting an unva |
| CVE-2026-111223 | Analyzed | 未確認 | CWE-74 | Netgate pfSense CE 2.7.0 through 2.9.0 contains a configuration injection vulnerability that allows authenticated users with IPsec Mobile privileges to execute commands as root via |
| CVE-2026-111224 | Awaiting Analysis | 未確認 | CWE-78 | pfSense CE through 2.9.0 contains an OS command injection vulnerability in the OpenVPN openvpn.connect_async.sh script that allows authenticated VPN users to execute commands as ro |
| CVE-2026-111225 | Analyzed | 未確認 | CWE-78 | Netgate pfSense CE 2.5.0 through 2.9.0 contains an OS command injection vulnerability in openvpn.learn-address.sh that allows authenticated VPN clients to execute commands as the u |
| CVE-2026-111226 | Awaiting Analysis | 未確認 | CWE-78 | pfSense CE 2.4.5 through 2.9.0 contains an OS command injection vulnerability that allows authenticated WebGUI users with Advanced Admin Access privilege to execute commands as roo |
| CVE-2026-111227 | Analyzed | 未確認 | CWE-93 | Netgate pfSense CE through 2.9.0 contains a CRLF injection vulnerability in services_unbound_acls.php that allows authenticated users with the DNS Resolver: Access Lists privilege |
| CVE-2026-111228 | Analyzed | 未確認 | CWE-93 | Netgate pfSense CE from 2.7.1 through 2.9.0 contains a CRLF injection vulnerability in services_unbound_advanced.php that allows authenticated users with DNS Resolver: Advanced pri |
| CVE-2026-111229 | Awaiting Analysis | 未確認 | CWE-78 | pfSense CE 2.7.0 through 2.9.0 contains a command injection vulnerability in services_captiveportal_hasync.php that allows users with only the Captive Portal HA privilege to execut |
| CVE-2026-111230 | Analyzed | 未確認 | CWE-73 | Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic DNS client privilege to read files as root by setting a file:// custom |
| CVE-2026-111231 | Analyzed | 未確認 | CWE-863 | Netgate pfSense CE through 2.9.0 contains an authorization bypass vulnerability that allows read-only WebGUI users to replace config.xml because config_restore() and config_install |
| CVE-2026-111232 | Analyzed | 未確認 | CWE-79 | Netgate pfSense CE 2.3.0 through 2.9.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Firewall: Rules or NAT: Port Forward privileges to |
| CVE-2026-111233 | Analyzed | 未確認 | CWE-79 | Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall_rules.php that allows remote attackers to inject script via the unencoded |
| CVE-2026-111234 | Deferred | 未確認 | CWE-73 | SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read server files by supplying file:// URLs in redirects or autodiscovery lin |
| CVE-2026-111235 | Awaiting Analysis | 未確認 | CWE-204, CWE-862, CWE-863 | An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/** Spring Security filter chains authorize requests wit |
| CVE-2026-111237 | Deferred | 未確認 | CWE-94, CWE-95 | A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52. This affects the function session.get_modelmeta.custom_metadata_map of the fil |
| CVE-2026-111252 | Awaiting Analysis | 未確認 | CWE-400, CWE-776 | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS parsed XML without an effective limit on entity expansion. |
| CVE-2026-111269 | Deferred | 未確認 | CWE-125 | libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can |
| CVE-2026-111270 | Deferred | 未確認 | CWE-787 | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM() in src/load_dsm.cpp because nPat is never checked against MAX_PATTERNS. Attackers can |
| CVE-2026-111271 | Deferred | 未確認 | CWE-125 | libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory v |
| CVE-2026-111272 | Deferred | 未確認 | CWE-125 | LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer. Attackers can supply a c |
| CVE-2026-111273 | Deferred | 未確認 | CWE-193 | unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable through the ar_entry_get_name() API. Attackers can supply a cr |
| CVE-2026-111274 | Deferred | 未確認 | CWE-125 | unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply |
| CVE-2026-111275 | Deferred | 未確認 | CWE-787 | nifti_clib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifti_convert_n2hdr2nim() because the NIfTI-2 dim[0] value is never range-checked. Att |
| CVE-2026-111277 | Deferred | 未確認 | CWE-862 | NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that allows unauthenticated attackers to retrieve guest order invoic |
| CVE-2026-111278 | Deferred | 未確認 | CWE-804 | NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form protection because the expected code is printed as plain text in |
| CVE-2026-111279 | Deferred | 未確認 | CWE-789 | Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRANDFIELD, ZRAND |
| CVE-2026-111280 | Deferred | 未確認 | CWE-787 | snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an unchecked Data |
| CVE-2026-111281 | Deferred | 未確認 | CWE-798 | Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via har |
| CVE-2026-111282 | Deferred | 未確認 | CWE-190 | Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path length check. Attacker |
| CVE-2026-111283 | Awaiting Analysis | 未確認 | CWE-305 | BMC Helix Network Management on-prem 26.3.00 before 26.3.01 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as the local administrat |
| CVE-2026-111284 | Deferred | 未確認 | CWE-79 | Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names ren |
| CVE-2026-111311 | Deferred | 未確認 | CWE-434 | The DoubleScale | All-in-One CRM – Sales, Multi-Channel Marketing, Newsletter, Booking, Helpdesk, Automation, MCP & More plugin for WordPress is vulnerable to Arbitrary File Upload |
| CVE-2026-111312 | Deferred | 未確認 | CWE-306 | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability in the /api/health-data/[id] GET, PATCH and DELETE handlers that query records by id with |
| CVE-2026-111313 | Deferred | 未確認 | CWE-918 | JobOps through 0.13.1 contains a server-side request forgery vulnerability in the POST /api/manual-jobs/fetch handler that allows authenticated users, or unauthenticated clients in |
| CVE-2026-111320 | Deferred | 未確認 | CWE-918 | ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to direct backend requests by setting an unvalidated pro |
| CVE-2026-111321 | Deferred | 未確認 | CWE-918 | TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an un |
| CVE-2026-111322 | Deferred | 未確認 | CWE-306 | Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* control API, which binds to 0.0.0.0 by defau |
| CVE-2026-111323 | Deferred | 未確認 | CWE-918 | RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validate_url checks only the initi |
| CVE-2026-111324 | Deferred | 未確認 | CWE-639 | rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwrite existing peer records by supplying only a target device I |
| CVE-2026-111329 | Deferred | 未確認 | CWE-1392 | JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote attackers to access the admin console on port 8090. Attacke |
| CVE-2026-111330 | Deferred | 未確認 | CWE-916 | JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountser |
| CVE-2026-111331 | Deferred | 未確認 | CWE-639 | Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authenticated owners or admins of any organization to manage other ten |
| CVE-2026-111332 | Deferred | 未確認 | CWE-863 | OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep share access after password protection is added. Attackers hol |
| CVE-2026-111343 | Deferred | 未確認 | CWE-862 | pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated user to read other users' profiles via GET /admin/user/deta |
| CVE-2026-111344 | Deferred | 未確認 | CWE-639 | APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node descriptions from other spaces by supplying a user-controll |
| CVE-2026-111345 | Deferred | 未確認 | CWE-639 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attac |
| CVE-2026-111346 | Deferred | 未確認 | CWE-639 | ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated users to read and overwrite other users' comments by supplyi |
| CVE-2026-111347 | Deferred | 未確認 | CWE-321 | go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture |
| CVE-2026-111348 | Deferred | 未確認 | CWE-639 | Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.php that lets authenticated users access other customers' afte |
| CVE-2026-111349 | Deferred | 未確認 | CWE-862 | Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthenticated attackers to create customer records via JSON:API an |
| CVE-2026-111350 | Deferred | 未確認 | CWE-862 | Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and s |
| CVE-2026-111351 | Deferred | 未確認 | CWE-639 | metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass role and organiz |
| CVE-2026-111352 | Deferred | 未確認 | CWE-863 | ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin REST API endpo |
| CVE-2026-111353 | Deferred | 未確認 | CWE-862 | Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by supplying a user |
| CVE-2026-111354 | Deferred | 未確認 | CWE-639 | crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers. Attackers ca |
| CVE-2026-111355 | Deferred | 未確認 | CWE-639 | zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplying out-of-sco |
| CVE-2026-111356 | Deferred | 未確認 | CWE-307 | MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts. Attackers knowin |
| CVE-2026-111357 | Awaiting Analysis | 未確認 | CWE-829 | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the w |
| CVE-2026-111358 | Deferred | 未確認 | CWE-639 | SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other workspaces' tags |
| CVE-2026-111359 | Deferred | 未確認 | CWE-639 | CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders via the gift-o |
| CVE-2026-111363 | Deferred | 未確認 | CWE-639 | BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by suppl |
| CVE-2026-111364 | Deferred | 未確認 | CWE-639 | MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthoriz |
| CVE-2026-111365 | Deferred | 未確認 | CWE-639 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read, modify, or delete other admins' roles by supplying arbitra |
| CVE-2026-111366 | Deferred | 未確認 | CWE-639 | cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows department-limited admins to manage users outside their departments by supplying arbitrar |
| CVE-2026-111367 | Deferred | 未確認 | CWE-1394 | BillionMail through 4.9 contains a hard-coded cryptographic key vulnerability that allows unauthenticated attackers to forge unsubscribe and subscribe-confirm JWTs by computing the |
| CVE-2026-111368 | Deferred | 未確認 | CWE-639 | ClassroomIO through 1.0.0 contains an insecure direct object reference vulnerability in the Hono API course submission routes that allows course tutors or admins to modify submissi |
| CVE-2026-111369 | Deferred | 未確認 | CWE-863 | ClassroomIO through 1.0.0 contains an incorrect authorization vulnerability in the PUT and DELETE /:lessonId lesson routes that allows any course member, including students, to mod |
| CVE-2026-111373 | Analyzed | 未確認 | CWE-476 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. Wh |
| CVE-2026-111374 | Analyzed | 未確認 | CWE-20 | FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets malicious RDP servers request unadvertised camera media types. Attack |
| CVE-2026-111375 | Modified | 未確認 | CWE-125 | FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows malicious RDP servers to trigger heap over-reads by sending non |
| CVE-2026-111376 | Analyzed | 未確認 | CWE-125 | FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStream_New that allows malicious RDP servers to trigger invalid me |
| CVE-2026-111377 | Analyzed | 未確認 | CWE-400 | FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to enforce cumulative fragment limits. Authenticated clients can |
| CVE-2026-111378 | Analyzed | 未確認 | CWE-400 | FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that allows unauthenticated attackers to exhaust server memory. A |
| CVE-2026-111379 | Analyzed | 未確認 | CWE-122 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local attackers to corrupt memory by supplying a crafted v3 persis |
| CVE-2026-111380 | Modified | 未確認 | CWE-190 | FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer size as FramesPerPacket |
| CVE-2026-111381 | Analyzed | 未確認 | CWE-122 | FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local attackers to corrupt heap memory via integer wraparound in b |
| CVE-2026-111382 | Analyzed | 未確認 | CWE-787 | FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and general_ChromaV2ToYUV444 that allows malicious RDP servers to corrup |
| CVE-2026-111383 | Deferred | 未確認 | CWE-770 | Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open unbounded concurrent connections to the /api/v1/ws/transfer Web |
| CVE-2026-111384 | Deferred | 未確認 | CWE-770 | Nezha 1.0.0 before 2.3.15 contains a memory exhaustion vulnerability in the dashboard file manager WebSocket endpoint because fmStream never calls SetReadLimit, leaving message siz |
| CVE-2026-111385 | Deferred | 未確認 | CWE-601 | Nezha from 2.1.0 before 2.3.15 contains a host header injection vulnerability in mintTransferTool that builds fs.download_url and fs.upload_url transfer URLs from the unvalidated H |
| CVE-2026-111386 | Deferred | 未確認 | CWE-204 | Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to enumerate other tenants' server IDs through differential respon |
| CVE-2026-111387 | Deferred | 未確認 | CWE-212 | Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to retrieve third-party credentials because listDDNS omits WebhookUR |
| CVE-2026-111388 | Deferred | 未確認 | CWE-284 | Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for non-session authentication methods, including API key, OAuth, and h |
| CVE-2026-111389 | Deferred | 未確認 | CWE-89 | Frappe HRMS 14.x before 14.38.2, 15.x before 15.64.0, and 16.x before 16.18.0 contains a SQL injection vulnerability in some endpoints caused by missing input validation. Any authe |
| CVE-2026-111390 | Deferred | 未確認 | CWE-564 | Erupt through 2.3.0 contains an HQL injection vulnerability that allows authenticated users to bypass tree-scoped data filters by injecting unescaped quotes into the linkTreeVal pa |
| CVE-2026-111391 | Deferred | 未確認 | CWE-95 | SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox throug |
| CVE-2026-111392 | Deferred | 未確認 | CWE-345 | SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers c |
| CVE-2026-111396 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-111397 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: fr |
| CVE-2026-111398 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path |
| CVE-2026-111399 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows |
| CVE-2026-111400 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor |
| CVE-2026-111401 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Tailored Media Tailored Tools tailored-tools allows Cross Site Request Forgery.This issue affects Tailored Tools: from n/a throug |
| CVE-2026-111402 | Received | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows SQL Injection.This issu |
| CVE-2026-111405 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows |
| CVE-2026-111406 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Upload a Web Shell to a Web Server.T |
| CVE-2026-111407 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Stored XSS.This issue affects Tutor LMS: from n |
| CVE-2026-111408 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a t |
| CVE-2026-111409 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in YITH YITH PayPal Express Checkout for WooCommerce yith-paypal-express-checkout-for-woocommerce allows Exploiting Incorrectly Configured Acces |
| CVE-2026-111410 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf.com e2pdf e2pdf allows Stored XSS.This issue affects e2pdf: from n/a thr |
| CVE-2026-111413 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Help |
| CVE-2026-111414 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor jet-elements allows Stored XSS.This issue |
| CVE-2026-111438 | Deferred | 未確認 | CWE-288 | 在 openGauss-server 的 src/common/backend/libpq/hba.cpp 中，复制连接认证存在访问控制绕过。hba_getauthmethod() 在处理 HADR/SW 复制发送方时，不要求 is_node_internal_connection()，直接调用 check_hba_replication()。check_h |
| CVE-2026-111439 | Deferred | 未確認 | CWE-862 | 在 openGauss-server的 src/common/backend/utils/adt/genfile.cpp 模块中，内置函数 pg_read_binary_file_blocks() 存在权限校验逻辑缺陷。该函数在入口处仅校验了起始块号（startBlockNum）和块数量（blockCount）的范围，随后直接调用底层文件读取例程 ReadB |
| CVE-2026-111440 | Deferred | 未確認 | CWE-470 | 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String 为参数的构造函数，再转换为 Log。缺少 |
| CVE-2026-111441 | Deferred | 未確認 | CWE-122 | 在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 le |
| CVE-2026-111442 | Awaiting Analysis | 未確認 | CWE-79 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags. SVG images ca |
| CVE-2026-111443 | Deferred | 未確認 | CWE-348 | Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-Test-Context |
| CVE-2026-111444 | Deferred | 未確認 | CWE-89 | Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an application supplies request data to inline-literal |
| CVE-2026-111445 | Deferred | 未確認 | CWE-669 | Wheels 4.0.0 through 4.1.2 before 4.2.0 replaces incoming scope conditions with a primary-key condition in findByKey() and exists(key=). For exists(key=), production with error inf |
| CVE-2026-111446 | Deferred | 未確認 | CWE-863 | Wheels 4.0.0 through 4.1.2 exposes password-less development tools under /wheels/* to remote clients when enablePublicComponent=true, as it is by default in development. Before 4.1 |
| CVE-2026-111447 | Deferred | 未確認 | CWE-472 | Wheels 1.1 through 4.1.2 resolves nestedProperties() records by posted primary key without checking that they belong to the parent being saved. A user able to submit a nested form |
| CVE-2026-111448 | Deferred | 未確認 | CWE-178 | Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, deve |
| CVE-2026-111449 | Deferred | 未確認 | CWE-362 | Wheels 3.0.0 through 4.1.1 can disclose detailed exceptions when allowIPBasedDebugAccess=true (disabled by default). An allowed administrator request changes error/debug-display se |
| CVE-2026-111450 | Deferred | 未確認 | CWE-348 | Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the application. If no explicit error-email recipient is con |
| CVE-2026-111451 | Deferred | 未確認 | CWE-78 | Wheels CLI 4.0.0 through 4.1.1 insufficiently validates or escapes caller-supplied values and package contents. Deploy release/version/rollback values can execute shell commands on |
| CVE-2026-111458 | Deferred | 未確認 | CWE-122, CWE-787 | The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints. The allocation size is computed as strlen(b |
| CVE-2026-111472 | Deferred | 未確認 | CWE-89 | An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve, create, update and delete data from the database by sendi |
| CVE-2026-111497 | Awaiting Analysis | 未確認 | CWE-252, CWE-787 | A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to co |
| CVE-2026-111555 | Awaiting Analysis | 未確認 | CWE-1285 | A flaw was found in luksmeta. Improper boundary validation of metadata slots allows an attacker capable of supplying or modifying a disk header to redirect wipe or load operations |
| CVE-2026-111574 | Deferred | 未確認 | CWE-79 | The Redirection for Contact Form 7 WordPress plugin before 3.2.12 does not sanitise or escape submitted form data stored as lead entries before outputting it in the lead debug meta |
| CVE-2026-111581 | Awaiting Analysis | 未確認 | CWE-88 | A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional arguments to the ntfslabel and |
| CVE-2026-111593 | Rejected | 未確認 | Rejected reason: This CVE ID was reserved for a reported issue in the PDF Invoices & Packing Slips for WooCommerce WordPress plugin and was never published. On validation the repor | |
| CVE-2026-111594 | Awaiting Analysis | 未確認 | CWE-319 | InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device. |
| CVE-2026-111596 | Deferred | 未確認 | CWE-639 | The Kliken: Ads + Pixel for Meta WordPress plugin before 1.2.3 does not verify that a visitor holds an order's key before outputting that order's details on the order confirmation |
| CVE-2026-111601 | Deferred | 未確認 | CWE-79 | The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'token_id' parameter in all versions up to, and including, 1.12.0 |
| CVE-2026-111602 | Deferred | 未確認 | CWE-200 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and inc |
| CVE-2026-111603 | Deferred | 未確認 | CWE-639 | PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting th |
| CVE-2026-111604 | Deferred | 未確認 | CWE-639 | eladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped user managers to modify or delete accounts outside their data scope because write h |
| CVE-2026-111605 | Deferred | 未確認 | CWE-639 | Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces |
| CVE-2026-111606 | Deferred | 未確認 | CWE-862 | Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbitrary persons by calling the mergeSpecifiedPersons acco |
| CVE-2026-111607 | Deferred | 未確認 | CWE-639 | Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another merchant application's payment channel |
| CVE-2026-111608 | Deferred | 未確認 | CWE-639 | Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants' division receivers by exploiting |
| CVE-2026-111609 | Awaiting Analysis | 未確認 | CWE-639 | PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscript |
| CVE-2026-111610 | Deferred | 未確認 | CWE-639 | B3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors' articles by omitting per-author |
| CVE-2026-111611 | Deferred | 未確認 | CWE-639 | roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' ord |
| CVE-2026-111612 | Deferred | 未確認 | CWE-321 | netdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated netdisk credentials via the /v2/rando |
| CVE-2026-111613 | Deferred | 未確認 | CWE-306 | AllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by supplying jdbcUrl and jdbcDriv |
| CVE-2026-111614 | Deferred | 未確認 | CWE-639 | DataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users to read other users' datasource |
| CVE-2026-111615 | Deferred | 未確認 | CWE-639 | Mall4cloud through 4.0 contains an insecure direct object reference vulnerability that allows authenticated merchants to read other shops' buyer shipping addresses via the multisho |
| CVE-2026-111616 | Deferred | 未確認 | CWE-639 | Oqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another co-tenant site's private settin |
| CVE-2026-111617 | Deferred | 未確認 | CWE-306 | WHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and /ws/ui/actuator/ WebSocket endpoints |
| CVE-2026-111618 | Deferred | 未確認 | CWE-22 | CoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via the hash query parameter. Attack |
| CVE-2026-111619 | Deferred | 未確認 | CWE-89 | FilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via the unvalidated asc parameter. |
| CVE-2026-111620 | Deferred | 未確認 | CWE-639 | O2OA through 10.0.2-ce contains an authorization bypass vulnerability in x_processplatform_assemble_surface that allows authenticated users to download attachments from other works |
| CVE-2026-111621 | Deferred | 未確認 | CWE-639 | TDuck Survey Form through 5.3 contains a missing authorization vulnerability that allows any authenticated user to read other owners' raw form settings via GET /user/form/setting/{ |
| CVE-2026-111622 | Deferred | 未確認 | CWE-601 | smart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2 authorization codes by supplying an unva |
| CVE-2026-111623 | Deferred | 未確認 | CWE-290 | Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting |
| CVE-2026-111624 | Awaiting Analysis | 未確認 | CWE-306 | Umbraco CMS before 17.7.1 and 18.2.1 contains a missing authorization vulnerability that allows unauthenticated clients to connect to the backoffice PreviewHub and BackofficeHub Si |
| CVE-2026-111625 | Deferred | 未確認 | CWE-862 | 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level multisite users to publish posts on other network sites. A |
| CVE-2026-111626 | Deferred | 未確認 | CWE-306 | Webreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes because controller authorization |
| CVE-2026-111627 | Deferred | 未確認 | CWE-863 | HestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while impersonating the protected ROOT_USER |
| CVE-2026-111628 | Deferred | 未確認 | CWE-502 | 10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double unserializing distributed post |
| CVE-2026-111629 | Deferred | 未確認 | CWE-639 | IoTSharp through 3.6.1 contains an insecure direct object reference vulnerability that allows any authenticated user to read other tenants' data because Customers and Devices API h |
| CVE-2026-111630 | Deferred | 未確認 | CWE-639 | abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the LINGYUN.Abp.AIManagement module that allows authenticated users to access oth |
| CVE-2026-111631 | Deferred | 未確認 | CWE-862 | Distributor before 2.3.2 contains a missing authorization vulnerability that allows Contributor-level users to invoke external connection AJAX actions intended for manage_options u |
| CVE-2026-111632 | Deferred | 未確認 | CWE-639 | Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows authenticated API users to create or move records into disallowed companies by supplying a forei |
| CVE-2026-111633 | Deferred | 未確認 | CWE-321 | ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing |
| CVE-2026-111634 | Deferred | 未確認 | CWE-89 | Helical Insight through 7.0.0 contains an sql injection vulnerability that allows authenticated viewers to inject SQL through unescaped report parameter values sent to /executeData |
| CVE-2026-111635 | Deferred | 未確認 | CWE-22 | Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getE |
| CVE-2026-111636 | Deferred | 未確認 | CWE-321 | OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded def |
| CVE-2026-111637 | Deferred | 未確認 | CWE-306 | NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{i |
| CVE-2026-111638 | Deferred | 未確認 | CWE-862 | sshportal through 1.19.5 contains a missing authorization vulnerability in the management shell 'key show' command that allows authenticated non-admin users to obtain decrypted bac |
| CVE-2026-111639 | Deferred | 未確認 | CWE-287 | bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in as other users by submitting G |
| CVE-2026-111640 | Deferred | 未確認 | CWE-639 | DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the membership check for dialogs with group_type 'okr'. Authentic |
| CVE-2026-111641 | Deferred | 未確認 | CWE-306 | FastapiAdmin through 3.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain sessions for any user by abusing unprotected auto-login end |
| CVE-2026-111642 | Deferred | 未確認 | CWE-321 | FastapiAdmin through 3.0 contains a hard-coded JWT signing secret in backend/app/config/setting.py that allows low-privileged users to forge tokens impersonating the superuser. Att |
| CVE-2026-111643 | Deferred | 未確認 | CWE-306 | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected PO |
| CVE-2026-111644 | Deferred | 未確認 | CWE-306 | Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and hea |
| CVE-2026-111645 | Deferred | 未確認 | CWE-639 | MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDoc API that allows authenticated users to modify other users' documents and proje |
| CVE-2026-111646 | Deferred | 未確認 | CWE-862 | SurveyKing before 1.13.0 contains a missing authorization vulnerability that allows unauthenticated attackers to download any stored file by id through GET /api/public/preview/{att |
| CVE-2026-111647 | Deferred | 未確認 | CWE-639 | PickMall lilishop through 5.0.0 contains an insecure direct object reference vulnerability that allows authenticated buyers to read other buyers' invoice records because ReceiptSer |
| CVE-2026-111648 | Deferred | 未確認 | CWE-639 | BuildAdmin through 2.3.9 contains an insecure direct object reference vulnerability that allows authenticated backend administrators to modify other administrators' profiles via th |
| CVE-2026-111649 | Deferred | 未確認 | CWE-639 | Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by |
| CVE-2026-111650 | Deferred | 未確認 | CWE-306 | ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows unauthenticated attackers to reconfigure already configured |
| CVE-2026-111651 | Deferred | 未確認 | CWE-639 | Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module DownloadController that allows authenticated users to export any ten |
| CVE-2026-111652 | Deferred | 未確認 | CWE-862 | Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController.Attachment that allows unauthenticated attackers to download project image and video at |
| CVE-2026-111653 | Deferred | 未確認 | CWE-306 | 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite any enterprise's profile by sending PUT requests to /api/en |
| CVE-2026-111654 | Deferred | 未確認 | CWE-639 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege users to access other users' device groups because GroupCon |
| CVE-2026-111655 | Deferred | 未確認 | CWE-639 | ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-super administrators to read and overwrite other administrato |
| CVE-2026-111656 | Deferred | 未確認 | CWE-639 | ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to access another tenant's form filters by supplying arbitrary for |
| CVE-2026-111657 | Deferred | 未確認 | CWE-639 | BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of RmaController that allows authenticated customers to modify ot |
| CVE-2026-111658 | Deferred | 未確認 | CWE-639 | SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-scoped administrators to access other sites' channels by supply |
| CVE-2026-111659 | Deferred | 未確認 | CWE-306 | Waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to forge orders by calling the internal /callback/order/submit mes |
| CVE-2026-111660 | Deferred | 未確認 | CWE-306 | waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to cancel any member's pending order via the /callback/order/unpai |
| CVE-2026-111661 | Deferred | 未確認 | CWE-306 | waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to send arbitrary email by calling the anonymously mapped /callbac |
| CVE-2026-111662 | Deferred | 未確認 | CWE-918 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of th |
| CVE-2026-111663 | Deferred | 未確認 | CWE-918 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. A |
| CVE-2026-111664 | Deferred | 未確認 | CWE-306 | Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url |
| CVE-2026-111665 | Deferred | 未確認 | CWE-862 | Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController that allows any authenticated manager user to list, create, edi |
| CVE-2026-111666 | Deferred | 未確認 | CWE-863 | Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users to read other tenants' report definitions by querying the rep |
| CVE-2026-111667 | Deferred | 未確認 | CWE-639 | REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows authenticated low-privileged users to read task comments witho |
| CVE-2026-111668 | Deferred | 未確認 | CWE-862 | AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authenticated low-privileged users to bypass efficiency:read and effi |
| CVE-2026-111669 | Deferred | 未確認 | CWE-89 | ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attackers to manipulate the ORDER BY clause by supplying a crafted PagerInfo.Sort query |
| CVE-2026-111670 | Deferred | 未確認 | CWE-862 | ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows authenticated low-privileged users to access ClickHouse instanc |
| CVE-2026-111671 | Deferred | 未確認 | CWE-639 | Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or redeploy other users' notebooks a |
| CVE-2026-111672 | Deferred | 未確認 | CWE-639 | Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view or copy other project groups' |
| CVE-2026-111673 | Deferred | 未確認 | CWE-306 | IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, delete, or disable any account because /User/** is excluded fr |
| CVE-2026-111674 | Deferred | 未確認 | CWE-639 | Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. At |
| CVE-2026-111675 | Deferred | 未確認 | CWE-307 | Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email |
| CVE-2026-111676 | Deferred | 未確認 | CWE-639 | Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability that allows authenticated agents to read tickets in other departments via the getTooltip handler. Attack |
| CVE-2026-111677 | Analyzed | 未確認 | CWE-125 | Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted bounds check on the PlcfLst record count. Attackers can supp |
| CVE-2026-111678 | Modified | 未確認 | CWE-125 | Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c because FKP run counts and grpprl offsets are not bounded. Attac |
| CVE-2026-111679 | Deferred | 未確認 | CWE-862 | Ekko Studio through 0.7.36 contains a missing authorization vulnerability that allows any authenticated non-super_admin user to list and clear server-wide login lockouts via /api/a |
| CVE-2026-111680 | Deferred | 未確認 | CWE-639 | APIPark through 1.9.7-beta contains an authorization bypass vulnerability that allows authenticated team managers to access other teams' services and applications by supplying thei |
| CVE-2026-111681 | Deferred | 未確認 | CWE-862 | EFAK through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to manage accounts because the /api/users endpoints lack administrat |
| CVE-2026-111682 | Deferred | 未確認 | CWE-862 | EFAK 5.0.0 through 5.1.0 contains a missing authorization vulnerability that allows authenticated low-privilege users to read LLM provider API keys through the /api/model-config RE |
| CVE-2026-111683 | Deferred | 未確認 | CWE-862 | Allegro Ralph through 20260902.1 contains a missing authorization vulnerability that allows authenticated staff users to bypass rack model permissions because RalphPermission skips |
| CVE-2026-111684 | Deferred | 未確認 | CWE-639 | Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, issue, and revoke other tenants' device certificates by |
| CVE-2026-111685 | Deferred | 未確認 | CWE-89 | IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL by supplying a crafted num path parameter to /WebResource/fi |
| CVE-2026-111686 | Deferred | 未確認 | CWE-89 | IceCMS through 4.1.5 contains an unauthenticated sql injection vulnerability that allows remote attackers to inject SQL through the num path parameter of /WebArticle/findarticlesby |
| CVE-2026-111687 | Deferred | 未確認 | CWE-95 | WeRSS (we-mp-rss) through 1.5.3 contains a remote code execution vulnerability that allows unauthenticated attackers to run code via the template parameter of the public GET /rss/{ |
| CVE-2026-111688 | Deferred | 未確認 | CWE-863 | Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to evade role data-scope restrictions by sending openDataFilter=false. Att |
| CVE-2026-111689 | Deferred | 未確認 | CWE-639 | Exrick XBoot through 3.3.4 contains an authorization bypass vulnerability that allows authenticated users to read user records of any department by ignoring role data scope. Attack |
| CVE-2026-111690 | Deferred | 未確認 | CWE-321 | Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Au |
| CVE-2026-111691 | Deferred | 未確認 | CWE-290 | WIMOOR through commit ec86736 contains an authentication bypass vulnerability that allows attackers to impersonate any tenant and privilege level by sending an unsigned X-USERINFO |
| CVE-2026-111692 | Deferred | 未確認 | CWE-321 | DataBuff ai-apm-web through 0.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin session tokens by using the hardcoded HMAC s |
| CVE-2026-111693 | Deferred | 未確認 | CWE-1392 | DataBuff ai-apm-web through 0.1.10 contains a hard-coded default credentials vulnerability that allows unauthenticated attackers to gain administrator access using the built-in adm |
| CVE-2026-111694 | Deferred | 未確認 | CWE-306 | qKnow through 2.4.3 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access /flyflow workflow integration endpoints permitted in Secu |
| CVE-2026-111695 | Deferred | 未確認 | CWE-639 | Shaiwz data-platform-open through commit efeacd3 contains an insecure direct object reference vulnerability that allows authenticated workspace members to access other workspaces' |
| CVE-2026-111696 | Deferred | 未確認 | CWE-321 | data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored da |
| CVE-2026-111697 | Deferred | 未確認 | CWE-639 | HUIZHI ChargeOS cloud through 3.0.9 contains an insecure direct object reference vulnerability in the hcp-mp MeController and OrderController that trusts client-supplied userId, op |
| CVE-2026-111698 | Deferred | 未確認 | CWE-639 | HUIZHI ChargeOS cloud through 3.0.9 contains a missing authorization vulnerability in the hcp-mp PayController.xcxRecharge endpoint that allows attackers to modify any member's wal |
| CVE-2026-111699 | Deferred | 未確認 | CWE-306 | Niefy wx-api through 0.8.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to impersonate WeChat fans by supplying a raw openid cookie to fan- |
| CVE-2026-111700 | Deferred | 未確認 | CWE-89 | WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attacke |
| CVE-2026-111701 | Deferred | 未確認 | CWE-306 | OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthenticated attackers to access private bucket objects because /storage/v1/object/{bu |
| CVE-2026-111702 | Deferred | 未確認 | CWE-639 | ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attackers to access other users' private knowledge bases by supplyin |
| CVE-2026-111703 | Deferred | 未確認 | CWE-639 | yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authenticated sales users to access other users' customer records by supplying arbitr |
| CVE-2026-111704 | Deferred | 未確認 | CWE-306 | LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token intercep |
| CVE-2026-111705 | Deferred | 未確認 | CWE-639 | Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated members to read other members' booking records by supplying arbitr |
| CVE-2026-111706 | Deferred | 未確認 | CWE-306 | 99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allows unauthenticated attackers to export all users' chat logs. |
| CVE-2026-111707 | Deferred | 未確認 | CWE-639 | 99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read other users' chat messages because querySingleChat lacks |
| CVE-2026-111708 | Deferred | 未確認 | CWE-269 | WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register as administrators via POST /auth/s |
| CVE-2026-111709 | Deferred | 未確認 | CWE-639 | WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authenticated agents to access other agents' tickets because ShowT |
| CVE-2026-111710 | Deferred | 未確認 | CWE-476 | Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth() function that allows unauthenticated attackers to crash the |
| CVE-2026-111711 | Deferred | 未確認 | CWE-121 | Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user_ok() function, which copies Basic-auth usernames with unb |
| CVE-2026-111712 | Deferred | 未確認 | CWE-288 | Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers to reach protected management CGI handlers by prefixing the |
| CVE-2026-111713 | Awaiting Analysis | 未確認 | CWE-79 | tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr resolves 'data-' prefixed attributes while the https-only guard validates the unpre |
| CVE-2026-111714 | Awaiting Analysis | 未確認 | CWE-1333 | tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to block visitor pages by supplying unescaped cookie names to coo |
| CVE-2026-111715 | Deferred | 未確認 | CWE-639 | Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated employees read other departments' wiki metadata by supplying a for |
| CVE-2026-111716 | Deferred | 未確認 | CWE-639 | Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modify other departments' sources because by-id routes in app/rou |
| CVE-2026-111717 | Deferred | 未確認 | CWE-639 | Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated employees to read other departments' skill version metadata by b |
| CVE-2026-111718 | Deferred | 未確認 | CWE-89 | AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the order_by and group_by fields of the /api/data/invoke endpoin |
| CVE-2026-111719 | Deferred | 未確認 | CWE-306 | Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that allows unauthenticated attackers to retrieve payment records by |
| CVE-2026-111720 | Deferred | 未確認 | CWE-918 | fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supp |
| CVE-2026-111721 | Deferred | 未確認 | CWE-639 | Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other warehouses' stock records because GlobalGatewayFilter never en |
| CVE-2026-111722 | Deferred | 未確認 | CWE-639 | LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get la |
| CVE-2026-111723 | Deferred | 未確認 | CWE-862 | LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protecte |
| CVE-2026-111726 | Deferred | 未確認 | CWE-79 | The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible' Shortcode Attribute in all versions up to, and including, 7.8.2 due to insuffici |
| CVE-2026-111728 | Deferred | 未確認 | CWE-88 | Seanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper authorization, allowing unauthenticated LAN or Tailnet clients to bypass the privi |
| CVE-2026-111737 | Deferred | 未確認 | CWE-79 | The Speed Optimizer WordPress plugin before 7.8.5 does not sanitise or escape some of its settings before outputting them in the head of front-end pages, which could allow high-pr |
| CVE-2026-111738 | Deferred | 未確認 | CWE-863 | The Speed Optimizer WordPress plugin before 7.8.5 does not verify network-level privilege before applying an option change to the whole multisite network, nor restrict which optio |
| CVE-2026-111748 | Undergoing Analysis | 未確認 | CWE-807 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that causes Request.scheme to use att |
| CVE-2026-111749 | Undergoing Analysis | 未確認 | CWE-565 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. |
| CVE-2026-111750 | Undergoing Analysis | 未確認 | CWE-444 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated a |
| CVE-2026-111755 | Awaiting Analysis | 未確認 | CWE-185, CWE-200 | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16.1, escapeRegex leaves valid header-name metacharacters unes |
| CVE-2026-111756 | Awaiting Analysis | 未確認 | CWE-200, CWE-212 | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From version 1.16.0 to before version 1.16.1, follow-redirects removes sensitive c |
| CVE-2026-111757 | Deferred | 未確認 | CWE-174 | Hono is a Web application framework that provides support for any JavaScript runtime. From 4.12.4 until 4.13.11, serveStatic can interpret a malformed percent-encoded path differen |
| CVE-2026-111758 | Awaiting Analysis | 未確認 | CWE-400, CWE-407 | markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference definition whose label or title is never closed is O(n²) with |
| CVE-2026-111759 | Awaiting Analysis | 未確認 | CWE-400, CWE-407 | markdown-it is a Markdown parser. Prior to 14.3.2 and 15.0.2, when typographer: true is enabled, specially crafted Markdown can cause quadratic processing time in the smartquotes r |
| CVE-2026-111761 | Awaiting Analysis | 未確認 | CWE-918 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, BasePushNotificationSender in server-common sends task data to the URL in TaskPushNo |
| CVE-2026-111762 | Awaiting Analysis | 未確認 | CWE-532 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.parseRequestBody in `transport/rest/src/main/java/org/a2aproject/sdk/tra |
| CVE-2026-111763 | Awaiting Analysis | 未確認 | CWE-522 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, a malicious or compromised remote agent can cause the default JDK-based client to fo |
| CVE-2026-111764 | Awaiting Analysis | 未確認 | CWE-1188, CWE-862 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore configuration performs no authorization on task reads: |
| CVE-2026-111765 | Awaiting Analysis | 未確認 | CWE-522 | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Starting in version 1.3.0.Final and prior to version 1.3.2.Final, the AndroidA2AHttpClient synchronous POS |
| CVE-2026-111766 | Awaiting Analysis | 未確認 | CWE-400, CWE-407 | markdown-it is a Markdown parser. Prior to 14.3.3 and 15.0.3, when the html option or commonmark preset is enabled and the constructs occur inside a paragraph, attacker-controlled |
| CVE-2026-111767 | Deferred | 未確認 | CWE-639, CWE-862 | MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to before version 1.32.0, the experimental tasks feature (task |
| CVE-2026-111793 | Deferred | 未確認 | CWE-669 | Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted. This may allow an authenticated user to p |
| CVE-2026-111802 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in Nautilus. When a removable drive or disk image is unmounted or ejected, Nautilus prompts the user to empty the trash without verifying whether the trash directo |
| CVE-2026-111804 | Awaiting Analysis | 未確認 | CWE-416 | Apache Traffic Server's experimental wasm plugin has a use-after-free in its transaction-close handler and forwards unvalidated guest-supplied metric IDs to the internal stats API. |
| CVE-2026-111805 | Awaiting Analysis | 未確認 | CWE-400 | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a truncated HTTP/2 Content-Length value. This issue affects Apache Traffic Server: from 8.0.0 t |
| CVE-2026-111808 | Awaiting Analysis | 未確認 | CWE-191 | Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a malformed padded HTTP/2 DATA frame. This issue affects Apache Traffic Server: from 8.0.0 thro |
| CVE-2026-111809 | Awaiting Analysis | 未確認 | CWE-444 | Apache Traffic Server allows request smuggling via HEAD requests that carry Content-Length or Transfer-Encoding. This issue affects Apache Traffic Server: from 8.0.0 through 8.1 |
| CVE-2026-111810 | Awaiting Analysis | 未確認 | CWE-400 | Apache Traffic Server 9.2.15, 10.1.4 and 10.2.0 write one unthrottled diagnostic log line for every internal @ header they strip, so a request carrying many such headers makes the |
| CVE-2026-111811 | Awaiting Analysis | 未確認 | CWE-306 | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache. This issue affects Apache Traffic Serv |
| CVE-2026-111812 | Awaiting Analysis | 未確認 | CWE-863 | Apache Traffic Server's origin_server_auth plugin lets a client force signing of attacker-chosen AWS request headers under the proxy's own credentials. This issue affects Apache |
| CVE-2026-111813 | Awaiting Analysis | 未確認 | CWE-88 | Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned) configuration. This issue affec |
| CVE-2026-111814 | Awaiting Analysis | 未確認 | CWE-295 | Apache Traffic Server's default outbound session-sharing policy can reuse a pooled TLS session authenticated with one client certificate for a transaction configured to present a d |
| CVE-2026-111815 | Awaiting Analysis | 未確認 | CWE-295 | Apache Traffic Server can resume a TLS session across SNI virtual hosts without re-verifying a client certificate required by the resumed host's verify_client STRICT policy. Thi |
| CVE-2026-111816 | Awaiting Analysis | 未確認 | CWE-444 | Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection pa |
| CVE-2026-111817 | Awaiting Analysis | 未確認 | CWE-400 | Apache Traffic Server can stall a chunked transfer that it passes through with its trailers removed (proxy.config.http.drop_chunked_trailers) until the connection times out, becaus |
| CVE-2026-111823 | Deferred | 未確認 | CWE-390 | Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider. |
| CVE-2026-111828 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in Mamunur Rashid Classified Listing classified-listing allows Accessing Functionality Not Properly Constrained by |
| CVE-2026-111829 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WP Mailster WP Mailster wp-mailster allows PHP Local File I |
| CVE-2026-111830 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Mailster WP Mailster wp-mailster allows Stored XSS.This issue affects WP Ma |
| CVE-2026-111831 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP ManageNinja LLC FluentForm fluentform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FluentFor |
| CVE-2026-111832 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a Web Shell to a Web Server.This issue affects WP Mailster: from |
| CVE-2026-111833 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold Grid weForms weforms allows Path Traversal.This issue affects weForms: from n/a |
| CVE-2026-111834 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web Shell to a Web Server.This issue affects Mang Board WP: from |
| CVE-2026-111835 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-111836 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP ManageNinja LLC FluentCommunity fluent-community allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-111837 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker Contest Gallery contest-gallery allows Stored XSS.This issue |
| CVE-2026-111838 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk ThemeHunk Customizer themehunk-customizer allows Reflected XSS.This |
| CVE-2026-111839 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-111840 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Reflected |
| CVE-2026-111842 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect |
| CVE-2026-111843 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes Rootblox rootblox allows Stored XSS.This issue affects Rootblox: fr |
| CVE-2026-111844 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brizy Brizy brizy allows Stored XSS.This issue affects Brizy: 2.8.23. |
| CVE-2026-111845 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Level |
| CVE-2026-111847 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-111848 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Reflected XSS.This issue affects Geo |
| CVE-2026-111849 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp |
| CVE-2026-111851 | Deferred | 未確認 | CWE-470 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Code Injection.This |
| CVE-2026-111852 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Blind SQL Injection.This iss |
| CVE-2026-111853 | Deferred | 未確認 | CWE-78 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. An OS command injection vulnerability exists in the FILESystem:MOUNT:DRIve SCPI command handler. Insufficie |
| CVE-2026-111854 | Awaiting Analysis | 未確認 | CWE-22 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or |
| CVE-2026-111855 | Awaiting Analysis | 未確認 | CWE-22 | An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability exists in the web management interface of the device. Insufficient validatio |
| CVE-2026-111862 | Deferred | 未確認 | CWE-506 | Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and Oct |
| CVE-2026-111865 | Deferred | 未確認 | CWE-94, CWE-95 | A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b. This affects the function eval of the file ultralytics/nn/autobackend.py of the |
| CVE-2026-111866 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4. This impacts the function cache/del_cache/arr2sql of the file func.php. This man |
| CVE-2026-111868 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was determined in datastax pulsar-jms up to 9.0.3. This issue affects the function decode of the file pulsar-jms/src/main/java/com/datastax/oss/pulsar/jms/messages/ |
| CVE-2026-111869 | Deferred | 未確認 | CWE-20, CWE-807 | A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For lead |
| CVE-2026-111870 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The affected element is the function isAdmin of the |
| CVE-2026-111871 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is an unknown function of the file q |
| CVE-2026-111872 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This affects the function MySQLDB::valid/MySQ |
| CVE-2026-111873 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This impacts the function MySQLDB::topicslist of the file e |
| CVE-2026-111874 | Deferred | 未確認 | CWE-307, CWE-799 | A flaw has been found in OpenCATS 0.10.0. Affected is the function processLogin of the file modules/careers/CareersUI.php of the component Career Portal. This manipulation of the a |
| CVE-2026-111875 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability has been found in David-Crty Databasement up to 1.8.1. Affected by this vulnerability is an unknown functionality of the file app/Http/Requests/Api/V1/SaveScheduled |
| CVE-2026-111876 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was found in alexpasmantier television up to 0.15.9. Affected by this issue is the function Entry::output of the file television/channels/entry.rs. Performing a man |
| CVE-2026-111877 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in dext34-morgan Books4Cash up to a8d3e357db75c07ac5ffbadcbaee2aeb4db3e571. This affects an unknown part of the file search.php. Executing a manipula |
| CVE-2026-111879 | Awaiting Analysis | 未確認 | CWE-667 | DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock. open_data creates the table's lock file a |
| CVE-2026-111880 | Deferred | 未確認 | CWE-787 | FreeRDP versions from 2.0.0 before 3.32.0 contain a heap out-of-bounds write in the server hash-callback NTLM path that fails to validate the MIC offset. Unauthenticated attackers |
| CVE-2026-111881 | Awaiting Analysis | 未確認 | CWE-191 | FreeRDP from 3.14.1 before 3.32.0 contains an integer underflow in the WinPR BMP writer, where a mismatched stride calculation passes SIZE_MAX - 3 to Stream_Zero for sub-byte image |
| CVE-2026-111882 | Deferred | 未確認 | CWE-287 | phpMyFAQ 3.2.0-alpha before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows IdP-authenticated users to skip TOTP two-factor auth |
| CVE-2026-111883 | Awaiting Analysis | 未確認 | CWE-352 | Locust through 2.46.7 contains a cross-site request forgery vulnerability that allows remote attackers to stop load tests or reset statistics via GET requests to /stop and /stats/r |
| CVE-2026-111884 | Deferred | 未確認 | CWE-308 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta does not require the current password when changing an account e-mail in the user control panel (UserController::updateData, |
| CVE-2026-111885 | Deferred | 未確認 | CWE-1220 | phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in GroupController::deleteGroup() that omits privilege-level checks on target groups. Aut |
| CVE-2026-111886 | Deferred | 未確認 | CWE-307 | phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta lacks brute-force lockout in the removeTwofactorConfig() 2FA removal endpoint, allowing authenticated attackers to guess TOTP codes wi |
| CVE-2026-111887 | Deferred | 未確認 | CWE-204 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that allows unauthenticated attackers to confirm registered display names and |
| CVE-2026-111888 | Deferred | 未確認 | CWE-863 | phpMyFAQ from 4.0.0 before 4.1.9 contains an incorrect authorization vulnerability that allows delegated admins lacking the editnews right to modify news by calling PUT /admin/api/ |
| CVE-2026-111889 | Deferred | 未確認 | CWE-862 | phpMyFAQ from 4.1.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a missing authorization vulnerability in the admin dashboard that allows authenticated users without adm |
| CVE-2026-111890 | Deferred | 未確認 | CWE-269 | phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in UserController::updateUserRights that drops per-right language restrictions when righ |
| CVE-2026-111891 | Deferred | 未確認 | CWE-269 | phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission API, whose updatePermissions and updateMembers endpoints check h |
| CVE-2026-111892 | Deferred | 未確認 | CWE-307 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and user/password/reset endpoints. Unauthenticated attackers can se |
| CVE-2026-111893 | Deferred | 未確認 | CWE-269 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in GroupController::saveCategoryRestrictions() that lets delegated administrators assign catego |
| CVE-2026-111894 | Deferred | 未確認 | CWE-79 | phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability that allows authenticated content authors to inject JavaScript by |
| CVE-2026-111895 | Deferred | 未確認 | CWE-287 | phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID login flow, which links users by the mutable preferred_username |
| CVE-2026-111896 | Deferred | 未確認 | CWE-182 | phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows FAQ editors to store executable SVG files. Attackers ca |
| CVE-2026-111897 | Deferred | 未確認 | CWE-862 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted editors to manage attachments of FAQs outside their categories |
| CVE-2026-111898 | Deferred | 未確認 | CWE-287 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to take over local accounts by matching preferred_username or emai |
| CVE-2026-111899 | Deferred | 未確認 | CWE-918 | KitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated household members to bypass IP filtering via a second unfi |
| CVE-2026-111900 | Deferred | 未確認 | CWE-863 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in attachment.php that fails to verify whether an attachment's parent FAQ i |
| CVE-2026-111901 | Deferred | 未確認 | CWE-400 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the unauthenticated faqs and search API endpoints. Attackers can send concurre |
| CVE-2026-111902 | Deferred | 未確認 | CWE-639 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that treats a missing FAQ translation as visible to unauthenticate |
| CVE-2026-111903 | Deferred | 未確認 | CWE-79 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users with FAQ_EDIT permission to bypass sanitization using |
| CVE-2026-111904 | Deferred | 未確認 | CWE-200 | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated attackers to read hidden open questions due to an inverted api.o |
| CVE-2026-111905 | Deferred | 未確認 | CWE-639 | phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference vulnerability in GET /admin/api/user/data/{userId}, which returns any use |
| CVE-2026-111906 | Deferred | 未確認 | CWE-352 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the Elasticsearch and OpenSearch administration API endpoints, which |
| CVE-2026-111907 | Deferred | 未確認 | CWE-352 | phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database endpoint, which executes database migrations without validati |
| CVE-2026-111908 | Deferred | 未確認 | CWE-639 | phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization vulnerability in the PUT /api/v3.1/faq/update endpoint, which checks only |
| CVE-2026-111909 | Deferred | 未確認 | CWE-269 | phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated non-superadmin users with delete_user permission to delete su |
| CVE-2026-111910 | Deferred | 未確認 | CWE-862 | phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in attachment.php that allows attackers to download attachments of restricted |
| CVE-2026-111911 | Deferred | 未確認 | CWE-287 | phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account without authentication or challe |
| CVE-2026-111912 | Deferred | 未確認 | CWE-639 | Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic() that allows authenticated members to modify other users' fo |
| CVE-2026-111913 | Deferred | 未確認 | CWE-285 | Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to export lists despite export restrictions by requesting mode=pdfl. |
| CVE-2026-111914 | Deferred | 未確認 | CWE-862 | Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in modules/inventory/inventory_data.php that allows authenticated users to bypass the inventory_mod |
| CVE-2026-111915 | Deferred | 未確認 | CWE-22 | Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Att |
| CVE-2026-111916 | Deferred | 未確認 | CWE-862 | Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view role-restricted weblinks because rss/links.php omits the catego |
| CVE-2026-111917 | Deferred | 未確認 | CWE-613 | Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep WebSocket access after revocation because handleAuth never checks the |
| CVE-2026-111918 | Deferred | 未確認 | CWE-863 | Vikunja from 1.0.0-rc0 before 2.7.0 contains an improper authorization vulnerability in RecalculateTaskPositions that allows authenticated users with zero accessible projects to wr |
| CVE-2026-111919 | Deferred | 未確認 | CWE-613 | Vikunja 0.22.0 before 2.7.0 contains an improper access revocation vulnerability that allows removed collaborators to keep receiving project data through webhooks they created. For |
| CVE-2026-111920 | Deferred | 未確認 | CWE-269 | Vikunja 2.6.0 contains a broken access control flaw in getProjectAccessForUser (pkg/models/project_access.go), which resolves a user's effective project permission as the maximum o |
| CVE-2026-111921 | Deferred | 未確認 | CWE-863 | Vikunja 0.13.0 before 2.7.0 contains an incorrect authorization vulnerability that allows project members with Write permission to delete admin-tier link shares because the delete |
| CVE-2026-111922 | Deferred | 未確認 | CWE-942 | Vikunja from 2.2.0 before 2.7.0 contains a permissive CORS configuration that trusts every localhost and 127.0.0.1 port with credentials, even when service.publicurl is set. Attack |
| CVE-2026-111923 | Deferred | 未確認 | CWE-674 | Fleet before 4.89.0 contains an unbounded recursion vulnerability in Apple MDM enrollment property list parsing that allows unauthenticated attackers to crash the server. Attackers |
| CVE-2026-111924 | Awaiting Analysis | 未確認 | CWE-409 | Fleet before 4.83.0 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server memory by sending gzip-compressed request bodies. Attackers c |
| CVE-2026-111925 | Deferred | 未確認 | CWE-22 | Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/media_dirs because FileLibraryProvider.lookup() l |
| CVE-2026-111926 | Awaiting Analysis | 未確認 | CWE-200 | Coder from 2.10.0 before 2.34.8 has an unauthenticated agent debug HTTP server on 127.0.0.1:2113 whose /debug/manifest handler returns the full agent manifest, including template-p |
| CVE-2026-111927 | Awaiting Analysis | 未確認 | CWE-522 | Coder before 2.29.20, 2.33.0 before 2.33.12, 2.34.0 before 2.34.8, and 2.35.0 before 2.35.4 contains an improper hostname validation flaw in GetWorkspaceProxyByHostname whose SIMIL |
| CVE-2026-111928 | Awaiting Analysis | 未確認 | CWE-863 | Coder from 2.0.0 before 2.34.8 contains an incorrect authorization vulnerability in the acl_allow rule of coderd/rbac/policy.rego, which does not verify organization membership for |
| CVE-2026-111929 | Awaiting Analysis | 未確認 | CWE-863 | Coder from 2.30.0 before 2.34.8 contains an authorization bypass vulnerability in the provisioner daemon DownloadFile gRPC handler that allows authenticated provisioner daemons to |
| CVE-2026-111930 | Awaiting Analysis | 未確認 | CWE-200 | Coder from 2.26.0 before 2.34.8 contains an incorrect authorization flaw in the GET /api/v2/workspaces/{id}/acl endpoint, which checks only workspace read access and then fetches g |
| CVE-2026-111931 | Awaiting Analysis | 未確認 | CWE-601 | Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values |
| CVE-2026-111932 | Awaiting Analysis | 未確認 | CWE-79 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a stored HTML injection vulnerability because the ApplicationName and LogoURL ap |
| CVE-2026-111933 | Awaiting Analysis | 未確認 | CWE-203 | Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enumeration vulnerability because userpassword.Compare() substitutes a pl |
| CVE-2026-111934 | Awaiting Analysis | 未確認 | CWE-348 | Coder before 2.34.7 contains an IP spoofing vulnerability in the ExtractRealIPAddress middleware that trusts the leftmost, client-supplied X-Forwarded-For value instead of the clie |
| CVE-2026-111935 | Deferred | 未確認 | CWE-73 | NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that allows attackers to read local image files via unvalidated synced sourceU |
| CVE-2026-111936 | Deferred | 未確認 | CWE-918 | Sigma File Manager through 2.2.0 contains a server-side request forgery vulnerability because validate_remote_url() in security.rs never checks resolved IP addresses for extension |
| CVE-2026-111937 | Deferred | 未確認 | CWE-862 | Frappe CRM before 1.81.2 contains a missing authorization vulnerability that allows authenticated Sales Users to access other users' CRM Notification records due to absent permissi |
| CVE-2026-111938 | Deferred | 未確認 | CWE-862 | Frappe CRM before 1.74.0 contains a missing authorization vulnerability that allows authenticated Sales Users to modify other users' call logs by supplying arbitrary call_sid value |
| CVE-2026-111939 | Deferred | 未確認 | CWE-639 | Frappe Helpdesk before 1.26.0 contains an authorization bypass vulnerability that allows authenticated portal users to create tickets impersonating other customers by supplying a r |
| CVE-2026-111942 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in hrisikeshpal Blood_Bank_Management_System 1.0.0. Impacted is an unknown function of the file /abs.php. This manipulation of the argument Search ca |
| CVE-2026-111943 | Awaiting Analysis | 未確認 | On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against | |
| CVE-2026-111946 | Deferred | 未確認 | CWE-497 | Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag header. When the response body is a filehandle and the file_etag op |
| CVE-2026-111947 | Deferred | 未確認 | CWE-639 | The Pricing Table WordPress Plugin WordPress plugin before 4.1.3 does not perform authorisation checks when duplicating a legacy pricing table, allowing users with the contributor |
| CVE-2026-111948 | Deferred | 未確認 | CWE-79 | The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a JavaScript context on one of its admin pages, leading to Refl |
| CVE-2026-111949 | Deferred | 未確認 | CWE-287 | The miniOrange 2FA WordPress plugin before 6.3.1 does not prevent a pending passkey login from registering an additional passkey on an account that already has one configured, all |
| CVE-2026-111955 | Deferred | 未確認 | CWE-287 | The WholesaleX WordPress plugin before 3.0.9 does not check that a stored account confirmation code is set before comparing it with the one supplied in a request, allowing unauthe |
| CVE-2026-111956 | Deferred | 未確認 | CWE-200 | The WholesaleX WordPress plugin before 3.0.9 does not protect or remove the user-import file it keeps in a publicly accessible location under a predictable name, allowing unauthen |
| CVE-2026-111957 | Deferred | 未確認 | CWE-863 | The SUMIT Payment Gateway for WooCommerce WordPress plugin before 4.0.0 does not bind the payment it confirms with the provider to the order being completed, nor check the payment |
| CVE-2026-111958 | Deferred | 未確認 | CWE-287 | The Royal MCP WordPress plugin before 1.5.7 does not limit a preview-link token to the single preview it was issued for, so any party that obtains a valid token is authenticated a |
| CVE-2026-111965 | Deferred | 未確認 | CWE-693 | The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment submission paths, allowing authenticated users to bypass the ant |
| CVE-2026-111966 | Deferred | 未確認 | CWE-79 | The User Profile Builder WordPress plugin before 4.0.5 does not sanitise and escape one of its shortcode attributes before outputting it back in a redirect message, which could al |
| CVE-2026-111971 | Deferred | 未確認 | CWE-79 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not sanitise and escape collection and gallery names before storing them and outputting them in an |
| CVE-2026-111972 | Deferred | 未確認 | CWE-639 | The Photo Engine (Media Organizer & Lightroom) WordPress plugin before 6.5.8 does not verify that a user is authorised to act on the targeted media attachment, allowing authenticat |
| CVE-2026-111982 | Deferred | 未確認 | CWE-269 | The User Profile Builder WordPress plugin before 4.0.5 does not verify that a user is authorized to edit the specific account selected on its front-end Edit Profile form, allowing |
| CVE-2026-111984 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of the comp |
| CVE-2026-111985 | Deferred | 未確認 | CWE-400, CWE-770 | A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of the com |
| CVE-2026-111986 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the component Mod |
| CVE-2026-111987 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the file modul |
| CVE-2026-111988 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in dyad-sh dyad up to 1.16.0. Affected by this issue is some unknown functionality of the component OAuth Callback Handler. Performing a manipul |
| CVE-2026-111990 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in kishan0725 Hospital Management System up to 777fda46b77a820977a5ba616283dbfbc40bf7e1. This affects the function mysqli_query of the file admin-pan |
| CVE-2026-111991 | Deferred | 未確認 | CWE-74, CWE-94 | A security vulnerability has been detected in WongKinYiu yolov9 0.1. This vulnerability affects the function DetectMultiBackend.__init__ of the file models/common.py of the compone |
| CVE-2026-111992 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. This issue affects the function Exam::startExam of the file |
| CVE-2026-111993 | Deferred | 未確認 | CWE-310, CWE-312 | A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java |
| CVE-2026-111997 | Awaiting Analysis | 未確認 | CWE-1333 | ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that |
| CVE-2026-111998 | Deferred | 未確認 | CWE-1392 | Vanus 0.8.0 through 0.9.0 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain cluster-admin access by using the hardcoded admin token. |
| CVE-2026-111999 | Deferred | 未確認 | CWE-306 | Vanus 0.8.0 through 0.9.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers to publish events to any eventbus through the gateway CloudEv |
| CVE-2026-112000 | Deferred | 未確認 | CWE-862 | Vanus 0.8.0 through 0.9.0 contains a missing authorization vulnerability in the gateway that allows any authenticated user to call Subscribe, Ack, and unregistered methods without |
| CVE-2026-112001 | Deferred | 未確認 | CWE-863 | ProjectSend 2.0.0 before 2.7.0 contains an incorrect authorization vulnerability that allows restricted API token holders to change the token owner's credentials via PATCH /api/v1/ |
| CVE-2026-112002 | Deferred | 未確認 | CWE-620 | ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of Social-provisioned accounts set local pass |
| CVE-2026-112003 | Deferred | 未確認 | CWE-180 | ProjectSend 2.0.0 before 2.7.0 contains a path validation flaw in OrphanFileScanner::isOrphan() that allows staff with import_orphans permission to treat tracked files as orphans. |
| CVE-2026-112004 | Deferred | 未確認 | CWE-639 | Teable before 2026-10-12T12-45-53Z.3331 contains an authorization bypass vulnerability that allows authenticated users to rename folders in other bases by supplying a foreign folde |
| CVE-2026-112005 | Deferred | 未確認 | CWE-22 | WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functions thro |
| CVE-2026-112006 | Deferred | 未確認 | CWE-295 | OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTEL_EXPORTER |
| CVE-2026-112007 | Deferred | 未確認 | CWE-787 | Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmt_ult_load_song() in fmt/ult.c that fails to clamp the one-byte sample count to MAX_SAMPLES. |
| CVE-2026-112008 | Deferred | 未確認 | CWE-131 | libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mng_read_ordr() that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-b |
| CVE-2026-112009 | Deferred | 未確認 | CWE-125 | smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted sys |
| CVE-2026-112010 | Deferred | 未確認 | CWE-191 | smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet len |
| CVE-2026-112011 | Deferred | 未確認 | CWE-190 | libtta through 2.3 contains an integer overflow vulnerability in tta_decoder_init_get_info() that allows attackers to cause a heap buffer overflow on 32-bit builds via unvalidated |
| CVE-2026-112012 | Deferred | 未確認 | CWE-787 | libtta through 2.3 contains a stack out-of-bounds read and write vulnerability in tta_decoder_process_stream() and tta_decoder_process_frame() because header checks never reject a |
| CVE-2026-112013 | Deferred | 未確認 | CWE-369 | libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. |
| CVE-2026-112014 | Deferred | 未確認 | CWE-321 | LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Att |
| CVE-2026-112015 | Deferred | 未確認 | CWE-22 | Omnigent 0.3.0 before 0.14.0 contains a path traversal vulnerability that allows authenticated users to escape the workspace by setting os_env.cwd on nested sub-agents. Attackers c |
| CVE-2026-112016 | Deferred | 未確認 | CWE-306 | Netcore NR256CN through 1.5.140116 contains an unauthenticated file write vulnerability in the Boa-derived /bin/boa web server that allows remote attackers to overwrite update and |
| CVE-2026-112017 | Deferred | 未確認 | CWE-89 | JeecgBoot before 3.9.5 contains an sql injection vulnerability that allows authenticated attackers to bypass the SqlInjectionUtil keyword blocklist by inserting newline characters |
| CVE-2026-112018 | Deferred | 未確認 | CWE-787 | cgltf through 1.15 contains a heap out-of-bounds write vulnerability in cgltf_accessor_unpack_floats() that allows attackers to write outside the output buffer via unchecked sparse |
| CVE-2026-112019 | Deferred | 未確認 | CWE-125 | cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the sparse values cursor by the base bufferView byteStride. Atta |
| CVE-2026-112020 | Deferred | 未確認 | CWE-125 | LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in lodepng_util.cpp that lacks bounds checks on decompressed IDAT d |
| CVE-2026-112021 | Deferred | 未確認 | CWE-122 | snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows unauthenticated remote attackers to corrupt heap memory by sending JSON s |
| CVE-2026-112025 | Deferred | 未確認 | CWE-266, CWE-284 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. This impacts an unknown function of the file App/ |
| CVE-2026-112026 | Deferred | 未確認 | CWE-326, CWE-916 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the function sha1 of the |
| CVE-2026-112027 | Deferred | 未確認 | CWE-200, CWE-538 | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this vulnerability is the function file |
| CVE-2026-112028 | Deferred | 未確認 | CWE-840 | A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected by this issue is some unknown functionality of th |
| CVE-2026-112029 | Deferred | 未確認 | CWE-326, CWE-916 | A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. S |
| CVE-2026-112030 | Deferred | 未確認 | CWE-1393 | A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation resu |
| CVE-2026-112031 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file main/inc/lib/TicketManager.php of the |
| CVE-2026-112032 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16. Impacted is the function Util::search of the file classes/util.php. The manipulation leads to sql injection. I |
| CVE-2026-112033 | Deferred | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.16. The affected element is the function admin_repwd/admin_repwd_act of the file controllers/system.php of th |
| CVE-2026-112034 | Deferred | 未確認 | CWE-601 | A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. The impacted element is the function IController::redirect of the file plugins/_userInfo/_userInfo.php of the |
| CVE-2026-112035 | Deferred | 未確認 | CWE-640 | A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. This affects the function send_message_mobile of the file controllers/simple.php. Such manipulatio |
| CVE-2026-112036 | Deferred | 未確認 | CWE-119, CWE-415 | A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function free_char_list of the file source/pdf/pdf-xref.c of the component Signature Locking. Performin |
| CVE-2026-112037 | Deferred | 未確認 | CWE-287, CWE-295 | A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCorePlugin/lib/vendor/gapi/gapi.class.php o |
| CVE-2026-112038 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/we |
| CVE-2026-112039 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the file dmAdminPlugin/modules/dmCon |
| CVE-2026-112040 | Deferred | 未確認 | CWE-601 | A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modul |
| CVE-2026-112041 | Deferred | 未確認 | CWE-331, CWE-338 | A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugi |
| CVE-2026-112042 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function dmBaseLinkTag::text of the file dmCorePlugi |
| CVE-2026-112043 | Deferred | 未確認 | CWE-285, CWE-639 | A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebhookProcedure of the file packages/trpc/server/routers/viewer/webhook/ut |
| CVE-2026-112044 | Deferred | 未確認 | CWE-287 | A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. The affected element is the function AddApplicationServices of the file s |
| CVE-2026-112045 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in donetick up to 0.1.82. The impacted element is the function CanDeleteHistory of the file internal/chore/model/model.go of the component History Dele |
| CVE-2026-112046 | Awaiting Analysis | 未確認 | CWE-835 | OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Att |
| CVE-2026-112047 | Deferred | 未確認 | CWE-863 | OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project members to act on clusters outside their scope by exploiting pro |
| CVE-2026-112048 | Deferred | 未確認 | CWE-789 | libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger uncontrolled interior-ring allocation via crafted geometry BL |
| CVE-2026-112049 | Deferred | 未確認 | CWE-22 | Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows attackers to write files outside the install directory via craf |
| CVE-2026-112050 | Deferred | 未確認 | CWE-352 | Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a victim's client to their account because performGitHubWebOAuth |
| CVE-2026-112051 | Deferred | 未確認 | CWE-22 | Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to write and delete arbitrary .json files via backslash sequences |
| CVE-2026-112052 | Deferred | 未確認 | CWE-190 | libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of ParseWkbLine and related parsers in gg_wkb.c, allowing out-of |
| CVE-2026-112053 | Deferred | 未確認 | CWE-125 | Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read past a static quantiser table by supplying unvalidated wavele |
| CVE-2026-112054 | Deferred | 未確認 | CWE-369 | Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash applications by supplying a zero slice_bytes_denom or slice count |
| CVE-2026-112055 | Deferred | 未確認 | CWE-125 | wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP caused by an unvalidated FKP run count. Attackers can supply a cr |
| CVE-2026-112056 | Deferred | 未確認 | CWE-125 | wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word st |
| CVE-2026-112057 | Deferred | 未確認 | CWE-125 | libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows attackers to read beyond the part-of-title array by supplying |
| CVE-2026-112058 | Awaiting Analysis | 未確認 | CWE-125 | VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash applications by supplying an invalid JumpTT title number che |
| CVE-2026-112059 | Deferred | 未確認 | CWE-787 | libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating the schema byte size to 16 bits when sizing the point buffer. |
| CVE-2026-112060 | Deferred | 未確認 | CWE-787 | librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because AMF3_Decode ignores AMF3 property decode failures. Malicious RTMP |
| CVE-2026-112061 | Deferred | 未確認 | CWE-125 | librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0 strict-array element count before checking that four bytes rema |
| CVE-2026-112062 | Awaiting Analysis | 未確認 | CWE-121 | lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with |
| CVE-2026-112063 | Deferred | 未確認 | CWE-121 | libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP servers to overflow a 128-byte stack buffer by sending an over |
| CVE-2026-112064 | Deferred | 未確認 | CWE-89 | The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation. Only the fi |
| CVE-2026-112065 | Deferred | 未確認 | CWE-862 | The routes that provide consent history and statistics data did not check whether the backend user had access to the module or to the requested page. Any authenticated backend user |
| CVE-2026-112066 | Deferred | 未確認 | CWE-862 | The JSON import of the cookie consent configuration did not respect the backend user's permissions. Non-admin backend users with access to the module could import a configuration t |
| CVE-2026-112067 | Deferred | 未確認 | CWE-656, CWE-804 | The extension hides the correct answer to each CAPTCHA inside the image data of the CAPTCHA itself. Anyone who can request a CAPTCHA image can read the answer from it and submit it |
| CVE-2026-112068 | Deferred | 未確認 | CWE-639 | The backend module does not check whether a backend user has access to the requested site. Users with access to the module can therefore open the analytics dashboard of any site. |
| CVE-2026-112069 | Deferred | 未確認 | CWE-862 | The extension no longer applied its access protection to files in file storages that use a non-default relative base path. These files were served directly by the web server, witho |
| CVE-2026-112070 | Deferred | 未確認 | CWE-862 | The AJAX routes of the extension do not check whether a backend user has access to the related module or dashboard widget. Any backend user can therefore retrieve analytics data of |
| CVE-2026-112071 | Deferred | 未確認 | CWE-862 | The order cancellation function accepts an order identifier from the request and acts on that order without checking that the caller owns it. Any site visitor can set orders that a |
| CVE-2026-112073 | Deferred | 未確認 | CWE-119, CWE-125 | A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/ma |
| CVE-2026-112074 | Deferred | 未確認 | CWE-189, CWE-190 | A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pi |
| CVE-2026-112075 | Deferred | 未確認 | CWE-470 | A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransformer._is_transformer_module_ref of the file unsloth/models/sent |
| CVE-2026-112076 | Deferred | 未確認 | CWE-918 | A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. This vulnerability affects the function DownloadQueue.__write_feed_metadata_sync of the file app/ytd |
| CVE-2026-112077 | Deferred | 未確認 | CWE-693 | A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. This issue affects the function r_core_cmd_str_pipe in the library libr/core/rtr_http.inc.c of the component HTTP San |
| CVE-2026-112078 | Deferred | 未確認 | CWE-74, CWE-94 | A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.260718. Impacted is the function change_info_ of the file webui.py. Executing a manipulation o |
| CVE-2026-112079 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.64. The affected element is the function load_word2vec_as_vocab_tensor of the file hanlp/utils/torch_util.py. The ma |
| CVE-2026-112080 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. The impacted element is the function get_class_from_dynamic_module of the fi |
| CVE-2026-112081 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. This affects the function hanlp.load of the file plugins/hanlp_common/hanlp_common/reflection.py of the componen |
| CVE-2026-112082 | Deferred | 未確認 | CWE-404 | A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribu |
| CVE-2026-112083 | Deferred | 未確認 | CWE-404 | A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_ |
| CVE-2026-112085 | Undergoing Analysis | 未確認 | CWE-1385, CWE-346 | webpack-dev-server is a development server that provides live reloading for webpack projects. In versions before 5.2.7 and in version 6.0.0, when a proxy entry is configured to for |
| CVE-2026-112086 | Deferred | 未確認 | CWE-20, CWE-502 | A vulnerability was found in ESPnet up to 202610.post2. This affects the function build_model of the file espnet3/publication/inference_model.py of the component Inference Model Ha |
| CVE-2026-112087 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file confirm.php. This manipulation of the argumen |
| CVE-2026-112088 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This affects the function mysqli |
| CVE-2026-112089 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This vulnerability a |
| CVE-2026-112090 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. This issue affects the function my |
| CVE-2026-112091 | Deferred | 未確認 | CWE-200, CWE-284 | A flaw has been found in Dav-ee dairy-management-system 31ace9692d1e1e6d64339a42c463b361319c615c/f31a584c3330c013b61f8b0306d9e0849c6d693d. Impacted is an unknown function of the fi |
| CVE-2026-112092 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The affected element is the function echo of the file doctorre |
| CVE-2026-112093 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. The impacted element is an unknown function of the fi |
| CVE-2026-112094 | Deferred | 未確認 | CWE-119, CWE-416 | A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after |
| CVE-2026-112095 | Deferred | 未確認 | CWE-79, CWE-94 | A flaw has been found in SourceCodester Inventory System 1.0. This affects an unknown part of the file /api/products_handler.php?action=save of the component Product Management. Ex |
| CVE-2026-112096 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in SourceCodester Inventory System 1.0. This vulnerability affects unknown code of the file /api/transactions_handler.php?action=save_purchase of the |
| CVE-2026-112097 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was found in SourceCodester Inventory System 1.0. This issue affects some unknown processing of the file /api/transactions_handler.php?action=save_sale of the compo |
| CVE-2026-112098 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resol |
| CVE-2026-112100 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.__init__ of the file deeppavlov/models/preprocessors/multitask_pre |
| CVE-2026-112101 | Deferred | 未確認 | CWE-345, CWE-346 | A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. The affected element is an unknown function of the file /BlackBeltTechnology/pi-agent-dashboar |
| CVE-2026-112102 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was detected in AXA Group NLP.js 4.27.0. This impacts the function Evaluator.walkFunction of the file packages/evaluator/src/evaluator.js of the component Condition |
| CVE-2026-112103 | Deferred | 未確認 | CWE-287, CWE-295 | A vulnerability has been found in f3-factory fatfree-core up to 3.9.2. This vulnerability affects the function _curl of the file web.php of the component HTTP Client. Such manipula |
| CVE-2026-112104 | Deferred | 未確認 | CWE-287, CWE-306 | A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function of the file database.ts of the component Remote Control Server. Execu |
| CVE-2026-112105 | Deferred | 未確認 | CWE-287, CWE-295 | A vulnerability has been found in GlitterWare Passy up to 1.10.1. The affected element is the function MyHttpOverrides in the library lib/main.dart of the component TLS Handler. Su |
| CVE-2026-112106 | Deferred | 未確認 | CWE-287, CWE-295 | A security vulnerability has been detected in TufayelLUS TikTok-Video-Downloader-PHP up to c4230497bb23dd9c1f81456fe8a982d951feac0d. Affected by this issue is some unknown function |
| CVE-2026-112107 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weig |
| CVE-2026-112108 | Deferred | 未確認 | CWE-119, CWE-120 | A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsi |
| CVE-2026-112111 | Deferred | 未確認 | CWE-79 | The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. The bs_tcontent() shortcode handler in i |
| CVE-2026-112112 | Deferred | 未確認 | CWE-1284 | An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address spac |
| CVE-2026-112138 | Deferred | 未確認 | CWE-22 | A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of |
| CVE-2026-112139 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown function of the file admindoc |
| CVE-2026-112140 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was found in llSourcell Doctor-Dignity up to 3f2ffb6c892f13b50a708d05900d3227acb40ded. This impacts the function _get_lib_module of the file python/mlc_chat/chat_mo |
| CVE-2026-112141 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected is the function mysqli_query of the file doedit.php |
| CVE-2026-112142 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this vulnerability is an unknown functionality of |
| CVE-2026-112143 | Deferred | 未確認 | CWE-287, CWE-306 | A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Pe |
| CVE-2026-112144 | Deferred | 未確認 | CWE-425, CWE-552 | A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. This affects an unknown part of the file project.sql. Executi |
| CVE-2026-112145 | Deferred | 未確認 | CWE-470 | A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager._load_fn of the file sr |
| CVE-2026-112146 | Deferred | 未確認 | CWE-259, CWE-798 | A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the component MQTT Broker. The manipula |
| CVE-2026-112147 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of |
| CVE-2026-112148 | Deferred | 未確認 | CWE-79 | A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows an attacker to execute arbitrary JavaScript |
| CVE-2026-112149 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function move_uploaded_file of the file home.p |
| CVE-2026-112150 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. Th |
| CVE-2026-112151 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of t |
| CVE-2026-112152 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this issue is the function mysqli_query |
| CVE-2026-112153 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function mysqli_error of the file Officers/addOf |
| CVE-2026-112157 | Deferred | 未確認 | CWE-400, CWE-404 | A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file Memory/src/server/http.ts of the |
| CVE-2026-112158 | Deferred | 未確認 | CWE-189, CWE-190 | A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to inte |
| CVE-2026-112159 | Deferred | 未確認 | CWE-77, CWE-78 | A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the arg |
| CVE-2026-112161 | Deferred | 未確認 | CWE-345 | MobaXterm Personal Edition (Portable) 26.4 GA extracts the CygUtils64.plugin file without first verifying its integrity. A local attacker with write permissions on this file can re |
| CVE-2026-112177 | Awaiting Analysis | 未確認 | CWE-648 | A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privi |
| CVE-2026-112178 | Deferred | 未確認 | CWE-862 | MISP contains an access control flaw in the proposal (shadow attribute) visibility logic. The authorization check accepted any attribute or object carrying one of the user's sharin |
| CVE-2026-112179 | Deferred | 未確認 | CWE-200 | In MISP, the event synchronization process contained a logic error in the preparation of event reports for remote push. The filtering of non-exportable tags was applied only once a |
| CVE-2026-112180 | Deferred | 未確認 | CWE-459 | MISP contains a data integrity flaw in its event deletion logic. When a user deletes an event, several associated records are not removed from the database, leaving them as orphane |
| CVE-2026-112183 | Deferred | 未確認 | CWE-74 | MISP contains a CSS injection vulnerability in the remote event preview feature. When a user previews an event from a linked MISP server, the colour value associated with each remo |
| CVE-2026-112184 | Deferred | 未確認 | CWE-79 | MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interface. Parameter names returned by the misp-modules service are rendered as raw HTML f |
| CVE-2026-112188 | Deferred | 未確認 | CWE-200, CWE-285 | MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve sensitive configuration data that should have been redacted. Th |
| CVE-2026-112190 | Deferred | 未確認 | CWE-200, CWE-215 | A security vulnerability has been detected in Webkul Aureus ERP up to 1.6.0. This issue affects some unknown processing of the file composer.json. Such manipulation leads to insert |
| CVE-2026-112192 | Deferred | 未確認 | CWE-200, CWE-862 | MISP contains a vulnerability in the handling of module plugin settings. When the server rebuilds module-supplied settings for API consumption, it drops the redacted and cli_only f |
| CVE-2026-112193 | Deferred | 未確認 | CWE-521 | A vulnerability was detected in Webkul Aureus ERP up to 1.6.0. Impacted is an unknown function of the file plugins/webkul/security/src/Filament/Resources/UserResource/Schemas/UserF |
| CVE-2026-112195 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in FusionPBX up to 5.4.4/5.5.7/5.6.5. The affected element is an unknown function of the file app/dialplans/resources/classes/dialplan.php of the component Di |
| CVE-2026-112199 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Wishlist yith-woocommerce-wishlist allows Stored XSS.Thi |
| CVE-2026-112202 | Awaiting Analysis | 未確認 | CWE-125 | Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images. With `gif_consolidate => 1`, palette indices from the image are used with |
| CVE-2026-112207 | Received | 未確認 | CWE-79 | The Download Monitor WordPress plugin before 5.3.4 does not properly validate that a clicked link belongs to the site before fetching it client-side and rendering part of the respo |
| CVE-2026-112210 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged syste |
| CVE-2026-112212 | Undergoing Analysis | 未確認 | CWE-444 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, an unauthe |
| CVE-2026-112214 | Awaiting Analysis | 未確認 | CWE-789 | A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size a heap allocation without |
| CVE-2026-112218 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic S |
| CVE-2026-112219 | Deferred | 未確認 | CWE-863 | The Download Monitor WordPress plugin before 5.3.5 does not correctly restrict management of the list of filesystem locations it may serve files from to network administrators on m |
| CVE-2026-112221 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Stored XSS.This issue affects SureCa |
| CVE-2026-112222 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Surfer: from n/a through 1 |
| CVE-2026-112230 | Deferred | 未確認 | CWE-862 | The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a maintenance routine that runs on unauthenticated requests, |
| CVE-2026-112237 | Deferred | 未確認 | CWE-918 | The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply the authorization check that pr |
| CVE-2026-112238 | Deferred | 未確認 | CWE-89 | The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote c |
| CVE-2026-112239 | Deferred | 未確認 | CWE-862, CWE-915 | The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the user's permissions nor limits which |
| CVE-2026-112240 | Deferred | 未確認 | CWE-338, CWE-639 | The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. A |
| CVE-2026-112241 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in Brainstorm Force SureCart surecart allows Authentication Abuse.This issue affects SureCart: from n/a through 4.9.5. |
| CVE-2026-112242 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Cozmoslabs Profile Builder profile-builder allows Privilege Escalation.This issue affects Profile Builder: from n/a through 4.0.4. |
| CVE-2026-112247 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in Wuxi Wubang Security Software Five-in-One Safety Production Management Information System up to 3.5. This affects an unknown function of the file |
| CVE-2026-112248 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in grandnode grandnode2 up to 2.3.0. This impacts the function ProductImportDataObject.PrepareProductPictures of the component Excel Impo |
| CVE-2026-112249 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in grandnode grandnode2 up to 2.3.0. Affected is the function Html.Raw of the file src/Web/Grand.Web/Views/Product/Product.Layout.Simple.cshtml of the |
| CVE-2026-112251 | Deferred | 未確認 | CWE-601 | A vulnerability was detected in antoinersx clawhost up to 0.0.45. This affects the function handleRequest of the file apps/clawhostgo/src/main/services/reverseProxy.ts of the compo |
| CVE-2026-112252 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System up to 3.5. Affected is the function xp_cmdshell o |
| CVE-2026-112254 | Deferred | 未確認 | CWE-918 | A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function _fetch_html of the file locations/services/property_url_importer.py |
| CVE-2026-112257 | Awaiting Analysis | 未確認 | CWE-121 | A flaw was found in GIMP. The PSD thumbnail resource loader performs a BGR-to-RGB channel swap with a fixed 3-byte stride and does not verify that the JPEG thumbnail is RGB. A craf |
| CVE-2026-112258 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in GIMP. The XCF loader can leave a dangling pointer in the linked-channels list when a linked channel is later destroyed via a selection property. Opening a craft |
| CVE-2026-112259 | Awaiting Analysis | 未確認 | CWE-476 | A flaw was found in GIMP. Importing a crafted SBZ palette without a color-model attribute can cause a NULL pointer dereference during string comparison, resulting in denial of serv |
| CVE-2026-112260 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in GIMP. Opening a crafted XCF with a malformed text-layer parasite can cause a heap out-of-bounds read, disclosing adjacent heap data into layer text and causing |
| CVE-2026-112261 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentia |
| CVE-2026-112262 | Deferred | 未確認 | CWE-862 | RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posix_fs sources an |
| CVE-2026-112263 | Deferred | 未確認 | CWE-78 | Television (tv) 0.15.0 through 0.15.9 contains an OS command injection vulnerability that allows attackers to run shell commands through improperly escaped single quotes in format_ |
| CVE-2026-112264 | Awaiting Analysis | 未確認 | CWE-78 | BentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by embedding newlines in docker.env mappi |
| CVE-2026-112265 | Deferred | 未確認 | CWE-345 | LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to inject forged Lark/Feishu events by skipping signature ch |
| CVE-2026-112266 | Deferred | 未確認 | CWE-187 | SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled |
| CVE-2026-112267 | Deferred | 未確認 | CWE-918 | SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests |
| CVE-2026-112268 | Deferred | 未確認 | CWE-863 | sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to access mesh HA management routes bec |
| CVE-2026-112269 | Deferred | 未確認 | CWE-770 | SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowing denial of service. |
| CVE-2026-112270 | Deferred | 未確認 | CWE-770 | SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handle_staging_rsp() that lets unauthenticated network-ad |
| CVE-2026-112271 | Deferred | 未確認 | CWE-125 | libdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a data block's declared length exc |
| CVE-2026-112272 | Deferred | 未確認 | CWE-125 | Libdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attackers to read past the EDID buffer via ove |
| CVE-2026-112273 | Deferred | 未確認 | CWE-125 | libtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past the packet buffer by sending a la |
| CVE-2026-112274 | Deferred | 未確認 | CWE-125 | libtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by supplying SOA data lacking NUL |
| CVE-2026-112275 | Deferred | 未確認 | CWE-787 | Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in converter/other/rast.c. Attackers can |
| CVE-2026-112276 | Deferred | 未確認 | CWE-125 | Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. A |
| CVE-2026-112277 | Deferred | 未確認 | CWE-125 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to crash clients by sending malformed 32 bp |
| CVE-2026-112278 | Deferred | 未確認 | CWE-125 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows malicious RDP servers to crash clients. Attackers can send |
| CVE-2026-112279 | Deferred | 未確認 | CWE-125 | rdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash clients via crafted revision-2 |
| CVE-2026-112280 | Deferred | 未確認 | CWE-122 | libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory via an oversized caption data un |
| CVE-2026-112281 | Deferred | 未確認 | CWE-121 | libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decoder.c that allows attackers to write past a fixed 256-ent |
| CVE-2026-112282 | Awaiting Analysis | 未確認 | CWE-125 | VideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by supplying a ClipInfo file with a |
| CVE-2026-112283 | Awaiting Analysis | 未確認 | CWE-789 | VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts the num_point field without bo |
| CVE-2026-112284 | Deferred | 未確認 | CWE-125 | libaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the 78-entry kLatinSpecialTable without an upper bound check. A |
| CVE-2026-112285 | Deferred | 未確認 | CWE-837 | Thelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to bypass coupon usage limits because usage is counted only w |
| CVE-2026-112286 | Deferred | 未確認 | CWE-639 | Krayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other users' quotes by bypassing per-use |
| CVE-2026-112287 | Deferred | 未確認 | CWE-639 | Krayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted authenticated users to manipulate o |
| CVE-2026-112288 | Deferred | 未確認 | CWE-918 | Krayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal addresses via DNS rebinding. Attacke |
| CVE-2026-112289 | Deferred | 未確認 | CWE-79 | Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.l |
| CVE-2026-112290 | Awaiting Analysis | 未確認 | CWE-79 | Intelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting vulnerability in ic-tree-item that re-par |
| CVE-2026-112291 | Deferred | 未確認 | CWE-862 | Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. |
| CVE-2026-112292 | Deferred | 未確認 | CWE-862 | CheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify and delete records because shipped PocketBase collection |
| CVE-2026-112293 | Deferred | 未確認 | CWE-862 | BoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner team members to manage billing because payment routes skip the |
| CVE-2026-112294 | Deferred | 未確認 | CWE-639 | FlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows authenticated users to modify other users' content rows because |
| CVE-2026-112295 | Deferred | 未確認 | CWE-915 | FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by submitting extra User bean fields |
| CVE-2026-112296 | Deferred | 未確認 | CWE-1392 | FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator access via the flycms account w |
| CVE-2026-112297 | Deferred | 未確認 | CWE-918 | A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12. The impacted element is the function LLMClient.chat of the file blueprints/api/llm.py of the component LLM Confi |
| CVE-2026-112299 | Deferred | 未確認 | CWE-918 | A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d. Affected is the function isUrlReachable of the file src/pages/Account/AlbumEditProces |
| CVE-2026-112300 | Deferred | 未確認 | CWE-1333, CWE-400 | A vulnerability was identified in DiffSK configobj up to 5.0.9. Affected by this vulnerability is the function _sectionmarker of the file configobj/__init__.py. The manipulation le |
| CVE-2026-112301 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of t |
| CVE-2026-112302 | Deferred | 未確認 | CWE-22 | A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction |
| CVE-2026-112303 | Deferred | 未確認 | CWE-522 | GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying attacker-controlled resource URLs i |
| CVE-2026-112304 | Deferred | 未確認 | CWE-502 | docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True. Attackers who con |
| CVE-2026-112305 | Deferred | 未確認 | CWE-915 | Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to override protected Ansible variables by supplying arbitra |
| CVE-2026-112306 | Deferred | 未確認 | CWE-89 | NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL() throug |
| CVE-2026-112307 | Deferred | 未確認 | CWE-94 | sqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing unescaped dollar signs. Attacker |
| CVE-2026-112308 | Awaiting Analysis | 未確認 | CWE-918 | crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal resources because it never applies |
| CVE-2026-112309 | Deferred | 未確認 | CWE-1321 | @rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inh |
| CVE-2026-112310 | Deferred | 未確認 | CWE-73 | docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, by |
| CVE-2026-112311 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF Extended ACF Extended acf-extended allows Path Traversal.This issue affects ACF |
| CVE-2026-112312 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ACF Extended ACF Extended acf-extended allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Extende |
| CVE-2026-112313 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ACF Extended ACF Extended acf-extended allows Stored XSS.This issue affects AC |
| CVE-2026-112326 | Undergoing Analysis | 未確認 | CWE-460 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have al |
| CVE-2026-112327 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects Amelia: from |
| CVE-2026-112328 | Deferred | 未確認 | CWE-862 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX handler that allows authenticated Teacher-role attacker |
| CVE-2026-112329 | Deferred | 未確認 | CWE-862 | The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save_new_message handler hooked on the init action, which validates only |
| CVE-2026-112330 | Deferred | 未確認 | CWE-755 | Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a m |
| CVE-2026-112331 | Deferred | 未確認 | CWE-755 | Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sen |
| CVE-2026-112332 | Deferred | 未確認 | CWE-755 | Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic t |
| CVE-2026-112333 | Deferred | 未確認 | CWE-79 | GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbi |
| CVE-2026-112342 | Deferred | 未確認 | CWE-863 | Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions a |
| CVE-2026-112358 | Deferred | 未確認 | CWE-918 | A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function get_img_from_url of the file ApiBillet/se |
| CVE-2026-112359 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Amauri.IO WPMobile.App wpappninja allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPMobile.App: fr |
| CVE-2026-112360 | Deferred | 未確認 | CWE-912 | A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The |
| CVE-2026-112361 | Deferred | 未確認 | CWE-693 | A vulnerability has been found in Dolibarr up to 23.0.2. The impacted element is an unknown function of the file htdocs/document.php of the component CSP. Such manipulation leads t |
| CVE-2026-112363 | Deferred | 未確認 | CWE-918 | Crawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers to bypass destination checks v |
| CVE-2026-112366 | Awaiting Analysis | 未確認 | CWE-1333 | Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patt |
| CVE-2026-112368 | Awaiting Analysis | 未確認 | CWE-674 | An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decode |
| CVE-2026-112370 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usrlist. Performing a manipulation results in os command inject |
| CVE-2026-112371 | Deferred | 未確認 | CWE-74, CWE-94 | A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of the component RPC Interface. Executing a manipulation of the |
| CVE-2026-112372 | Deferred | 未確認 | CWE-22 | A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path t |
| CVE-2026-112373 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based |
| CVE-2026-112377 | Deferred | 未確認 | CWE-346 | CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from a genuin |
| CVE-2026-112378 | Undergoing Analysis | 未確認 | CWE-348 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allo |
| CVE-2026-112379 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codepeople Contact Form Email contact-form-to-email allows Stored XSS.This iss |
| CVE-2026-112380 | Deferred | 未確認 | CWE-862, CWE-863 | Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an operator-configured WhatsApp group to control the operator's other |
| CVE-2026-112381 | Awaiting Analysis | 未確認 | CWE-476 | Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via half-close while a chunked origin response is being reparsed from a reen |
| CVE-2026-112390 | Analyzed | 未確認 | CWE-835 | Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determining the frame count of a MIC image. MicImageFile inherits TIFF frame tr |
| CVE-2026-112391 | Analyzed | 未確認 | CWE-835 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse without a limit while reading nested PDF objects. The parser follows attacke |
| CVE-2026-112392 | Undergoing Analysis | 未確認 | CWE-476 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-empty |
| CVE-2026-112393 | Undergoing Analysis | 未確認 | CWE-122 | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in _tiffWriteProc when saving compressed TIFF data through |
| CVE-2026-112394 | Undergoing Analysis | 未確認 | CWE-126 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row si |
| CVE-2026-112395 | Undergoing Analysis | 未確認 | CWE-122 | Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In _decodeTile, libtiff can r |
| CVE-2026-112396 | Undergoing Analysis | 未確認 | CWE-416 | Pillow is a Python imaging library. From 11.3.0 until 13.0.0, Pillow has a heap use-after-free when libtiff rejects a tag while encoding TIFF data to an in-memory buffer. When an a |
| CVE-2026-112397 | Undergoing Analysis | 未確認 | CWE-787 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's ImageMorph.MorphOp.apply() can access memory before a row buffer for a zero-width image. PPM and PGM input can create |
| CVE-2026-112398 | Undergoing Analysis | 未確認 | CWE-122, CWE-787 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix JPEG-tile decoder can write decoded scanlines beyond the allocated tile buffer. FlashPix (FPX) JPEG decoding |
| CVE-2026-112399 | Undergoing Analysis | 未確認 | CWE-789 | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background at the full canvas size before applying the decompression-bomb check. A |
| CVE-2026-112400 | Undergoing Analysis | 未確認 | CWE-400, CWE-770 | Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow can retain a rejected GIF frame size after a decompression-bomb exception. In GifImageFile._seek, a crafted GIF |
| CVE-2026-112401 | Undergoing Analysis | 未確認 | CWE-407 | Pillow is a Python imaging library. From 5.4.0 until 13.0.0, Pillow performs quadratic copying while parsing GIF comments. GifImageFile._seek() repeatedly appends immutable bytes f |
| CVE-2026-112402 | Undergoing Analysis | 未確認 | CWE-416 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow can double free image memory when ImagingScaleAffine encounters a selective allocation failure. The affected fast path h |
| CVE-2026-112403 | Undergoing Analysis | 未確認 | CWE-122 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG decoder can write a full-width scanline into a buffer sized for a requested draft scale. ImagingJpegDecode does n |
| CVE-2026-112404 | Undergoing Analysis | 未確認 | CWE-126 | Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow's TIFF tile and RGBA decode paths can read beyond row data produced by libtiff. In _decodeTile and the RGBA unpa |
| CVE-2026-112405 | Undergoing Analysis | 未確認 | CWE-476 | Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null image8 plane. Validation skips the first input band, allowing a 32-bit i |
| CVE-2026-112406 | Undergoing Analysis | 未確認 | CWE-835 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting PDF pages. PdfParser.rewrite_pages() follows Parent relationships wit |
| CVE-2026-112407 | Awaiting Analysis | 未確認 | CWE-266 | Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the ap |
| CVE-2026-112408 | Awaiting Analysis | 未確認 | CWE-940 | Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote |
| CVE-2026-112712 | Deferred | 未確認 | CWE-436 | @fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() function joined a path-scoped middleware's mount path to the plu |
| CVE-2026-112768 | Awaiting Analysis | 未確認 | CWE-863 | Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user update before authorizing the caller, and reflects their outcom |
| CVE-2026-112769 | Awaiting Analysis | 未確認 | CWE-863 | Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level permissions of the _Session class when creating sessions. An authent |
| CVE-2026-112770 | Deferred | 未確認 | CWE-94 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string arrow arguments as callables wit |
| CVE-2026-112771 | Deferred | 未確認 | CWE-200 | Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column, contains, filterByValue, index, where, and multisort filters reso |
| CVE-2026-112772 | Deferred | 未確認 | CWE-94 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox via Asset::getMimeType tr |
| CVE-2026-112773 | Deferred | 未確認 | CWE-94 | Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control Panel users to escape the Twig sandbox by passing uncleansed cri |
| CVE-2026-112774 | Deferred | 未確認 | CWE-94 | Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated administrators to inject Yii behaviors by supplying a JSON-string field |
| CVE-2026-112775 | Deferred | 未確認 | CWE-287 | Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse verification codes because users/verify-email does not invalidate |
| CVE-2026-112776 | Deferred | 未確認 | CWE-863 | Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL tokens to mutate other sites' content because requireAllowedSite() |
| CVE-2026-112777 | Deferred | 未確認 | CWE-184 | Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its class-name checks are case-sensitive while PHP class resolut |
| CVE-2026-112778 | Analyzed | 未確認 | CWE-862 | Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in the Kubernetes Ingress provider, allowing references to Middle |
| CVE-2026-112779 | Deferred | 未確認 | CWE-770 | Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed language code sent to the unauthenticated GET /api/v1/translations |
| CVE-2026-112780 | Deferred | 未確認 | CWE-749 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with replace- |
| CVE-2026-112781 | Deferred | 未確認 | CWE-200 | Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read protected configuration by adding config-*@ directives to page frontm |
| CVE-2026-112782 | Deferred | 未確認 | CWE-400 | Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows anonymous visitors to bypass the system.images.max_pixels limit whe |
| CVE-2026-112783 | Deferred | 未確認 | CWE-862 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and ajax/editActivity.php that allows READ-level users to edit and delete activity |
| CVE-2026-112784 | Deferred | 未確認 | CWE-862 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php that allows any authenticated user to send mail through the configured SMTP rela |
| CVE-2026-112785 | Deferred | 未確認 | CWE-862 | OpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users to create, rename, delete, and populate saved lists via AJAX endpoints. Authentic |
| CVE-2026-112786 | Deferred | 未確認 | CWE-862 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to roll back data imports. Attacke |
| CVE-2026-112787 | Deferred | 未確認 | CWE-862 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenticated users to view EEO demographic reports without the canS |
| CVE-2026-112820 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist Core academist-core allows PHP Loca |
| CVE-2026-112821 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Knit Pay Knit Pay knit-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knit Pay: from n/a thro |
| CVE-2026-112822 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Workreap Core workreap_core allows Blind SQL Injection.This issue a |
| CVE-2026-112823 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User State.This issue affects WP User Manager: from n/a through 2.9.25. |
| CVE-2026-112824 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. Bus Ticket Booking with Seat Reservation bus-ticket-booking-with-seat-reservation allows Exploiting Incorrectly Configured Ac |
| CVE-2026-112825 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. Car Rental Manager car-rental-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe |
| CVE-2026-112826 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue |
| CVE-2026-112829 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booktics: from n/a thr |
| CVE-2026-112832 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CozyThemes Rootblox rootblox allows PHP Local File Inclusio |
| CVE-2026-112833 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Stored X |
| CVE-2026-112834 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-112835 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRent |
| CVE-2026-112836 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request Forgery.This issue affects VikRentCar: from n/a through 1.4.8. |
| CVE-2026-112837 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ruben Garcia GamiPress gamipress allows Blind SQL Injection.This issue affects |
| CVE-2026-112838 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Stored XSS.This issue affects VikRentCar |
| CVE-2026-112840 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force SureCart surecart allows Stored XSS.This issue affects SureCa |
| CVE-2026-112842 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This i |
| CVE-2026-112843 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects S |
| CVE-2026-112844 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Arraytics WP Event Solution wp-event-solution allows Stored XSS.This issue aff |
| CVE-2026-112845 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jory Hogeveen Off-Canvas Sidebars & Menus (Slidebars) off-canvas-sidebars allo |
| CVE-2026-112846 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This issue affects Save Life: from n/a through 1.2.14. |
| CVE-2026-112847 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects ZenSoul: from n/a through 1.13. |
| CVE-2026-112848 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue affects Hostme v2: from n/a through 7.0. |
| CVE-2026-112849 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes Hostme v2 hostmev2 allows DOM-Based XSS.This issue affects Hostme |
| CVE-2026-112850 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File In |
| CVE-2026-112851 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue affects HotLock: from n/a through 1.3.9. |
| CVE-2026-112852 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue affects Helion: from n/a through 1.1.12. |
| CVE-2026-112853 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah: from n/a through 1.1.1. |
| CVE-2026-112854 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object Injection.This issue affects Holistic Center: from n/a through 1.2.6. |
| CVE-2026-112855 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5. |
| CVE-2026-112856 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This issue affects Vagabonds: from n/a through 1.3.10. |
| CVE-2026-112857 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8. |
| CVE-2026-112858 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3. |
| CVE-2026-112859 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object Injection.This issue affects Little Birdies: from n/a through 1.3.16. |
| CVE-2026-112860 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in xnau webdesign Participants Database participants-database allows Blind SQL In |
| CVE-2026-112861 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in xnau webdesign Participants Database participants-database allows Exploiting Incorrectly Configured Access Control |
| CVE-2026-112862 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database participants-database allows Object Injection.This issue affects Participants Database: from |
| CVE-2026-112863 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash KALLYAS kallyas allows Reflected XSS.This issue affects KALLYAS: from n |
| CVE-2026-112866 | Received | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Product Filter by WBW woo-product-filter allows Blind SQL Injection. |
| CVE-2026-112867 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in H5P H5P h5p allows Stored XSS.This issue affects H5P: from n/a through 1.17.9. |
| CVE-2026-112868 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n |
| CVE-2026-112869 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Hearle We’re Open! opening-hours allows Reflected XSS.This issue affects |
| CVE-2026-112891 | Undergoing Analysis | 未確認 | CWE-407 | Pillow is a Python imaging library. From 9.2.0 until 13.0.0, Pillow performs quadratic copying when saving a GIF with a long comment. _get_global_header() repeatedly copies portion |
| CVE-2026-112892 | Undergoing Analysis | 未確認 | CWE-409 | Pillow is a Python imaging library. From 4.1.0 until 13.0.0, Pillow's MSP RLE decoder can expand a small file into an unbounded in-memory buffer. The decoder writes run-length outp |
| CVE-2026-112893 | Undergoing Analysis | 未確認 | CWE-457, CWE-763 | Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cle |
| CVE-2026-112894 | Undergoing Analysis | 未確認 | CWE-407 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow takes quadratic time to reserve PDF object identifiers when saving many frames with save_all enabled. PdfParser. |
| CVE-2026-112895 | Undergoing Analysis | 未確認 | CWE-674 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can exhaust resources while parsing an existing PDF during an append operation. PdfParser follows page-tree chil |
| CVE-2026-112896 | Undergoing Analysis | 未確認 | CWE-125 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's TIFF encoder can read beyond a ColorMap buffer when retained TIFF metadata has a plane size inconsistent with BitsPerS |
| CVE-2026-112897 | Undergoing Analysis | 未確認 | CWE-908 | Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax |
| CVE-2026-112898 | Undergoing Analysis | 未確認 | CWE-457 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, Pillow can disclose uninitialized stack memory when Image.quantize() uses an empty palette. ImagingPaletteCacheUpdate() |
| CVE-2026-112900 | Undergoing Analysis | 未確認 | CWE-78, CWE-88 | Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is vulnerable to argument injection when invoking Ghostscript for EPS input. EpsImagePlugin.Ghostscript passes a |
| CVE-2026-112901 | Undergoing Analysis | 未確認 | CWE-1333 | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's XBM header parser is vulnerable to regular-expression denial of service. In XbmImageFile._open, when an application ca |
| CVE-2026-112904 | Deferred | 未確認 | CWE-26 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. In versions 1.0.8.6 and prior, the nextRestore() and nextBackup() functions |
| CVE-2026-112906 | Undergoing Analysis | 未確認 | CWE-694 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock versions from 4.1.0 can reuse a stale observation when an attacker pre-dates and remov |
| CVE-2026-112909 | Undergoing Analysis | 未確認 | CWE-706 | filelock is a platform-independent file lock for Python. Prior to 4.2.1, UnixFileLock can truncate a regular file renamed onto the lock path when another local user has actual rena |
| CVE-2026-112911 | Analyzed | 未確認 | CWE-283 | filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from 4.0.0 can adopt a prot |
| CVE-2026-112912 | Analyzed | 未確認 | CWE-59 | filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional os.access writability check |
| CVE-2026-112914 | Analyzed | 未確認 | CWE-363, CWE-59 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftFileLock can restore a stale marker by name after moving it aside, allowing another local user |
| CVE-2026-112915 | Analyzed | 未確認 | CWE-400 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock can open a crafted SQLite lock database without bounding schema and query work, allo |
| CVE-2026-112921 | Deferred | 未確認 | CWE-488 | Robots::Validate versions from 0.4.3 before 0.4.10 for Perl report clients as imposter robots when User-Agent matcher state carries over from a previous request. Each Robots::Vali |
| CVE-2026-112934 | Modified | 未確認 | CWE-62 | filelock is a platform-independent file lock for Python. From 4.0.0 until 4.2.1, SoftReadWriteLock refreshes holder records by name, allowing another local user with rename access |
| CVE-2026-112935 | Analyzed | 未確認 | CWE-367 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker after an attacker frees its own marker following the stale r |
| CVE-2026-112936 | Analyzed | 未確認 | CWE-59, CWE-668 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to SQL |
| CVE-2026-112937 | Analyzed | 未確認 | CWE-367 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, ReadWriteLock can remove a randomized .filelock-* private-hard-link directory during cleanup, allow |
| CVE-2026-112939 | Analyzed | 未確認 | CWE-345 | filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can trust a forged process identifier in a marker that an attacker can modify but can |
| CVE-2026-112940 | Modified | 未確認 | CWE-363, CWE-59 | filelock is a platform-independent file lock for Python. From 3.20.4 until 4.2.1, ReadWriteLock let SQLite reopen the database and side files by name; on POSIX systems an attacker |
| CVE-2026-112941 | Analyzed | 未確認 | CWE-367 | filelock is a platform-independent file lock for Python. From 4.1.0 until 4.2.1, SoftReadWriteLock and AsyncSoftReadWriteLock cache a successful check of the <path>.rw lock tree an |
| CVE-2026-112942 | Awaiting Analysis | 未確認 | CWE-77 | launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor-middleware processes an attacker-controlled Windows file argument |
| CVE-2026-112943 | Awaiting Analysis | 未確認 | CWE-78 | launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, launch-editor did not escape % on Windows when passing an argument to cmd. When |
| CVE-2026-112944 | Awaiting Analysis | 未確認 | CWE-88 | launch-editor allows users to open files with line numbers in editor from Node.js. Prior to 2.14.2, when an attacker can create a filesystem entry beginning with plus or minus in t |
| CVE-2026-112945 | Awaiting Analysis | 未確認 | CWE-80 | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, applications using custom middleware are vulnerable when they pass an unchanged |
| CVE-2026-112946 | Awaiting Analysis | 未確認 | CWE-22, CWE-284 | Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import analysis can record a root-relative browser URL in safeModulePaths inste |
| CVE-2026-112947 | Awaiting Analysis | 未確認 | CWE-200, CWE-209, CWE-22 | Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of files outside of server.fs setting can be returned to the browser by a r |
| CVE-2026-112948 | Awaiting Analysis | 未確認 | CWE-200, CWE-552 | Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply server.fs.deny because project servers replace Vite's defaults and the |
| CVE-2026-112949 | Awaiting Analysis | 未確認 | CWE-116, CWE-306, CWE-94 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 until 4.1.12 and 5.0.3, an unauthenticated non-browser WebSocket client that can |
| CVE-2026-112950 | Awaiting Analysis | 未確認 | CWE-22 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until 4.1.12 and 5.0.3, isFileLoadingAllowed and the filesystem read interpret backsla |
| CVE-2026-112951 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field accepts trailing content after a valid rgb() or hsl() prefix because its TinyCol |
| CVE-2026-112952 | Deferred | 未確認 | CWE-200 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@apostrophecms/doc/slugTaken' with body { "slug": "target-slug" } returns a boolea |
| CVE-2026-112953 | Deferred | 未確認 | CWE-200 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, predictable export archive filenames allow an unauthenticated request |
| CVE-2026-112954 | Deferred | 未確認 | CWE-200 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST API type that uses publicApiProjection can expose excluded searchable or sortable |
| CVE-2026-112955 | Deferred | 未確認 | CWE-400 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, an authenticated importer can submit archives whose decompressed byte |
| CVE-2026-112956 | Deferred | 未確認 | CWE-863 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, duplicate-import continuation accepts client-controlled replacement c |
| CVE-2026-112957 | Deferred | 未確認 | CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the getOne REST endpoint for pages does not apply viewRole type-level restrictions or viewPermis |
| CVE-2026-112958 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a project-defined free-form widget style field can carry an editor-controlled quote into an inli |
| CVE-2026-112991 | Deferred | 未確認 | CWE-20, CWE-918 | The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES l |
| CVE-2026-112992 | Analyzed | 未確認 | CWE-119 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-112993 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-112994 | Analyzed | 未確認 | CWE-119 | Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-112995 | Analyzed | 未確認 | CWE-416 | Use after free in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-112996 | Analyzed | 未確認 | CWE-119 | Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-112997 | Analyzed | 未確認 | CWE-119 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-112998 | Analyzed | 未確認 | CWE-119 | Memory corruption in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-112999 | Analyzed | 未確認 | CWE-416 | Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113000 | Analyzed | 未確認 | CWE-119 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113001 | Analyzed | 未確認 | CWE-416 | Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113002 | Analyzed | 未確認 | CWE-119 | Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. |
| CVE-2026-113003 | Analyzed | 未確認 | CWE-119 | Memory corruption in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113004 | Analyzed | 未確認 | CWE-119 | Memory corruption in Sync in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113005 | Analyzed | 未確認 | CWE-119 | Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113006 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113007 | Analyzed | 未確認 | CWE-119 | Memory corruption in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113008 | Analyzed | 未確認 | CWE-119 | Memory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted |
| CVE-2026-113009 | Analyzed | 未確認 | CWE-416 | Use after free in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113010 | Modified | 未確認 | CWE-125 | Out of bounds read in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113011 | Analyzed | 未確認 | CWE-416 | Use after free in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113012 | Analyzed | 未確認 | CWE-20 | Improper input validation in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113013 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113014 | Analyzed | 未確認 | CWE-416 | Use after free in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag |
| CVE-2026-113015 | Analyzed | 未確認 | CWE-416 | Use after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113016 | Analyzed | 未確認 | CWE-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTM |
| CVE-2026-113017 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113018 | Analyzed | 未確認 | CWE-119 | Memory corruption in IME in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-113019 | Analyzed | 未確認 | CWE-416 | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113020 | Analyzed | 未確認 | CWE-20 | Improper input validation in Date in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pag |
| CVE-2026-113021 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113022 | Analyzed | 未確認 | CWE-119 | Memory corruption in PDFium in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113023 | Analyzed | 未確認 | CWE-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HT |
| CVE-2026-113024 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113025 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113026 | Analyzed | 未確認 | CWE-119 | Memory corruption in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113027 | Analyzed | 未確認 | CWE-119 | Memory corruption in WebFonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113028 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113029 | Analyzed | 未確認 | CWE-284 | Improper access control in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113030 | Analyzed | 未確認 | CWE-284 | Improper access control in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-113031 | Analyzed | 未確認 | CWE-119 | Memory corruption in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113032 | Analyzed | 未確認 | CWE-119 | Memory corruption in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113033 | Analyzed | 未確認 | CWE-416 | Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-113034 | Analyzed | 未確認 | CWE-119 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113035 | Analyzed | 未確認 | CWE-125 | Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113036 | Analyzed | 未確認 | CWE-119 | Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113037 | Analyzed | 未確認 | CWE-416 | Use after free in WebSockets in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113038 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113039 | Analyzed | 未確認 | CWE-416 | Use after free in Bookmarks in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-113040 | Analyzed | 未確認 | CWE-20 | Improper input validation in Proxy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113041 | Analyzed | 未確認 | CWE-416 | Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113042 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113043 | Analyzed | 未確認 | CWE-416 | Use after free in iOSWeb in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113044 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-113045 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. |
| CVE-2026-113046 | Analyzed | 未確認 | CWE-20 | Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113047 | Analyzed | 未確認 | CWE-119 | Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113048 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113049 | Analyzed | 未確認 | CWE-119 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113050 | Analyzed | 未確認 | CWE-125 | Out of bounds read in HID in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: |
| CVE-2026-113051 | Analyzed | 未確認 | CWE-119 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113052 | Analyzed | 未確認 | CWE-119 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113053 | Analyzed | 未確認 | CWE-416 | Use after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113054 | Analyzed | 未確認 | CWE-125 | Out of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113055 | Analyzed | 未確認 | CWE-843 | Type confusion in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113056 | Analyzed | 未確認 | CWE-119 | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-113057 | Analyzed | 未確認 | CWE-284 | Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security |
| CVE-2026-113058 | Analyzed | 未確認 | CWE-416 | Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113059 | Analyzed | 未確認 | CWE-119 | Memory corruption in Sensor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113060 | Analyzed | 未確認 | CWE-20 | Improper input validation in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113061 | Analyzed | 未確認 | CWE-119 | Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113062 | Analyzed | 未確認 | CWE-20 | Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113063 | Analyzed | 未確認 | CWE-20 | Improper input validation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTM |
| CVE-2026-113064 | Analyzed | 未確認 | CWE-119 | Memory corruption in OptimizationGuide in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113065 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113066 | Analyzed | 未確認 | CWE-119 | Memory corruption in Fonts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: |
| CVE-2026-113067 | Analyzed | 未確認 | CWE-416 | Use after free in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113068 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113069 | Analyzed | 未確認 | CWE-119 | Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113070 | Analyzed | 未確認 | CWE-125 | Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113071 | Analyzed | 未確認 | CWE-416 | Use after free in Notifications in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-113072 | Analyzed | 未確認 | CWE-119 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113073 | Analyzed | 未確認 | CWE-416 | Use after free in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113074 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113075 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113076 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113077 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-113078 | Undergoing Analysis | 未確認 | CWE-20 | Improper input validation in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted H |
| CVE-2026-113079 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113080 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113081 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113082 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113083 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in Actor in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113084 | Analyzed | 未確認 | CWE-20 | Improper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted H |
| CVE-2026-113085 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113086 | Analyzed | 未確認 | CWE-20 | Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113087 | Analyzed | 未確認 | CWE-416 | Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113088 | Analyzed | 未確認 | CWE-119 | Memory corruption in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted H |
| CVE-2026-113089 | Analyzed | 未確認 | CWE-20 | Improper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-113090 | Analyzed | 未確認 | CWE-119 | Memory corruption in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113091 | Analyzed | 未確認 | CWE-416 | Use after free in PerformanceAPIs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa |
| CVE-2026-113092 | Analyzed | 未確認 | CWE-416 | Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113093 | Analyzed | 未確認 | CWE-119 | Memory corruption in DisplayLocking in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pa |
| CVE-2026-113094 | Analyzed | 未確認 | CWE-119 | Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113095 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Focus in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-113096 | Analyzed | 未確認 | CWE-119 | Memory corruption in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113097 | Analyzed | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113098 | Analyzed | 未確認 | CWE-119 | Memory corruption in CacheStorage in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113099 | Analyzed | 未確認 | CWE-20 | Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a |
| CVE-2026-113100 | Analyzed | 未確認 | CWE-119 | Memory corruption in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113101 | Analyzed | 未確認 | CWE-416 | Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113102 | Analyzed | 未確認 | CWE-125 | Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113103 | Analyzed | 未確認 | CWE-416 | Use after free in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113104 | Analyzed | 未確認 | CWE-119 | Memory corruption in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113105 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113106 | Analyzed | 未確認 | CWE-119 | Memory corruption in Skia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113107 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113108 | Analyzed | 未確認 | CWE-416 | Use after free in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113109 | Analyzed | 未確認 | CWE-119 | Memory corruption in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-113110 | Analyzed | 未確認 | CWE-119 | Memory corruption in ShadowDOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113111 | Analyzed | 未確認 | CWE-416 | Use after free in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113112 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113113 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113114 | Analyzed | 未確認 | CWE-416 | Use after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113115 | Analyzed | 未確認 | CWE-416 | Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113116 | Analyzed | 未確認 | CWE-416 | Use after free in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113117 | Analyzed | 未確認 | CWE-20 | Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-113118 | Analyzed | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113119 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113120 | Analyzed | 未確認 | CWE-20 | Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113121 | Analyzed | 未確認 | CWE-119 | Memory corruption in ContextMenu in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craf |
| CVE-2026-113122 | Analyzed | 未確認 | CWE-119 | Memory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113123 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113124 | Analyzed | 未確認 | CWE-119 | Memory corruption in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-113125 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113126 | Analyzed | 未確認 | CWE-119 | Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-113127 | Analyzed | 未確認 | CWE-119 | Memory corruption in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113128 | Analyzed | 未確認 | CWE-862 | Missing authorization in Animation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severit |
| CVE-2026-113129 | Analyzed | 未確認 | CWE-284 | Improper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium |
| CVE-2026-113130 | Analyzed | 未確認 | CWE-416 | Use after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113131 | Analyzed | 未確認 | CWE-119 | Memory corruption in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113132 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113133 | Analyzed | 未確認 | CWE-119 | Memory corruption in PlatformIntegration in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113134 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113135 | Analyzed | 未確認 | CWE-119 | Memory corruption in PictureInPicture in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113136 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113137 | Modified | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113138 | Analyzed | 未確認 | CWE-119 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML p |
| CVE-2026-113139 | Analyzed | 未確認 | CWE-119 | Memory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113140 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113141 | Analyzed | 未確認 | CWE-416 | Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113142 | Modified | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113143 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113144 | Analyzed | 未確認 | CWE-119 | Memory corruption in Speech in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity |
| CVE-2026-113145 | Analyzed | 未確認 | CWE-119 | Memory corruption in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted |
| CVE-2026-113146 | Analyzed | 未確認 | CWE-119 | Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML p |
| CVE-2026-113147 | Analyzed | 未確認 | CWE-20 | Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113148 | Analyzed | 未確認 | CWE-119 | Memory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113149 | Analyzed | 未確認 | CWE-119 | Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113150 | Analyzed | 未確認 | CWE-119 | Memory corruption in Bindings in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113151 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity |
| CVE-2026-113152 | Analyzed | 未確認 | CWE-119 | Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113153 | Analyzed | 未確認 | CWE-119 | Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113154 | Analyzed | 未確認 | CWE-119 | Memory corruption in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113155 | Analyzed | 未確認 | CWE-416 | Use after free in Glic in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-113156 | Analyzed | 未確認 | CWE-416 | Use after free in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113157 | Analyzed | 未確認 | CWE-200 | Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security |
| CVE-2026-113158 | Analyzed | 未確認 | CWE-416 | Use after free in Streaming in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-113159 | Analyzed | 未確認 | CWE-284 | Improper access control in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Chromium s |
| CVE-2026-113160 | Analyzed | 未確認 | CWE-416 | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113161 | Analyzed | 未確認 | CWE-416 | Use after free in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113162 | Analyzed | 未確認 | CWE-20 | Improper input validation in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113163 | Analyzed | 未確認 | CWE-416 | Use after free in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113164 | Analyzed | 未確認 | CWE-119 | Memory corruption in Voice in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113165 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113166 | Analyzed | 未確認 | CWE-119 | Memory corruption in History in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113167 | Analyzed | 未確認 | CWE-119 | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113168 | Analyzed | 未確認 | CWE-416 | Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113169 | Analyzed | 未確認 | CWE-119 | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-113170 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Autofill in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113171 | Analyzed | 未確認 | CWE-119 | Memory corruption in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted |
| CVE-2026-113172 | Analyzed | 未確認 | CWE-119 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113173 | Analyzed | 未確認 | CWE-20 | Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft |
| CVE-2026-113174 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113175 | Analyzed | 未確認 | CWE-20 | Improper input validation in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113176 | Analyzed | 未確認 | CWE-119 | Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113177 | Analyzed | 未確認 | CWE-416 | Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113178 | Analyzed | 未確認 | CWE-119 | Memory corruption in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113179 | Analyzed | 未確認 | CWE-416 | Use after free in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-11318 | Deferred | 未確認 | CWE-306 | Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary i |
| CVE-2026-113180 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in ContentCapture in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113181 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113182 | Analyzed | 未確認 | CWE-119 | Memory corruption in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113183 | Analyzed | 未確認 | CWE-119 | Memory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113184 | Analyzed | 未確認 | CWE-119 | Memory corruption in Scheduling in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113185 | Analyzed | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113186 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113187 | Analyzed | 未確認 | CWE-416 | Use after free in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113188 | Analyzed | 未確認 | CWE-119 | Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-113189 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-11319 | Deferred | 未確認 | CWE-22 | TickTick Android application (com.ticktick.task) 8.2.2.0 contains a path traversal vulnerability in its exported ShareReceiveActivity that allows a malicious local application to w |
| CVE-2026-113190 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113191 | Analyzed | 未確認 | CWE-416 | Use after free in Internals in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113192 | Analyzed | 未確認 | CWE-119 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113193 | Analyzed | 未確認 | CWE-119 | Memory corruption in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113194 | Analyzed | 未確認 | CWE-119 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113195 | Analyzed | 未確認 | CWE-20 | Improper input validation in Downloads in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML |
| CVE-2026-113196 | Undergoing Analysis | 未確認 | CWE-284 | Improper access control in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium securit |
| CVE-2026-113197 | Analyzed | 未確認 | CWE-416 | Use after free in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113198 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113199 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security sever |
| CVE-2026-113200 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113201 | Analyzed | 未確認 | CWE-119 | Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113202 | Analyzed | 未確認 | CWE-416 | Use after free in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113203 | Analyzed | 未確認 | CWE-416 | Use after free in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113204 | Analyzed | 未確認 | CWE-416 | Use after free in TrustedWebActivities in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via |
| CVE-2026-113205 | Analyzed | 未確認 | CWE-416 | Use after free in Variations in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113206 | Analyzed | 未確認 | CWE-119 | Memory corruption in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113207 | Analyzed | 未確認 | CWE-416 | Use after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-113208 | Analyzed | 未確認 | CWE-416 | Use after free in ContextualSearch in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113209 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113210 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113211 | Analyzed | 未確認 | CWE-119 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa |
| CVE-2026-113212 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113213 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113214 | Analyzed | 未確認 | CWE-20 | Improper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTM |
| CVE-2026-113215 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113216 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113217 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113218 | Analyzed | 未確認 | CWE-416 | Use after free in DataTransfer in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113219 | Analyzed | 未確認 | CWE-119 | Memory corruption in Contacts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113220 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft |
| CVE-2026-113221 | Analyzed | 未確認 | CWE-416 | Use after free in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113222 | Analyzed | 未確認 | CWE-416 | Use after free in V8 in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113223 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113224 | Undergoing Analysis | 未確認 | CWE-119 | Memory corruption in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML |
| CVE-2026-113225 | Analyzed | 未確認 | CWE-119 | Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. |
| CVE-2026-113226 | Analyzed | 未確認 | CWE-119 | Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113227 | Analyzed | 未確認 | CWE-416 | Use after free in Editing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113228 | Analyzed | 未確認 | CWE-416 | Use after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113229 | Analyzed | 未確認 | CWE-416 | Use after free in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113230 | Analyzed | 未確認 | CWE-20 | Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML p |
| CVE-2026-113231 | Analyzed | 未確認 | CWE-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTM |
| CVE-2026-113232 | Analyzed | 未確認 | CWE-119 | Memory corruption in Search in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113233 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HT |
| CVE-2026-113234 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113235 | Analyzed | 未確認 | CWE-20 | Improper input validation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTM |
| CVE-2026-113236 | Analyzed | 未確認 | CWE-416 | Use after free in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113237 | Analyzed | 未確認 | CWE-119 | Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-113238 | Analyzed | 未確認 | CWE-119 | Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft |
| CVE-2026-113239 | Analyzed | 未確認 | CWE-118 | Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113240 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113241 | Analyzed | 未確認 | CWE-119 | Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted |
| CVE-2026-113242 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113243 | Analyzed | 未確認 | CWE-119 | Memory corruption in DOM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-113244 | Analyzed | 未確認 | CWE-20 | Improper input validation in UI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113245 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113246 | Analyzed | 未確認 | CWE-119 | Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113247 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113248 | Analyzed | 未確認 | CWE-119 | Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113249 | Analyzed | 未確認 | CWE-20 | Improper input validation in Mobile in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft |
| CVE-2026-113250 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-113251 | Analyzed | 未確認 | CWE-416 | Use after free in PDF in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113252 | Analyzed | 未確認 | CWE-20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a c |
| CVE-2026-113253 | Analyzed | 未確認 | CWE-416 | Use after free in Canvas in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113254 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113255 | Analyzed | 未確認 | CWE-416 | Use after free in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113256 | Analyzed | 未確認 | CWE-416 | Use after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113257 | Analyzed | 未確認 | CWE-119 | Memory corruption in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113258 | Analyzed | 未確認 | CWE-119 | Memory corruption in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113259 | Analyzed | 未確認 | CWE-416 | Use after free in Frames in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113260 | Analyzed | 未確認 | CWE-119 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113261 | Analyzed | 未確認 | CWE-416 | Use after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113262 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113263 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-113264 | Analyzed | 未確認 | CWE-20 | Improper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTM |
| CVE-2026-113265 | Analyzed | 未確認 | CWE-119 | Memory corruption in BFCache in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113266 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HT |
| CVE-2026-113267 | Analyzed | 未確認 | CWE-119 | Memory corruption in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113268 | Analyzed | 未確認 | CWE-119 | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113269 | Analyzed | 未確認 | CWE-119 | Memory corruption in BrowserTag in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113270 | Analyzed | 未確認 | CWE-416 | Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113271 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113272 | Analyzed | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113273 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113274 | Analyzed | 未確認 | CWE-416 | Use after free in ReadingMode in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113275 | Analyzed | 未確認 | CWE-416 | Use after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113276 | Analyzed | 未確認 | CWE-119 | Memory corruption in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-113277 | Analyzed | 未確認 | CWE-125 | Out of bounds read in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-113278 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113279 | Analyzed | 未確認 | CWE-119 | Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113280 | Analyzed | 未確認 | CWE-119 | Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113281 | Analyzed | 未確認 | CWE-119 | Memory corruption in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pag |
| CVE-2026-113282 | Analyzed | 未確認 | CWE-416 | Use after free in Views in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page |
| CVE-2026-113283 | Analyzed | 未確認 | CWE-119 | Memory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox vi |
| CVE-2026-113284 | Analyzed | 未確認 | CWE-119 | Memory corruption in XML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromi |
| CVE-2026-113285 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113286 | Analyzed | 未確認 | CWE-119 | Memory corruption in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113287 | Analyzed | 未確認 | CWE-416 | Use after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113288 | Analyzed | 未確認 | CWE-119 | Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113289 | Analyzed | 未確認 | CWE-20 | Improper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-113290 | Analyzed | 未確認 | CWE-416 | Use after free in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromiu |
| CVE-2026-113291 | Analyzed | 未確認 | CWE-119 | Memory corruption in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113292 | Analyzed | 未確認 | CWE-20 | Improper input validation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a |
| CVE-2026-113293 | Analyzed | 未確認 | CWE-416 | Use after free in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chrom |
| CVE-2026-113294 | Analyzed | 未確認 | CWE-20 | Improper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pa |
| CVE-2026-113295 | Analyzed | 未確認 | CWE-125 | Out of bounds read in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium sec |
| CVE-2026-113296 | Analyzed | 未確認 | CWE-119 | Memory corruption in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-113297 | Analyzed | 未確認 | CWE-284 | Improper access control in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. (Chromium security severit |
| CVE-2026-113298 | Analyzed | 未確認 | CWE-416 | Use after free in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113299 | Analyzed | 未確認 | CWE-119 | Memory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. |
| CVE-2026-113300 | Analyzed | 未確認 | CWE-787 | Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (C |
| CVE-2026-113301 | Analyzed | 未確認 | CWE-119 | Memory corruption in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML pa |
| CVE-2026-113302 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113303 | Analyzed | 未確認 | CWE-119 | Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113304 | Analyzed | 未確認 | CWE-119 | Memory corruption in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chr |
| CVE-2026-113305 | Analyzed | 未確認 | CWE-416 | Use after free in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113306 | Analyzed | 未確認 | CWE-20 | Improper input validation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML p |
| CVE-2026-113307 | Analyzed | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113308 | Analyzed | 未確認 | CWE-416 | Use after free in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security se |
| CVE-2026-113309 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity |
| CVE-2026-113310 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Bluetooth in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security seve |
| CVE-2026-113311 | Analyzed | 未確認 | CWE-416 | Use after free in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113312 | Analyzed | 未確認 | CWE-119 | Memory corruption in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTM |
| CVE-2026-113313 | Analyzed | 未確認 | CWE-119 | Memory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113314 | Analyzed | 未確認 | CWE-416 | Use after free in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security s |
| CVE-2026-113315 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113316 | Analyzed | 未確認 | CWE-20 | Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113317 | Analyzed | 未確認 | CWE-119 | Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte |
| CVE-2026-113318 | Analyzed | 未確認 | CWE-119 | Memory corruption in ServiceWorker in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium |
| CVE-2026-113319 | Analyzed | 未確認 | CWE-416 | Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113320 | Analyzed | 未確認 | CWE-119 | Memory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted H |
| CVE-2026-113321 | Analyzed | 未確認 | CWE-416 | Use after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113322 | Analyzed | 未確認 | CWE-119 | Memory corruption in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113323 | Analyzed | 未確認 | CWE-416 | Use after free in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted |
| CVE-2026-113324 | Analyzed | 未確認 | CWE-416 | Use after free in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113325 | Analyzed | 未確認 | CWE-119 | Memory corruption in SignIn in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chro |
| CVE-2026-113326 | Analyzed | 未確認 | CWE-119 | Memory corruption in Core in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113327 | Analyzed | 未確認 | CWE-416 | Use after free in Chromecast in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113328 | Analyzed | 未確認 | CWE-20 | Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML |
| CVE-2026-113329 | Analyzed | 未確認 | CWE-125 | Out of bounds read in Installer in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. ( |
| CVE-2026-113330 | Analyzed | 未確認 | CWE-119 | Memory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a craft |
| CVE-2026-113331 | Analyzed | 未確認 | CWE-119 | Memory corruption in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113332 | Analyzed | 未確認 | CWE-119 | Memory corruption in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security |
| CVE-2026-113333 | Analyzed | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium s |
| CVE-2026-113334 | Analyzed | 未確認 | CWE-20 | Improper input validation in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cr |
| CVE-2026-113335 | Analyzed | 未確認 | CWE-119 | Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se |
| CVE-2026-113336 | Analyzed | 未確認 | CWE-119 | Memory corruption in Compositing in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page |
| CVE-2026-113337 | Analyzed | 未確認 | CWE-119 | Memory corruption in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securi |
| CVE-2026-113338 | Analyzed | 未確認 | CWE-416 | Use after free in Turbolev in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium securit |
| CVE-2026-113339 | Analyzed | 未確認 | CWE-416 | Use after free in SVG in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security sev |
| CVE-2026-113340 | Analyzed | 未確認 | CWE-119 | Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (C |
| CVE-2026-113341 | Analyzed | 未確認 | CWE-119 | Memory corruption in Skia in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Ch |
| CVE-2026-113342 | Analyzed | 未確認 | CWE-119 | Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113343 | Analyzed | 未確認 | CWE-119 | Memory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secur |
| CVE-2026-113344 | Analyzed | 未確認 | CWE-416 | Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu |
| CVE-2026-113349 | Deferred | 未確認 | CWE-639 | OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() and onDeleteEvent() that allows authenticated users to modify or delete other use |
| CVE-2026-113350 | Awaiting Analysis | 未確認 | CWE-79 | react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts by storing javascript: URIs in record fields rendered by UrlF |
| CVE-2026-113351 | Awaiting Analysis | 未確認 | CWE-909 | libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers c |
| CVE-2026-113352 | Deferred | 未確認 | CWE-22 | uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabl |
| CVE-2026-113353 | Awaiting Analysis | 未確認 | CWE-639 | LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructor |
| CVE-2026-113354 | Deferred | 未確認 | CWE-863 | Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system |
| CVE-2026-113355 | Awaiting Analysis | 未確認 | CWE-79 | Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject JavaScript by crafting video-embed links in Help Center art |
| CVE-2026-113356 | Awaiting Analysis | 未確認 | CWE-502 | DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unserialize() without restricting allowed clas |
| CVE-2026-113357 | Deferred | 未確認 | CWE-863 | @e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by posting comments with the predictable |
| CVE-2026-113358 | Deferred | 未確認 | CWE-306 | LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated attackers to download stored files through the filer/dow |
| CVE-2026-113359 | Deferred | 未確認 | CWE-639 | Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field values from other workspaces via the unique_row_values API endp |
| CVE-2026-113378 | Deferred | 未確認 | CWE-77, CWE-78 | A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipul |
| CVE-2026-113380 | Awaiting Analysis | 未確認 | CWE-754 | In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perh |
| CVE-2026-113381 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the comp |
| CVE-2026-113382 | Deferred | 未確認 | CWE-284, CWE-434 | A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api_plugins.php of the co |
| CVE-2026-113383 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the argument t |
| CVE-2026-113384 | Deferred | 未確認 | CWE-601 | A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social. Executing a manipulation of the argument state can lead to |
| CVE-2026-113385 | Deferred | 未確認 | CWE-926 | A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulation |
| CVE-2026-113386 | Awaiting Analysis | 未確認 | CWE-93 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequences injected into the |
| CVE-2026-113388 | Deferred | 未確認 | CWE-74, CWE-94 | A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the componen |
| CVE-2026-113389 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function set_table of the file /cgi-bin/mainfunction.cgi of the compo |
| CVE-2026-113390 | Deferred | 未確認 | CWE-77, CWE-78 | A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this issue is the function sub_182B0 of the file /cgi-bin/mainfunction.cgi of the component CGI Interf |
| CVE-2026-113391 | Deferred | 未確認 | CWE-74, CWE-77 | A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function uploadlangs of the file /cgi-bin/mainfunction.cgi of the component Upload Endpo |
| CVE-2026-113392 | Deferred | 未確認 | CWE-22 | A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. Perf |
| CVE-2026-113393 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218. This issue affects some unknown processing of the file /cgi-bin/mainfunction.cgi of the component commonu |
| CVE-2026-113394 | Deferred | 未確認 | CWE-22 | A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. Impacted is the function setSWMProfile of the file /cgi-bin/mainfunction.cgi. The manipulation of the arg |
| CVE-2026-113395 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218. The affected element is the function cgiEscape of the file /cgi-bin/mainfunction.cgi of the componen |
| CVE-2026-113396 | Deferred | 未確認 | CWE-74, CWE-77 | A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218. The impacted element is the function rename_table of the file /cgi-bin/mainfunction.cgi of the component |
| CVE-2026-113397 | Deferred | 未確認 | CWE-74, CWE-77 | A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. This affects the function ruequest_certificate of the file /cgi-bin/mainfunction.cgi of the c |
| CVE-2026-113399 | Awaiting Analysis | 未確認 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. | |
| CVE-2026-113400 | Awaiting Analysis | 未確認 | CWE-457 | Uninitialized memory in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. |
| CVE-2026-113401 | Awaiting Analysis | 未確認 | CWE-400 | Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 158.0.1 and Thunderbird 158.0.1. |
| CVE-2026-113402 | Deferred | 未確認 | CWE-98 | ArmorX Spam developed by ArmorX Global Technology has a Local File Inclusion vulnerability. Authenticated remote attackers can exploit path traversal to cause the application to in |
| CVE-2026-113403 | Deferred | 未確認 | CWE-93 | ArmorX Spam developed by ArmorX Global Technology has a Command Injection vulnerability. Authenticated remote attackers can inject crafted commands into a specific parameter, there |
| CVE-2026-113404 | Deferred | 未確認 | CWE-502 | WebITR developed by Uniong has a Insecure Deserialization vulnerability. Authenticated remote attackers can use the hard-coded cryptographic key to craft and submit malicious seria |
| CVE-2026-113405 | Deferred | 未確認 | CWE-89 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database cont |
| CVE-2026-113406 | Deferred | 未確認 | CWE-89 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database cont |
| CVE-2026-113407 | Deferred | 未確認 | CWE-89 | BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database cont |
| CVE-2026-113411 | Deferred | 未確認 | CWE-285, CWE-939 | A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Hand |
| CVE-2026-113442 | Deferred | 未確認 | CWE-79 | Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to t |
| CVE-2026-113459 | Deferred | 未確認 | CWE-201 | In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the |
| CVE-2026-113461 | Deferred | 未確認 | CWE-426, CWE-829 | Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library directory of an Oracle home listed in the 'oratab' file or to the |
| CVE-2026-113465 | Deferred | 未確認 | CWE-79 | It is possible to execute a DOM-based Cross-Site Scripting attack against Stormshield’s web administration panel. To exploit this vulnerability, an attacker would need to craft |
| CVE-2026-113466 | Deferred | 未確認 | CWE-320, CWE-321 | A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/ |
| CVE-2026-113468 | Deferred | 未確認 | CWE-862 | The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment noti |
| CVE-2026-113469 | Deferred | 未確認 | CWE-287 | A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticate |
| CVE-2026-113470 | Awaiting Analysis | 未確認 | CWE-295 | Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, |
| CVE-2026-113472 | Deferred | 未確認 | CWE-434 | The Depicter — Popup & Slider Builder WordPress plugin before 4.8.2 does not properly validate uploaded files in its editor media-upload endpoint, checking only the client-supplied |
| CVE-2026-113489 | Received | 未確認 | CWE-639 | The GeoDirectory WordPress plugin before 2.8.194 does not verify that a referenced attachment belongs to the listing being saved, allowing users with Subscriber-level access and a |
| CVE-2026-113490 | Received | 未確認 | CWE-200 | The GeoDirectory WordPress plugin before 2.8.194 does not perform any status or ownership check when rendering a listing's map-popup through one of its single-item REST routes, al |
| CVE-2026-113491 | Received | 未確認 | CWE-22 | The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users w |
| CVE-2026-113492 | Received | 未確認 | CWE-200 | The GeoDirectory WordPress plugin before 2.8.194 does not perform status, ownership or password checks when loading listings for one of its unauthenticated AJAX handlers, allowing |
| CVE-2026-113493 | Received | 未確認 | CWE-79 | The GeoDirectory WordPress plugin before 2.8.194 does not sanitise and escape some of its map shortcode attributes before outputting them within a style attribute, allowing users |
| CVE-2026-113495 | Awaiting Analysis | 未確認 | CWE-214 | A flaw was found in cockpit-machines. Red Hat Subscription Management (RHSM) authentication tokens are passed as command-line arguments to background helper processes during image |
| CVE-2026-113496 | Awaiting Analysis | 未確認 | CWE-214 | A flaw was found in cockpit-machines. When saving Virtual Network Computing (VNC) console settings, the configured password is passed directly as a command-line argument to an unde |
| CVE-2026-113499 | Deferred | 未確認 | CWE-79 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not restrict one of its HTML rewriting routines to stylesheet content, so it removes a quote that terminates an attribute in |
| CVE-2026-113500 | Deferred | 未確認 | CWE-79 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not limit one of its HTML optimization routines to stylesheet content, so it can delete the markup that closes an attribute i |
| CVE-2026-113501 | Deferred | 未確認 | CWE-862 | The LiteSpeed Cache WordPress plugin before 7.9.2 does not perform a capability check on its admin-notice dismissal handler, and the nonce it relies on is not bound to the specific |
| CVE-2026-113505 | Deferred | 未確認 | CWE-22 | A flaw has been found in aaPanel up to 8.25.0. Impacted is the function send_file of the file BTPanel/routes/v2.py of the component Download Endpoint. Executing a manipulation of t |
| CVE-2026-113506 | Deferred | 未確認 | CWE-77, CWE-78 | A vulnerability has been found in aaPanel up to 8.25.0. The affected element is the function ExecShell of the file class/public/common.py of the component File Manager. The manipul |
| CVE-2026-113507 | Deferred | 未確認 | CWE-266, CWE-284 | A vulnerability was found in aaPanel up to 8.25.0. The impacted element is the function GetClientIp of the file class/public/common.py. The manipulation of the argument X-Real-Ip r |
| CVE-2026-113582 | Deferred | 未確認 | CWE-611 | UNSUPPORTED WHEN ASSIGNED Improper restriction of XML external entity references in Apache Abdera allows an attacker to access sensitive data or make server-side requests when an a |
| CVE-2026-113583 | Deferred | 未確認 | CWE-79 | Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by crafting malicious alt te |
| CVE-2026-113594 | Deferred | 未確認 | CWE-862 | Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC m |
| CVE-2026-113595 | Deferred | 未確認 | CWE-862 | Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that allows any authenticated member to modify the server logo without |
| CVE-2026-113596 | Deferred | 未確認 | CWE-639 | Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findManyByIds |
| CVE-2026-113597 | Deferred | 未確認 | CWE-639 | Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows authenticated users to read and modify other users' tags by suppl |
| CVE-2026-113598 | Deferred | 未確認 | CWE-639 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete alarms of other domains via the POST /api/v2/alarms/bulk_d |
| CVE-2026-113599 | Deferred | 未確認 | CWE-639 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to create auto-reply messages for arbitrary mailboxes by supplying a |
| CVE-2026-113600 | Deferred | 未確認 | CWE-639 | Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows authenticated users to modify or delete other users' comments because CommentsCont |
| CVE-2026-113601 | Deferred | 未確認 | CWE-862 | Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivities and GetActivity API methods that allows authenticated users to view all use |
| CVE-2026-113602 | Awaiting Analysis | 未確認 | CWE-147 | json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to evade strict-mode trailing-data checks by inserting a literal 0x1A character. At |
| CVE-2026-113603 | Awaiting Analysis | 未確認 | CWE-639 | The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module 2.16.0 through 2.28.0 contains an authorization bypass vulne |
| CVE-2026-113604 | Awaiting Analysis | 未確認 | CWE-789 | Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that allocates arrays sized by unvalidated extended section and program he |
| CVE-2026-113605 | Awaiting Analysis | 未確認 | CWE-184 | Stirling-PDF from 2.13.2 through 3.2.0 contains an incomplete denylist in DatabaseService.validateSqlContent() that allows administrators to bypass H2 import restrictions using CRE |
| CVE-2026-113606 | Deferred | 未確認 | CWE-639 | Stirling-PDF 3.0.0 through 3.2.0 contains an authorization bypass vulnerability that allows authenticated users to access other users' stored files by pointing a processing folder |
| CVE-2026-113607 | Awaiting Analysis | 未確認 | CWE-863 | Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the block_confi |
| CVE-2026-113608 | Deferred | 未確認 | CWE-89 | Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection vulnerability in report_sql::prepare_sql() via the filter_var reques |
| CVE-2026-113609 | Deferred | 未確認 | CWE-693 | Bandisoft Bandizip before 7.47 fails to propagate Mark-of-the-Web to extracted .ps1 and .psm1 files, allowing attackers to bypass zone-based execution protections. Attackers can de |
| CVE-2026-113610 | Deferred | 未確認 | CWE-639 | Xen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allows low-privileged authenticated users to modify other users' |
| CVE-2026-113611 | Awaiting Analysis | 未確認 | CWE-863 | Outline before 1.8.0 contains an improper access revocation vulnerability that allows deleted administrators to keep receiving document contents because UserDeletedProcessor never |
| CVE-2026-113612 | Deferred | 未確認 | CWE-862 | SparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' food variants via the DELETE /api/foods/food-varia |
| CVE-2026-113613 | Deferred | 未確認 | CWE-22 | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member p |
| CVE-2026-113619 | Awaiting Analysis | 未確認 | CWE-400 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before a |
| CVE-2026-113620 | Awaiting Analysis | 未確認 | CWE-347 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The payload is decoded and its groups |
| CVE-2026-113643 | Deferred | 未確認 | CWE-285, CWE-639 | A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the file application/Espo/Tools/Pdf/Dompdf/ImageSourceProvider.php |
| CVE-2026-113648 | Deferred | 未確認 | CWE-306, CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module, the API endpoint POST /api/v1/@apostrophecms/import-export/clean-expo |
| CVE-2026-113649 | Deferred | 未確認 | CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-export module and 4.34.0 of core ApostropheCMS, an editor who can import an enabled |
| CVE-2026-113650 | Deferred | 未確認 | CWE-674 | ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an <iframe> is not allowed and disallowedTagsMode is 'discard' (the defaults), its |
| CVE-2026-113651 | Deferred | 未確認 | CWE-22 | ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the loca |
| CVE-2026-113652 | Deferred | 未確認 | CWE-200, CWE-522 | ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. |
| CVE-2026-113653 | Deferred | 未確認 | CWE-863 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, viewRole is not applied to anonymous visitors when a developer exposes user objects through a pu |
| CVE-2026-113654 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default |
| CVE-2026-113655 | Deferred | 未確認 | CWE-639, CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an authenticated editor with legitimate edit rights on a pre-existing ordinary page nested under |
| CVE-2026-113656 | Deferred | 未確認 | CWE-770 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the ApostropheCMS Form add-on, its form submission route stages unbounded multipart uploads bef |
| CVE-2026-113657 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. From sanitize-html 2.17.7 until 2.18.0, an a |
| CVE-2026-113658 | Deferred | 未確認 | CWE-400, CWE-459, CWE-770 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich Text CSV conversion route writes a multipart upload to the system tempo |
| CVE-2026-113659 | Deferred | 未確認 | CWE-1321, CWE-79 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, an unauthenticated attacker can send a crafted link whose query string is automatically parsed b |
| CVE-2026-113660 | Deferred | 未確認 | CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, ApostropheCMS’s exist-in-locale API allows an authenticated low-privilege user to determine whet |
| CVE-2026-113661 | Deferred | 未確認 | CWE-79 | ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html 2.18.0, a non-default |
| CVE-2026-113662 | Deferred | 未確認 | CWE-284, CWE-943 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated user with import access to a target type can supply |
| CVE-2026-113664 | Deferred | 未確認 | CWE-22 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.0 of the import-export module, an authenticated importer can submit a tar entry whose normalized des |
| CVE-2026-113665 | Deferred | 未確認 | CWE-639, CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the notification module exposes PATCH and DELETE REST endpoints that perform operations directly |
| CVE-2026-113666 | Deferred | 未確認 | CWE-1321, CWE-400 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, an account with view-draft access can submit a projecti |
| CVE-2026-113667 | Deferred | 未確認 | CWE-116 | ApostropheCMS is an open-source Node.js content management system. Prior to 1.5.5 of the Form add-on, 1.2.1 of login-recaptcha, and 1.3.0 of login-hcaptcha, these three CAPTCHA int |
| CVE-2026-113668 | Deferred | 未確認 | CWE-200, CWE-862 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the REST route GET /api/v1/<piece-type>/:_id/locales (and the equivalent page route) does not ap |
| CVE-2026-113669 | Deferred | 未確認 | CWE-598 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 1.6.1 of passport-bridge, cross-host or cross-locale session migration place |
| CVE-2026-113670 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-113671 | Deferred | 未確認 | CWE-918 | ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI helper, an editor with image-generation capability can create a |
| CVE-2026-113672 | Undergoing Analysis | 未確認 | CWE-22 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an im |
| CVE-2026-113673 | Received | 未確認 | CWE-94 | The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high p |
| CVE-2026-113674 | Received | 未確認 | CWE-284 | The GeoDirectory WordPress plugin before 2.8.194 does not correctly verify ownership of listings submitted by logged-out users before allowing them to be edited, allowing unauthen |
| CVE-2026-113676 | Deferred | 未確認 | CWE-863 | Froxlor from 0.10.0 before 2.3.15 contains an authorization bypass vulnerability in the Admins.get API command that allows resellers to read any admin record via identifier confusi |
| CVE-2026-113677 | Deferred | 未確認 | CWE-862 | Froxlor from 0.10.0 before 2.3.15 contains a missing authorization vulnerability in the SubDomains.delete API command that allows authenticated customers to delete reseller-provisi |
| CVE-2026-113678 | Deferred | 未確認 | CWE-59 | Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host direct |
| CVE-2026-113679 | Awaiting Analysis | 未確認 | CWE-787 | HarfBuzz 8.0.0 through 14.6.0 contains an out-of-bounds write vulnerability in the experimental WebAssembly shaper because the font_glyph_to_string import has a wrong WAMR signatur |
| CVE-2026-113680 | Deferred | 未確認 | CWE-476 | HarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly shaper host imports buffer_set_contents, face_create, and font_ |
| CVE-2026-113681 | Awaiting Analysis | 未確認 | CWE-190 | OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3.2.0.3-beta1 contains an integer overflow in cineon::Codec::Read that undersizes the scanline buffer, causing |
| CVE-2026-113682 | Deferred | 未確認 | CWE-287 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-delegated |
| CVE-2026-113683 | Deferred | 未確認 | CWE-79 | VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/ |
| CVE-2026-113703 | Deferred | 未確認 | CWE-290 | SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middleware.py tru |
| CVE-2026-113704 | Deferred | 未確認 | CWE-918 | A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/push_notification_sender.rs of the component |
| CVE-2026-113705 | Deferred | 未確認 | CWE-200, CWE-209 | A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead t |
| CVE-2026-113706 | Deferred | 未確認 | CWE-200, CWE-284 | A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/task_store/inmemory.rs. The manipulation of the argument |
| CVE-2026-113707 | Deferred | 未確認 | CWE-362 | A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4. The affected element is the function InMemoryTaskStore::update of the file a2a-server/src/task_store/inmemory. |
| CVE-2026-113708 | Undergoing Analysis | 未確認 | CWE-88 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from r |
| CVE-2026-113709 | Undergoing Analysis | 未確認 | CWE-829 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, when an operator has enabled --enable-helm for kust |
| CVE-2026-113710 | Deferred | 未確認 | CWE-307 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change endpoint verifies the current password but does not use the log |
| CVE-2026-113711 | Deferred | 未確認 | CWE-400, CWE-770 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the import-export module, import routes invoke bigUploadMiddleware |
| CVE-2026-113712 | Deferred | 未確認 | CWE-79 | Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authentica |
| CVE-2026-113713 | Awaiting Analysis | 未確認 | CWE-377 | virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package files |
| CVE-2026-113714 | Awaiting Analysis | 未確認 | CWE-354 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes package-index downloads directly into the reusable wheel/house cac |
| CVE-2026-113715 | Awaiting Analysis | 未確認 | CWE-93 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines() and merges parsed |
| CVE-2026-113716 | Awaiting Analysis | 未確認 | CWE-59 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensure_dir() for executable, library, and package directories, a |
| CVE-2026-113717 | Awaiting Analysis | 未確認 | CWE-494 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInvoke.get_pip_install_cmd() handles --seeder pip --download by calling get_wheel(downl |
| CVE-2026-113718 | Awaiting Analysis | 未確認 | CWE-94 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, POSIX xonsh activation quote() uses repr() to write printable non-ASCII prompt or destinat |
| CVE-2026-113719 | Awaiting Analysis | 未確認 | CWE-22 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, PipInstall._uninstall_previous_version() accepts existing seed-package metadata and _unins |
| CVE-2026-113720 | Awaiting Analysis | 未確認 | CWE-732 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy() to copy cached package files into later enviro |
| CVE-2026-113721 | Awaiting Analysis | 未確認 | CWE-59 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existing output only when Path.exists() is tru |
| CVE-2026-113722 | Awaiting Analysis | 未確認 | CWE-78 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, virtualenv's ScriptMakerCustom and pip pass an incompletely quoted interpreter path to dis |
| CVE-2026-113723 | Awaiting Analysis | 未確認 | CWE-78 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, caller-supplied prompt text can become executable syntax in the bash activation prompt. An |
| CVE-2026-113724 | Awaiting Analysis | 未確認 | CWE-59 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion error handler responds to a failed removal by reading mode bits |
| CVE-2026-113725 | Awaiting Analysis | 未確認 | CWE-116, CWE-78 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.7, the bash activate script escapes the environment name for only one of the two passes bash |
| CVE-2026-113726 | Awaiting Analysis | 未確認 | CWE-116, CWE-78 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.13.0, the bash activate script that zsh also sources leaves the environment name unescaped; from |
| CVE-2026-113727 | Awaiting Analysis | 未確認 | CWE-639 | OpenChoreo is a developer platform for Kubernetes. From 1.0.0 until 1.0.6, 1.1.7, and 1.2.5, the PUT .../workflowruns/{runName} update route authorizes a request using the openchor |
| CVE-2026-113728 | Awaiting Analysis | 未確認 | CWE-918 | Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server. Prior to 1.9.2, the unauthenticated POST /api/fetch-ical endpoint validates a caller-supplied hostname wit |
| CVE-2026-113729 | Awaiting Analysis | 未確認 | CWE-400, CWE-407, CWE-770 | Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated n |
| CVE-2026-113730 | Awaiting Analysis | 未確認 | CWE-693 | OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method tha |
| CVE-2026-113731 | Deferred | 未確認 | CWE-22 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. From 0.9.0 until 1.0.10, 1.1.7, 1.2.4, and 1.3.0rc8, the find_handler |
| CVE-2026-113732 | Awaiting Analysis | 未確認 | CWE-116, CWE-78 | virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.2, FishActivator inherits ViaTemplateActivator.quote(), which uses POSIX shlex.quote() even t |
| CVE-2026-113735 | Deferred | 未確認 | CWE-1391 | A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlink_set_root_pwd of the file /mnt/mtd/aoni_ipc. Executing a manipula |
| CVE-2026-113736 | Deferred | 未確認 | CWE-258, CWE-259 | A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the function login_prepare_hnap of the file etc/defnodes/defaultvalue.xml of the component HN |
| CVE-2026-113737 | Deferred | 未確認 | CWE-22 | A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validate_indexed_tensors of the file qwen- |
| CVE-2026-113738 | Deferred | 未確認 | CWE-22 | A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extract_mtp_heads o |
| CVE-2026-113740 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /deletecustomer.php. This manipulation |
| CVE-2026-113741 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /404.php. Such manipulation of the |
| CVE-2026-113743 | Deferred | 未確認 | CWE-22 | A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_che |
| CVE-2026-113744 | Deferred | 未確認 | CWE-119, CWE-121 | A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component ht |
| CVE-2026-113776 | Awaiting Analysis | 未確認 | CWE-78, CWE-94 | virtualenv is a tool for creating isolated virtual python environments. From 20.26.6 until 21.14.2, ViaTemplateActivator.instantiate_template() replaces placeholders one key at a t |
| CVE-2026-113779 | Awaiting Analysis | 未確認 | CWE-502 | The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus firewalls. A privilege escalation vulnerability in pfSense-pkg-RESTA |
| CVE-2026-113786 | Awaiting Analysis | 未確認 | CWE-183, CWE-20 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.1, an attacker can craft a PDF containing image data labeled with the /DCTDecode filter that causes Pillow to |
| CVE-2026-113787 | Awaiting Analysis | 未確認 | CWE-79 | odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and JavaScript. Starting in version 0.6.0 and prior to version 0.14.2 |
| CVE-2026-113788 | Awaiting Analysis | 未確認 | CWE-78 | Lagoon is an application delivery platform for Kubernetes. Versions prior to 2.33.1 have a vulnerability in the `ssh` service in Lagoon core that would allow an attacker to execute |
| CVE-2026-113789 | Undergoing Analysis | 未確認 | CWE-400, CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF that causes large memory usage or long runtimes when an application retrieves |
| CVE-2026-113790 | Undergoing Analysis | 未確認 | CWE-400, CWE-770 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing arrays or dictionaries with many elements, causing parsing to consu |
| CVE-2026-113791 | Undergoing Analysis | 未確認 | CWE-400, CWE-770 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.0, an attacker can craft a PDF containing a content stream with many small operations, causing parsing to con |
| CVE-2026-113792 | Undergoing Analysis | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item on a crafted PDF with a cyclic outline hierarchy can enter an infinite |
| CVE-2026-113793 | Undergoing Analysis | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cyclic PDF tree, such as an outline item, can enter an infinite loop and |
| CVE-2026-113794 | Undergoing Analysis | 未確認 | CWE-835 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete PDF that ends inside a standard cross-reference table, causing pypdf t |
| CVE-2026-113795 | Undergoing Analysis | 未確認 | CWE-400, CWE-770 | pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with a large number of filters or multiple filters that pass around large a |
| CVE-2026-113796 | Undergoing Analysis | 未確認 | CWE-352 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.6, Electron trea |
| CVE-2026-113797 | Undergoing Analysis | 未確認 | CWE-862 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.1, 43.5.1, 44.1.1, and 45.0.0-alpha.4, chrome.tabs.q |
| CVE-2026-113798 | Undergoing Analysis | 未確認 | CWE-346 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.9, 43.7.6, 44.5.0, and 45.0.0-alpha.13, pointerLock |
| CVE-2026-113799 | Deferred | 未確認 | CWE-532 | Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verificati |
| CVE-2026-113800 | Undergoing Analysis | 未確認 | CWE-346 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, hid and usb p |
| CVE-2026-113802 | Deferred | 未確認 | CWE-78 | Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file |
| CVE-2026-113808 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stor |
| CVE-2026-113810 | Deferred | 未確認 | CWE-79 | A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting certificate creation fo |
| CVE-2026-113811 | Deferred | 未確認 | CWE-770 | Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory exhaustion via a never-cleared failure shift cache in search. The failure shift is cached for each |
| CVE-2026-113812 | Awaiting Analysis | 未確認 | CWE-295 | Mozilla::CA versions before 20261020 for Perl provide a CA certificate bundle containing a root linked to compromised intermediates. The bundle includes "emSign ECC Root CA - G3", |
| CVE-2026-113866 | Awaiting Analysis | 未確認 | CWE-523 | When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request includ |
| CVE-2026-113867 | Awaiting Analysis | 未確認 | Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies, a remote XMPP user | |
| CVE-2026-113868 | Awaiting Analysis | 未確認 | CWE-125 | When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that c |
| CVE-2026-113869 | Awaiting Analysis | 未確認 | CWE-416 | When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while decrypting an S/MIME message, the message load could finish or be |
| CVE-2026-113870 | Awaiting Analysis | 未確認 | CWE-116 | MongoDB Compass improperly escapes certain BSON values when converting a stored view’s aggregation pipeline into editable source. When a user connects to a MongoDB deployment conta |
| CVE-2026-113872 | Awaiting Analysis | 未確認 | CWE-248, CWE-404 | multer is a middleware for Node.js that handles multipart/form-data file uploads. In versions from 2.0.0 before 2.5.0, when multer is configured with an asynchronous fileFilter, a |
| CVE-2026-113873 | Awaiting Analysis | 未確認 | CWE-409 | SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send compressed payloads that exhaust server heap or crash certain servi |
| CVE-2026-113874 | Awaiting Analysis | 未確認 | CWE-863 | SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by |
| CVE-2026-113875 | Awaiting Analysis | 未確認 | CWE-862 | On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation permissions, they may be able to query and read resources that they |
| CVE-2026-113876 | Awaiting Analysis | 未確認 | CWE-863 | SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions. A user with CREATE but not READ permissions could submit a conditional create whose predic |
| CVE-2026-113877 | Received | 未確認 | CWE-624 | HTTP::Headers::ActionPack versions before 0.10 for Perl allow CPU exhaustion via Accept-Language ranges matched as regular expressions. _language_match interpolates each Accept-La |
| CVE-2026-113951 | Received | 未確認 | If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugi | |
| CVE-2026-11399 | Deferred | 未確認 | CWE-639 | The Helpdesk Support Ticket System for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.6 via the 'id' p |
| CVE-2026-114038 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the |
| CVE-2026-114039 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is the function mysqli_query of the file report_search.php. Executing a manipulatio |
| CVE-2026-114040 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in DT42 BerryNet up to 3.10.2. The affected element is the function DLModelManager.get_model_meta of the file berrynet/dlmodelmgr.py of t |
| CVE-2026-114041 | Awaiting Analysis | 未確認 | CWE-125 | FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a byte count as wide-character printf precision. A malicious R |
| CVE-2026-114042 | Awaiting Analysis | 未確認 | CWE-416 | FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the owned-stream deallocator when totalLength is smaller than the |
| CVE-2026-114043 | Awaiting Analysis | 未確認 | CWE-125 | FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because winpr_read_png_from_buffer() allocates a bit-packed buffer for P |
| CVE-2026-114044 | Awaiting Analysis | 未確認 | CWE-125 | FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP servers to read beyond surface buffers by supplying unvalidat |
| CVE-2026-114045 | Awaiting Analysis | 未確認 | CWE-122 | FreeRDP before 3.32.1 contains a heap-based buffer overflow in the server-side rdpsnd channel because an integer wraparound in rdpsnd_server_select_format() DVI_ADPCM block-alignme |
| CVE-2026-114046 | Awaiting Analysis | 未確認 | CWE-476 | FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null per-reader name in SCardGetStatusChange requests. A malicious |
| CVE-2026-114047 | Awaiting Analysis | 未確認 | CWE-295 | FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module i |
| CVE-2026-114048 | Deferred | 未確認 | CWE-352 | WWBN AVideo before 24.0 contains a cross-site request forgery vulnerability in legacy endpoints like playlistStatus.php that bypass the .json.php-only autoCSRFGuard() check. Attack |
| CVE-2026-114049 | Undergoing Analysis | 未確認 | CWE-440 | vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense() that allows remote attackers to constrain other clients' outputs by leaving stale allowed_token_ids r |
| CVE-2026-114050 | Undergoing Analysis | 未確認 | CWE-345 | vLLM before 0.31.0 uses a client-supplied multimodal uuid verbatim as cache identity with no consistency check on cache hits, allowing engine crashes. Unauthenticated attackers can |
| CVE-2026-114051 | Undergoing Analysis | 未確認 | CWE-248 | vLLM before 0.31.0 skips the min_tokens <= max_tokens check for /inference/v1/generate requests with a null max_tokens, so the EngineCore input thread later dies on an uncaught VLL |
| CVE-2026-114052 | Undergoing Analysis | 未確認 | CWE-770 | vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-controlled mm_processo |
| CVE-2026-114053 | Undergoing Analysis | 未確認 | CWE-94 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which revision o |
| CVE-2026-114054 | Undergoing Analysis | 未確認 | CWE-284 | vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF Image |
| CVE-2026-114055 | Undergoing Analysis | 未確認 | CWE-400 | vLLM from 0.7.3 before 0.31.0 contains an uncontrolled resource consumption vulnerability that allows remote clients to control multimodal processor parameters by supplying per-req |
| CVE-2026-114056 | Deferred | 未確認 | CWE-862 | ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDAT |
| CVE-2026-114057 | Deferred | 未確認 | CWE-862 | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows authenticated users to enumerate all database names. Att |
| CVE-2026-114058 | Deferred | 未確認 | CWE-862 | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets authenticated users read other databases' schema metadata. |
| CVE-2026-114059 | Deferred | 未確認 | CWE-863 | ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because Grem |
| CVE-2026-114060 | Awaiting Analysis | 未確認 | CWE-601 | SvelteKit (@sveltejs/kit) before 3.0.0 contains an open redirect vulnerability in enhanced form actions (use:enhance) on routes accepting paths beginning with a double slash. Attac |
| CVE-2026-114061 | Awaiting Analysis | 未確認 | CWE-79 | SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a cache-control header value set via setHeaders is inserted withou |
| CVE-2026-114062 | Awaiting Analysis | 未確認 | CWE-918 | SvelteKit before 3.0.0 contains a server-side request forgery vulnerability that allows remote attackers to reach internal services because self-fetch fallbacks follow HTTP redirec |
| CVE-2026-114063 | Awaiting Analysis | 未確認 | CWE-22 | SvelteKit (@sveltejs/kit) from 2.10.0 before 3.0.0 contains a path traversal vulnerability in the vite preview server on Windows that allows unauthenticated attackers to read files |
| CVE-2026-114064 | Awaiting Analysis | 未確認 | CWE-203 | Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that allows super-admin users to probe internal network addresses, includi |
| CVE-2026-114065 | Deferred | 未確認 | CWE-89 | Trigger.dev before 4.7.3 contains a tenant filtering bypass vulnerability that allows authenticated users to read other tenants' data by using placeholder table syntax in POST /api |
| CVE-2026-114066 | Deferred | 未確認 | CWE-639 | Trigger.dev before 4.7.0 contains a missing authorization vulnerability that allows holders of unrestricted environment API keys to block runs they do not own by supplying a foreig |
| CVE-2026-114067 | Deferred | 未確認 | CWE-863 | Trigger.dev 4.5.0 before 4.6.2 contains an improper authorization vulnerability in the PUT snapshot-url session endpoint that allows public session token holders to obtain presigne |
| CVE-2026-114068 | Deferred | 未確認 | CWE-639 | Trigger.dev before 4.6.0 contains a missing authorization vulnerability in the waitpoint token wait endpoint that allows authenticated attackers to block runs belonging to other or |
| CVE-2026-114069 | Deferred | 未確認 | CWE-269 | Trigger.dev before 4.6.0 contains an improper authorization vulnerability in the GET /api/v1/projects/:projectRef/envvars endpoint, which returns the environment's root API key as |
| CVE-2026-114070 | Deferred | 未確認 | CWE-522 | Trigger.dev 4.5.0 before 4.6.0 contains an information disclosure vulnerability in the Dashboard Agent input proxy that stores a delegated user-actor token in browser-readable sess |
| CVE-2026-114071 | Deferred | 未確認 | CWE-862 | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows authenticated project members to complete another member's DEVELOPMENT environment waitpoint by |
| CVE-2026-114072 | Deferred | 未確認 | CWE-352 | The Trigger.dev webapp before 4.5.12 contains a cross-site request forgery vulnerability in its organization-level Slack OAuth flow, which uses the organization ID as the OAuth sta |
| CVE-2026-114073 | Deferred | 未確認 | CWE-532 | Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environment secret values in debug deployment logs by serializing unredacted env |
| CVE-2026-114074 | Deferred | 未確認 | CWE-918 | Trigger.dev before 4.5.10 contains a server-side request forgery vulnerability that allows authenticated project members to bypass webhook SSRF protections by targeting the non-glo |
| CVE-2026-114075 | Deferred | 未確認 | CWE-863 | Trigger.dev before 4.5.12 contains an authorization bypass vulnerability that allows holders of capability-restricted user-actor tokens to create alert channels by using the legacy |
| CVE-2026-114076 | Deferred | 未確認 | CWE-918 | Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated tenants to make the webapp server send POST requests to internal hosts |
| CVE-2026-114077 | Deferred | 未確認 | CWE-639 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in createDeploymentBackgroundWorkerV4 that resolves a WorkerDeployment by friendlyId alone, without environm |
| CVE-2026-114078 | Deferred | 未確認 | CWE-639 | Trigger.dev before 4.5.6 contains an authorization bypass vulnerability in DeleteTaskScheduleService and SetActiveOnTaskScheduleService that allows authenticated users to delete or |
| CVE-2026-114079 | Deferred | 未確認 | CWE-639 | Trigger.dev before 4.5.6 contains an improper authorization vulnerability that allows holders of lower-trust environment API keys to cancel other environments' deployments because |
| CVE-2026-114080 | Deferred | 未確認 | CWE-918 | Trigger.dev before 4.5.2 contains a blind server-side request forgery vulnerability that allows authenticated project members to make the server send requests by setting unvalidate |
| CVE-2026-114081 | Deferred | 未確認 | CWE-89 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the TSQL query compiler, which concatenates window-function names into generated ClickHouse SQL without allowlis |
| CVE-2026-114082 | Deferred | 未確認 | CWE-862 | Trigger.dev before 4.6.2 contains an authorization vulnerability that allows public-token holders with session write access to obtain environment-wide S2 stream credentials via ses |
| CVE-2026-114083 | Deferred | 未確認 | CWE-22 | Trigger.dev before 4.5.0-rc.3 contains a path traversal vulnerability in the api/v1/packets and api/v2/packets endpoints that allows authenticated tenants to escape their object ke |
| CVE-2026-114084 | Deferred | 未確認 | CWE-89 | Trigger.dev before 4.5.6 contains an SQL injection vulnerability in the /realtime/v1/runs endpoint, which concatenates the unescaped tags query parameter into the ElectricSQL shape |
| CVE-2026-114085 | Deferred | 未確認 | CWE-306 | Trigger.dev through 4.7.6 contains a missing authentication vulnerability in the supervisor workload server that allows workloads to manipulate runs belonging to other deployments |
| CVE-2026-114086 | Deferred | 未確認 | CWE-306 | Trigger.dev before 4.5.5 contains a missing authentication vulnerability in the realtime streams POST handler that allows unauthenticated attackers to inject data into run streams. |
| CVE-2026-114087 | Deferred | 未確認 | CWE-653 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC_L |
| CVE-2026-114088 | Deferred | 未確認 | CWE-798 | Trigger.dev before 4.5.4 contains a hardcoded default secret vulnerability in the /coordinator Socket.IO namespace that allows unauthenticated attackers to connect using the publis |
| CVE-2026-114089 | Deferred | 未確認 | CWE-352 | Trigger.dev before 4.5.2 contains a cross-site request forgery vulnerability in the CLI authorization-code flow because loading /account/authorization-code/<code> mints a Personal |
| CVE-2026-114090 | Awaiting Analysis | 未確認 | CWE-306 | Trigger.dev cli-v3 from 3.0.0 before 4.5.4 contains a missing authentication vulnerability in the trigger dev --mcp server, which binds all network interfaces and exposes the /sse |
| CVE-2026-114091 | Deferred | 未確認 | CWE-639 | Trigger.dev before 4.5.0 looks up runs by friendlyId alone in the api.v1.runs.$runParam.replay route without scoping the lookup to the caller's runtime environment. An attacker hol |
| CVE-2026-114092 | Deferred | 未確認 | CWE-306 | Trigger.dev before 4.5.0 performs no authentication or organization check in the action handler of the dashboard run replay route (resources.taskruns.$runParam.replay) and looks up |
| CVE-2026-114093 | Deferred | 未確認 | CWE-352 | Trigger.dev before 4.5.6 contains a cross-site request forgery vulnerability that allows remote attackers to log out authenticated users by sending a link to the GET-based /logout |
| CVE-2026-114094 | Deferred | 未確認 | CWE-22 | Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository wit |
| CVE-2026-114095 | Deferred | 未確認 | CWE-835 | Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause infinite recursion via self-referential OFS_DELTA objects. Att |
| CVE-2026-114096 | Deferred | 未確認 | CWE-59 | Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=[...]) that allows attackers to write arbitrary files by abusing raw os.open |
| CVE-2026-114097 | Deferred | 未確認 | CWE-22 | Dulwich from 0.23.1 before 1.2.8 contains a path traversal vulnerability in CommitFilter._apply_index_filter() that allows attackers to write files outside the working directory vi |
| CVE-2026-114098 | Deferred | 未確認 | CWE-22 | Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files outside the worktree through intermediate |
| CVE-2026-114099 | Awaiting Analysis | 未確認 | CWE-20 | Coraza from 3.0.0 before 3.8.1 has a JSON body processor that flattens nested properties into dot-separated ARGS_POST names without escaping literal dots, so distinct properties co |
| CVE-2026-114100 | Awaiting Analysis | 未確認 | CWE-20 | Coraza from 3.0.4 before 3.8.1 contains a request body inspection bypass because request-body processor selection compares the entire Content-Type value exactly, so URL-encoded bod |
| CVE-2026-114101 | Awaiting Analysis | 未確認 | CWE-20 | Coraza before 3.8.1 extracts multipart upload filenames with Go's mime.ParseMediaType, which silently ignores RFC 5987 filename* parameters whose charset is not utf-8 or us-ascii. |
| CVE-2026-114102 | Deferred | 未確認 | CWE-248 | adm-zip before 0.6.1 contains a denial of service vulnerability that allows unauthenticated attackers to crash the Node.js process via a malformed ZIP file, because inflateAsync in |
| CVE-2026-114103 | Deferred | 未確認 | CWE-400 | adm-zip 0.6.0 contains a decompression bomb protection bypass that allows attackers to evade the maxOutputLength guard by targeting the asynchronous getDataAsync() path in methods/ |
| CVE-2026-114104 | Deferred | 未確認 | CWE-436 | adm-zip before 0.6.1 contains an inconsistent entry resolution vulnerability that allows attackers to bypass content validation by supplying ZIP archives with duplicate entry names |
| CVE-2026-114105 | Deferred | 未確認 | CWE-732 | Adm-zip before 0.6.1 contains an incorrect permission assignment vulnerability that allows attackers to set setuid, setgid, or sticky bits on extracted files when keepOriginalPermi |
| CVE-2026-114106 | Deferred | 未確認 | CWE-22 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a path traversal vulnerability that allows remote attackers to read sensitive server files through LLM agent file-read tools. At |
| CVE-2026-114107 | Deferred | 未確認 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains an indirect prompt injection vulnerability that allows remote attackers to execute shell commands as root by planting instructio | |
| CVE-2026-114108 | Deferred | 未確認 | CWE-306 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability that allows unauthenticated attackers to access the FastAPI surface because require_auth( |
| CVE-2026-114109 | Deferred | 未確認 | CWE-22 | uv before 0.11.15 contains a path traversal vulnerability that allows malicious wheels to write files outside the scripts directory via crafted console_scripts or gui_scripts entry |
| CVE-2026-114110 | Awaiting Analysis | 未確認 | CWE-23 | Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by supplying wheels with relative traversal paths in RECORD entries. |
| CVE-2026-114111 | Awaiting Analysis | 未確認 | CWE-416 | sharp before 0.35.5 bundles a librsvg dependency affected by a memory-related vulnerability (CVE-2026-96889) that, under certain runtime-specific conditions, can lead to code execu |
| CVE-2026-114112 | Deferred | 未確認 | CWE-122 | Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attack |
| CVE-2026-114113 | Awaiting Analysis | 未確認 | Sharp before 0.35.0 bundles a version of libvips affected by multiple vulnerabilities (CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591 and CVE-2026-69242) in its GIF | |
| CVE-2026-114114 | Deferred | 未確認 | CWE-176 | Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8 byte col_offset values in vyper/ast/parse.py, so multi-byte |
| CVE-2026-114115 | Awaiting Analysis | 未確認 | CWE-843 | Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays with narrower inner bounds using the wider result type's memory |
| CVE-2026-114116 | Deferred | 未確認 | CWE-436 | Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which treats characters like form feed and U+2028 as line breaks the Pyt |
| CVE-2026-114117 | Deferred | 未確認 | CWE-682 | Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where K is any nonzero integer literal, is compiled to the constan |
| CVE-2026-114118 | Deferred | 未確認 | CWE-681 | Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction without first checking that code_offset is below the blueprint's c |
| CVE-2026-114119 | Deferred | 未確認 | CWE-798 | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that is shared across all installations and cannot be changed wit |
| CVE-2026-114120 | Awaiting Analysis | 未確認 | CWE-862 | SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level users to change any post's status and publish date via the wps |
| CVE-2026-114121 | Undergoing Analysis | 未確認 | CWE-346 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.3, 43.7.0, 44.3.0, and 45.0.0-alpha.5, requests to o |
| CVE-2026-114122 | Undergoing Analysis | 未確認 | CWE-125 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data re |
| CVE-2026-114123 | Deferred | 未確認 | CWE-1188, CWE-306 | D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metadata. Prior to version 1.11.0, the officially documented Azur |
| CVE-2026-114124 | Undergoing Analysis | 未確認 | CWE-125 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9, frame data re |
| CVE-2026-114125 | Awaiting Analysis | 未確認 | CWE-1021, CWE-346, CWE-94 | Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, a malicious website can |
| CVE-2026-114126 | Awaiting Analysis | 未確認 | CWE-22, CWE-306, CWE-94 | Storybook is a frontend workshop for building user interface components and pages in isolation. From 8.0.0 until 8.6.19, 9.1.21, 10.6.2, and 11.0.0-alpha.6, the Storybook developme |
| CVE-2026-114127 | Awaiting Analysis | 未確認 | CWE-79 | Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties within the |
| CVE-2026-114128 | Awaiting Analysis | 未確認 | CWE-79 | Astro is a web framework for content-driven websites. Prior to 7.3.2, Astro's JSX and MDX rendering pipeline treats string children of script and style elements as trusted HTML wit |
| CVE-2026-114129 | Awaiting Analysis | 未確認 | CWE-407 | stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint. From 2.0.0 until 3.7.0, FlexAssembler compiles string and regular |
| CVE-2026-114130 | Awaiting Analysis | 未確認 | CWE-79 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.0, an incomplete fix for CVE-2026-53722 allows an application with pages disabled to render a script-capab |
| CVE-2026-114131 | Awaiting Analysis | 未確認 | CWE-436, CWE-863 | Nuxt is an open-source web development framework for Vue.js. From 3.11.0 until 3.21.4 and 4.4.4, Nuxt compares route-rule keys with the raw request path while route resolution deco |
| CVE-2026-114132 | Awaiting Analysis | 未確認 | CWE-178, CWE-863 | Nuxt is an open-source web development framework for Vue.js. Prior to 4.6.2, Nuxt resolves pages case-insensitively by default while Nitro matches server-side route-rule keys case- |
| CVE-2026-114133 | Awaiting Analysis | 未確認 | CWE-79 | Nuxt is an open-source web development framework for Vue.js. From 3.13.0 until 4.6.2, the server-island renderer serializes raw useHeadSafe entry input into the island response wit |
| CVE-2026-114135 | Awaiting Analysis | 未確認 | CWE-862 | Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the normal KernelWebsocketHandler with WebSocketChannelsHand |
| CVE-2026-114136 | Awaiting Analysis | 未確認 | CWE-409, CWE-770 | Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_framework/parsers.py uses the client-supplied Content-Type charset value |
| CVE-2026-114137 | Awaiting Analysis | 未確認 | CWE-390, CWE-613 | Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/authtoken/models.py uses the proxy's user-id pk while the |
| CVE-2026-114138 | Awaiting Analysis | 未確認 | CWE-400, CWE-407 | Django REST framework is a toolkit for building Web APIs. Prior to 3.18.2, DefaultContentNegotiation.get_accept_list in rest_framework/negotiation.py accepts an unbounded number an |
| CVE-2026-114139 | Awaiting Analysis | 未確認 | CWE-693 | Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middle |
| CVE-2026-114140 | Awaiting Analysis | 未確認 | CWE-22 | The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/prep |
| CVE-2026-114141 | Deferred | 未確認 | CWE-407 | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, the toml.parse() compiler's addTableArray() function in lib/compiler.js rescans the complete assignedPaths a |
| CVE-2026-114142 | Deferred | 未確認 | CWE-1321 | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() can write attacker-controlled properties to Object.prototype because quoteDottedString() in lib |
| CVE-2026-114143 | Deferred | 未確認 | CWE-407 | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() repeatedly slices and rejoins every path prefix in lib/compiler.js while processing long dotted |
| CVE-2026-114144 | Deferred | 未確認 | CWE-400, CWE-770 | toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js to |
| CVE-2026-114145 | Awaiting Analysis | 未確認 | CWE-696 | GitPython is a python library used to interact with Git repositories. Prior to 3.2.1, create_submodule() in git/objects/submodule/base.py accepts an attacker-influenced submodule p |
| CVE-2026-114175 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: |
| CVE-2026-114176 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects eRoom: |
| CVE-2026-114177 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Xpro Xpro Elementor Addons xpro-elementor-addons allows Cross Site Request Forgery.This issue affects Xpro Elementor Addons: from |
| CVE-2026-114178 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Grid W3 Total Cache w3-total-cache allows Stored XSS.This issue affects W |
| CVE-2026-114179 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wordplus BP Better Messages bp-better-messages allows DOM-Based XSS.This issue |
| CVE-2026-114180 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Wpmet Metform metform allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Metform: from n/a through 4. |
| CVE-2026-114182 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in IdeaBox Creations PowerPack Addons for Elementor powerpack-lite-for-elementor allows Exploiting Incorrectly Configured Access Control Securit |
| CVE-2026-114184 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes Elementor Addon Elements addon-elements-for-elementor-page-builder all |
| CVE-2026-114190 | Received | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cache litespeed-cache allows Retrieve Embedded Sensitive Data.This issue a |
| CVE-2026-114191 | Received | 未確認 | CWE-862 | Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-woocommerce allows Exploiting Incorrectly Configured Access Cont |
| CVE-2026-114192 | Received | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpEventl |
| CVE-2026-114194 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Reflected XSS.This issue affects Ad I |
| CVE-2026-114195 | Deferred | 未確認 | CWE-538 | Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WP Desk ShopMagic shopmagic-for-woocommerce allows Retrieve Embedded Sensitive Data |
| CVE-2026-114196 | Received | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Injection.This issue affects Paytium: from n/a through 5.0.5. |
| CVE-2026-114197 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the capa util |
| CVE-2026-114198 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a crafted .viv or .exe.viv workspace is passed to the floss uti |
| CVE-2026-114219 | Deferred | 未確認 | CWE-798 | NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decrypt login |
| CVE-2026-114220 | Deferred | 未確認 | CWE-295 | NT OneAPP developed by NewType Infortech has an Improper Certificate Validation vulnerability. Unauthenticated network-adjacent attackers can perform a man-in-the-middle attack by |
| CVE-2026-114221 | Deferred | 未確認 | CWE-522 | NT OneAPP developed by NewType Infortech has a Credential Disclosure vulnerability. Unauthenticated remote attackers can trigger an HTTP Basic Authentication challenge from an unva |
| CVE-2026-114222 | Deferred | 未確認 | CWE-287 | NT OneAPP developed by NewType Infortech has an Authentication Bypass vulnerability. Unauthenticated local attackers can bypass the App PIN lock mechanism via a Deep Link, thereby |
| CVE-2026-114223 | Deferred | 未確認 | CWE-312 | NT OneAPP developed by NewType Infortech has an Exposure of Sensitive Information vulnerability. Unauthenticated local attackers can extract plaintext usernames and passwords from |
| CVE-2026-114236 | Awaiting Analysis | 未確認 | CWE-772 | storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can exhaust the process |
| CVE-2026-114242 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the functi |
| CVE-2026-114243 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this |
| CVE-2026-114245 | Deferred | 未確認 | CWE-266, CWE-285 | A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue |
| CVE-2026-114248 | Deferred | 未確認 | CWE-287, CWE-306 | A security vulnerability has been detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This affec |
| CVE-2026-114249 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. This vulnerability affec |
| CVE-2026-114250 | Deferred | 未確認 | CWE-74, CWE-89 | A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. This issue affects some unknown processing of the file /pages/cust_ |
| CVE-2026-114251 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. Impacted is an unknown function of the file /pages/cust_de |
| CVE-2026-114252 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac. The affected element is an unknown function of the file /pages/ |
| CVE-2026-114253 | Deferred | 未確認 | CWE-73 | A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. The impacted element is the function include of the file inde |
| CVE-2026-114254 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function Login of the file admin_class.php. |
| CVE-2026-114255 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This impacts the function save_user of the file admin_cl |
| CVE-2026-114256 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save_folder/delete_folder/delete_fil |
| CVE-2026-114257 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this vulnerability is the function re |
| CVE-2026-114258 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected by this issue is some unknown functionality of the fil |
| CVE-2026-114259 | Deferred | 未確認 | CWE-284, CWE-434 | A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This affects the function save_files of the file admin_class.php. Exec |
| CVE-2026-114260 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. This vulnerability affects the function delete_folder of the |
| CVE-2026-114261 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This issue affects the function index/store/update/destroy of the file app/H |
| CVE-2026-114262 | Deferred | 未確認 | CWE-284, CWE-434 | A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. Impacted is the function store of the file app/Http/Controllers/FileController.ph |
| CVE-2026-114263 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.0. The affected element is the function mysqli_query of the file individual_report_search.php. |
| CVE-2026-114264 | Deferred | 未確認 | CWE-74, CWE-89 | A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.0. The impacted element is an unknown function of the file edit_member.php. Performing a m |
| CVE-2026-114265 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in ProjectWorlds Advanced Library Management System 1.0. This affects the function mysqli_query of the file returned_book_search.php of the component |
| CVE-2026-114266 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in ProjectWorlds Advanced Library Management System 1.0. This impacts the function mysqli_query of the file profile.php. The manipulation |
| CVE-2026-114267 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missin |
| CVE-2026-114268 | Deferred | 未確認 | CWE-119, CWE-120 | A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBasicSet of the file /goform/WifiBasicSet. This manipulation of the argu |
| CVE-2026-114348 | Undergoing Analysis | 未確認 | CWE-1289, CWE-209 | webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from 5.1.0 before 5.2.7 and in version 6.0.0, the unauthenticated open-edi |
| CVE-2026-114353 | Deferred | 未確認 | CWE-912 | Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-pr |
| CVE-2026-114354 | Deferred | 未確認 | CWE-78, CWE-862 | Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a loca |
| CVE-2026-114355 | Deferred | 未確認 | CWE-78 | OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local unprivileged process to |
| CVE-2026-114356 | Deferred | 未確認 | CWE-862 | Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a local application with no p |
| CVE-2026-114357 | Deferred | 未確認 | CWE-306 | Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an |
| CVE-2026-114361 | Deferred | 未確認 | CWE-266, CWE-285 | A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gateway/app.py of the component Identity Mode. Performing a manipulation o |
| CVE-2026-114362 | Deferred | 未確認 | CWE-918 | A flaw has been found in HarnessRouter up to 0.31.12. This impacts an unknown function of the file gateway/app.py of the component Targets Test Endpoint. Executing a manipulation o |
| CVE-2026-114370 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in the PathResourceManager component of the Undertow web server. This component is responsible for serving static files from the file system. The issue occurs beca |
| CVE-2026-114374 | Deferred | 未確認 | CWE-918 | A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata_api.go of the component fetch-metadat |
| CVE-2026-114375 | Deferred | 未確認 | CWE-22 | A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.1. Affected is the function RenameFileHandler of the file internal/handlers/files.go of the component Files |
| CVE-2026-114376 | Deferred | 未確認 | CWE-22 | A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerability is the function SaveHandler/SourceHandler of the file internal/handlers/editor |
| CVE-2026-114377 | Deferred | 未確認 | CWE-22 | A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.1. Affected by this issue is the function DeleteComment of the file internal/comments/comments.go of |
| CVE-2026-114378 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /deleteproduct.php. The manipulation of the argument ID resul |
| CVE-2026-114379 | Deferred | 未確認 | CWE-73 | A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers |
| CVE-2026-114380 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. Impacted is an unknown function of the file /inserttrans.php. Performing a manipulation of the argument p |
| CVE-2026-114381 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was determined in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /orderdetail.php. Executing a manipulation o |
| CVE-2026-114382 | Deferred | 未確認 | CWE-119, CWE-121 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manip |
| CVE-2026-114383 | Deferred | 未確認 | CWE-119, CWE-121 | A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This mani |
| CVE-2026-114384 | Deferred | 未確認 | CWE-74, CWE-89 | A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. Affected is an unknown function of the file /transactionsave.php. Such manipulation of t |
| CVE-2026-114386 | Awaiting Analysis | 未確認 | CWE-770 | Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from run_code in the CodeMode toolset. Users or prompt-injected cont |
| CVE-2026-114387 | Deferred | 未確認 | CWE-862 | Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding only access_dashboard to create administrators and grant permis |
| CVE-2026-114388 | Deferred | 未確認 | CWE-862 | Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in GradebookController that allows unauthenticated users to modif |
| CVE-2026-114389 | Deferred | 未確認 | CWE-639 | Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAnswerGrade that allows any authenticated user to obtain AI gra |
| CVE-2026-114390 | Deferred | 未確認 | CWE-862 | Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX handlers under public/main/inc/ajax/ that exposes user names and cert |
| CVE-2026-114391 | Deferred | 未確認 | CWE-863 | ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in users skip group-based ACL checks for any method containing |
| CVE-2026-114392 | Awaiting Analysis | 未確認 | CWE-639 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets outside their groups via GET /api/v1/tickets/:uid. Attackers c |
| CVE-2026-114393 | Awaiting Analysis | 未確認 | CWE-639 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify tickets outside their groups via PUT /api/v1/tickets/:id and PUT |
| CVE-2026-114394 | Awaiting Analysis | 未確認 | CWE-639 | Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content attributed to other users by supplying user-controlled owner I |
| CVE-2026-114395 | Awaiting Analysis | 未確認 | CWE-639 | Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated users to post messages as other users due to an incomplete CVE-2 |
| CVE-2026-114396 | Awaiting Analysis | 未確認 | CWE-943 | Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to inject code into a MongoDB $where clause via the search paramete |
| CVE-2026-114397 | Awaiting Analysis | 未確認 | CWE-1188 | Trudesk through 1.2.11 contains a missing authentication vulnerability in debug routes enabled whenever NODE_ENV is unset, letting unauthenticated attackers invoke them remotely. A |
| CVE-2026-114398 | Awaiting Analysis | 未確認 | CWE-434 | Trudesk through 1.2.11 contains an unrestricted file upload vulnerability that allows any authenticated user to place HTML or SVG files in the public webroot via the uploadlogo, up |
| CVE-2026-114399 | Awaiting Analysis | 未確認 | CWE-22 | Trudesk through 1.2.11 contains a path traversal vulnerability that allows administrators to delete arbitrary files by supplying encoded traversal sequences to DELETE /api/v1/backu |
| CVE-2026-114400 | Awaiting Analysis | 未確認 | CWE-552 | Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers to download private ticket attachments under /uploads. Because express. |
| CVE-2026-114401 | Awaiting Analysis | 未確認 | CWE-943 | Trudesk through 1.2.11 contains a regular expression injection vulnerability that allows unauthenticated attackers to enumerate usernames by submitting regex patterns to POST /api/ |
| CVE-2026-114402 | Awaiting Analysis | 未確認 | CWE-22 | Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsController.uploadImage that allows authenticated users to overwrite other users' |
| CVE-2026-114403 | Awaiting Analysis | 未確認 | CWE-502 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted present |
| CVE-2026-114404 | Awaiting Analysis | 未確認 | CWE-79 | PHPOffice PHPPresentation 1.2.0 contains a cross-site scripting vulnerability in the HTML writer that allows attackers who supply presentation content to inject script into generat |
| CVE-2026-114405 | Deferred | 未確認 | CWE-129 | Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2. |
| CVE-2026-114406 | Awaiting Analysis | 未確認 | CWE-295 | The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed i |
| CVE-2026-114407 | Deferred | 未確認 | CWE-79 | e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET paramet |
| CVE-2026-114429 | Received | 未確認 | CWE-79 | The WPVR WordPress plugin before 9.0.3 does not properly sanitise and escape some of its tour hotspot content before storing it and outputting it on the front end, which could all |
| CVE-2026-114437 | Deferred | 未確認 | CWE-348 | In the Golang Chi web framework, the ClientIPFromXFF middleware skips any X-Forwarded-For entry in a configured trusted CIDR but never verifies that the direct TCP peer in http.Req |
| CVE-2026-114438 | Awaiting Analysis | 未確認 | CWE-287 | A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a |
| CVE-2026-114439 | Deferred | 未確認 | CWE-287, CWE-306 | A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown functionality of the file admin/session.php of the component Session Ha |
| CVE-2026-114440 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was identified in oretnom23 php-travel-agency-system. This affects an unknown part of the file admin/delete.php. The manipulation of the argument costomer_id/ticket |
| CVE-2026-114441 | Deferred | 未確認 | CWE-74, CWE-89 | A weakness has been identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/update.php. This manipulation of the argument act |
| CVE-2026-114457 | Awaiting Analysis | 未確認 | CWE-170 | A flaw was found in mod_qos. An unauthenticated remote attacker could cause a Denial of Service (DoS) by sending a specially crafted JSON request when JSON body filtering is enable |
| CVE-2026-114458 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in mod_qos. An unauthenticated remote attacker can cause a Denial of Service (DoS) by maintaining numerous concurrent low-rate connections to a target server. When |
| CVE-2026-114459 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in mod_qos. When inspecting HTTP response bodies, improper boundary checking can cause the module to read memory outside allocated buffer boundaries. An unauthenti |
| CVE-2026-114460 | Awaiting Analysis | 未確認 | CWE-193 | A flaw was found in mod_qos. An off-by-one pointer calculation error occurs when merging request body parameters with an existing URL query, which truncates the query string during |
| CVE-2026-114462 | Deferred | 未確認 | CWE-59 | Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2. |
| CVE-2026-114463 | Deferred | 未確認 | The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as webhook:{route_name}:{delivery_id} and re-derives the authorizing route by splitti | |
| CVE-2026-114470 | Awaiting Analysis | 未確認 | CWE-352 | Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote attacker to make an authenticated user's browser perform a state-cha |
| CVE-2026-114471 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a local user who can read the server's log, or any |
| CVE-2026-114472 | Awaiting Analysis | 未確認 | CWE-410 | Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to cause a certific |
| CVE-2026-114473 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows a remote attacker to relay mail through the server to outsi |
| CVE-2026-114474 | Awaiting Analysis | 未確認 | CWE-348 | Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker |
| CVE-2026-114475 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to nam |
| CVE-2026-114476 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential holds the manage_rol |
| CVE-2026-114477 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote authenticated user whose credential is confined to named domai |
| CVE-2026-114478 | Awaiting Analysis | 未確認 | CWE-441 | Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they w |
| CVE-2026-114479 | Awaiting Analysis | 未確認 | CWE-636 | Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have a message t |
| CVE-2026-114485 | Awaiting Analysis | 未確認 | CWE-201 | Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and earlier allows an authenticated attacker with delegated user view |
| CVE-2026-114486 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier allows an authenticated non-administrative attacker to bypass the |
| CVE-2026-114487 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and 2026.2.20.0 and earlier allows an authenticated non-administra |
| CVE-2026-114489 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined t |
| CVE-2026-114490 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - |
| CVE-2026-114491 | Awaiting Analysis | 未確認 | CWE-73 | pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG content, allowing attackers to read blocked local files. Attackers |
| CVE-2026-114492 | Deferred | 未確認 | CWE-22 | gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to recursively delete arbitrary directories by supplying traversal sequ |
| CVE-2026-114493 | Awaiting Analysis | 未確認 | CWE-918 | LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can sub |
| CVE-2026-114501 | Undergoing Analysis | 未確認 | CWE-226, CWE-908 | Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im->blocks[0].ptr even when PILLOW_A |
| CVE-2026-114508 | Awaiting Analysis | 未確認 | CWE-470 | Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation |
| CVE-2026-114509 | Awaiting Analysis | 未確認 | CWE-1287, CWE-287 | Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Und |
| CVE-2026-114510 | Awaiting Analysis | 未確認 | CWE-116, CWE-943 | Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications across multiple graph, vector, and search backends. From 0.6.0 until 0.8. |
| CVE-2026-114515 | Deferred | 未確認 | CWE-862 | OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.3, a valid Self-Service Portal u |
| CVE-2026-114519 | Deferred | 未確認 | CWE-862 | Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with a basic role to read the accounts of other users of its own |
| CVE-2026-114570 | Deferred | 未確認 | CWE-79 | WordPress Core is vulnerable to Stored Cross-Site Scripting via Quick Edit in all versions up to, and including, 7.0.2 due to insufficient escaping of user display names. This make |
| CVE-2026-114574 | Deferred | 未確認 | CWE-200, CWE-284 | A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such |
| CVE-2026-114575 | Deferred | 未確認 | CWE-74, CWE-77 | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a mani |
| CVE-2026-114576 | Deferred | 未確認 | CWE-310, CWE-330 | A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id |
| CVE-2026-114577 | Deferred | 未確認 | CWE-74, CWE-89 | A vulnerability was found in oretnom23 php-travel-agency-system. This vulnerability affects unknown code of the file admin/insert.php of the component Insertion Handler. The manipu |
| CVE-2026-114583 | Awaiting Analysis | 未確認 | tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive members outside the intended extra | |
| CVE-2026-114603 | Awaiting Analysis | 未確認 | CWE-1333, CWE-400 | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.from_header in opentelemetry/trace/span.py, reach |
| CVE-2026-114605 | Deferred | 未確認 | CWE-674 | dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wir |
| CVE-2026-114606 | Awaiting Analysis | 未確認 | CWE-200, CWE-22 | draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's rea |
| CVE-2026-114607 | Deferred | 未確認 | CWE-287 | Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with |
| CVE-2026-114608 | Deferred | 未確認 | CWE-502 | Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINT_HOME and loads those files with pickle.load |
| CVE-2026-114609 | Awaiting Analysis | 未確認 | CWE-918 | fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTP(S) URLs and raw local paths supplied thr |
| CVE-2026-114610 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() passes nested SVG <use> references to GraphicsContext.add_item(), whose default c |
| CVE-2026-114611 | Deferred | 未確認 | CWE-295 | OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.3,the Apple MDM enrollment endpo |
| CVE-2026-114612 | Awaiting Analysis | 未確認 | CWE-269, CWE-345, CWE-441 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one c |
| CVE-2026-114613 | Awaiting Analysis | 未確認 | CWE-401 | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserializati |
| CVE-2026-114614 | Undergoing Analysis | 未確認 | CWE-601, CWE-693 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.is_secure_transport() uses a textual prefix comparison for |
| CVE-2026-114615 | Undergoing Analysis | 未確認 | CWE-184, CWE-347 | Authlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers only at byte zero while Authlib |
| CVE-2026-114616 | Undergoing Analysis | 未確認 | CWE-1391, CWE-287, CWE-326 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and verification path accept zero-length k |
| CVE-2026-114617 | Undergoing Analysis | 未確認 | CWE-294, CWE-807 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads the nonce_supported decision from the untrusted ID tok |
| CVE-2026-114618 | Undergoing Analysis | 未確認 | CWE-1188, CWE-287 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.get_audiences() returns an empty list, causing JWTBea |
| CVE-2026-114619 | Undergoing Analysis | 未確認 | CWE-863 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_authorization_request() checks the client-controlled raw req |
| CVE-2026-114620 | Undergoing Analysis | 未確認 | CWE-918 | Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-controlled |
| CVE-2026-114621 | Deferred | 未確認 | CWE-89 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query p |
| CVE-2026-114622 | Deferred | 未確認 | CWE-180, CWE-22 | baserCMS is a website development framework. In versions 5.2.3 before 5.3.2 and 5.4.0 before 5.4.2, the optional BcThemeFile plugin's Admin API validates a raw path in ThemeFilesSe |
| CVE-2026-114623 | Deferred | 未確認 | CWE-200, CWE-22, CWE-863 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, an authenticated user with only theme-file view permission can traverse outside |
| CVE-2026-114624 | Deferred | 未確認 | CWE-502 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the widget-area entity serializes widgets only when the submitted value is an ar |
| CVE-2026-114625 | Analyzed | 掲載 | CWE-89 | VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successf |
| CVE-2026-114629 | Received | 未確認 | CWE-789 | Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body parameters. Web::Dispatch::ParamParser::get_unpacked_body_from |
| CVE-2026-114633 | Deferred | 未確認 | CWE-863 | WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts to delete or modify administrator accounts. Attackers can sub |
| CVE-2026-114634 | Deferred | 未確認 | CWE-918 | WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL() because get_headers() follows redirects without re-validating |
| CVE-2026-114635 | Undergoing Analysis | 未確認 | CWE-288 | Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can se |
| CVE-2026-114636 | Undergoing Analysis | 未確認 | CWE-306 | Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the HTTP router generated for ssl-passthrough Ingresses on non-TLS |
| CVE-2026-114637 | Undergoing Analysis | 未確認 | CWE-488 | Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy connection pool, which fails to pin NTLM/Negotiate-authenticated ba |
| CVE-2026-114638 | Undergoing Analysis | 未確認 | CWE-287 | Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX provider that merges client CAs when auth-tls-secret names collide a |
| CVE-2026-114639 | Undergoing Analysis | 未確認 | CWE-287 | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 contains an authentication bypass because a first request preauthenticated with an Authorization: Negotiate token authenticate |
| CVE-2026-114640 | Undergoing Analysis | 未確認 | CWE-290 | Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX provider that forwards client-supplied Ssl-Client-* headers on th |
| CVE-2026-114641 | Undergoing Analysis | 未確認 | CWE-362 | Traefik 2.11.x before 2.11.58 and 3.x before 3.7.14 contains a race condition in NTLM and Kerberos (Negotiate) backend authentication, where the per-connection sticky round tripper |
| CVE-2026-114642 | Undergoing Analysis | 未確認 | CWE-295 | Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend round tripper in a client-connection slot not keyed by ServersTransport, so one service's TLS |
| CVE-2026-114643 | Awaiting Analysis | 未確認 | CWE-694 | The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON members such as type and coordinates. An application that plac |
| CVE-2026-114644 | Awaiting Analysis | 未確認 | CWE-770 | The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization handling of one BSON value type. An application that deserializes |
| CVE-2026-114645 | Awaiting Analysis | 未確認 | CWE-190 | A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an undersized heap buffer to be allocated when an excessively long cr |
| CVE-2026-114646 | Awaiting Analysis | 未確認 | CWE-130 | A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an application constructs a raw or lazy BSON document object from ex |
| CVE-2026-114647 | Awaiting Analysis | 未確認 | CWE-943 | The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in FindOneAndReplace, unlike other replace operations. An applicati |
| CVE-2026-114648 | Awaiting Analysis | 未確認 | CWE-943 | The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter identifiers used in LINQ queries before placing them into the f |
| CVE-2026-114649 | Awaiting Analysis | 未確認 | CWE-1025 | The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two clients can share cached connections. In an application that creat |
| CVE-2026-114650 | Awaiting Analysis | 未確認 | CWE-838 | A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side field-level encryption to be written without encryption. Under |
| CVE-2026-114651 | Awaiting Analysis | 未確認 | CWE-908 | A memory-handling weakness in the BSON deserialization component of the MongoDB C# Driver may cause data left over from previously processed content to be returned when specially c |
| CVE-2026-114652 | Awaiting Analysis | 未確認 | CWE-943 | A data-query-logic neutralization weakness in the update-statement construction component of the MongoDB C# Driver can cause application-supplied values to be interpreted as query/ |
| CVE-2026-114653 | Awaiting Analysis | 未確認 | CWE-185 | A client-side encryption schema construction component in the MongoDB C# Driver places caller-supplied field identifiers into a position that is interpreted as a pattern expression |
| CVE-2026-114654 | Awaiting Analysis | 未確認 | CWE-681 | A numeric-type conversion flaw in the BSON handling library of the MongoDB C# Driver allows an out-of-range binary subtype value supplied through untrusted textual input to bypass |
| CVE-2026-114655 | Awaiting Analysis | 未確認 | CWE-74 | libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key vault documents, KMS provider configuration and KMS responses in |
| CVE-2026-114656 | Undergoing Analysis | 未確認 | CWE-436 | Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip client-certificate checks because negated Host matcher |
| CVE-2026-114657 | Deferred | 未確認 | CWE-200 | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visitors' HTTP Basic credentials through Twig page content. Author |
| CVE-2026-114658 | Deferred | 未確認 | CWE-269 | Grav Login plugin from 3.6.0 before 3.9.13 contains a missing authorization vulnerability in the login.invite task that allows page authors to obtain super user accounts. Attackers |
| CVE-2026-114659 | Deferred | 未確認 | CWE-424 | Grav Flex Objects plugin 1.4.0 before 1.4.17 contains an authorization bypass because its generic /api/v1/flex-objects/pages API routes check only directory-level admin.pages permi |
| CVE-2026-114660 | Deferred | 未確認 | CWE-470 | Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexField() that allows page authors to call arbitrary Flex object methods v |
| CVE-2026-114661 | Deferred | 未確認 | CWE-862 | OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway tunnels |
| CVE-2026-114662 | Deferred | 未確認 | CWE-352 | Obot before 0.26.0 contains an authentication bypass vulnerability in the CLI login flow that allows unauthenticated attackers to steal API keys by choosing token request IDs. Atta |
| CVE-2026-114663 | Deferred | 未確認 | CWE-706 | Vyper 0.4.0b1 through 0.5.0b1 miscompiles unfoldable constants and omitted default arguments from imported modules, because parse_Name resolves their names in the using function's |
| CVE-2026-114664 | Deferred | 未確認 | CWE-89 | Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the frappe.desk.doctype.event.event.get_events method, which fails to properly neutralize user-suppl |
| CVE-2026-114665 | Deferred | 未確認 | CWE-59 | Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary fi |
| CVE-2026-114693 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs All-in-One Video Gallery all-in-one-video-gallery allows Store |
| CVE-2026-114694 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pixelite Events Manager events-manager allows Reflected XSS.This issue affects |
| CVE-2026-114695 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infomaniak Network VOD Infomaniak vod-infomaniak allows Stored XSS.This issue |
| CVE-2026-114696 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in miniOrange Page Restriction WordPress (WP) page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels. |
| CVE-2026-114697 | Received | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects |
| CVE-2026-114698 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects my |
| CVE-2026-114699 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in yoomoney ЮKassa для WooCommerce yookassa allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ЮKassa дл |
| CVE-2026-114700 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gloriafood Restaurant Menu – Food Ordering System – Table Reservation menu-ord |
| CVE-2026-114701 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in xootix Waitlist Woocommerce ( Back in stock notifier ) waitlist-woocommerce al |
| CVE-2026-114702 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicdark ND Shortcodes For Visual Composer nd-shortcodes allows Stored XSS.This |
| CVE-2026-114703 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hupe13 Extensions for Leaflet Map extensions-leaflet-map allows Stored XSS.Thi |
| CVE-2026-114704 | Received | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.This issue affects Relevanssi : from n/a through 4.28.4. |
| CVE-2026-114705 | Received | 未確認 | CWE-862 | Missing Authorization vulnerability in quadlayers WP Social Feed Gallery insta-gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP |
| CVE-2026-114714 | Awaiting Analysis | 未確認 | CWE-23 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based backend, the source pa |
| CVE-2026-114715 | Undergoing Analysis | 未確認 | CWE-863 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password plugin. The driver took the fir |
| CVE-2026-114716 | Undergoing Analysis | 未確認 | CWE-99 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail::extract_inline_images() used the media type taken from |
| CVE-2026-114717 | Undergoing Analysis | 未確認 | CWE-99 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability when a message is forwarded as an attachment. The subject of the forward |
| CVE-2026-114718 | Undergoing Analysis | 未確認 | CWE-79 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password plugin. Error text returned by a password driver was conc |
| CVE-2026-114719 | Undergoing Analysis | 未確認 | CWE-352 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk plugin. The plugin read the _uid paramet |
| CVE-2026-114720 | Undergoing Analysis | 未確認 | CWE-93 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerability. A remote authenticated attacker can exploit this via CRLF sequences i |
| CVE-2026-114721 | Undergoing Analysis | 未確認 | CWE-863 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassed. The check compared only the action name as requested, so a |
| CVE-2026-114722 | Undergoing Analysis | 未確認 | CWE-669 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an at-rule prologue such as |
| CVE-2026-114723 | Undergoing Analysis | 未確認 | CWE-770 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource limits to be bypassed during thumbnail generation. When rcube_image falls back to GD, the ava |
| CVE-2026-114724 | Undergoing Analysis | 未確認 | CWE-502 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 contains an object injection primitive in rcube_session::unserialize(). A session key prefixed with “!” was treated as having |
| CVE-2026-114725 | Undergoing Analysis | 未確認 | CWE-99 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject and O |
| CVE-2026-114726 | Undergoing Analysis | 未確認 | CWE-99 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the Bounce (resend) action. rcube_mime::decode_address_list() did not |
| CVE-2026-114727 | Undergoing Analysis | 未確認 | CWE-829 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 passes potentially unsafe content into ImageMagick when resizing images. SVG and EPS were accepted as valid image types for c |
| CVE-2026-114728 | Undergoing Analysis | 未確認 | CWE-184 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass in the handling of FuncIRI attributes. rcube_washtml detected the CSS url() t |
| CVE-2026-114729 | Awaiting Analysis | 未確認 | CWE-184 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content blocking bypass. rcube_washtml inspected the SVG SMIL animation attributes `to`, `from` and v |
| CVE-2026-114730 | Awaiting Analysis | 未確認 | CWE-918 | Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass. The network blocklist used by rcube_utils::is_local_url() |
| CVE-2026-114731 | Awaiting Analysis | 未確認 | CWE-770 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vulnerability in the CSS proxy (the utils/modcss action). The fetched sty |
| CVE-2026-114732 | Awaiting Analysis | 未確認 | CWE-288 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication vulnerability in multi-host installations. When a user logs in with an alias addres |
| CVE-2026-114820 | Received | 未確認 | CWE-327 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected ar |
| CVE-2026-115207 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially |
| CVE-2026-115221 | Awaiting Analysis | 未確認 | CWE-863 | A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to other users or services. This issu |
| CVE-2026-115246 | Deferred | 未確認 | CWE-79, CWE-94 | A weakness has been identified in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknown part of the file patdocmsg.ph |
| CVE-2026-115247 | Deferred | 未確認 | CWE-310, CWE-311 | A security vulnerability has been detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This vulnerability affects unknown code o |
| CVE-2026-115248 | Deferred | 未確認 | CWE-840, CWE-841 | A vulnerability was detected in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This issue affects some unknown processing of the file |
| CVE-2026-115249 | Deferred | 未確認 | CWE-20 | A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php |
| CVE-2026-115253 | Awaiting Analysis | 未確認 | CWE-276, CWE-732 | An incorrect permission assignment vulnerability in the WatchGuard Agent's log directory allows a local, authenticated non-administrative user to create, modify, append to, or dele |
| CVE-2026-115319 | Deferred | 未確認 | CWE-407 | fzf 0.36.0 through 0.74.5 contains an inefficient algorithmic complexity vulnerability in maskActionContents that allows local attackers to exhaust the --listen HTTP server through |
| CVE-2026-115321 | Awaiting Analysis | 未確認 | CWE-639 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in the UpdateIssueComment handler that allows low-privileged project users to modify comments in other project |
| CVE-2026-115322 | Awaiting Analysis | 未確認 | CWE-639 | Bytebase before 3.16.0 contains an authorization bypass vulnerability in GetTaskRunLog, GetTaskRunSession and PreviewTaskRunRollback that allows authenticated users to access other |
| CVE-2026-115323 | Deferred | 未確認 | CWE-862 | EverShop 1.2.2 before 2.2.1 contains a missing authorization vulnerability in the customer address API that allows unauthenticated attackers to manage other customers' addresses. A |
| CVE-2026-115324 | Awaiting Analysis | 未確認 | CWE-89 | mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory content. Atta |
| CVE-2026-115325 | Deferred | 未確認 | CWE-639 | Netmaker through 1.7.0 contains an authorization bypass vulnerability in the updateExtClient handler that allows network-scoped users to modify external clients on other networks. |
| CVE-2026-115326 | Deferred | 未確認 | CWE-639 | QloApps through 1.7.0 contains an insecure direct object reference vulnerability in OrderDetailController::displayAjaxSubmitRefundRequest() that allows authenticated customers to s |
| CVE-2026-115327 | Awaiting Analysis | 未確認 | CWE-824 | libyang through 6.4.13 contains an uninitialized pointer free vulnerability in lydxml_env_netconf_rpc() in src/parser_xml.c when parsing NETCONF rpc action envelopes. Peers with a |
| CVE-2026-115328 | Deferred | 未確認 | CWE-89 | JSON-SCADA before 0.65-alpha contains an sql injection vulnerability in opcApi() in src/server_realtime_auth/index.js that allows authenticated users to inject SQL via HistoryReadR |
| CVE-2026-115329 | Deferred | 未確認 | CWE-639 | Lotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.get_object() that uses an unscoped queryset without organization filtering or |
| CVE-2026-115330 | Deferred | 未確認 | CWE-89 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arbitrary SQL by appending stacked statements to custom metric |
| CVE-2026-115331 | Deferred | 未確認 | CWE-89 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable metric property_name or catego |
| CVE-2026-115332 | Deferred | 未確認 | CWE-89 | Lotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted subscription_filter_keys that bypass |
| CVE-2026-115333 | Deferred | 未確認 | CWE-287 | Lotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only, without checking the secret agai |
| CVE-2026-115334 | Deferred | 未確認 | CWE-639 | Lotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated users to join any organization by supplying its UUI |
| CVE-2026-115347 | Deferred | 未確認 | CWE-407 | Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse_link_text that allows remote attackers to cause denial of service through unbalanced squa |
| CVE-2026-115348 | Deferred | 未確認 | CWE-400 | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's parse_link_text function that allows unauthenticated attackers to exhau |
| CVE-2026-115349 | Deferred | 未確認 | CWE-1333 | Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parse_link_text function in src/mistune/helpers.py. Attackers can submit m |
| CVE-2026-115350 | Deferred | 未確認 | CWE-79 | Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html, .xhtml, or .htm file content as raw block_html tokens. Attack |
| CVE-2026-115351 | Deferred | 未確認 | CWE-94 | Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input to inject arbitrary style declarations via the unvalidated f |
| CVE-2026-115352 | Deferred | 未確認 | CWE-407 | Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows unauthenticated attackers to exhaust CPU by submitting long runs of unma |
| CVE-2026-115353 | Deferred | 未確認 | CWE-22 | Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying relative or absolute paths. Att |
| CVE-2026-115354 | Deferred | 未確認 | CWE-22 | Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to read local files by supplying relative or absolute include pat |
| CVE-2026-115355 | Deferred | 未確認 | CWE-22 | Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../ sequences in include paths. Att |
| CVE-2026-115356 | Deferred | 未確認 | CWE-613 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Auth method, that the service account token originally used to authentic |
| CVE-2026-115357 | Deferred | 未確認 | CWE-778 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when re |
| CVE-2026-115358 | Deferred | 未確認 | CWE-532 | OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into audit logs by sending malformed plugin parameters. Attackers |
| CVE-2026-115359 | Deferred | 未確認 | CWE-799 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution fails for requests with form-encoded bodies or forwarded certifi |
| CVE-2026-115360 | Deferred | 未確認 | CWE-601 | OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not authenticated to OpenBao. Attackers can craft OIDC links that |
| CVE-2026-115361 | Deferred | 未確認 | CWE-863 | OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden identity metadata templates within wildcard grants. Attackers w |
| CVE-2026-115362 | Deferred | 未確認 | CWE-613 | OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method, leaving expired Secret IDs valid until the periodic tidy removes |
| CVE-2026-115363 | Deferred | 未確認 | CWE-212 | OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the tls_acme_eab_mac_key value through the sys/config/state/sanitize |
| CVE-2026-115364 | Deferred | 未確認 | CWE-862 | OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by omitting the X-Vault-Header. When require_request_header is en |
| CVE-2026-115365 | Deferred | 未確認 | CWE-863 | OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows tokens to reference policies from arbitrary namespaces using s |
| CVE-2026-115366 | Deferred | 未確認 | CWE-863 | OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace tokens to modify plugin registrations because /v1/sys/plugin |
| CVE-2026-115369 | Deferred | 未確認 | CWE-863 | OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a CSR when use_csr_sans is enabled. Authenticated callers with |
| CVE-2026-115370 | Deferred | 未確認 | CWE-863 | Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that allows restricted project users to use pull mode migration vi |
| CVE-2026-115371 | Deferred | 未確認 | CWE-522 | Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability that allows restricted TLS clients to read storage bucket keys |
| CVE-2026-115372 | Deferred | 未確認 | CWE-88 | Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume update, copy, and move operation |
| CVE-2026-115373 | Deferred | 未確認 | CWE-862 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET /1.0/operations/{uuid} that lets project-restricted clients rea |
| CVE-2026-115374 | Deferred | 未確認 | CWE-347 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that allows presigned URL holders to inject unsigned x-amz-* header |
| CVE-2026-115375 | Deferred | 未確認 | CWE-22 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to write files on the host. The flaw stems from |
| CVE-2026-115376 | Deferred | 未確認 | CWE-284 | Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows project-restricted clients to copy volumes by omitting source.type. Attac |
| CVE-2026-115377 | Deferred | 未確認 | CWE-59 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by plantin |
| CVE-2026-115378 | Deferred | 未確認 | CWE-59 | Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in sftpRecursivePullFile that allows a malicious incus-agent to escape |
| CVE-2026-115379 | Deferred | 未確認 | CWE-416 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves references live across try_call unrooted when compiling Wasm modules. |
| CVE-2026-115380 | Deferred | 未確認 | CWE-770 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASI preview 0 poll_oneoff adapter, which pe |
| CVE-2026-115381 | Deferred | 未確認 | CWE-770 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the wasmtime-wasi WASIp2 write-zeroes method of SinkOutputStream, |
| CVE-2026-115382 | Deferred | 未確認 | CWE-1284 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http implementation that allows guests to panic the host. Guests can s |
| CVE-2026-115383 | Deferred | 未確認 | CWE-1287 | Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts components whose core modules import WebAssembly tags with a subty |
| CVE-2026-115384 | Deferred | 未確認 | CWE-20 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows malicious guests to write ~16KB to the native stack via unvalidate |
| CVE-2026-115385 | Deferred | 未確認 | CWE-754 | Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASIp3 implementation that allows guests to abort the Unix ho |
| CVE-2026-115386 | Deferred | 未確認 | CWE-908 | Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure vulnerability in the WASIp1 fd_readdir implementation that copies uniniti |
| CVE-2026-115387 | Deferred | 未確認 | CWE-190 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in wasmtime-wasi that allows guest WASI programs to panic the hos |
| CVE-2026-115388 | Deferred | 未確認 | CWE-400 | wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the wasi:io/streams check-write allowance for WASIp2 outgoing HTTP bo |
| CVE-2026-115389 | Deferred | 未確認 | CWE-770 | Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations when lifting guest values through the dynamically-typed Val |
| CVE-2026-115390 | Deferred | 未確認 | CWE-400 | Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref and try_table catch paths. Malicious guests can reset consumed |
| CVE-2026-115391 | Deferred | 未確認 | CWE-770 | Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length w |
| CVE-2026-115392 | Deferred | 未確認 | CWE-61 | Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mi |
| CVE-2026-115393 | Deferred | 未確認 | CWE-787 | Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validate t |
| CVE-2026-115394 | Awaiting Analysis | 未確認 | CWE-789 | Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field |
| CVE-2026-115395 | Awaiting Analysis | 未確認 | CWE-770 | Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory. |
| CVE-2026-115396 | Awaiting Analysis | 未確認 | CWE-409 | Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression |
| CVE-2026-115397 | Awaiting Analysis | 未確認 | CWE-770 | Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limitin |
| CVE-2026-115398 | Awaiting Analysis | 未確認 | CWE-770 | Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entri |
| CVE-2026-115400 | Deferred | 未確認 | CWE-312 | crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read access to obtain Google OAuth access and refresh tokens stored une |
| CVE-2026-115411 | Deferred | 未確認 | CWE-918 | crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where isPrivateIp() fails to block reserved IP ranges such as RFC 6598 Carr |
| CVE-2026-115414 | Awaiting Analysis | 未確認 | CWE-78 | OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to exec |
| CVE-2026-115416 | Deferred | 未確認 | CWE-653, CWE-863 | Incorrect authorization checks in Amazon Athena engine version 3 query processing could have allowed an authenticated user to read AWS account identifiers and SQL statement text qu |
| CVE-2026-115417 | Awaiting Analysis | 未確認 | CWE-789 | Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to cause a denial of service of the c |
| CVE-2026-115419 | Awaiting Analysis | 未確認 | CWE-488 | The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation stat |
| CVE-2026-115424 | Awaiting Analysis | 未確認 | CWE-61 | A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize symbolic and hard link targets |
| CVE-2026-115449 | Awaiting Analysis | 未確認 | CWE-200 | A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host. Under specific conditions where the |
| CVE-2026-115450 | Deferred | 未確認 | CWE-472 | External Control of Assumed-Immutable Web Parameter (CWE-472) in the cart and checkout flow of MarcosCamara01 Ecommerce Template allows an authenticated user with no special privil |
| CVE-2026-115453 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecommerce Template allows any authenticated user to delete and mo |
| CVE-2026-115454 | Awaiting Analysis | 未確認 | CWE-770 | An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources |
| CVE-2026-115457 | Deferred | 未確認 | CWE-79 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, global shortcode expansion runs over the complete rendered page, including HTML- |
| CVE-2026-115477 | Deferred | 未確認 | CWE-285, CWE-863 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with `auth.jwtSecret` configured |
| CVE-2026-115478 | Deferred | 未確認 | CWE-459, CWE-863 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `create_entity`, `link_entities`, `rename_entity`, `unlink_entiti |
| CVE-2026-115479 | Deferred | 未確認 | CWE-20 | baserCMS is a website development framework. In versions 5.2.5 before 5.3.2 and 5.4.0 before 5.4.2, an unauthenticated visitor can supply a comma-separated address list in a public |
| CVE-2026-115480 | Deferred | 未確認 | CWE-693, CWE-799 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, the public POST /baser/api/bc-mail/mail_messages/add/{mailContentId}.json endpoi |
| CVE-2026-115481 | Deferred | 未確認 | CWE-434 | baserCMS is a website development framework. Starting in version 5.0.0-beta1 and prior to versions 5.3.2 and 5.4.2, `PermissionGroupsService::build()` reads a plugin's `config/perm |
| CVE-2026-115482 | Deferred | 未確認 | CWE-770 | In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of buffered header sets is not limited, as demonstrated by a QPACK amplif |
| CVE-2026-115484 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated bu |
| CVE-2026-115485 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the iscsiuio component of open-iscsi. The DHCPv6 option parser calls strlen() on raw network data without ensuring a NUL terminator is present, causing it to re |
| CVE-2026-115486 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet con |
| CVE-2026-115494 | Awaiting Analysis | 未確認 | CWE-352 | A flaw in the cross-site request forgery (CSRF) prevention of KNIME Business Hub prior to version 1.19.0 allows an authenticated attacker to perform a CSRF attack with passive user |
| CVE-2026-115496 | Awaiting Analysis | 未確認 | CWE-209 | Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if the |
| CVE-2026-115497 | Deferred | 未確認 | CWE-22 | The Music Store – WordPress eCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.4.7 via the 'f' parameter parameter. This ma |
| CVE-2026-115502 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization check allows anyone having access to a "link without login" for a DataApp to list and potentially access jobs of other users created by the same link in KNI |
| CVE-2026-115503 | Awaiting Analysis | 未確認 | CWE-409 | Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. |
| CVE-2026-115504 | Awaiting Analysis | 未確認 | CWE-787 | CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string col |
| CVE-2026-115505 | Deferred | 未確認 | CWE-190 | libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or ma |
| CVE-2026-115506 | Awaiting Analysis | 未確認 | CWE-776 | libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late |
| CVE-2026-115507 | Deferred | 未確認 | CWE-79 | Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project |
| CVE-2026-115508 | Deferred | 未確認 | CWE-1333 | Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded r |
| CVE-2026-115509 | Deferred | 未確認 | CWE-863 | Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownership check |
| CVE-2026-115513 | Deferred | 未確認 | CWE-79 | OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidat |
| CVE-2026-115516 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-115517 | Awaiting Analysis | 未確認 | CWE-653 | Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an authenticated remote user to access open network ports on executors in |
| CVE-2026-115519 | Awaiting Analysis | 未確認 | CWE-1004, CWE-614 | Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security |
| CVE-2026-115534 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modules/web/ |
| CVE-2026-115535 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The affected element is the function sistem.php::simpan of the file |
| CVE-2026-115536 | Deferred | 未確認 | CWE-79, CWE-94 | A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. The impacted element is the function simpan of the file applic |
| CVE-2026-115537 | Deferred | 未確認 | CWE-601 | A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function simpan of the file application/modules/ad |
| CVE-2026-115546 | Awaiting Analysis | 未確認 | CWE-287, CWE-639 | Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source par |
| CVE-2026-115547 | Awaiting Analysis | 未確認 | CWE-20, CWE-94 | An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted configuration values. An authenticated administrator can lever |
| CVE-2026-115557 | Received | 未確認 | CWE-299 | Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certifica |
| CVE-2026-115567 | Awaiting Analysis | 未確認 | CWE-362 | Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runtime |
| CVE-2026-115569 | Deferred | 未確認 | CWE-22, CWE-59 | Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-controlled Jest projects paths outside the project root thro |
| CVE-2026-115570 | Awaiting Analysis | 未確認 | CWE-299 | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not bloc |
| CVE-2026-115572 | Received | 未確認 | CWE-400 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF that repeatedly references the same nonexistent indirect object, causing relev |
| CVE-2026-115580 | Received | 未確認 | CWE-834 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what |
| CVE-2026-115585 | Received | 未確認 | CWE-400, CWE-407 | pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could stil |
| CVE-2026-115586 | Received | 未確認 | CWE-78 | virtualenv is a tool for creating isolated virtual python environments. From 21.14.9 until 21.14.13, the bash bin/activate script can copy an attacker-controlled --prompt value int |
| CVE-2026-115638 | Awaiting Analysis | 未確認 | CWE-409 | OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of uncompressed data, aka a gzip bomb. |
| CVE-2026-115657 | Awaiting Analysis | 未確認 | CWE-532 | When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions before 5.8.4 log configured credentials of proxies during startup. An a |
| CVE-2026-115722 | Deferred | 未確認 | CWE-129 | RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts list as a list property's length or value type. Attackers ca |
| CVE-2026-115723 | Deferred | 未確認 | CWE-787 | Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active partner to overflow application buffers by declaring an unva |
| CVE-2026-115724 | Awaiting Analysis | 未確認 | CWE-346 | VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts content URIs based only on the com.fsck.k9.attachmentprovider |
| CVE-2026-115725 | Deferred | 未確認 | CWE-639 | Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access other accounts by supplying a foreign contact inbox source_id. |
| CVE-2026-115726 | Awaiting Analysis | 未確認 | CWE-78 | Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by committing a malicious .aider.conf.yml that is auto-loaded without a |
| CVE-2026-115727 | Deferred | 未確認 | CWE-489 | AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attackers who |
| CVE-2026-115728 | Awaiting Analysis | 未確認 | CWE-1333 | @hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in Content.disposition() caused by an incomplete fix for CVE-2026-35213. Unauthe |
| CVE-2026-115729 | Deferred | 未確認 | CWE-918 | @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to bypass the isUrlSafeToFetch denylist in getB64BasePdf. Attacker |
| CVE-2026-115730 | Awaiting Analysis | 未確認 | CWE-74 | i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to redirect translation requests by supplying an ns value starting with a slash. Att |
| CVE-2026-115749 | Deferred | 未確認 | CWE-470 | hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import vulnerability via the ray_pkg_version OmegaConf resolver passing input |
| CVE-2026-115750 | Deferred | 未確認 | CWE-522 | mcp-from-openapi from 2.5.0 before 2.9.0 contains a credential exposure vulnerability that allows attackers to capture Authorization and Cookie headers because safeFetch() forwards |
| CVE-2026-115751 | Deferred | 未確認 | CWE-184 | Agentfront mcp-from-openapi from 2.2.0 before 2.9.0 contains a server-side request forgery vulnerability that allows attackers to bypass the ssrf.blockedHosts denylist using traili |
| CVE-2026-115752 | Deferred | 未確認 | CWE-918 | Signal K Server from 2.28.0-beta.2 before 2.34.0 contains a server-side request forgery vulnerability in the App Store icon fetcher that trusts absolute signalk.appIcon URLs. Attac |
| CVE-2026-115754 | Awaiting Analysis | 未確認 | CWE-79 | serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to break out of HTML script elements by ending serialized function |
| CVE-2026-115774 | Received | 未確認 | CWE-400, CWE-835 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedPar |
| CVE-2026-115775 | Received | 未確認 | CWE-400, CWE-770 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, the twisted.words.xish.domish ExpatElementStream parser allows an unauth |
| CVE-2026-115776 | Received | 未確認 | CWE-400, CWE-770 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received |
| CVE-2026-115778 | Received | 未確認 | CWE-400, CWE-770 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.conch.telnet.Telnet.dataReceived appends every byte received aft |
| CVE-2026-115785 | Undergoing Analysis | 未確認 | CWE-93 | An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS) allows an ordinary authenticated user with account options enab |
| CVE-2026-115786 | Undergoing Analysis | 未確認 | CWE-682 | A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume another user’s mailbox quota by repeatedly sharing and revoking |
| CVE-2026-115796 | Received | 未確認 | CWE-352, CWE-862 | A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross- |
| CVE-2026-115797 | Received | 未確認 | CWE-310, CWE-319 | A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos_pw |
| CVE-2026-115800 | Received | 未確認 | CWE-22 | A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2. The affected element is the function load_model of the file pymllm/mobile/convertor/__init__.py of the compon |
| CVE-2026-115801 | Received | 未確認 | CWE-119, CWE-125 | A security flaw has been discovered in Kakao khaiii up to 0.4. The impacted element is the function khaiii::nn::Linear::open of the file src/main/cpp/khaiii/nn/Linear.cpp of the co |
| CVE-2026-115802 | Received | 未確認 | CWE-829 | A weakness has been identified in InternScience InternAgent 1.5.0. This affects the function train of the file tasks/AutoChem/code/experiment.py of the component LoRA Loading. This |
| CVE-2026-115803 | Deferred | 未確認 | CWE-285, CWE-639 | A flaw has been found in Scada-LTS 2.8.0. Affected by this vulnerability is the function HttpServletRequest.getParameter of the file AmChartValuesAPI.java of the component AmCharts |
| CVE-2026-115806 | Received | 未確認 | CWE-502 | The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.2.1 via deserialization of untrusted input |
| CVE-2026-115807 | Received | 未確認 | CWE-269 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up |
| CVE-2026-115810 | Deferred | 未確認 | CWE-918 | Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue |
| CVE-2026-115812 | Awaiting Analysis | 未確認 | CWE-23 | Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a craft |
| CVE-2026-115813 | Awaiting Analysis | 未確認 | CWE-918 | Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network d |
| CVE-2026-115845 | Awaiting Analysis | 未確認 | CWE-184 | An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code wit |
| CVE-2026-115863 | Awaiting Analysis | 未確認 | CWE-121 | ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DH |
| CVE-2026-115877 | Received | 未確認 | CWE-444 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in an HTT |
| CVE-2026-115883 | Received | 未確認 | CWE-20, CWE-863 | LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-che |
| CVE-2026-115885 | Received | 未確認 | CWE-532 | The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard inpu |
| CVE-2026-115886 | Received | 未確認 | CWE-470, CWE-918 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI |
| CVE-2026-115887 | Received | 未確認 | CWE-1333 | GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas. From 1.24.1 until 2.0.1, GraphQLPhoneNumber in src/scalars/PhoneNumber.ts use |
| CVE-2026-115889 | Deferred | 未確認 | CWE-197, CWE-843 | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds |
| CVE-2026-115892 | Deferred | 未確認 | CWE-248, CWE-843 | Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type c |
| CVE-2026-115893 | Deferred | 未確認 | CWE-691 | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approx |
| CVE-2026-115895 | Received | 未確認 | CWE-94 | Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. From 17.0.0 until 21.0.4, packages/happy-dom/src/module/ECMAScriptModuleCompiler.ts |
| CVE-2026-115897 | Received | 未確認 | CWE-79 | Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. Prior to 7.1.3, the function-source escaping logic does not |
| CVE-2026-115929 | Received | 未確認 | CWE-295 | MongoDB Compass relies on Electron, a third-party runtime that carries its own TLS root certificate store. This root certificate store has the recoverable eMudhra intermediate CA c |
| CVE-2026-115931 | Received | 未確認 | CWE-470, CWE-73 | Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could ca |
| CVE-2026-115932 | Received | 未確認 | CWE-22, CWE-74 | When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. |
| CVE-2026-115933 | Received | 未確認 | CWE-290, CWE-345, CWE-915 | Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token is for. A route that refreshes the credentials of a bro |
| CVE-2026-115935 | Received | 未確認 | CWE-94 | The app/process-api-response-headers action accepts fake Craft API response headers from any authenticated control panel user. A non-admin user with only accessCp can place newl |
| CVE-2026-115937 | Received | 未確認 | CWE-345 | The Mollie webhook endpoint accepts two independent, attacker-controlled parameters and never verifies that they belong together: * commerceTransactionHash — selects which Craf |
| CVE-2026-115938 | Received | 未確認 | CWE-1336 | Craft CMS allows any authenticated control panel user to submit an element-search condition whose element selector is evaluated as a sandboxed Twig object template. Craft’s allowed |
| CVE-2026-115969 | Received | 未確認 | CWE-74, CWE-77 | A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the component Schedule API. This manipulation causes command inject |
| CVE-2026-115970 | Received | 未確認 | CWE-74, CWE-94 | A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-update/import of the component Import Endpoint. Such manipulation |
| CVE-2026-115971 | Received | 未確認 | CWE-404 | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a man |
| CVE-2026-115972 | Deferred | 未確認 | CWE-862, CWE-863 | A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthC |
| CVE-2026-115973 | Deferred | 未確認 | CWE-640 | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of |
| CVE-2026-115975 | Received | 未確認 | CWE-862 | Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects |
| CVE-2026-115981 | Deferred | 未確認 | CWE-79, CWE-94 | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of th |
| CVE-2026-115982 | Deferred | 未確認 | CWE-79, CWE-94 | A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rack L |
| CVE-2026-115993 | Received | 未確認 | CWE-79 | Stored XSS vulnerability in the “Notes” field of the Checklists in Cervantes version v1.3-beta could allow an attacker to execute arbitrary code in another user's browser with elev |
| CVE-2026-115994 | Received | 未確認 | CWE-639 | BOLA Allows Cross-Project Target Tampering in Cervantes version v1.3-beta could allow an attacker modify or delete targets belonging to other projects without authorization, compr |
| CVE-2026-115998 | Received | 未確認 | CWE-639 | IDOR in Cervantes version v1.3-beta could allow an authenticated attacker ca access sensitive findings, proof-of-concept details, credentials, and client information from projects |
| CVE-2026-116008 | Received | 未確認 | CWE-862 | DaybydayCRM through 2.2.1 contains a missing authorization vulnerability in ProjectsController::updateAssign() that allows any authenticated user to reassign projects without the c |
| CVE-2026-116009 | Received | 未確認 | CWE-22 | Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name p |
| CVE-2026-11601 | Deferred | 未確認 | CWE-862 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.19. T |
| CVE-2026-116010 | Deferred | 未確認 | CWE-639 | RosarioSIS before 12.9.1 contains a missing authorization vulnerability that allows authenticated teachers to write records for students outside their course period by supplying ar |
| CVE-2026-116011 | Received | 未確認 | CWE-674 | Crow before 1.3.4 contains an uncontrolled recursion vulnerability in crow::json::load() that allows remote unauthenticated attackers to crash the server by sending deeply nested J |
| CVE-2026-116012 | Received | 未確認 | CWE-197 | Ghidra before 12.2 contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc that stores 64-bit string lengths in 32-bit v |
| CVE-2026-116013 | Received | 未確認 | CWE-130 | OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and _decode_name() that fails to check resource record lengths against th |
| CVE-2026-116014 | Received | 未確認 | CWE-190 | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A ma |
| CVE-2026-116015 | Received | 未確認 | CWE-639 | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that allows authenticated members to read other members' after-sale |
| CVE-2026-116016 | Received | 未確認 | CWE-807 | yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level data scope restrictions by sending a data-permission-e |
| CVE-2026-116017 | Received | 未確認 | CWE-639 | Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceController.getAddressBook handler that allows authenticated us |
| CVE-2026-116018 | Received | 未確認 | CWE-639 | ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users' notifications as read via |
| CVE-2026-116019 | Deferred | 未確認 | CWE-749 | Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public static methods by relocating data-*@ directives with unset- |
| CVE-2026-116020 | Received | 未確認 | CWE-863 | BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments by |
| CVE-2026-11713 | Awaiting Analysis | 未確認 | CWE-863 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled. |
| CVE-2026-11730 | Awaiting Analysis | 未確認 | CWE-335 | Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as WiFi credentials) to predict v |
| CVE-2026-11731 | Awaiting Analysis | 未確認 | CWE-288 | An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the affected device’s management service t |
| CVE-2026-11732 | Awaiting Analysis | 未確認 | CWE-20 | An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a network-adjacent attacker having network a |
| CVE-2026-11795 | Deferred | 未確認 | CWE-203 | Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Account Footprinting. This issue affects E-Commerce Pack: before 5.03.01. |
| CVE-2026-11828 | Analyzed | 未確認 | CWE-120 | IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynch |
| CVE-2026-11829 | Analyzed | 未確認 | CWE-120 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests. |
| CVE-2026-11831 | Analyzed | 未確認 | CWE-122 | IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to an out-of-bounds read when |
| CVE-2026-11888 | Analyzed | 未確認 | CWE-94 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosure attack. |
| CVE-2026-11905 | Deferred | 未確認 | CWE-862 | The Elementor Website Builder – more than just a page builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.3 via t |
| CVE-2026-11930 | Analyzed | 未確認 | CWE-285 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers. |
| CVE-2026-11936 | Analyzed | 未確認 | CWE-79 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site |
| CVE-2026-11939 | Analyzed | 未確認 | CWE-88 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may be vulnerable to audit log forgery. |
| CVE-2026-11959 | Deferred | 未確認 | CWE-79 | Stored Cross-Site Scripting (XSS) in FacturaScripts, version 2025.61, caused by a lack of adequate validation or sanitisation of user input in the ‘city’ and ‘province’ fields in t |
| CVE-2026-11960 | Deferred | 未確認 | CWE-79 | Enumeration of unauthenticated users in FacturaScripts, version 2025.61. The application returns different responses when attempting to log in with a valid username compared to an |
| CVE-2026-12054 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'REFERRER' parameter in all versions up to, and including, 3.3.57 due to insufficient |
| CVE-2026-12091 | Analyzed | 未確認 | CWE-125 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a denial of service due to a heap-based out-of-bounds read. A remote |
| CVE-2026-12109 | Analyzed | 未確認 | CWE-787 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local m |
| CVE-2026-12148 | Analyzed | 未確認 | CWE-502 | IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in the MQ Classes |
| CVE-2026-12155 | Analyzed | 未確認 | CWE-502 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer dereference. |
| CVE-2026-12171 | Deferred | 未確認 | CWE-22, CWE-829, CWE-88, CWE-918, CWE-94 | auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into its options, and honor |
| CVE-2026-12241 | Deferred | 未確認 | CWE-79 | The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to an improperly secure capability che |
| CVE-2026-12254 | Awaiting Analysis | 未確認 | CWE-613 | Netskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with Captive Portal switches to a Network |
| CVE-2026-12260 | Deferred | 未確認 | CWE-89 | SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user-name’ POST parameter in the ‘/module/auth/recovery.php’ endpoint. The parameter |
| CVE-2026-12272 | Deferred | 未確認 | CWE-330 | The Lightweight Cookie Notice – Cookie Banner for Cookie Consent plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.19 Thi |
| CVE-2026-12343 | Analyzed | 未確認 | CWE-400 | IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe operations. |
| CVE-2026-12350 | Analyzed | 未確認 | CWE-502 | IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue manager agent process. |
| CVE-2026-12380 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Akıllı Ticaret Software Technologies Ltd. Co. E-Commerce Pack allows Reflected |
| CVE-2026-12392 | Awaiting Analysis | 未確認 | CWE-200 | An information exposure vulnerability in Canonical MAAS prior to versions 3.4.10, 3.5.14, 3.6.5, 3.7.3, and 3.8.0 allows an unauthenticated attacker to retrieve the RPC secret in p |
| CVE-2026-12405 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in rubygem-foreman_remote_execution. A command injection vulnerability exists in the Red Hat Satellite API (/api/v2/job_invocations). When a job template has the e |
| CVE-2026-12423 | Analyzed | 未確認 | CWE-306 | A flaw was found in Foreman. The Red Hat Satellite /unattended/provision API endpoint is vulnerable to an authentication bypass due to a semantic logic flaw in host_verifier.rb. Th |
| CVE-2026-12489 | Deferred | 未確認 | CWE-863 | An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to escalat |
| CVE-2026-12540 | Analyzed | 未確認 | CWE-78 | A flaw was found in Foreman. A command injection vulnerability exists in the foreman-rake errors:fetch_log task. The request_id parameter is passed to an underlying system command |
| CVE-2026-12541 | Analyzed | 未確認 | CWE-78 | A flaw was found in Foreman. OS command injection vulnerabilities exist in the foreman-rake db:dump and db:import_dump tasks. The application fails to properly sanitize user-suppli |
| CVE-2026-12542 | Analyzed | 未確認 | CWE-78 | A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the eval command. The script takes user-supplied arguments and |
| CVE-2026-12544 | Analyzed | 未確認 | CWE-502 | A flaw was found in Foreman. The foreman-rake initialization logic in /usr/share/foreman/config/settings.rb contains a vulnerable code pattern where configuration data is processed |
| CVE-2026-12545 | Awaiting Analysis | 未確認 | CWE-78 | A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on Rails) component distributed with Satellite due to the inse |
| CVE-2026-12613 | Deferred | 未確認 | CWE-502 | Deserialization of untrusted data vulnerability in Ministry of Justice General Directorate of Information Technology UYAP Document Editor on Windows and Linux and Ministry of Justi |
| CVE-2026-12626 | Deferred | 未確認 | CWE-502 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 28.2 via deserializat |
| CVE-2026-12627 | Awaiting Analysis | 未確認 | CWE-121 | Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in boks_autoregisterd. A remote attacker with network access to the autoregistra |
| CVE-2026-12655 | Deferred | 未確認 | CWE-294 | A security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid credentials. This could result in a |
| CVE-2026-12656 | Deferred | 未確認 | CWE-770 | A denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm traffic, which can interrupt communi |
| CVE-2026-12660 | Analyzed | 未確認 | CWE-22 | IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation. |
| CVE-2026-12664 | Undergoing Analysis | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have |
| CVE-2026-12665 | Analyzed | 未確認 | CWE-121 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel con |
| CVE-2026-12669 | Analyzed | 未確認 | CWE-125 | IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and the request is rejec |
| CVE-2026-12670 | Analyzed | 未確認 | CWE-681 | IBM MQ could allow an authenticated attacker to cause a denial of service through a specially crafted message that triggers excessive memory operations during character set convers |
| CVE-2026-12727 | Analyzed | 未確認 | CWE-193 | IBM MQ could allow an authenticated attacker to cause potential process instability due to an off-by-one buffer overflow when processing specially crafted object names. |
| CVE-2026-12859 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects |
| CVE-2026-12951 | Deferred | 未確認 | CWE-89 | The Dc Woocommerce Multi Vendor plugin for WordPress is vulnerable to SQL Injection via the 'order_by' parameter of the /multivendorx/v1/compliance/report-abuse REST endpoint in ve |
| CVE-2026-12980 | Deferred | 未確認 | CWE-79 | The Post Snippets WordPress plugin through 4.2.4 does not properly escape variable values substituted into snippets before outputting them, allowing users with the Contributor rol |
| CVE-2026-13043 | Analyzed | 未確認 | CWE-306, CWE-798 | A missing authentication vulnerability in the Kernel Memory Access Driver (PSKMAD) used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass th |
| CVE-2026-13138 | Deferred | 未確認 | CWE-602 | Client-Side Enforcement of Server-Side Security vulnerability in Divasoft Software and E-Commerce Inc. Biletiva Ticketing Platform allows Manipulating State. This issue affects Bi |
| CVE-2026-13257 | Analyzed | 未確認 | CWE-345 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to forge signat |
| CVE-2026-13258 | Analyzed | 未確認 | CWE-79 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to cross-site scripting. This vulne |
| CVE-2026-13313 | Awaiting Analysis | 未確認 | CWE-489 | An Active Debug Code vulnerability in certain ASUS router models allows a remote authenticated user, via a crafted HTTP request, to bypass security mechanisms and enable the Telnet |
| CVE-2026-13319 | Undergoing Analysis | 未確認 | CWE-639 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, could have allowed an authenticated |
| CVE-2026-13411 | Awaiting Analysis | 未確認 | CWE-754 | Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions which allows an authenticated attacker to crash the Playbooks plugin i |
| CVE-2026-13413 | Deferred | 未確認 | CWE-284 | The CMP – Coming Soon & Maintenance WordPress plugin before 4.1.20 does not correctly restrict access to the site while maintenance/coming-soon mode is enabled, allowing unauthenti |
| CVE-2026-13599 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in ABB Ability Edgenius. This issue affects Ability Edgenius: through 3.2.3.0. |
| CVE-2026-13607 | Deferred | 未確認 | CWE-284 | The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-accessible uploads directory and the access restriction it ge |
| CVE-2026-13695 | Deferred | 未確認 | CWE-89 | SQL injection (SQLi) vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/ap_L |
| CVE-2026-13718 | Deferred | 未確認 | CWE-79 | The Tabs Responsive WordPress plugin through 2.5 does not sanitize the content of WooCommerce product tabs before storing and rendering it, allowing a shop manager to store JavaSc |
| CVE-2026-1403 | Deferred | 未確認 | CWE-770 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 11.7 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that when importing CSV files could have |
| CVE-2026-14157 | Awaiting Analysis | 未確認 | CWE-134 | Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web |
| CVE-2026-14177 | Deferred | 未確認 | CWE-204 | Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Account Footprinting. This issue affects ikas E-Commerce Infrastructure |
| CVE-2026-14210 | Analyzed | 未確認 | CWE-1220 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could hav |
| CVE-2026-14269 | Analyzed | 未確認 | CWE-122 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, ca |
| CVE-2026-14273 | Analyzed | 未確認 | CWE-863 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obtain sensitive |
| CVE-2026-14288 | Undergoing Analysis | 未確認 | CWE-706 | GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that under certain conditions could have allo |
| CVE-2026-14308 | Awaiting Analysis | 未確認 | CWE-20 | Zohocorp ManageEngine Malware Protection Plus versions before 1.0.64.12 are affected by insufficient driver signature validation in MEARWService. |
| CVE-2026-14316 | Awaiting Analysis | 未確認 | CWE-122 | The revoked-key error path builds a human-readable failure reason using sprintf() into a heap buffer. The allocated buffer is too small for the final formatted message. When sprint |
| CVE-2026-14335 | Deferred | 未確認 | CWE-79 | The Easy Digital Downloads – eCommerce Payments and Subscriptions made easy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PayPal IPN Parameters in all versi |
| CVE-2026-14378 | Deferred | 未確認 | CWE-287 | The DevKit Pro plugin for WordPress is vulnerable to Authentication Bypass Leading to Administrator Account Takeover in all versions up to, and including, 2.3.0 This is due to the |
| CVE-2026-14379 | Deferred | 未確認 | CWE-79 | The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'video_id' |
| CVE-2026-14452 | Deferred | 未確認 | CWE-601 | Improper validation of the reset_url parameter of the Setup in-page search in Checkmk <2.5.0p15, <2.4.0p38, <2.3.0p51 and 2.2.0 (EOL) allows an attacker to execute arbitrary script |
| CVE-2026-14496 | Analyzed | 未確認 | CWE-125 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-14497 | Analyzed | 未確認 | CWE-347 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to by |
| CVE-2026-14502 | Analyzed | 未確認 | CWE-287 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain administr |
| CVE-2026-14507 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause a denial of service due to improper memory allocation during key derivation. |
| CVE-2026-14508 | Analyzed | 未確認 | CWE-416 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-14509 | Analyzed | 未確認 | CWE-400 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-14511 | Analyzed | 未確認 | CWE-770 | IBM MQ 9.4.5.0 through 9.4.5.1 could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications. |
| CVE-2026-14521 | Analyzed | 未確認 | CWE-918 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to server-side request forgery (SSR |
| CVE-2026-14532 | Awaiting Analysis | 未確認 | CWE-190 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception. |
| CVE-2026-14552 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-14556 | Deferred | 未確認 | CWE-116 | The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referral value before embedding it in the form notification email, allowing unauthentic |
| CVE-2026-14572 | Deferred | 未確認 | CWE-79 | The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Page Builder Text Content in all versions up t |
| CVE-2026-14765 | Deferred | 未確認 | CWE-1188 | Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL). The URL |
| CVE-2026-14814 | Analyzed | 未確認 | CWE-625 | GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a |
| CVE-2026-14851 | Deferred | 未確認 | CWE-200 | A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII) and financia |
| CVE-2026-14854 | Deferred | 未確認 | CWE-400 | The WooCommerce Bookings WordPress plugin before 3.11.0 does not limit a user-supplied value before using it to allocate memory in one of its unauthenticated AJAX actions, allowing |
| CVE-2026-14877 | Deferred | 未確認 | CWE-79 | The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id attribute in all versions up to, and including, 1.12.03 due to i |
| CVE-2026-14882 | Deferred | 未確認 | CWE-79 | The Brizy – Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'brizy-compiled-sections' parameter in all versions up to, and including, 2.8.18 |
| CVE-2026-14888 | Analyzed | 未確認 | CWE-122 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrar |
| CVE-2026-14905 | Analyzed | 未確認 | CWE-611 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection |
| CVE-2026-14909 | Awaiting Analysis | 未確認 | CWE-209 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitiv |
| CVE-2026-14911 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to read DOM information, modify router settings |
| CVE-2026-14933 | Deferred | 未確認 | CWE-79 | Cross-site scripting in the embedded co-browsing feature in Unblu inc. Unblu Spark 7.0 through 7.57.7 and 8.0 through 8.39.2, on on-premises and cloud deployments, allows an unauth |
| CVE-2026-14983 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to achieve denial of service against Teledyne F |
| CVE-2026-14984 | Awaiting Analysis | 未確認 | CWE-319 | Cleartext transmission in the primary control endpoints of Teledyne FLIR Aware2 versions through 6.9.0.2 allows remote unauthenticated attackers to intercept, hijack, or modify ses |
| CVE-2026-14988 | Analyzed | 未確認 | CWE-125 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow. |
| CVE-2026-14990 | Awaiting Analysis | 未確認 | CWE-79 | IBM DataPower Gateway 10.6.0.0 through 10.6.0.10 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated user to embed arbitrary JavaScript code in the |
| CVE-2026-14991 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a buffer overflow, caused by imp |
| CVE-2026-14992 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow. |
| CVE-2026-14995 | Deferred | 未確認 | CWE-79 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Path in all versions up to, and including, 3.1.15.1 due to insufficient input sani |
| CVE-2026-14999 | Analyzed | 未確認 | CWE-347 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass authentic |
| CVE-2026-1501 | Awaiting Analysis | 未確認 | CWE-295 | IBM Concert 1.0 through 3.0.0 is vulnerable to Improper Certificate Validation. |
| CVE-2026-15090 | Deferred | 未確認 | CWE-89 | The Link Library plugin for WordPress is vulnerable to time-based SQL Injection via the 'link_url' parameter in all versions up to, and including, 7.9.2 due to insufficient escapin |
| CVE-2026-1510 | Awaiting Analysis | 未確認 | CWE-244 | IBM Concert 1.0 through 3.0.0 is vulnerable to Information Disclosure via Heap Inspection. |
| CVE-2026-15102 | Awaiting Analysis | 未確認 | CWE-319 | ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. Exploitation of this vulnerability can lead to unauthorized access to Autodesk se |
| CVE-2026-15176 | Awaiting Analysis | 未確認 | CWE-122 | A vulnerability exists in NGINX Plus and NGINX Open Source when a location is configured that uses the alias directive together with rewrite and a set or return directive referenci |
| CVE-2026-15178 | Deferred | 未確認 | CWE-862 | The Fluent Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.2.5. This is due to the plugin not properly verifying that a use |
| CVE-2026-15180 | Deferred | 未確認 | CWE-79 | The Tracking Code Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'TCM_ErrorMessages' POST Parameter in all versions up to, and including, 2.6.0 du |
| CVE-2026-15219 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in SFM Software Technologies Inc. Costifier allows Exploitation of Trusted Identifiers. This issue affects Costifier |
| CVE-2026-15222 | Deferred | 未確認 | CWE-94 | The The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is |
| CVE-2026-15261 | Deferred | 未確認 | CWE-284 | The TI WooCommerce Wishlist WordPress plugin before 2.13.0 does not enforce the same owner-only access control on its REST API that it applies on the front-end, allowing unauthenti |
| CVE-2026-15340 | Awaiting Analysis | 未確認 | CWE-120 | lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow. |
| CVE-2026-15399 | Deferred | 未確認 | CWE-89 | The Animated Number Counters plugin for WordPress is vulnerable to generic SQL Injection via the 'counterid' parameter in all versions up to, and including, 3.0 due to insufficient |
| CVE-2026-15468 | Awaiting Analysis | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation. This issue affects HYPR Passwordless: before 11.3.3. |
| CVE-2026-15575 | Deferred | 未確認 | CWE-489 | Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The v |
| CVE-2026-15577 | Awaiting Analysis | 未確認 | CWE-863 | A user or service account with read-only access to Git Sync (provisioning) connections can modify a connection's configuration through its status subresource (incorrect authorizati |
| CVE-2026-15661 | Awaiting Analysis | 未確認 | CWE-117 | IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files. |
| CVE-2026-15723 | Undergoing Analysis | 未確認 | CWE-90 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when OmniAuth SAML and LDAP auto-lin |
| CVE-2026-15762 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrar |
| CVE-2026-15781 | Analyzed | 未確認 | CWE-121 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to ex |
| CVE-2026-15784 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrar |
| CVE-2026-15795 | Deferred | 未確認 | CWE-79 | The Responsive Plus – Elementor Templates & Starter Sites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and incl |
| CVE-2026-15819 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-15822 | Analyzed | 未確認 | CWE-405 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-15824 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-15894 | Awaiting Analysis | 未確認 | CWE-121, CWE-787 | The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without |
| CVE-2026-15896 | Deferred | 未確認 | CWE-26 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.316 via the parse_request function. T |
| CVE-2026-15897 | Deferred | 未確認 | CWE-269 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & L |
| CVE-2026-15911 | Awaiting Analysis | 未確認 | CWE-295 | Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation. |
| CVE-2026-15983 | Deferred | 未確認 | CWE-73 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Deletion in all versions up to, and including, 6.3.316. This is due to the |
| CVE-2026-15989 | Deferred | 未確認 | CWE-269 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.3.316. This is due to the Register & L |
| CVE-2026-15999 | Undergoing Analysis | 未確認 | CWE-354 | Improper validation of integrity check value in the AES-CCM implementation (CcmParameters and CcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an o |
| CVE-2026-16000 | Undergoing Analysis | 未確認 | CWE-325 | Missing cryptographic step in the DSTU 7624 CCM mode implementation (KCcmBlockCipher) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can observe |
| CVE-2026-16001 | Undergoing Analysis | 未確認 | CWE-354 | Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (an IesEngine constructed without a block cipher) in Legion of the Bounc |
| CVE-2026-16111 | Analyzed | 未確認 | CWE-843 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of serv |
| CVE-2026-16159 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obtain sensitive |
| CVE-2026-16161 | Analyzed | 未確認 | CWE-125 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-16163 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory cor |
| CVE-2026-16164 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-16165 | Analyzed | 未確認 | CWE-476 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-16167 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-16169 | Analyzed | 未確認 | CWE-400 | IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-16170 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-16176 | Analyzed | 未確認 | CWE-770 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-16177 | Analyzed | 未確認 | CWE-125 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to ob |
| CVE-2026-16178 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial o |
| CVE-2026-16179 | Analyzed | 未確認 | CWE-124 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer un |
| CVE-2026-16181 | Analyzed | 未確認 | CWE-285 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to bypass security |
| CVE-2026-16182 | Analyzed | 未確認 | CWE-476 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause |
| CVE-2026-16251 | Undergoing Analysis | 未確認 | CWE-770 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to limit the size of remote image responses buffered in memory during local image |
| CVE-2026-16255 | Undergoing Analysis | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, when the instance-wide SAML or LDAP mem |
| CVE-2026-16275 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.4 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-16301 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-16340 | Analyzed | 未確認 | CWE-787 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to execute arbitrar |
| CVE-2026-16436 | Awaiting Analysis | 未確認 | CWE-640 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite v |
| CVE-2026-16437 | Awaiting Analysis | 未確認 | CWE-640 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and prior, ICONICS Suite v |
| CVE-2026-16438 | Awaiting Analysis | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Historian versions 10.97.3 |
| CVE-2026-16453 | Undergoing Analysis | 未確認 | CWE-472 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to verify the integrity of the SAML RelayState POST parameter which allows an auth |
| CVE-2026-16460 | Awaiting Analysis | 未確認 | CWE-345 | A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy |
| CVE-2026-16477 | Awaiting Analysis | 未確認 | CWE-502 | CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable screenshot annotations). Exploitation requires an attacker to craft a m |
| CVE-2026-16487 | Rejected | 未確認 | Rejected reason: Red Hat Product Security has determined that this is not a vulnerability in bootc or containers-common. bootc fetches images under /etc/containers/policy.json. The | |
| CVE-2026-16495 | Deferred | 未確認 | CWE-79 | The Countdown Timer – Widget Countdown plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'redirect_url' Shortcode Attribute in all versions up to, and including |
| CVE-2026-16516 | Analyzed | 未確認 | CWE-345 | wolfSSH does not validate that the ECDSA curve identifier in a KEXDH_REPLY host key blob matches the algorithm negotiated during key exchange. In ParseECCPubKey() (src/internal.c), |
| CVE-2026-16528 | Deferred | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated attacker to obtain DDNS credentials from the system log, potentially en |
| CVE-2026-1661 | Deferred | 未確認 | CWE-79 | The WP Mail Logging WordPress plugin before 1.17.0 does not properly restrict the HTML and CSS of logged emails before rendering them in its admin log screens, allowing unauthentic |
| CVE-2026-16648 | Awaiting Analysis | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Services with Stolen Credentials. This issue affects Mailer Plus Log versions |
| CVE-2026-16678 | Awaiting Analysis | 未確認 | CWE-772 | IBM Power Systems Firmware FW1110.00 through FW1110.31, FW1120.00 through FW1120.01, and FW1060.00 through FW1060.81 could allow a remote authenticated attacker to cause a denial o |
| CVE-2026-16681 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-16740 | Deferred | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allow |
| CVE-2026-16741 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber De |
| CVE-2026-16753 | Deferred | 未確認 | CWE-639, CWE-863 | Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organizat |
| CVE-2026-16754 | Awaiting Analysis | 未確認 | CWE-295 | A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an adjacent user |
| CVE-2026-16755 | Awaiting Analysis | 未確認 | CWE-1393 | A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to disclose sensitive |
| CVE-2026-16762 | Awaiting Analysis | 未確認 | CWE-407 | An attacker able to supply a crafted XML document to an application using QXmlStreamReader can cause disproportionate CPU consumption during parsing, making the application unrespo |
| CVE-2026-16776 | Deferred | 未確認 | CWE-79 | The MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up |
| CVE-2026-16823 | Analyzed | 未確認 | CWE-287 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass security restrictions due to improper au |
| CVE-2026-16830 | Analyzed | 未確認 | CWE-89 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of |
| CVE-2026-16916 | Analyzed | 未確認 | CWE-693 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary code due to a p |
| CVE-2026-17001 | Deferred | 未確認 | CWE-79 | The Import and export users and customers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Column User Meta Profile Fields in all versions up to, and in |
| CVE-2026-17005 | Deferred | 未確認 | CWE-79 | The Horizontal scrolling announcements WordPress plugin through 2.6 does not sanitise and escape one of its announcement settings before outputting it into an attribute context on |
| CVE-2026-17025 | Deferred | 未確認 | CWE-79 | The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'Current location' and 'Author profile image URL' Profile Fields in all versions up to, and includ |
| CVE-2026-17031 | Deferred | 未確認 | CWE-862 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.9.6 This is due to |
| CVE-2026-17053 | Awaiting Analysis | 未確認 | CWE-862 | The SMBus driver API exposed smbus_smbalert_remove_cb() and smbus_host_notify_remove_cb() as Zephyr syscalls. Their verifiers in drivers/smbus/smbus_handlers.c validated only the d |
| CVE-2026-17068 | Analyzed | 未確認 | CWE-285 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag. |
| CVE-2026-17073 | Analyzed | 未確認 | CWE-284 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution. |
| CVE-2026-17092 | Deferred | 未確認 | CWE-862 | The Directorist: AI-Powered Business Directory, Listings & Classified Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 8.10.2.1. |
| CVE-2026-17189 | Analyzed | 未確認 | CWE-79 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site scripting. This vulnerability allows an unauthentica |
| CVE-2026-17196 | Deferred | 未確認 | CWE-434 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the upload_files fu |
| CVE-2026-17275 | Analyzed | 未確認 | CWE-285 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transact |
| CVE-2026-17475 | Analyzed | 未確認 | CWE-285 | IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to delete folders and applications belonging to other users due to improper functional level access |
| CVE-2026-17484 | Analyzed | 未確認 | CWE-200 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control. |
| CVE-2026-17487 | Analyzed | 未確認 | CWE-200 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process. |
| CVE-2026-17488 | Analyzed | 未確認 | CWE-287 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. |
| CVE-2026-17491 | Analyzed | 未確認 | CWE-269 | IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to improper enforcement of the ChrootDirectory configuration directi |
| CVE-2026-17507 | Analyzed | 未確認 | CWE-195 | In Bouncy Castle for Java before 1.86, the MLS implementation (org.bouncycastle.mls) holds RFC 9420's uint32 leaf_index in a signed int, so a wire value with the top bit set decode |
| CVE-2026-17508 | Awaiting Analysis | 未確認 | CWE-770 | In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without b |
| CVE-2026-17518 | Awaiting Analysis | 未確認 | CWE-121 | Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operations and cause a denial of service via an HTT |
| CVE-2026-17525 | Deferred | 未確認 | CWE-459 | Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5. |
| CVE-2026-17538 | Deferred | 未確認 | CWE-639 | The LatePoint - Appointment Booking & Reservation plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 5.6.9. This is due to the |
| CVE-2026-17557 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malici |
| CVE-2026-17591 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free vulnerability, which occurs when a progr |
| CVE-2026-17609 | Deferred | 未確認 | CWE-434 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 6.3.316 via the submit_form func |
| CVE-2026-18036 | Awaiting Analysis | 未確認 | CWE-208 | In Bouncy Castle for Java before 1.86, NTRU reduced secret values with the % operator in three helpers whose reference implementations are deliberately division-free, so each reduc |
| CVE-2026-18040 | Awaiting Analysis | 未確認 | CWE-208 | In Bouncy Castle for Java before 1.86, HQC leaked secret-derived data through two side channels: its GF(2^8) arithmetic used lookup tables indexed by field elements, making the cac |
| CVE-2026-18166 | Undergoing Analysis | 未確認 | CWE-284 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker to obtain sensitive i |
| CVE-2026-18205 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform allows Refle |
| CVE-2026-18223 | Undergoing Analysis | 未確認 | CWE-863 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the invited recipient's email address when redeeming team and guest in |
| CVE-2026-18228 | Awaiting Analysis | 未確認 | CWE-22 | HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperSca |
| CVE-2026-18256 | Undergoing Analysis | 未確認 | CWE-863 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to properly restrict private teams from public team search results, which allows a |
| CVE-2026-18318 | Analyzed | 未確認 | CWE-307 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication. |
| CVE-2026-18343 | Analyzed | 未確認 | CWE-269 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization. |
| CVE-2026-18390 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Ministry of Justice General Directorate of Information Technology UYAP D |
| CVE-2026-18397 | Deferred | 未確認 | CWE-130, CWE-252, CWE-347, CWE-457 | This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a combination of cryptographic weaknesses and memory management issues in |
| CVE-2026-18418 | Awaiting Analysis | 未確認 | CWE-125 | The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame ty |
| CVE-2026-18443 | Deferred | 未確認 | CWE-89 | The Smart Manager – Advanced WooCommerce Bulk Edit & Inventory Management plugin for WordPress is vulnerable to generic SQL Injection via the 'access_privileges' parameter in all v |
| CVE-2026-18496 | Deferred | 未確認 | CWE-200 | The Booking Calendar plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.4.3 via the wpbc_is_show_popover_in_flex_timeline |
| CVE-2026-18513 | Awaiting Analysis | 未確認 | CWE-269 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition. |
| CVE-2026-18516 | Deferred | 未確認 | CWE-116 | An output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored cross-site scripting via HTTP header i |
| CVE-2026-18517 | Awaiting Analysis | 未確認 | CWE-284 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 IBM Maximo Application Suite — Location Service for Esri Component is vulnerable to unintended |
| CVE-2026-18524 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-18529 | Awaiting Analysis | 未確認 | CWE-78 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to command injection due to improper sanitisation of a user-controlled value pass |
| CVE-2026-18533 | Awaiting Analysis | 未確認 | CWE-94 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image configuration |
| CVE-2026-18537 | Awaiting Analysis | 未確認 | CWE-94 | IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper input validation due to an unsanitised container image reference in a |
| CVE-2026-18541 | Analyzed | 未確認 | CWE-79 | IBM Planning Analytics 2.0, and 2.1 is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI t |
| CVE-2026-18548 | Deferred | 未確認 | CWE-79 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ref' parameter in all versions up to, and inc |
| CVE-2026-18551 | Undergoing Analysis | 未確認 | CWE-863 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate the combination of guest and admin scheme roles which allows an authen |
| CVE-2026-18557 | Deferred | 未確認 | CWE-79 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'title' parameter in all versions up to, and |
| CVE-2026-18558 | Deferred | 未確認 | CWE-79 | The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'embeddoc' shortcode in all versions |
| CVE-2026-18560 | Undergoing Analysis | 未確認 | CWE-203 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate user’s permissions before other validations which allows non-content r |
| CVE-2026-18586 | Deferred | 未確認 | CWE-79 | The Premium Packages – Sell Digital Products Securely plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting via 'order_email' in all versions up to, and |
| CVE-2026-18659 | Awaiting Analysis | 未確認 | CWE-863 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can |
| CVE-2026-18660 | Awaiting Analysis | 未確認 | CWE-178, CWE-918 | In Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by ca |
| CVE-2026-18661 | Awaiting Analysis | 未確認 | CWE-863 | In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotat |
| CVE-2026-18662 | Awaiting Analysis | 未確認 | CWE-863 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same http-method-omission set, and no url-pattern |
| CVE-2026-18734 | Rejected | 未確認 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been remov | |
| CVE-2026-18740 | Analyzed | 未確認 | CWE-88 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to perform unauthorized actions due |
| CVE-2026-18748 | Awaiting Analysis | 未確認 | CWE-125 | The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len field plus a fixed 8-byte codec_ie[] array. When an AVDTP peer se |
| CVE-2026-18795 | Undergoing Analysis | 未確認 | CWE-862 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to enforce DM/GM check on server side which allows an authenticated user to quaran |
| CVE-2026-18799 | Undergoing Analysis | 未確認 | CWE-862 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to restrict Slack import account binding to system administrator-initiated imports |
| CVE-2026-19029 | Awaiting Analysis | 未確認 | CWE-125 | A heap-based buffer over-read in H5Z__filter_scaleoffset() in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service (application crash) with a craft |
| CVE-2026-1907 | Awaiting Analysis | 未確認 | CWE-89 | A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue can be triggered by sending spe |
| CVE-2026-19076 | Undergoing Analysis | 未確認 | CWE-863 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to reject OAuth application sessions in the account type switch endpoint, which al |
| CVE-2026-19083 | Deferred | 未確認 | CWE-639 | Authorization bypass through User-Controlled key vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. OctoCloud allows Accessing Functionality Not Prop |
| CVE-2026-19178 | Awaiting Analysis | 未確認 | CWE-362 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition. |
| CVE-2026-19184 | Awaiting Analysis | 未確認 | CWE-787 | The NXP GAU ADC driver (drivers/adc/adc_mcux_gau_adc.c) validated the caller-supplied sequence->buffer_size, which is expressed in bytes, against the number of active channels, whi |
| CVE-2026-19185 | Awaiting Analysis | 未確認 | CWE-822 | The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the broadcast ccc.data buffer and the targets.payloads[] array, |
| CVE-2026-19186 | Awaiting Analysis | 未確認 | CWE-191, CWE-787 | ieee802154_decipher_data_frame() in subsys/net/l2/ieee802154/ieee802154_frame.c computed payload_len = net_pkt_get_len(pkt) - ll_hdr_len - authtag_len without first checking that t |
| CVE-2026-19218 | Deferred | 未確認 | CWE-640 | Weak Password Recovery Mechanism for Forgotten Password vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. MyRezzta allows Password Recovery Exploita |
| CVE-2026-19253 | Deferred | 未確認 | CWE-73 | The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem path in its cache purge routine, and does not confine the resulting d |
| CVE-2026-19377 | Deferred | 未確認 | CWE-295 | Improper certificate validation in the tunnel handshake in Cato Client allows a man-in-the-middle attacker to impersonate a Cato Point of Presence (PoP) server and intercept or mod |
| CVE-2026-19386 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expe |
| CVE-2026-19395 | Awaiting Analysis | 未確認 | CWE-230, CWE-617 | In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The text parser passes the empty va |
| CVE-2026-19396 | Deferred | 未確認 | CWE-337 | A predictable seed in the pseudo-random number generator (PRNG) in the IFTTT pairing token generation of the ASUS RT-BE57 router allows an unauthenticated nearby user to derive the |
| CVE-2026-19482 | Analyzed | 未確認 | CWE-88 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to execute arbitrary commands due to |
| CVE-2026-19491 | Analyzed | 未確認 | CWE-287 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper authentic |
| CVE-2026-19493 | Analyzed | 未確認 | CWE-22 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path tra |
| CVE-2026-19494 | Analyzed | 未確認 | CWE-287 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restrictions due |
| CVE-2026-19498 | Analyzed | 未確認 | CWE-674 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to uncontrolled r |
| CVE-2026-19541 | Undergoing Analysis | 未確認 | CWE-201 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require re-entry of the stored client secret when validating an outgoing OAuth |
| CVE-2026-19569 | Awaiting Analysis | 未確認 | CWE-190 | dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj_size_get(otype) + size, and for thread stac |
| CVE-2026-19570 | Awaiting Analysis | 未確認 | CWE-120, CWE-787 | The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a received Basic Audio Announcement (BASE) into the static Broadcast Audio |
| CVE-2026-19571 | Awaiting Analysis | 未確認 | CWE-362 | The ITE IT8xxx2 SHI host-command backend (subsys/mgmt/ec_host_cmd/backends/ec_host_cmd_backend_shi_ite.c) copied the 8-byte host-command request header from the SPI Rx FIFO directl |
| CVE-2026-19572 | Awaiting Analysis | 未確認 | CWE-288 | A security vulnerability has been identified in FlexNet Publisher lmadmin. The vulnerability exists in a SOAP handler, where a hardcoded authentication bypass could allow an unauth |
| CVE-2026-19574 | Awaiting Analysis | 未確認 | CWE-284 | The ARM64 MMU back-end allocated address space identifiers (ASIDs) for memory domains with a bare round-robin counter in arch_mem_domain_init() (arch/arm64/core/mmu.c). VM_ASID_BIT |
| CVE-2026-19575 | Awaiting Analysis | 未確認 | CWE-843 | The user-mode verification handler for the device_deinit() system call, z_vrfy_device_deinit() in kernel/device.c, validated its dev argument with K_SYSCALL_OBJ_INIT(dev, K_OBJ_ANY |
| CVE-2026-19576 | Awaiting Analysis | 未確認 | CWE-787 | The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status register and masks it with GT911_TOUCH_POINTS_MSK (0x0F), yiel |
| CVE-2026-19577 | Awaiting Analysis | 未確認 | CWE-125 | net_route_ipv6_packet() in subsys/net/ip/route_ipv6.c resolved the nexthop's link-layer address with net_nbr_get_lladdr(nbr->idx) without first checking whether the neighbor cache |
| CVE-2026-19585 | Awaiting Analysis | 未確認 | CWE-22 | HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to path traversal during S3 and GCS directory downloads, which may allow files to b |
| CVE-2026-19595 | Awaiting Analysis | 未確認 | CWE-787, CWE-822 | The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_REA |
| CVE-2026-19600 | Undergoing Analysis | 未確認 | CWE-532 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize authentication tokens before writing them to server log entries, whic |
| CVE-2026-19601 | Undergoing Analysis | 未確認 | CWE-201 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to invalidate the stored AD/LDAP bind password when other connection settings (su |
| CVE-2026-19603 | Undergoing Analysis | 未確認 | CWE-201 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize the active channel field returned by the user status API endpoints, w |
| CVE-2026-19620 | Analyzed | 未確認 | CWE-288 | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to gain unauthorized administrative access due to improper authentication. |
| CVE-2026-19621 | Undergoing Analysis | 未確認 | CWE-200 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to strip action integration secrets from post payloads before broadcasting post-de |
| CVE-2026-19622 | Analyzed | 未確認 | CWE-288 | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests. |
| CVE-2026-19627 | Analyzed | 未確認 | CWE-22 | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validation of file paths. |
| CVE-2026-19630 | Awaiting Analysis | 未確認 | CWE-407 | In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously |
| CVE-2026-19652 | Deferred | 未確認 | CWE-269 | The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.0. This is due to the `dmem_form_submit_handler()` function det |
| CVE-2026-19660 | Deferred | 未確認 | CWE-287 | The Divi Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.3.0. The `process_paypal_callback` function, hooked to the ` |
| CVE-2026-19669 | Awaiting Analysis | 未確認 | CWE-787 | The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in drivers/fuel_gauge/fuel_gauge_syscall_handlers.c declared two variable-length arr |
| CVE-2026-19673 | Awaiting Analysis | 未確認 | CWE-125 | ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a received frame holds a plain 14-byte struct net_eth_hdr. When the ethertype is 0x810 |
| CVE-2026-19676 | Awaiting Analysis | 未確認 | CWE-822 | The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, checked only the device object permission and copied the caller- |
| CVE-2026-19677 | Awaiting Analysis | 未確認 | CWE-306 | An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to authenticate as an arbitrary ten |
| CVE-2026-19678 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase Forms allows an unauthenticated remote attacker to access sensi |
| CVE-2026-19735 | Awaiting Analysis | 未確認 | CWE-330 | The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key || four-tuple) plus a uptime-derived offset, where unique_k |
| CVE-2026-19736 | Awaiting Analysis | 未確認 | CWE-787 | The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the vendor SDK routine TRNG_GetRandomData(). On i.MX RT5xx and RT |
| CVE-2026-19737 | Awaiting Analysis | 未確認 | CWE-476 | i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_cfg->rx.data->configur |
| CVE-2026-19738 | Awaiting Analysis | 未確認 | CWE-401 | The Bluetooth Link Layer Control Procedure (LLCP) implementation for Connected Isochronous Stream (CIS) creation retains an RX node (ctx->node_ref.rx, marked NODE_RX_TYPE_RETAIN) s |
| CVE-2026-19739 | Awaiting Analysis | 未確認 | CWE-401, CWE-459, CWE-617, CWE-772 | The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retains the received RX node while a Connection Update / Connection Paramet |
| CVE-2026-19740 | Awaiting Analysis | 未確認 | CWE-401, CWE-459, CWE-617, CWE-772 | The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receive node that carried an accepted LL_PHY_UPDATE_IND so that it |
| CVE-2026-19741 | Received | 未確認 | CWE-1392 | Zephyr's OpenThread integration defined CONFIG_OPENTHREAD_JOINER_PSKD with default "J01NME" in modules/openthread/Kconfig.thread (previously subsys/net/l2/openthread/Kconfig, then |
| CVE-2026-19798 | Deferred | 未確認 | CWE-862 | The Wp Map Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the set_status() and bulk() functions in the Maps_Cont |
| CVE-2026-19807 | Deferred | 未確認 | CWE-269 | The ByteCoreStack – MCP Connector for AI Tools plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.3 This is due to the `wp_update_ |
| CVE-2026-19810 | Awaiting Analysis | 未確認 | CWE-79 | Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting (XSS) vulnerability, which is a type of issue whereby an attack |
| CVE-2026-19856 | Deferred | 未確認 | CWE-74 | The All in One SEO WordPress plugin before 5.0.2.1 does not correctly determine which shortcodes are present in content derived from user input before deciding which ones to strip, |
| CVE-2026-19863 | Awaiting Analysis | 未確認 | CWE-288, CWE-863 | An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path. This is caused by the a |
| CVE-2026-19864 | Awaiting Analysis | 未確認 | CWE-312 | Eclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext password and the authenticated session |
| CVE-2026-19867 | Undergoing Analysis | 未確認 | CWE-770 | Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to cap the number and size of mention keys stored in a user's notification proper |
| CVE-2026-19878 | Analyzed | 未確認 | CWE-841 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authentication |
| CVE-2026-19902 | Deferred | 未確認 | CWE-79 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Referer header in all versions up to, and including, 2.8.18 |
| CVE-2026-19935 | Awaiting Analysis | 未確認 | CWE-416 | The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a struct k_work embedded in the channel object (le_chan->rx_work, |
| CVE-2026-19936 | Awaiting Analysis | 未確認 | CWE-362 | The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayable_msg.c shares three intrusive lists (busy_ctx, free_ctx, free_chunks) and one k_work_delay |
| CVE-2026-19937 | Awaiting Analysis | 未確認 | CWE-772 | The Bluetooth Mesh Access layer delayable-message machinery in subsys/bluetooth/mesh/delayable_msg.c manages a static pool of CONFIG_BT_MESH_ACCESS_DELAYABLE_MSG_COUNT message cont |
| CVE-2026-19938 | Awaiting Analysis | 未確認 | CWE-416 | The Bluetooth host's ATT transmit path releases a buffer it does not own when signing fails. chan_send() in subsys/bluetooth/host/att.c documents (and every other error exit implem |
| CVE-2026-19939 | Awaiting Analysis | 未確認 | CWE-825 | The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device issues an AVDTP request. Every response handler in subsys/b |
| CVE-2026-19940 | Awaiting Analysis | 未確認 | CWE-416 | The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps its struct bt_hfp_ag objects in a static pool indexed by ACL c |
| CVE-2026-19947 | Awaiting Analysis | 未確認 | CWE-862 | The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and devmux_select_set(). When CONFIG_USERSPACE is enabled, their |
| CVE-2026-19954 | Deferred | 未確認 | CWE-176 | Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII la |
| CVE-2026-20011 | Awaiting Analysis | 未確認 | CWE-805 | Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine |
| CVE-2026-20019 | Awaiting Analysis | 未確認 | CWE-835 | Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection |
| CVE-2026-20032 | Awaiting Analysis | 未確認 | CWE-653 | A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorize |
| CVE-2026-20038 | Awaiting Analysis | 未確認 | CWE-284 | A vulnerability in the endpoint group (EPG) contract functionality of Cisco Nexus 9000 Series Fabric Switches in ACI Mode could allow an unauthenticated, remote attacker to bypass |
| CVE-2026-20043 | Awaiting Analysis | 未確認 | CWE-787 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive interna |
| CVE-2026-20173 | Awaiting Analysis | 未確認 | CWE-770 | A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service (DoS) condition. This vulnerabil |
| CVE-2026-20179 | Awaiting Analysis | 未確認 | CWE-128 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine that could allow an unauthenticated, remote attacker to |
| CVE-2026-20197 | Awaiting Analysis | 未確認 | CWE-119 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection E |
| CVE-2026-20218 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products could allow an unauthenticated, remote attacker to cause the Snor |
| CVE-2026-20221 | Awaiting Analysis | 未確認 | CWE-476 | Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation feature of the Snort 3 Detection Engine that could allow an |
| CVE-2026-20236 | Awaiting Analysis | 未確認 | CWE-682 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive interna |
| CVE-2026-20291 | Awaiting Analysis | 未確認 | CWE-269 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive interna |
| CVE-2026-20321 | Awaiting Analysis | 未確認 | CWE-544 | A vulnerability in the web-based management API for Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to execute arbitrary com |
| CVE-2026-20328 | Awaiting Analysis | 未確認 | CWE-862 | A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote |
| CVE-2026-20356 | Awaiting Analysis | 未確認 | CWE-400 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive interna |
| CVE-2026-20362 | Awaiting Analysis | 未確認 | CWE-918 | A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks through |
| CVE-2026-20519 | Analyzed | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station co |
| CVE-2026-20520 | Analyzed | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station co |
| CVE-2026-20521 | Analyzed | 未確認 | CWE-121 | In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges ne |
| CVE-2026-20522 | Analyzed | 未確認 | CWE-787 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges neede |
| CVE-2026-20523 | Analyzed | 未確認 | CWE-787 | In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges neede |
| CVE-2026-20524 | Analyzed | 未確認 | CWE-1285 | In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. Use |
| CVE-2026-20525 | Analyzed | 未確認 | CWE-617 | In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled b |
| CVE-2026-20526 | Analyzed | 未確認 | CWE-787 | In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station co |
| CVE-2026-20527 | Analyzed | 未確認 | CWE-129 | In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by t |
| CVE-2026-20528 | Analyzed | 未確認 | CWE-787 | In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege e |
| CVE-2026-20529 | Analyzed | 未確認 | CWE-787 | In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20530 | Analyzed | 未確認 | CWE-787 | In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the Sy |
| CVE-2026-20531 | Analyzed | 未確認 | CWE-416 | In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti |
| CVE-2026-20532 | Analyzed | 未確認 | CWE-415 | In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interaction is not |
| CVE-2026-20533 | Analyzed | 未確認 | CWE-190 | In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the S |
| CVE-2026-20534 | Analyzed | 未確認 | CWE-125 | In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station contro |
| CVE-2026-20535 | Analyzed | 未確認 | CWE-862 | In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained t |
| CVE-2026-20536 | Analyzed | 未確認 | CWE-416 | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privileg |
| CVE-2026-20537 | Analyzed | 未確認 | CWE-416 | In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privileg |
| CVE-2026-20538 | Analyzed | 未確認 | CWE-126 | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station contr |
| CVE-2026-20539 | Analyzed | 未確認 | CWE-126 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlle |
| CVE-2026-20540 | Analyzed | 未確認 | CWE-126 | In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlle |
| CVE-2026-20541 | Analyzed | 未確認 | CWE-126 | In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base station contr |
| CVE-2026-20542 | Analyzed | 未確認 | CWE-416 | In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privil |
| CVE-2026-20543 | Analyzed | 未確認 | CWE-215 | In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed. User inte |
| CVE-2026-20544 | Analyzed | 未確認 | CWE-787 | In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, |
| CVE-2026-20579 | Analyzed | 未確認 | CWE-787 | In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privil |
| CVE-2026-20586 | Analyzed | 未確認 | CWE-787 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. Us |
| CVE-2026-20587 | Analyzed | 未確認 | CWE-843 | In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System pr |
| CVE-2026-20588 | Analyzed | 未確認 | CWE-787 | In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the S |
| CVE-2026-20589 | Analyzed | 未確認 | CWE-787 | In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the System privil |
| CVE-2026-21114 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. |
| CVE-2026-21115 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21116 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. |
| CVE-2026-21117 | Awaiting Analysis | 未確認 | CWE-284 | Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information. |
| CVE-2026-21118 | Awaiting Analysis | 未確認 | CWE-284 | Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage. |
| CVE-2026-21119 | Awaiting Analysis | 未確認 | Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory. | |
| CVE-2026-21120 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege. |
| CVE-2026-21121 | Awaiting Analysis | 未確認 | CWE-280 | Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs. |
| CVE-2026-21122 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code. |
| CVE-2026-21123 | Awaiting Analysis | 未確認 | CWE-269 | Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before fir |
| CVE-2026-21124 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code. |
| CVE-2026-21125 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code. |
| CVE-2026-21126 | Awaiting Analysis | 未確認 | Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory. | |
| CVE-2026-21127 | Awaiting Analysis | 未確認 | CWE-926 | Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data. |
| CVE-2026-21128 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in CreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch arbitrary activity with Samsung Checkout priv |
| CVE-2026-21129 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Check |
| CVE-2026-21130 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation in CreditCardRetrieveActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout p |
| CVE-2026-21131 | Awaiting Analysis | 未確認 | CWE-276 | Incorrect default permission in Samsung Flow prior to version 4.9.22.4 allows local attackers to launch an arbitrary activity with Samsung Flow privileges on the connected device. |
| CVE-2026-21132 | Awaiting Analysis | 未確認 | Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulner | |
| CVE-2026-21133 | Awaiting Analysis | 未確認 | CWE-22 | Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data. |
| CVE-2026-21134 | Awaiting Analysis | 未確認 | CWE-287 | Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information. |
| CVE-2026-21135 | Awaiting Analysis | 未確認 | CWE-284 | Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information. |
| CVE-2026-21136 | Awaiting Analysis | 未確認 | Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process. | |
| CVE-2026-21137 | Awaiting Analysis | 未確認 | CWE-22 | Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege. |
| CVE-2026-21138 | Awaiting Analysis | 未確認 | Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications. | |
| CVE-2026-21139 | Awaiting Analysis | 未確認 | Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device. | |
| CVE-2026-21140 | Awaiting Analysis | 未確認 | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications. | |
| CVE-2026-21266 | Rejected | 未確認 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-21270 | Rejected | 未確認 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-21356 | Rejected | 未確認 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-21589 | Analyzed | 掲載 | CWE-552 | This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center. Crowd Data Center, Cru |
| CVE-2026-21811 | Awaiting Analysis | 未確認 | CWE-522 | HCL AppScan Azure Boards Plugin is potentially affected by an Information Disclosure vulnerability involving secrets accessible in plaintext during pipeline execution. Depending on |
| CVE-2026-21812 | Awaiting Analysis | 未確認 | CWE-319 | HCL AppScan Azure Boards Plugin is affected by a Cleartext Transmission of Sensitive Information vulnerability when configured to communicate with the AppScan server over HTTP. Thi |
| CVE-2026-21833 | Deferred | 未確認 | CWE-1032 | HCL AION is affected by a vulnerability in which the Content-Security-Policy (CSP) HTTP response header is not configured. CSP helps prevent attacks such as Cross-Site Scripting (X |
| CVE-2026-22061 | Deferred | 未確認 | CWE-215 | Trident versions v25.02.1 through v26.06.1 are susceptible to a vulnerability that could allow an authenticated attacker with access to debug logs to view LUKS passphrases or SMB A |
| CVE-2026-22896 | Awaiting Analysis | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vuln |
| CVE-2026-23705 | Awaiting Analysis | 未確認 | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAna |
| CVE-2026-23706 | Awaiting Analysis | 未確認 | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAna |
| CVE-2026-23707 | Awaiting Analysis | 未確認 | CWE-89 | An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAna |
| CVE-2026-24715 | Awaiting Analysis | 未確認 | CWE-208 | An observable timing discrepancy vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have |
| CVE-2026-24718 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of |
| CVE-2026-24721 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a |
| CVE-2026-24722 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a |
| CVE-2026-24723 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a |
| CVE-2026-25263 | Analyzed | 未確認 | CWE-787 | Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters. |
| CVE-2026-25267 | Analyzed | 未確認 | CWE-862 | Memory corruption when non-secure loader rewrites page tables before secure memory initialization. |
| CVE-2026-25269 | Analyzed | 未確認 | CWE-787 | Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size. |
| CVE-2026-25270 | Analyzed | 未確認 | CWE-787 | Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver. |
| CVE-2026-25272 | Analyzed | 未確認 | CWE-787 | Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation. |
| CVE-2026-25273 | Analyzed | 未確認 | CWE-787 | Memory Corruption when processing camera operations due to out-of-bounds write during driver updates. |
| CVE-2026-25274 | Analyzed | 未確認 | CWE-416 | Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization. |
| CVE-2026-25291 | Analyzed | 未確認 | CWE-416 | Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms. |
| CVE-2026-25302 | Analyzed | 未確認 | CWE-347 | Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed. |
| CVE-2026-25433 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WP2LEADS <= 3.5.7 versions. |
| CVE-2026-25434 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in WP2LEADS <= 3.5.7 versions. |
| CVE-2026-25716 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Hallo Welt! GmbH BlueSpice (Extension:BlueSpiceUserManager) allows any authenticated user without special privileges to block or unblock arbi |
| CVE-2026-25784 | Deferred | 未確認 | CWE-1188, CWE-269 | Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH BlueSpice (container image bluespice/wiki) allows privilege escalation. The default value of |
| CVE-2026-25946 | Deferred | 未確認 | CWE-918 | When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses. An u |
| CVE-2026-26243 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of |
| CVE-2026-26244 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized |
| CVE-2026-26245 | Analyzed | 未確認 | CWE-89 | A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized |
| CVE-2026-26287 | Awaiting Analysis | 未確認 | CWE-696 | External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Starting in version 0.10.0 and prior to version 1 |
| CVE-2026-26846 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component |
| CVE-2026-27350 | Deferred | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Builderius.io Builderius allows Server Side Request Forgery. This issue affects Builderius: from 1.4 through 1.4-beta. |
| CVE-2026-27420 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Katie Seaborn Zotpress zotpress allows Stored XSS.This issue affects Zotpress: |
| CVE-2026-27434 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in sc Internet Vivoo WP Rentals wprentals allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rentals: |
| CVE-2026-27872 | Deferred | 未確認 | CWE-269 | - Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects Easy IO FG: before 2.0b52. |
| CVE-2026-27873 | Deferred | 未確認 | CWE-798 | - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52. |
| CVE-2026-27874 | Deferred | 未確認 | CWE-798 | : Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3. |
| CVE-2026-28328 | Awaiting Analysis | 未確認 | CWE-863 | SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow low-privileged users to access and modify information beyond their ass |
| CVE-2026-28329 | Awaiting Analysis | 未確認 | CWE-918 | SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability that allows authenticated attackers to cause the application ser |
| CVE-2026-28330 | Awaiting Analysis | 未確認 | CWE-79 | SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content o |
| CVE-2026-28331 | Awaiting Analysis | 未確認 | CWE-200 | SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges. |
| CVE-2026-28625 | Analyzed | 未確認 | CWE-269 | In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privile |
| CVE-2026-28640 | Analyzed | 未確認 | CWE-20 | In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local esc |
| CVE-2026-28641 | Analyzed | 未確認 | CWE-269 | In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to loc |
| CVE-2026-28647 | Analyzed | 未確認 | CWE-269 | In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege |
| CVE-2026-28648 | Analyzed | 未確認 | CWE-441 | In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User i |
| CVE-2026-28667 | Analyzed | 未確認 | CWE-119 | In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional executi |
| CVE-2026-28745 | Awaiting Analysis | 未確認 | CWE-257 | Usernames and passwords, including the default credentials, are stored in the configuration file using weak encryption. If the default credentials are known by a malicious user, th |
| CVE-2026-28763 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially |
| CVE-2026-28850 | Awaiting Analysis | 未確認 | CWE-862 | An authorization issue was addressed with improved state management. This issue is fixed in visionOS 27. An app may be able to access sensitive user data. |
| CVE-2026-28853 | Undergoing Analysis | 未確認 | CWE-269 | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges. |
| CVE-2026-28854 | Undergoing Analysis | 未確認 | The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching. | |
| CVE-2026-29001 | Deferred | 未確認 | CWE-502 | TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to achieve arbitrary code execution by submitting a serialized PHP |
| CVE-2026-2937 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-29797 | Awaiting Analysis | 未確認 | CWE-494 | No authentication is required when updating firmware or bootloader, making it easy for malicious files to be pushed to the device. Additionally, anyone with the same software can s |
| CVE-2026-30971 | Deferred | 未確認 | CWE-78 | ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.39.2, 1.38.2, and 1.36.40, ZoneMinder interpolates an unvalidated monitor Device field |
| CVE-2026-3161 | Awaiting Analysis | 未確認 | CWE-327 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
| CVE-2026-32557 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WooCommerce Appointments <= 5.3.2 versions. |
| CVE-2026-32568 | Deferred | 未確認 | CWE-94 | Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions. |
| CVE-2026-32569 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Media folder <= 6.2.2 versions. |
| CVE-2026-32570 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Progressify - Progressive Web App (PWA) <= 1.6.0 versions. |
| CVE-2026-32571 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions. |
| CVE-2026-32572 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP User Frontend Pro <= 4.2.13 versions. |
| CVE-2026-32574 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EDGARROJAS Smart Forms smart-forms allows DOM-Based XSS.This issue affects Sma |
| CVE-2026-32575 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in SUMO Affiliates Pro <= 11.7.0 versions. |
| CVE-2026-32576 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in ZWEISCHNEIDER Faktur Pro for WooCommerce woorechnung allows Exploiting Incorrectly Configured Access Control Secur |
| CVE-2026-32577 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Frontend File Manager <= 23.6 versions. |
| CVE-2026-32578 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in ECPay Ecommerce for WooCommerce <= 1.1.2606090 versions. |
| CVE-2026-32579 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions. |
| CVE-2026-32580 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WooCommerce Lottery <= 2.2.9 versions. |
| CVE-2026-32581 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Mooberry Book Manager 4.16.2 versions. |
| CVE-2026-32582 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in iatoai IATO MCP iato-mcp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IATO MCP: from n/a throug |
| CVE-2026-32584 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retriev |
| CVE-2026-32585 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in airano Airano MCP Bridge airano-mcp-bridge allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Airano |
| CVE-2026-32645 | Awaiting Analysis | 未確認 | CWE-798 | Default factory credentials with administrative access are enabled and persist even after configuring other administrator accounts. |
| CVE-2026-3295 | Awaiting Analysis | 未確認 | CWE-79 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting. The web app user‑supplied input is not properly sanitized or HTML‑encoded before being stored and r |
| CVE-2026-3303 | Awaiting Analysis | 未確認 | CWE-942 | IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out privileged actions as the domain name is not being limited to onl |
| CVE-2026-33272 | Awaiting Analysis | 未確認 | CWE-288 | A malicious user with physical access to the device can boot the switch from factory settings without authentication, use the default administrative credentials to obtain administr |
| CVE-2026-33367 | Awaiting Analysis | 未確認 | CWE-306 | SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrade |
| CVE-2026-33374 | Awaiting Analysis | 未確認 | CWE-400, CWE-770, CWE-789 | The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated users to trigger unbounded memory allocations that can crash the serv |
| CVE-2026-33568 | Deferred | 未確認 | CWE-78 | A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted H |
| CVE-2026-33586 | Awaiting Analysis | 未確認 | CWE-1188, CWE-290, CWE-346 | Authenticated users are able to manipulate both the SMTP envelope “Envelope-from” and “From” fields when sending emails through OVH mail servers. Due to OVH's default SPF config |
| CVE-2026-33789 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated BGP peer to cause a den |
| CVE-2026-33792 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to execute code as root or c |
| CVE-2026-33795 | Awaiting Analysis | 未確認 | CWE-197 | A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a denial of |
| CVE-2026-33796 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to exec |
| CVE-2026-33798 | Awaiting Analysis | 未確認 | CWE-121 | A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS Evolved on the SRX Series allows an L2-adjacent attacker to execute arbitrary co |
| CVE-2026-34006 | Awaiting Analysis | 未確認 | CWE-306 | A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE. If exploited, the vulnerability could allow remote attackers to gain acce |
| CVE-2026-34007 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We h |
| CVE-2026-34008 | Awaiting Analysis | 未確認 | CWE-732 | An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If a local attacker gains a user account, they can then exploit |
| CVE-2026-34009 | Awaiting Analysis | 未確認 | CWE-653 | An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3. If a local attacker gains an administrator account, they can then exploit t |
| CVE-2026-34014 | Awaiting Analysis | 未確認 | CWE-732 | An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station. If a local attacker gains an administrator account, they can th |
| CVE-2026-34015 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of |
| CVE-2026-34189 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of event responses via a forged GET request when an authenticated administrator visits a malicious page |
| CVE-2026-34190 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability allows unauthorized deletion of alert commands via sequential, unvalidated GET requests when an authenticated administrator visits a |
| CVE-2026-34484 | Deferred | 未確認 | Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the administrative shell interface. An authenticated local attacker with re | |
| CVE-2026-34485 | Deferred | 未確認 | Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access | |
| CVE-2026-34493 | Deferred | 未確認 | CWE-1191 | - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63. |
| CVE-2026-34494 | Deferred | 未確認 | CWE-1191 | - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63. |
| CVE-2026-34498 | Awaiting Analysis | 未確認 | CWE-20 | Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: |
| CVE-2026-34499 | Awaiting Analysis | 未確認 | CWE-321 | Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10. |
| CVE-2026-34633 | Analyzed | 未確認 | CWE-918 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability t |
| CVE-2026-34634 | Analyzed | 未確認 | CWE-918 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction |
| CVE-2026-35001 | Deferred | 未確認 | CWE-122, CWE-190 | OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5 file with malicious |
| CVE-2026-35088 | Deferred | 未確認 | CWE-326 | Slican telephone exchanges use symmetric encryption for TCP/IP communication. Secret key is hardcoded in multiple binary files. An attacker who has access to these files can decryp |
| CVE-2026-35161 | Awaiting Analysis | 未確認 | CWE-645 | Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Overly Restrictive Account Lockout Mechanism vulnerability. An unauthenticated attacker with remote access coul |
| CVE-2026-35499 | Deferred | 未確認 | CWE-78 | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP reque |
| CVE-2026-35501 | Awaiting Analysis | 未確認 | CWE-354 | When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose |
| CVE-2026-3628 | Awaiting Analysis | 未確認 | CWE-209 | IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions. |
| CVE-2026-36436 | Deferred | 未確認 | CWE-522 | An issue in Trisolutions BRPerfX version 1.4.4.0 exposes LDAP credentials in plaintext within the administrative configuration interface. An authenticated administrator can inspect |
| CVE-2026-37107 | Deferred | 未確認 | CWE-269 | An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component |
| CVE-2026-3712 | Deferred | 未確認 | CWE-918 | The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing |
| CVE-2026-3717 | Deferred | 未確認 | CWE-862 | The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wp_save_signatu |
| CVE-2026-37719 | Deferred | 未確認 | CWE-502 | An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component. |
| CVE-2026-38671 | Awaiting Analysis | 未確認 | CWE-79 | Cross Site Scripting vulnerability in Ellucian Banner Student Registration Self-Service (StudentRegistrationSsb) 9.23 and prior (no fixed version available) allows a remote attacke |
| CVE-2026-39439 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamurai: from |
| CVE-2026-39444 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Access Control Security |
| CVE-2026-39453 | Awaiting Analysis | 未確認 | CWE-617 | Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantl |
| CVE-2026-39460 | Awaiting Analysis | 未確認 | CWE-522 | Usernames and passwords, including the default factory credentials, are stored in plaintext within the configuration file. With administrator rights, the configuration file can be |
| CVE-2026-39599 | Deferred | 未確認 | CWE-862 | Contributor Broken Access Control in WDS MCP Content Manager <= 3.10.4 versions. |
| CVE-2026-39600 | Deferred | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: |
| CVE-2026-39601 | Deferred | 未確認 | CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in WPdevelop Booking Calendar booking allows Leveraging Race Conditions.Th |
| CVE-2026-39717 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n |
| CVE-2026-39718 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6. |
| CVE-2026-39719 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions. |
| CVE-2026-39720 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Mapster WP Maps <= 2.0.4 versions. |
| CVE-2026-39721 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sta |
| CVE-2026-39722 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WPLMS <= 4.972 versions. |
| CVE-2026-39723 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Green Invoice Morning for WooCommerce wc-gateway-greeninvoice allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-39724 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in HTTP Requests Manager <= 1.3.11 versions. |
| CVE-2026-39725 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-1829. | |
| CVE-2026-39726 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Lumise Product Designer <= 2.1.1 versions. |
| CVE-2026-39727 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in WC Fields Factory <= 4.1.12 versions. |
| CVE-2026-39728 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions. |
| CVE-2026-39729 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Edwiser Bridge <= 4.3.4 versions. |
| CVE-2026-39730 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Marcin Wise Chat wise-chat allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wise Chat: from n/a thr |
| CVE-2026-39731 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Database for CF7 <= 1.2.6 versions. |
| CVE-2026-39745 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Contact Form to DB by BestWebSoft <= 1.7.6 versions. |
| CVE-2026-39746 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions. |
| CVE-2026-39747 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Woffice <= 5.4.35 versions. |
| CVE-2026-39748 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in EduMall <= 4.5.3 versions. |
| CVE-2026-39749 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in App for Cloudflare® <= 1.10.1 versions. |
| CVE-2026-39750 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.0.6 versions. |
| CVE-2026-39751 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in PayPlug for WooCommerce (Official) <= 3.1.0 versions. |
| CVE-2026-39752 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions. |
| CVE-2026-39753 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Taskbot <= 6.6 versions. |
| CVE-2026-39754 | Deferred | 未確認 | CWE-22 | Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions. |
| CVE-2026-39755 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in WP Duplicate <= 1.1.11 versions. |
| CVE-2026-39756 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Wappointment <= 2.7.7 versions. |
| CVE-2026-39757 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in Taskbot <= 6.6 versions. |
| CVE-2026-39758 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Midtrans-WooCommerce <= 2.32.3 versions. |
| CVE-2026-39759 | Deferred | 未確認 | CWE-434 | Employer / Sales Representative Arbitrary File Upload in Workreap Core <= 3.4.5 versions. |
| CVE-2026-39760 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Real 3D FlipBook <= 5.5 versions. |
| CVE-2026-39761 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Meta Box AIO <= 3.7.1 versions. |
| CVE-2026-39762 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Patterns In The Cloud Autoship Cloud for WooCommerce Subscription Products autoship-cloud allows Exploiting Incorrectly Configured Access Con |
| CVE-2026-39763 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Deepak Anand WP Dummy Content Generator wp-dummy-content-generator allows Exploiting Incorrectly Configured Access Control Security Levels.Th |
| CVE-2026-39764 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions. |
| CVE-2026-39765 | Deferred | 未確認 | CWE-266 | Shop Manager Privilege Escalation in Challan <= 3.7.88 versions. |
| CVE-2026-39766 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in ARForms <= 7.1.2 versions. |
| CVE-2026-39767 | Deferred | 未確認 | CWE-770 | Subscriber Denial of Service Attack in WPBase Cache <= 5.5.6 versions. |
| CVE-2026-39768 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive. | |
| CVE-2026-39769 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Iqonic Designs Graphina – Charts and Graphs For Elementor graphina-elementor-charts-and-graphs allows Pass |
| CVE-2026-39770 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions. |
| CVE-2026-39771 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Buddyboss Platform <= 3.1.0 versions. |
| CVE-2026-39772 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions. |
| CVE-2026-39773 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions. |
| CVE-2026-39774 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Tourfic Pro <= 1.17.3 versions. |
| CVE-2026-39775 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in JobZilla - Job Board WordPress Theme <= 2.2 versions. |
| CVE-2026-39776 | Deferred | 未確認 | CWE-94 | Editor Remote Code Execution (RCE) in Tabs <= 2.5 versions. |
| CVE-2026-39778 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes <= 2.1.2 versions. |
| CVE-2026-39779 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Asgaros Asgaros Forum asgaros-forum allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Asgaros Forum: |
| CVE-2026-39780 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Youzify <= 1.3.7 versions. |
| CVE-2026-39781 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Document Gallery document-gallery allows Reflected XSS.This issue |
| CVE-2026-39783 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Retrieve Embedded Sensitive Data.This issue affects Polylang: from n/a through 3.8.7. |
| CVE-2026-39784 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Hotel Booking <= 3.8 versions. |
| CVE-2026-39785 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows Blind SQL Injection.This |
| CVE-2026-39787 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in 10Web Social Photo Feed <= 1.4.35 versions. |
| CVE-2026-39788 | Deferred | 未確認 | CWE-79 | Subscriber Cross Site Scripting (XSS) in Front End PM <= 11.4.6 versions. |
| CVE-2026-39789 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Fluent Affiliate Pro <= 1.6.4 versions. |
| CVE-2026-39790 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRent |
| CVE-2026-39791 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions. |
| CVE-2026-39792 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions. |
| CVE-2026-39793 | Deferred | 未確認 | CWE-288 | Subscriber Broken Authentication in Simple JWT Login 4.0.0 versions. |
| CVE-2026-39794 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WooCommerce Multivendor Marketplace – REST API <= 1.6.3 versions. |
| CVE-2026-39795 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in SendPress Newsletters <= 1.26.1.20 versions. |
| CVE-2026-39796 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Advanced Posts Listing – Show Post List Easily <= 1.0.8 versions. |
| CVE-2026-39797 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in GDPR Framework By Data443 <= 2.5.0 versions. |
| CVE-2026-39798 | Deferred | 未確認 | CWE-862 | Unauthenticated Settings Change in TrueBooker <= 1.2.9 versions. |
| CVE-2026-39799 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP File Download <= 6.3.6 versions. |
| CVE-2026-39800 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Additional Order Filters for WooCommerce <= 1.24 versions. |
| CVE-2026-39801 | Deferred | 未確認 | CWE-266 | Subscriber Privilege Escalation in AIWU <= 1.5.9 versions. |
| CVE-2026-39802 | Deferred | 未確認 | CWE-94 | Unauthenticated Remote Code Execution (RCE) in Everest Backup <= 2.3.13 versions. |
| CVE-2026-39902 | Deferred | 未確認 | CWE-78 | Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `$\\n\r]) omitted single-quote, double-quote, redirect operat |
| CVE-2026-39989 | Awaiting Analysis | 未確認 | CWE-918 | A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability |
| CVE-2026-39991 | Awaiting Analysis | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject |
| CVE-2026-39993 | Awaiting Analysis | 未確認 | CWE-23 | A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the |
| CVE-2026-39997 | Awaiting Analysis | 未確認 | CWE-306 | A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to gain ac |
| CVE-2026-40615 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A special |
| CVE-2026-40627 | Deferred | 未確認 | CWE-78 | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP req |
| CVE-2026-40777 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WPSection <= 1.5.1 versions. |
| CVE-2026-40800 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes <= 1.5.3 versions. |
| CVE-2026-40801 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Wordable <= 8.2.10 versions. |
| CVE-2026-40802 | Deferred | 未確認 | CWE-862 | Subscriber Settings Change in Pubjet | پابجت <= 5.4.8 versions. |
| CVE-2026-40803 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Jotform – AI Chatbot <= 3.8.2 versions. |
| CVE-2026-40804 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kodezen LLC aBlocks ablocks allows Reflected XSS.This issue affects aBlocks: f |
| CVE-2026-40805 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Deletion in PeepSo <= 9.0.5.4 versions. |
| CVE-2026-40806 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Blog, Posts and Category Filter for Elementor <= 2.1.0 versions. |
| CVE-2026-40807 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in CF7 Views – Complete Entry Management for Contact Form 7 <= 3.2.6 versions. |
| CVE-2026-40808 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Jetpack VideoPress <= 3.6 versions. |
| CVE-2026-41114 | Awaiting Analysis | 未確認 | CWE-400 | Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driver. This issue affects Apache IoTDB JDBC driver: from 1.3.3 before 2.0.11. Users are recommended to u |
| CVE-2026-41210 | Deferred | 未確認 | CWE-787 | Moonlight Qt is a GameStream client for Windows, macOS, Linux, and Steam Link. In version 6.1.0 and earlier, after a victim initiates a streaming session to a malicious host, the h |
| CVE-2026-41222 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially craf |
| CVE-2026-41223 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially cr |
| CVE-2026-41504 | Deferred | 未確認 | CWE-117, CWE-93 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.0, the Native audit-log formatter in internal/auditlog/formats.go writes |
| CVE-2026-41508 | Deferred | 未確認 | CWE-693, CWE-755 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, the multipart processor in internal/bodyprocessors/multipart.go treats |
| CVE-2026-41510 | Awaiting Analysis | 未確認 | CWE-693, CWE-770 | OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, Coraza silently drops arguments after SecArgumentsLimit in internal/co |
| CVE-2026-41541 | Awaiting Analysis | 未確認 | CWE-61 | An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerabilit |
| CVE-2026-41544 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of une |
| CVE-2026-41545 | Awaiting Analysis | 未確認 | CWE-23, CWE-78 | A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read th |
| CVE-2026-41555 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email <= 1.5.9 versions. |
| CVE-2026-41558 | Deferred | 未確認 | CWE-290 | Subscriber Bypass Vulnerability in WP Migration Plugin DB & Files – WP Synchro <= 1.16.1 versions. |
| CVE-2026-41559 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 versions. |
| CVE-2026-41560 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WXD Backup Lite <= 1.0.2 versions. |
| CVE-2026-41561 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions. |
| CVE-2026-41562 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Norvis Backup <= 1.1.0 versions. |
| CVE-2026-41563 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Sitemovr <= 1.0.1 versions. |
| CVE-2026-41582 | Awaiting Analysis | 未確認 | CWE-22 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, public image and screenshot routes implemented in frontend/express/ |
| CVE-2026-41958 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .zip file can lead |
| CVE-2026-42019 | Deferred | 未確認 | CWE-121 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially cra |
| CVE-2026-42020 | Deferred | 未確認 | CWE-121 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially cra |
| CVE-2026-42021 | Deferred | 未確認 | CWE-121 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B2025042 |
| CVE-2026-42022 | Deferred | 未確認 | CWE-121 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B2025042 |
| CVE-2026-42023 | Deferred | 未確認 | CWE-121 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B2025042 |
| CVE-2026-42024 | Deferred | 未確認 | CWE-121 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B2025042 |
| CVE-2026-42025 | Deferred | 未確認 | CWE-121 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.13 |
| CVE-2026-42026 | Deferred | 未確認 | CWE-121 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.13 |
| CVE-2026-42093 | Deferred | 未確認 | CWE-89 | Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/query_runner/query_results.py accepts param |
| CVE-2026-42269 | Awaiting Analysis | 未確認 | CWE-22 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration deletion route in plugins/data_mig |
| CVE-2026-42270 | Awaiting Analysis | 未確認 | CWE-248 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, star-rating/images/ and dashboards/images/screenshots/ are among pu |
| CVE-2026-42356 | Analyzed | 未確認 | CWE-430 | Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs to also be treated as CGI and executed. The target mu |
| CVE-2026-42413 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <= 1.3.2 versions. |
| CVE-2026-42414 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in ListingPro <= 2.9.12 versions. |
| CVE-2026-42415 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in Porto Theme - Functionality <= 3.9.3 versions. |
| CVE-2026-42416 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in UDesign Core <= 4.15.0 versions. |
| CVE-2026-42417 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in ARMember Premium <= 7.8 versions. |
| CVE-2026-42418 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Socialrocket Social Rocket social-rocket allows Reflected XSS.This issue affec |
| CVE-2026-42419 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions. |
| CVE-2026-42528 | Analyzed | 未確認 | CWE-789 | A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to create WebDAV locks to crash server child processes. Users are recomme |
| CVE-2026-42532 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .eml file can lead to arbit |
| CVE-2026-42616 | Modified | 未確認 | CWE-122, CWE-787 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat() in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS im |
| CVE-2026-42617 | Analyzed | 未確認 | CWE-122 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_to_ib() in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a |
| CVE-2026-42618 | Analyzed | 未確認 | CWE-122, CWE-193 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_decompress() in compress.c that allows an attacker to corrupt one byte of heap memory in the SUID-root ntfs-3g bin |
| CVE-2026-42630 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions. |
| CVE-2026-42631 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions. |
| CVE-2026-42632 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions. |
| CVE-2026-42633 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Events Manager <= 7.4.6 versions. |
| CVE-2026-42634 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions. |
| CVE-2026-42635 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WooCommerce Simple Auctions <= 3.0.10 versions. |
| CVE-2026-42636 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in WP Cookie Notice for GDPR, CCPA & ePrivacy Consent <= 4.4.6 versions. |
| CVE-2026-42637 | Deferred | 未確認 | CWE-862 | Unauthenticated Settings Change in PayPlug for WooCommerce (Official) <= 3.1.0 versions. |
| CVE-2026-42638 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Awesomemotive Easy Digital Downloads easy-digital-downloads allows Exploiting Incorrectly Configured Access Control Security Levels.This issu |
| CVE-2026-4264 | Deferred | 未確認 | CWE-79 | Reflected Cross-Site Scripting (XSS) on the BeeTienda e-commerce platform, specifically in the latest demo version. The incident occurs due to a lack of proper sanitization of user |
| CVE-2026-42689 | Deferred | 未確認 | CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Pixelite Events Manager events-manager allows Leveraging Race Condition |
| CVE-2026-42693 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions. |
| CVE-2026-42695 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Stored X |
| CVE-2026-42696 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Royal Plugins SiteVault – Backup, Restore, Migration & Cloning sitevault-backup-restore-migration all |
| CVE-2026-42697 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Inisev Social Share Icons & Social Share Buttons ultimate-social-media-plus al |
| CVE-2026-42698 | Deferred | 未確認 | CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue af |
| CVE-2026-42699 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in FV Player 8 <= 8.1.8 versions. |
| CVE-2026-42700 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image Slider Widget image-slider-widget allows Stored XSS.This issue |
| CVE-2026-42702 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: fro |
| CVE-2026-42704 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions. |
| CVE-2026-42705 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Grand News <= 3.4 versions. |
| CVE-2026-42706 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in DK <= 3.2.1 versions. |
| CVE-2026-42708 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue |
| CVE-2026-42709 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions. |
| CVE-2026-42710 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web Slider by 10Web slider-wd allows Blind SQL Injection.This issue affects |
| CVE-2026-42711 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Slider by 10Web <= 1.2.63 versions. |
| CVE-2026-42712 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions. |
| CVE-2026-42713 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Gopiplus Post title marquee scroll post-title-marquee-scroll allows Blind SQL |
| CVE-2026-42714 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Piggly Dev Pix por Piggly (para Woocommerce) pix-por-piggly allows Blind SQL I |
| CVE-2026-42715 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Photo Gallery by 10Web <= 1.8.47 versions. |
| CVE-2026-42716 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Payever - WooCommerce Gateway <= 4.8.2 versions. |
| CVE-2026-42717 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Leyka <= 3.32.3 versions. |
| CVE-2026-42718 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Booster for WooCommerce <= 8.4.0 versions. |
| CVE-2026-42719 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in Dynamic User Directory <= 2.4 versions. |
| CVE-2026-42720 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Inj |
| CVE-2026-42721 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows B |
| CVE-2026-42722 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in Frontend Admin by DynamiApps <= 3.29.13 versions. |
| CVE-2026-42723 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in CleanSkin <= 1.5.0 versions. |
| CVE-2026-42724 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in CleanSkin <= 1.5.0 versions. |
| CVE-2026-42777 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Aalto <= 1.8 versions. |
| CVE-2026-43598 | Awaiting Analysis | 未確認 | CWE-822 | Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-contr |
| CVE-2026-43834 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution. |
| CVE-2026-43835 | Deferred | 未確認 | CWE-345 | A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanentl |
| CVE-2026-43836 | Deferred | 未確認 | CWE-77 | A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. |
| CVE-2026-43837 | Deferred | 未確認 | CWE-120 | A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution. |
| CVE-2026-43838 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. |
| CVE-2026-43839 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service. |
| CVE-2026-43840 | Deferred | 未確認 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function. | |
| CVE-2026-43841 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function. |
| CVE-2026-43842 | Deferred | 未確認 | CWE-476 | A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set |
| CVE-2026-43843 | Deferred | 未確認 | CWE-190 | An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. |
| CVE-2026-43844 | Deferred | 未確認 | CWE-287 | A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. |
| CVE-2026-43845 | Deferred | 未確認 | CWE-640 | A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. |
| CVE-2026-43846 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution. |
| CVE-2026-43847 | Deferred | 未確認 | CWE-307 | A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled |
| CVE-2026-43848 | Deferred | 未確認 | CWE-400 | A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. |
| CVE-2026-43849 | Deferred | 未確認 | CWE-125 | A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. |
| CVE-2026-43850 | Deferred | 未確認 | CWE-77 | A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. |
| CVE-2026-43851 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. |
| CVE-2026-43852 | Deferred | 未確認 | CWE-22 | A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. |
| CVE-2026-43853 | Deferred | 未確認 | CWE-617 | A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. |
| CVE-2026-43854 | Deferred | 未確認 | CWE-311 | A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices. |
| CVE-2026-43855 | Deferred | 未確認 | CWE-122 | A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. |
| CVE-2026-43856 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer |
| CVE-2026-43857 | Deferred | 未確認 | CWE-94 | A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. |
| CVE-2026-43858 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. |
| CVE-2026-43976 | Deferred | 未確認 | CWE-863 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, five gym management views in wger apply a flawed gym-scope guard (`gym_a != gym_b`) that silently pas |
| CVE-2026-44031 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled recursion in DcmSequenceOfItems::read() and DcmItem::read() in the dcmdata library of OFFIS DCMTK 3.7.0 allows a remote, unauthenticated attacker to cause a denial of |
| CVE-2026-44033 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled recursion in XMLNode::ParseXMLElement() and XMLNode::emptyTheNode() in the bundled XML parser (ofstd/libsrc/ofxml.cc) of OFFIS DCMTK 3.7.0 allows an attacker to cause |
| CVE-2026-44034 | Awaiting Analysis | 未確認 | CWE-125 | A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame() in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap m |
| CVE-2026-44035 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled recursion in DcmDicomDir::moveRecordToTree() in dcmdata/libsrc/dcdicdir.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service (stack exhaustion and p |
| CVE-2026-44036 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled mutual recursion between DcmXMLParseHelper::parseDataSet() and DcmXMLParseHelper::parseSequence() in the XML-to-DICOM converter (dcmdata/libdcxml/xml2dcm.cc) of OFFIS |
| CVE-2026-44037 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled mutual recursion between DcmJSONReader::parseDataSet(), DcmJSONReader::parseElement() and DcmJSONReader::parseSequence() in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3 |
| CVE-2026-44038 | Awaiting Analysis | 未確認 | CWE-125 | A global out-of-bounds read in the Huffman decoder of the bundled IJG JPEG libraries (dcmjpeg/libijg8, libijg12 and libijg16) of OFFIS DCMTK 3.7.0 allows an attacker to read memory |
| CVE-2026-4405 | Awaiting Analysis | 未確認 | CWE-525 | IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the system. |
| CVE-2026-44084 | Analyzed | 未確認 | CWE-639 | An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain |
| CVE-2026-4413 | Awaiting Analysis | 未確認 | CWE-79 | IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting. This vulnerability allows an unauthenticated attacker to embed arbitrary JavaScript code in the Web UI thus alt |
| CVE-2026-4418 | Awaiting Analysis | 未確認 | CWE-80 | IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker could inject malicious HTML code, which when viewed, would be executed |
| CVE-2026-44414 | Awaiting Analysis | 未確認 | CWE-35 | A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Devi |
| CVE-2026-44415 | Awaiting Analysis | 未確認 | CWE-35 | Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal |
| CVE-2026-44828 | Deferred | 未確認 | CWE-538 | Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup- |
| CVE-2026-44977 | Awaiting Analysis | 未確認 | CWE-79 | countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js allows a non-global application admi |
| CVE-2026-45161 | Deferred | 未確認 | CWE-352 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, the `trainer_login` view in wger accepts GET requests and executes `django_login()` without any CSRF |
| CVE-2026-45165 | Awaiting Analysis | 未確認 | CWE-863 | An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circums |
| CVE-2026-45440 | Deferred | 未確認 | CWE-89 | Administrator SQL Injection in WP Ultimate CSV Importer <= 9.2 versions. |
| CVE-2026-45449 | Deferred | 未確認 | CWE-78 | : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unit |
| CVE-2026-45450 | Deferred | 未確認 | CWE-119 | : Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pr |
| CVE-2026-45451 | Deferred | 未確認 | CWE-287 | : Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions on |
| CVE-2026-45452 | Deferred | 未確認 | CWE-134 | Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStrea |
| CVE-2026-45524 | Analyzed | 未確認 | CWE-862 | In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no additional e |
| CVE-2026-46346 | Deferred | 未確認 | CWE-330, CWE-340, CWE-640 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password reset token is predictably based on the |
| CVE-2026-46347 | Deferred | 未確認 | CWE-330, CWE-340, CWE-640 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, when a password reset link is visited, the applicatio |
| CVE-2026-46434 | Deferred | 未確認 | CWE-269 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, a user with only the `gym_trainer` permission can deactivate any account in the same gym, including ` |
| CVE-2026-46437 | Deferred | 未確認 | CWE-287, CWE-613 | wger is a free, open-source workout and fitness manager. Versions prior to 2.6 have a vulnerability in the authentication/session lifecycle of `wger` where bearer-style API credent |
| CVE-2026-46438 | Deferred | 未確認 | CWE-639, CWE-862 | wger is a free, open-source workout and fitness manager. Prior to version 2.6, an authenticated attacker can inject arbitrary workout log entries into any other user's `SlotEntry` |
| CVE-2026-46449 | Awaiting Analysis | 未確認 | CWE-78 | The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is cau |
| CVE-2026-46471 | Awaiting Analysis | 未確認 | CWE-126 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may read past the end of a heap-allo |
| CVE-2026-46472 | Awaiting Analysis | 未確認 | CWE-125 | An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may read past the end of a global ar |
| CVE-2026-46531 | Deferred | 未確認 | CWE-89 | Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection |
| CVE-2026-46569 | Modified | 未確認 | CWE-122, CWE-787 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_copy_tail(), in libntfs-3g/index.c, that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g bin |
| CVE-2026-46570 | Analyzed | 未確認 | CWE-122 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_index_walk_down() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g bi |
| CVE-2026-46571 | Analyzed | 未確認 | CWE-125 | In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_file_name() in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g |
| CVE-2026-46572 | Analyzed | 未確認 | CWE-122 | In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_cut_tail() in libntfs-3g/index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary |
| CVE-2026-46651 | Deferred | 未確認 | CWE-306, CWE-552, CWE-918 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, the DownloadTaskEndpoint WebSocke |
| CVE-2026-46652 | Deferred | 未確認 | CWE-22, CWE-73 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilena |
| CVE-2026-46691 | Deferred | 未確認 | CWE-862 | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can send POST /api/v1/Import/{id}/exportError |
| CVE-2026-46694 | Deferred | 未確認 | CWE-862 | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a portal user with stream access to a parent record can directly fetch a Note through the po |
| CVE-2026-46708 | Deferred | 未確認 | CWE-639, CWE-862 | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, a low-privileged user who can access a shared TargetList can invoke opt-out or cancel-opt-ou |
| CVE-2026-46729 | Analyzed | 未確認 | CWE-476 | NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. |
| CVE-2026-47025 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allow | |
| CVE-2026-47168 | Deferred | 未確認 | CWE-502 | EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted serialized PHP object data that is stored |
| CVE-2026-47218 | Awaiting Analysis | 未確認 | CWE-502 | runwasi facilitates running Wasm and WASI workloads managed by containerd. Prior to 0.6.1, containerd-shim-wasmtime-v1 can treat Wasmtime precompiled bytes supplied directly in an |
| CVE-2026-47360 | Analyzed | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_cookie module. When SessionCookieRemove changes across internal |
| CVE-2026-47786 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection vulnerability has been reported to affect HybridDesk Station. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. W |
| CVE-2026-47790 | Awaiting Analysis | 未確認 | CWE-79 | A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service. If a remote attacker gains a user account, they can then exploit the vulnerability to inject m |
| CVE-2026-4791 | Deferred | 未確認 | CWE-79 | The PeproDev Ultimate Profile Solutions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `logout-url` shortcode's 'button' attribute in all versions up to, |
| CVE-2026-48005 | Analyzed | 未確認 | CWE-306 | Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause a |
| CVE-2026-48193 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions. |
| CVE-2026-48194 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions. |
| CVE-2026-48197 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capab |
| CVE-2026-48199 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Sermon'e <= 1.0.2 versions. |
| CVE-2026-48211 | Deferred | 未確認 | CWE-352 | An authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack. The OTRS AdminImportExport::Templ |
| CVE-2026-48212 | Deferred | 未確認 | CWE-79 | An OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently executed in the browser of users a |
| CVE-2026-48279 | Rejected | 未確認 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-48377 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-48378 | Analyzed | 未確認 | CWE-20 | CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to b |
| CVE-2026-48382 | Undergoing Analysis | 未確認 | CWE-863 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini |
| CVE-2026-48383 | Undergoing Analysis | 未確認 | CWE-863 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini |
| CVE-2026-48398 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-48484 | Deferred | 未確認 | CWE-20, CWE-400 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API `rpc` function in `api_blueprint.py` handles `multipart/form-data` uploads by |
| CVE-2026-48503 | Deferred | 未確認 | CWE-191, CWE-200, CWE-252 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in s |
| CVE-2026-4869 | Awaiting Analysis | 未確認 | CWE-426 | A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with Prerequisites from an insecure locat |
| CVE-2026-48741 | Deferred | 未確認 | CWE-129, CWE-252, CWE-476, CWE-754 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in s |
| CVE-2026-48830 | Deferred | 未確認 | CWE-287 | Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication for protected non-builtin HTTP endpoints by first sending a |
| CVE-2026-4889 | Deferred | 未確認 | CWE-89 | SQL injection (SQLi) vulnerability in the eLoanApp application, specifically in the POST parameter 'logina' of the user process endpoint '/ajax/users.php?op=verify'. The parameter |
| CVE-2026-4894 | Deferred | 未確認 | CWE-290 | A vulnerability has been identified regarding insufficient validation in the Frappe Cloud/ERPNext authentication process, which allows multiple email addresses to be accepted by ma |
| CVE-2026-49206 | Deferred | 未確認 | CWE-190, CWE-787 | rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted size_t indexes to int before adding them to std: |
| CVE-2026-49264 | Deferred | 未確認 | CWE-79 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocat |
| CVE-2026-49265 | Deferred | 未確認 | CWE-208 | OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/grant_types/authorizatio |
| CVE-2026-49410 | Deferred | 未確認 | CWE-352, CWE-384 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. Versions before 0.56.0 allow cross-site request forgery against the unauthenticated G |
| CVE-2026-49442 | Deferred | 未確認 | CWE-204 | Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the |
| CVE-2026-49483 | Awaiting Analysis | 未確認 | CWE-345, CWE-732 | Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, IBMi components implementing IBMiComponent were ac |
| CVE-2026-49484 | Awaiting Analysis | 未確認 | CWE-377, CWE-459 | Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Brows |
| CVE-2026-4950 | Deferred | 未確認 | CWE-79 | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to manage the employees of defined companies (user groups). User properties, fo |
| CVE-2026-4951 | Deferred | 未確認 | CWE-79 | The CustomerAdministration portal (KundenManager) of VertiGIS WebOrderSystem allows privileged users to search for employees across all defined companies (user groups). The search |
| CVE-2026-4952 | Deferred | 未確認 | CWE-79 | The "ASMobile" web interface, which is part of the VertiGIS software package "GIS Portal", allows authenticated users to define a business reference. JavaScript code can be inserte |
| CVE-2026-49785 | Undergoing Analysis | 未確認 | CWE-404 | Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-49868 | Deferred | 未確認 | CWE-125, CWE-191 | RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07, _parse_reply() in sys/net/application_ |
| CVE-2026-49878 | Analyzed | 未確認 | CWE-787 | In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with Sys |
| CVE-2026-49880 | Analyzed | 未確認 | CWE-119 | In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additiona |
| CVE-2026-49885 | Analyzed | 未確認 | CWE-190 | In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional executio |
| CVE-2026-49933 | Analyzed | 未確認 | CWE-824 | In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. This could le |
| CVE-2026-49937 | Analyzed | 未確認 | CWE-119 | In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no addit |
| CVE-2026-49950 | Deferred | 未確認 | CWE-502 | Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the acto |
| CVE-2026-50053 | Undergoing Analysis | 未確認 | CWE-642 | A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/* to populate servlet attributes intended for trusted internal |
| CVE-2026-50054 | Awaiting Analysis | 未確認 | CWE-269 | An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with access to an authenticated account to grant another local account the loginAs right |
| CVE-2026-50055 | Awaiting Analysis | 未確認 | CWE-863 | A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disabled mail forwarding by using a Sieve notify action to send copies of email conte |
| CVE-2026-50056 | Undergoing Analysis | 未確認 | CWE-88 | A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to execute arbitrary commands as root. T |
| CVE-2026-50057 | Undergoing Analysis | 未確認 | CWE-732 | A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra account to execute arbitrary commands as root. The installed s |
| CVE-2026-50106 | Awaiting Analysis | 未確認 | CWE-807 | When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent |
| CVE-2026-50215 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local |
| CVE-2026-50216 | Awaiting Analysis | 未確認 | CWE-191 | An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UD |
| CVE-2026-50217 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of service (system c |
| CVE-2026-50218 | Awaiting Analysis | 未確認 | CWE-99 | Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact with a malicious link, |
| CVE-2026-5047 | Analyzed | 未確認 | CWE-922 | A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker |
| CVE-2026-5048 | Analyzed | 未確認 | CWE-89 | In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious d |
| CVE-2026-5049 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside |
| CVE-2026-50612 | Awaiting Analysis | 未確認 | CWE-61 | An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to c |
| CVE-2026-50619 | Awaiting Analysis | 未確認 | CWE-22 | A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpected files or system d |
| CVE-2026-50787 | Deferred | 未確認 | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters (l | |
| CVE-2026-51873 | Deferred | 未確認 | CWE-22 | Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside the intended project workspace. |
| CVE-2026-51874 | Deferred | 未確認 | CWE-22 | In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace. |
| CVE-2026-51875 | Deferred | 未確認 | CWE-22 | In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace, |
| CVE-2026-51876 | Deferred | 未確認 | CWE-285 | DeepTutor 1.4.0 contains an authorization bypass vulnerability in the book confirmation flow. An unauthenticated or unauthorized caller can reuse a publicly exposed book_id to subm |
| CVE-2026-51878 | Deferred | 未確認 | CWE-284 | deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regenerate_last_turn. A remote caller can enumerate or obtain a s |
| CVE-2026-51879 | Deferred | 未確認 | CWE-639 | deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TutorBotManager.write_bot_file. A remote caller can enumerate bot IDs and overwrite |
| CVE-2026-51880 | Deferred | 未確認 | CWE-22 | deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool layer to write or edit a |
| CVE-2026-51881 | Deferred | 未確認 | CWE-94 | deeptutor 1.4.0 contains code injection in ExecTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool layer to execute reviewer-chosen she |
| CVE-2026-51882 | Deferred | 未確認 | CWE-22 | The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write files to arbitrary locations outside the ` |
| CVE-2026-51883 | Deferred | 未確認 | CWE-22 | The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal. An attacker can inject path traversal sequences (such |
| CVE-2026-51884 | Deferred | 未確認 | CWE-22 | The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker ca |
| CVE-2026-51886 | Awaiting Analysis | 未確認 | CWE-94 | langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code (remote). The component is: src/backend/base/langflow/api/v1/validate.py:validate- |
| CVE-2026-51888 | Awaiting Analysis | 未確認 | CWE-22 | langflow-ai langflow v1.8.4 is affected by: Directory Traversal. The impact is: Arbitrary file write outside the intended workspace or storage boundary.. The component is: src/back |
| CVE-2026-51892 | Deferred | 未確認 | CWE-284 | infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via /v1/document/get/<doc_id>. |
| CVE-2026-51893 | Deferred | 未確認 | CWE-284 | infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap. An externally reachable path accepts a caller-selected object or tenant identifier and reache |
| CVE-2026-51894 | Deferred | 未確認 | CWE-284 | infiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via run_mindmap. A reachable path accepts a caller-selected object or tenant identifier and reaches a data-acces |
| CVE-2026-51895 | Deferred | 未確認 | CWE-284 | Ragflow 0.24.0 and prior contains improper access control in update_metadata_setting (api/apps/kb_app.py). Depending on the exposed entry, an attacker can perform unauthorized cros |
| CVE-2026-51896 | Deferred | 未確認 | CWE-284 | infiniflow ragflow 0.25.3 contains improper access control in resume (api/apps/connector_app.py). Depending on the exposed entry, an attacker can perform unauthorized cross-session |
| CVE-2026-51897 | Deferred | 未確認 | CWE-284 | RAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app). Depending on the exposed entry, an attacker can trigger attacker-controlled code or comman |
| CVE-2026-51898 | Awaiting Analysis | 未確認 | CWE-94 | sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute. |
| CVE-2026-51899 | Deferred | 未確認 | CWE-284 | In SuperAGI v0.0.14 and prior, controller endpoints (/api/agents/create, /api/agents/schedule, /api/agents/delete, /api/agents/edit_schedule, /api/agents/stop_schedule) allow authe |
| CVE-2026-51901 | Deferred | 未確認 | CWE-284 | SuperAGI up to 0.0.14 is vulnerable to Incorrect Access Control. The agent execution controller endpoint /api/agentexecutions/schedule allows authenticated users from one organizat |
| CVE-2026-51904 | Deferred | 未確認 | CWE-284 | SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller. In affected source snapshots, create_agent_execution and create_agent_ru |
| CVE-2026-51906 | Deferred | 未確認 | CWE-22 | In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images to arbitrary locations |
| CVE-2026-51907 | Deferred | 未確認 | CWE-22 | In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the s |
| CVE-2026-51911 | Deferred | 未確認 | CWE-94 | vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py). Depending on the exposed entry, an attacker can trigger attacke |
| CVE-2026-51914 | Deferred | 未確認 | CWE-284 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the agent template controller. In affected source snapshots, save_agent_as_template and publish_tem |
| CVE-2026-51915 | Deferred | 未確認 | CWE-284 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller. In affected source snapshots, get_tool and update_tool in superagi/controllers |
| CVE-2026-51916 | Deferred | 未確認 | CWE-284 | TransformerOptimus SuperAGI v0.0.14 contains an incorrect access control vulnerability in delete_user_knowledge in superagi/controllers/knowledges.py. In affected source snapshots, |
| CVE-2026-51917 | Deferred | 未確認 | CWE-94 | FinRobot v1.0.0 is vulnerable to Code Injection in CodingUtils.modify_code. |
| CVE-2026-51918 | Deferred | 未確認 | CWE-94 | FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code (). |
| CVE-2026-51922 | Deferred | 未確認 | CWE-94 | agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py). Depending on the exposed entry, an attacker can trigger attacker-contro |
| CVE-2026-51954 | Deferred | 未確認 | An issue in Webasyst Framework 4.0.3 and before allows a remote attacker to execute arbitrary code via a crafted OAuth authorization URL with an arbitrary redirect_uri. | |
| CVE-2026-52167 | Deferred | 未確認 | A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file. | |
| CVE-2026-52356 | Deferred | 未確認 | An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbit | |
| CVE-2026-52394 | Deferred | 未確認 | CWE-201, CWE-209 | DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input. |
| CVE-2026-52903 | Awaiting Analysis | 未確認 | CWE-502 | A deserialization of untrusted data vulnerability was found in ManageIQ. The YamlLoadAliases module overrides YAML.safe_load to silently fall back to YAML.unsafe_load in production |
| CVE-2026-53418 | Awaiting Analysis | 未確認 | CWE-939 | Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to conduct an escalation of privilege v |
| CVE-2026-53420 | Awaiting Analysis | 未確認 | CWE-120 | Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access. |
| CVE-2026-53562 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2. |
| CVE-2026-53563 | Awaiting Analysis | 未確認 | CWE-78 | Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. |
| CVE-2026-53564 | Awaiting Analysis | 未確認 | CWE-22 | Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. |
| CVE-2026-53574 | Deferred | 未確認 | CWE-89 | EspoCRM is an open source customer relationship management application. From 8.1.0 until 9.3.8, an authenticated non-administrator can submit a crafted where parameter to the GET e |
| CVE-2026-53575 | Deferred | 未確認 | CWE-79 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an authenticated administrator can place crafted content in the applicationName setting thro |
| CVE-2026-53582 | Deferred | 未確認 | CWE-643, CWE-91 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.10, the Trust module stores attacker-controlled certificate authority and certificate refid values |
| CVE-2026-53612 | Awaiting Analysis | 未確認 | CWE-367 | util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility's `hook_owner.c` post-mount hook performs |
| CVE-2026-53613 | Awaiting Analysis | 未確認 | CWE-367 | util-linux is a random collection of Linux utilities. In util-linux 2.17 through 2.41.6 and 2.42 through 2.42.3, and in 2.42.4 when the legacy `mount(2)` path is used without `/pro |
| CVE-2026-53614 | Awaiting Analysis | 未確認 | CWE-269, CWE-807 | util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID `mount` utility reads the attacker-controlled `LIBMOUNT_ |
| CVE-2026-53615 | Awaiting Analysis | 未確認 | CWE-190 | util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-partition start secto |
| CVE-2026-53709 | Deferred | 未確認 | CWE-1188, CWE-287, CWE-321, CWE-798 | MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY, while verify_jwt_token() accepts |
| CVE-2026-53711 | Deferred | 未確認 | CWE-79 | MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output enc |
| CVE-2026-53882 | Awaiting Analysis | 未確認 | CWE-59 | An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they |
| CVE-2026-53918 | Deferred | 未確認 | CWE-416, CWE-672, CWE-825 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA handler keeps a per-message `first` lease pointer so multi |
| CVE-2026-53920 | Deferred | 未確認 | CWE-125, CWE-126, CWE-200, CWE-201 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCPv6 IA parser accepts an IA_NA or IA_PD o |
| CVE-2026-53921 | Deferred | 未確認 | CWE-121 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte s |
| CVE-2026-53922 | Deferred | 未確認 | CWE-121, CWE-191 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In commit cfddd56 and earlier, an unauthenticated host on the same link can first obtain two bindings |
| CVE-2026-53942 | Awaiting Analysis | 未確認 | CWE-94 | Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present |
| CVE-2026-53953 | Deferred | 未確認 | CWE-338, CWE-640 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In version 3.3.22, the password reset endpoint can be accessed withou |
| CVE-2026-53964 | Deferred | 未確認 | CWE-1336 | Document Merge Service is a document template merge service providing an API to manage templates and merge them with given data. Prior to version 9.1.0, a remote code execution (RC |
| CVE-2026-53986 | Deferred | 未確認 | CWE-319, CWE-798 | Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcoded credentials vulnerability that allows attackers to obtain the shared |
| CVE-2026-53995 | Awaiting Analysis | 未確認 | CWE-22 | MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting |
| CVE-2026-53997 | Deferred | 未確認 | CWE-307, CWE-640 | Netherman Portal del Hermano (portaldelhermano.es) before 2026-10-06 contains a broken authentication vulnerability in its password-recovery flow at the POST /password/create-acces |
| CVE-2026-53999 | Deferred | 未確認 | CWE-20, CWE-441 | Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps. Prior to 0.58.0, the Kubernetes controller deseriali |
| CVE-2026-54049 | Deferred | 未確認 | CWE-79 | Sakai is a Collaboration and Learning Environment (CLE). From versions 23.0 to before 23.5, and versions 25.0 to before 25.3, the Sakai Conversations tool stores topic and post mes |
| CVE-2026-54086 | Awaiting Analysis | 未確認 | CWE-770 | SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a |
| CVE-2026-54238 | Awaiting Analysis | 未確認 | CWE-613 | Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets. Prior to version 2.103.1, the REST broadcast endpoints accept an expired JWT when the exp claim |
| CVE-2026-54425 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial of service by sending a crafted HTTP/2 header block containi |
| CVE-2026-54426 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a bRPC Redis client process by returning a deeply nested RESP ar |
| CVE-2026-54427 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by sending deeply nested AMF objects or arrays. The parser recurs |
| CVE-2026-54454 | Deferred | 未確認 | CWE-434 | OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior to 0.10.0, the OpenCATS Import module in modules/import/Impor |
| CVE-2026-54459 | Deferred | 未確認 | CWE-352 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.14.0, FileRise authenticates requests to the file creation and sh |
| CVE-2026-54472 | Analyzed | 未確認 | CWE-798 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access |
| CVE-2026-54525 | Awaiting Analysis | 未確認 | CWE-78 | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enhanced preview-link handling passes a decoded, Markdown-contro |
| CVE-2026-54532 | Deferred | 未確認 | CWE-829 | CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit 271d415, pull_request_target workflow is vulnerable to cache poisoning and OIDC token theft. A |
| CVE-2026-54554 | Awaiting Analysis | 未確認 | CWE-200 | FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo() endpoint in packages/web/lib/fog/fogpage.class.php |
| CVE-2026-54566 | Awaiting Analysis | 未確認 | CWE-94 | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, Markdown Preview Enhanced evaluates repository-controlled .crossnote/config.js an |
| CVE-2026-54615 | Deferred | 未確認 | CWE-79 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, LogEntryExtraFormatter builds the HTML shown in the "Extra" column of the |
| CVE-2026-54630 | Deferred | 未確認 | CWE-434 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-ser |
| CVE-2026-54631 | Deferred | 未確認 | CWE-798 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed value f |
| CVE-2026-54640 | Deferred | 未確認 | CWE-611 | OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in agent/src/main/java/org/openremote/agent/protocol/knx/KNXProto |
| CVE-2026-54641 | Deferred | 未確認 | CWE-639 | OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealmRoles methods in manager/src/main/java/org/openremote/manage |
| CVE-2026-54657 | Deferred | 未確認 | CWE-285, CWE-639 | Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.0.0 until 1.27.2, 1.28.2, and 1.29.0, the POST search endpoints /zaken/api/v1/zaken/_zoe |
| CVE-2026-54668 | Deferred | 未確認 | CWE-611 | Kitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Library Suite. Prior to version 3.9.2, org.kitodo.production.helper.XMLUtils |
| CVE-2026-54683 | Deferred | 未確認 | CWE-285, CWE-639 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. Prior to 3.0.3, b |
| CVE-2026-54697 | Deferred | 未確認 | CWE-190, CWE-789 | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accum |
| CVE-2026-54700 | Deferred | 未確認 | CWE-20, CWE-789 | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and e |
| CVE-2026-54701 | Awaiting Analysis | 未確認 | CWE-79 | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, Markdown Preview Enhanced reads repository-controlled .crossnote/head.html conten |
| CVE-2026-54702 | Awaiting Analysis | 未確認 | CWE-749 | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the webview message handler in src/preview-provider.ts accepts an attacker-contro |
| CVE-2026-54703 | Awaiting Analysis | 未確認 | CWE-73 | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossnote.updateMarkdown command in Markdown Preview Enhanced accepts an arb |
| CVE-2026-54711 | Deferred | 未確認 | CWE-532 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection informatio |
| CVE-2026-54867 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Griden Responsive Slider responsive-slider allows Stored XSS.This issue affect |
| CVE-2026-54868 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue |
| CVE-2026-54869 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in IDX Broker IMPress for IDX Broker idx-broker-platinum allows Stored XSS.This i |
| CVE-2026-54870 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Xtreme Theme Support weaverx-theme-support allows Stored XSS.T |
| CVE-2026-55083 | Awaiting Analysis | 未確認 | CWE-502 | DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to b |
| CVE-2026-55103 | Deferred | 未確認 | CWE-345, CWE-863 | Discourse ActivityPub adds ActivityPub support to Discourse. Prior to commit 1c8518b0f2abdf31cbea3e0b242f74d8994a9ba5, inbound ActivityPub processing does not sufficiently verify t |
| CVE-2026-55154 | Deferred | 未確認 | CWE-1236 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, application/Espo/Tools/Export/Format/Csv/Processor.php, application/Espo/Tools/Export/Format |
| CVE-2026-55167 | Deferred | 未確認 | CWE-294 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. Prior to 9.6, installations with WebAuthn two-fact |
| CVE-2026-55183 | Deferred | 未確認 | CWE-306 | RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7, RClone Manager starts the local rclone rcd service on 1 |
| CVE-2026-55184 | Deferred | 未確認 | CWE-79 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, a user with Email Template or PDF Template edit permission can store crafted HTML that bypas |
| CVE-2026-55190 | Deferred | 未確認 | CWE-918 | Event Schedule is an open-source platform to share events, sell tickets and bring communities together. In versions 1.0.0 and prior, App\Utils\UrlUtils::isUrlSafe() is the SSRF gua |
| CVE-2026-55222 | Deferred | 未確認 | CWE-1290 | Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to |
| CVE-2026-55230 | Deferred | 未確認 | CWE-79 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's HTML sanitizer fails to strip event-handle |
| CVE-2026-55231 | Deferred | 未確認 | CWE-22 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, a flawed central path sanitizer lets an authentica |
| CVE-2026-55232 | Deferred | 未確認 | CWE-918 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-on |
| CVE-2026-55239 | Deferred | 未確認 | CWE-89 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL th |
| CVE-2026-55240 | Deferred | 未確認 | CWE-1336 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in src/server/utils/template.ts passes survey feedTemplate and m |
| CVE-2026-55246 | Deferred | 未確認 | CWE-122, CWE-787 | bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the |
| CVE-2026-55251 | Deferred | 未確認 | CWE-494, CWE-829, CWE-94 | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. Prior to commit f41fc1e, the CI workflow .github/workflows/validatio |
| CVE-2026-55252 | Deferred | 未確認 | CWE-601 | OpenRun is an open-source, self-hosted GitOps platform for deploying web apps and internal tools to Docker or Kubernetes. Prior to version 0.17.7, the restrictions on redirect URLs |
| CVE-2026-55265 | Analyzed | 未確認 | CWE-119 | In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional exec |
| CVE-2026-55266 | Analyzed | 未確認 | CWE-400 | In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additional execut |
| CVE-2026-55269 | Analyzed | 未確認 | CWE-20 | In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no addit |
| CVE-2026-55270 | Analyzed | 未確認 | CWE-441 | In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution |
| CVE-2026-55280 | Analyzed | 未確認 | CWE-457 | In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges |
| CVE-2026-55286 | Analyzed | 未確認 | CWE-119 | In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional |
| CVE-2026-55307 | Awaiting Analysis | 未確認 | CWE-269 | In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System |
| CVE-2026-55330 | Awaiting Analysis | 未確認 | CWE-416 | In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additi |
| CVE-2026-55376 | Deferred | 未確認 | CWE-693, CWE-78, CWE-94 | Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with a |
| CVE-2026-55381 | Deferred | 未確認 | CWE-639 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, POST /api/v1/estimates/{ |
| CVE-2026-55382 | Deferred | 未確認 | CWE-639 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf NotesContro |
| CVE-2026-55383 | Deferred | 未確認 | CWE-285 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf public cust |
| CVE-2026-55384 | Deferred | 未確認 | CWE-284, CWE-472 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf invoice, es |
| CVE-2026-55385 | Deferred | 未確認 | CWE-918 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfig |
| CVE-2026-55386 | Deferred | 未確認 | CWE-89 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf passes the |
| CVE-2026-55387 | Deferred | 未確認 | CWE-284, CWE-639 | InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. In version 2.3.3 and earlier, InvoiceShelf bulk- |
| CVE-2026-55393 | Awaiting Analysis | 未確認 | CWE-22 | Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read configur |
| CVE-2026-55394 | Awaiting Analysis | 未確認 | CWE-319 | Unencrypted traffic in the 802.11 network of Teledyne FLIR Aware2 versions through 6.9.0.2 allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic |
| CVE-2026-55395 | Awaiting Analysis | 未確認 | CWE-798 | Hardcoded passwords in the access control in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to access and rec |
| CVE-2026-55396 | Awaiting Analysis | 未確認 | CWE-319 | Cleartext transmission without a cryptographic integrity check in operator control unit to robot UDP traffic in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (F |
| CVE-2026-55414 | Deferred | 未確認 | CWE-862, CWE-918 | NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. From 1.1.0 until |
| CVE-2026-55422 | Awaiting Analysis | 未確認 | CWE-79 | conda-forge is a GitHub organization containing repositories of conda recipes. In commits 85748ad2368a and prior, two React components render externally-sourced strings directly as |
| CVE-2026-55442 | Deferred | 未確認 | CWE-116, CWE-20 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 23.03 to before version 26.05, SolrTools.cleanUpQuery() strips S |
| CVE-2026-55444 | Deferred | 未確認 | CWE-20, CWE-89, CWE-943 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet (RssResolver, GET /rss/) accep |
| CVE-2026-55453 | Analyzed | 未確認 | CWE-74, CWE-77, CWE-78 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the backend/ipp.c quote_string() function preserves carriage-r |
| CVE-2026-55457 | Deferred | 未確認 | CWE-1392, CWE-287 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, Configuration.getWebApiToken returns the empty string |
| CVE-2026-55459 | Deferred | 未確認 | CWE-287, CWE-345 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpen |
| CVE-2026-55463 | Deferred | 未確認 | CWE-1385, CWE-306, CWE-862 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11.0 to before version 26.05, several Jakarta WebSocket endpoi |
| CVE-2026-55465 | Deferred | 未確認 | CWE-89, CWE-943 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint |
| CVE-2026-55467 | Analyzed | 未確認 | CWE-150, CWE-93, CWE-94 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, the cupsdCreateJob option-string builder in scheduler/job.c ma |
| CVE-2026-55480 | Analyzed | 未確認 | CWE-377, CWE-59 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_model() in scheduler/ipp.c creates a predictable TempDir/ |
| CVE-2026-55486 | Deferred | 未確認 | CWE-113, CWE-1336, CWE-79 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.08 to before version 26.05, the IIIF Auth 2.0 endpoints auth/ |
| CVE-2026-55498 | Deferred | 未確認 | CWE-59 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links with subfolder browsing |
| CVE-2026-55543 | Deferred | 未確認 | CWE-470, CWE-94 | TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk archive, including the .tg file its |
| CVE-2026-55562 | Deferred | 未確認 | CWE-79 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatena |
| CVE-2026-55572 | Deferred | 未確認 | CWE-89 | e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the submitted login username directl |
| CVE-2026-55573 | Deferred | 未確認 | CWE-502 | e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps POST parameter and passes it to unserialize() at file scope an |
| CVE-2026-55587 | Deferred | 未確認 | CWE-346 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser extension passkey provider does not bind passkey requests to th |
| CVE-2026-55600 | Deferred | 未確認 | CWE-79 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.2, Part-DB renders BOM validation information messages using Twig's |raw filt |
| CVE-2026-55601 | Deferred | 未確認 | CWE-78 | MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-controlled matche |
| CVE-2026-55606 | Deferred | 未確認 | CWE-126 | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. In versions 25.12 and prior, odhcpd's DHCPv6 self-loop detection at dhcpv6.c:720 uses a network-byte- |
| CVE-2026-55644 | Deferred | 未確認 | CWE-20 | Element X iOS is a Matrix iOS Client provided by Element. Element X iOS before version 26.05.0 fails to check the URL allowlist when parsing io.element.call://. If an attacker is a |
| CVE-2026-55675 | Deferred | 未確認 | CWE-1357, CWE-829, CWE-94 | The Salty documentation repository builds and deploys the docs.saltbox.dev website. Prior to commit 649c9aea2daef1168eeb0415b44e65dbbde9f220, .github/workflows/trigger-pr-build.yml |
| CVE-2026-55679 | Deferred | 未確認 | CWE-78, CWE-89, CWE-94 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the pre-installation web/instalador/instalador.php endpoint is reachable before config.php exists and processes |
| CVE-2026-55680 | Deferred | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to web/html/socio/sistema/cadastro_cobranca.php can place a quoted SQL expression |
| CVE-2026-55681 | Deferred | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with access to the Material & Patrimônio module can submit id_produto to web/html/matPat/r |
| CVE-2026-55682 | Deferred | 未確認 | CWE-200, CWE-384 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/seguranca/sessionStart.php reflects an attacker-supplied PHPSESSID cookie in a Set-C |
| CVE-2026-55683 | Deferred | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobranca.php endpoint accepts POST input through extract($_R |
| CVE-2026-55684 | Deferred | 未確認 | CWE-89 | WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/socio/sistema/cadastro_cobrancas_geracao.php endpoint accepts form-encoded POST dat |
| CVE-2026-55695 | Deferred | 未確認 | CWE-94 | FearlessCMS is a flat-file content management system centered on simplicity and open source. In 0.1.2b and earlier, an authenticated administrator can set an arbitrary Git reposito |
| CVE-2026-55786 | Deferred | 未確認 | CWE-306, CWE-78 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /mcp route accepts unauthenticated JSON-RPC tools/call request |
| CVE-2026-55787 | Deferred | 未確認 | CWE-918 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_url_ssrf and is_private_ip in src/core/utils.py compare resolved addresses only |
| CVE-2026-55796 | Deferred | 未確認 | CWE-89 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.60.3 and 16.7.1, the Salary Payments via ECS report constructs report conditions with unsafe SQL |
| CVE-2026-55797 | Undergoing Analysis | 未確認 | CWE-78 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command i |
| CVE-2026-55823 | Deferred | 未確認 | CWE-89 | Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a count operation around generated SQL through a raw database exec |
| CVE-2026-55826 | Deferred | 未確認 | CWE-200 | The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websites. From version 2.0.0 to before version 2.1.48, the WooCommerce purchase event tracking m |
| CVE-2026-55835 | Deferred | 未確認 | CWE-233 | Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.39.4, an unauthenticated user ca |
| CVE-2026-55836 | Deferred | 未確認 | CWE-200 | Open Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 until 1.27.2, 1.28.2, and 1.29.0, _import_document_row in src/openzaak/components/d |
| CVE-2026-55840 | Deferred | 未確認 | CWE-601 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto |
| CVE-2026-55842 | Deferred | 未確認 | CWE-346, CWE-942 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsConfiguration() method in src/main/java/com/erudika/scoold/ScooldServer.java combines addAll |
| CVE-2026-55862 | Analyzed | 未確認 | CWE-674 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply nested XML with unbounded recurs |
| CVE-2026-55871 | Deferred | 未確認 | CWE-89 | GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php concatenates the search_nam |
| CVE-2026-55872 | Deferred | 未確認 | CWE-79 | GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1, GYM One's admin/users/index.php renders the stored firstnam |
| CVE-2026-55875 | Deferred | 未確認 | CWE-918 | Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendar |
| CVE-2026-55876 | Deferred | 未確認 | CWE-79 | Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, the POST /planner/attachments/ endpoint allows authenticated users to upload SVG |
| CVE-2026-55888 | Awaiting Analysis | 未確認 | CWE-22 | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access |
| CVE-2026-55889 | Awaiting Analysis | 未確認 | CWE-330, CWE-337 | XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileTransfer.RetrieveFiles method to redirect drag-and-dro |
| CVE-2026-55981 | Awaiting Analysis | 未確認 | A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware image and upload the modified firmware to an affected | |
| CVE-2026-56097 | Awaiting Analysis | 未確認 | CWE-89 | A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Proxy. The application fails to sanitize input parameters used |
| CVE-2026-56098 | Awaiting Analysis | 未確認 | CWE-203 | A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerability due to an execution fall-through in the registry_author |
| CVE-2026-56153 | Analyzed | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. |
| CVE-2026-56154 | Analyzed | 未確認 | CWE-416 | Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. |
| CVE-2026-56386 | Deferred | 未確認 | CWE-125, CWE-191 | Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a mal |
| CVE-2026-56387 | Deferred | 未確認 | CWE-770, CWE-789 | The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTM |
| CVE-2026-56388 | Deferred | 未確認 | CWE-252, CWE-617, CWE-787 | The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unauthenticated attacker who can reach a bRPC server with Redis service ena |
| CVE-2026-56449 | Modified | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. This issue affects Apache HTTP Server version 2.4.68. |
| CVE-2026-56589 | Analyzed | 未確認 | CWE-79 | HCL BigFix Service Management is affected by a Stored Cross-Site Scripting (XSS) vulnerability, which could allow an attacker to inject and store malicious scripts within the appli |
| CVE-2026-56596 | Awaiting Analysis | 未確認 | CWE-20 | HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing e |
| CVE-2026-56599 | Analyzed | 未確認 | CWE-614 | HCL BigFix Service Management is affected by an Insecure Cookie Attribute Configuration vulnerability, which could allow an attacker to exploit missing security attributes such as |
| CVE-2026-56660 | Deferred | 未確認 | CWE-352, CWE-434, CWE-918 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler in UpdateCE.php downloads a |
| CVE-2026-56661 | Deferred | 未確認 | CWE-918 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the update handler fetches a user-supplied URL |
| CVE-2026-56662 | Deferred | 未確認 | CWE-352 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. Prior to version 1.5, the UpdateCE update form contained no anti-CSRF |
| CVE-2026-56714 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-56826 | Deferred | 未確認 | CWE-862 | Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting could directly invoke destruct |
| CVE-2026-56832 | Deferred | 未確認 | CWE-345, CWE-863 | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.DiscordApproval approves a pending dangerous tool call when it sees any later n |
| CVE-2026-56833 | Deferred | 未確認 | CWE-200, CWE-22 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage |
| CVE-2026-56834 | Deferred | 未確認 | CWE-200, CWE-22 | PraisonAI is a multi-agent teams system. From version 3.8.1 to before version 4.6.59, PraisonAI's Dynamic Context Discovery feature exposes artifact helper tools through ctx.get_to |
| CVE-2026-56835 | Deferred | 未確認 | CWE-862, CWE-863 | PraisonAI is a multi-agent teams system. From version 3.11.0 to before version 4.6.59, PraisonAI's Slack bot applies its configured allowed_users, allowed_channels, and unknown-use |
| CVE-2026-56836 | Deferred | 未確認 | CWE-287, CWE-306, CWE-862 | PraisonAI is a multi-agent teams system. From version 4.5.112 to before version 4.6.59, PraisonAI's installed console entrypoint is Typer-first. In current releases, the recipe com |
| CVE-2026-56837 | Deferred | 未確認 | CWE-287, CWE-306, CWE-347 | PraisonAI is a multi-agent teams system. From version 4.6.56 to before version 4.6.59, PraisonAI's LinearBot starts a public webhook listener on 0.0.0.0 and treats LINEAR_WEBHOOK_S |
| CVE-2026-56838 | Deferred | 未確認 | CWE-693, CWE-78, CWE-863 | PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.59, PraisonAI recipe execution blocks default-denied dangerous tools unless the caller explicitly |
| CVE-2026-56840 | Deferred | 未確認 | CWE-79 | PraisonAI is a multi-agent teams system. From version 4.5.2 to before version 4.6.59, praisonai.bots.HTTPApproval renders pending tool approval arguments directly into the approval |
| CVE-2026-56851 | Deferred | 未確認 | CWE-787 | The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. |
| CVE-2026-56857 | Awaiting Analysis | 未確認 | CWE-1386 | On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that t |
| CVE-2026-56866 | Awaiting Analysis | 未確認 | CWE-444 | When http.Transport sends an HTTP/1 CONNECT request with a non-empty Request.Body, it writes the body directly to the connection without framing after the request headers. If the s |
| CVE-2026-56906 | Awaiting Analysis | 未確認 | CWE-362 | In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges need |
| CVE-2026-56936 | Awaiting Analysis | 未確認 | CWE-119 | In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to physical escalation of privilege with no addi |
| CVE-2026-56952 | Awaiting Analysis | 未確認 | CWE-862 | In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege wi |
| CVE-2026-5703 | Deferred | 未確認 | CWE-35 | Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any |
| CVE-2026-57113 | Deferred | 未確認 | CWE-22, CWE-73 | PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loader accepts GitHub template URIs with refs, for example github:owner/r |
| CVE-2026-57114 | Deferred | 未確認 | CWE-367, CWE-918 | PraisonAI is a multi-agent teams system. From version 4.5.126 to before version 4.6.59, PraisonAI's Async Jobs API validates webhook_url when a job request is parsed and again when |
| CVE-2026-57116 | Deferred | 未確認 | CWE-200, CWE-306, CWE-862 | PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in |
| CVE-2026-57117 | Deferred | 未確認 | CWE-78, CWE-863 | PraisonAI is a multi-agent teams system. From version 4.6.10 to before version 4.6.59, LocalManagedAgent / SandboxedAgent compute bridging wraps read_file, list_files, and write_fi |
| CVE-2026-57118 | Awaiting Analysis | 未確認 | CWE-306, CWE-862 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /{path}/list, POST /{path}, and `POST /{path}/{agent_id |
| CVE-2026-57121 | Deferred | 未確認 | CWE-285 | PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a workspace member can permanently delete any resource — projects, agents |
| CVE-2026-57142 | Deferred | 未確認 | CWE-78, CWE-863, CWE-94 | PraisonAI is a multi-agent teams system. From version 4.5.87 to before version 4.6.61, PraisonAI recipe execution has a dangerous-tool policy that is supposed to block default-deni |
| CVE-2026-57143 | Deferred | 未確認 | CWE-20, CWE-918 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly |
| CVE-2026-57144 | Deferred | 未確認 | CWE-266, CWE-668, CWE-693 | PraisonAI is a multi-agent teams system. From version 4.5.110 to before version 4.6.61, praisonai.sandbox.SandlockSandbox is documented and implemented as the kernel-enforced sandb |
| CVE-2026-57146 | Deferred | 未確認 | CWE-200, CWE-306 | PraisonAI is a multi-agent teams system. From version 4.5.115 to before version 4.6.61, the published A2U advisory GHSA-f292-66h9-fpmf says unauthenticated A2U event streaming was |
| CVE-2026-57155 | Deferred | 未確認 | CWE-22, CWE-73, CWE-78 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths in src/opnsense/scri |
| CVE-2026-57169 | Deferred | 未確認 | CWE-306, CWE-862 | Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the WebSocket |
| CVE-2026-57183 | Deferred | 未確認 | CWE-287 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/main/java/com/erudika/scoold/utils/ScooldUtils.java accepts a JWT signed with app |
| CVE-2026-57207 | Deferred | 未確認 | CWE-1059, CWE-306 | NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox. Prior to version 1.2.1, when running with TRANSPORT=http, the MCP server has no authentication on |
| CVE-2026-57208 | Deferred | 未確認 | CWE-22, CWE-73 | Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vulnerability in Entire CLI allows an attacker with push access to the ch |
| CVE-2026-57209 | Deferred | 未確認 | CWE-20, CWE-74 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when Heimdall operates in proxy mode, it constructs the Forwarded HTT |
| CVE-2026-57210 | Deferred | 未確認 | CWE-116, CWE-20, CWE-290 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.17, when the trusted_proxies option is configured, heimdall extracts clie |
| CVE-2026-5725 | Deferred | 未確認 | CWE-79 | The Favicon Rotator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'fvrt_' prefixed request parameters in all versions up to, and including, 1.2.11 du |
| CVE-2026-5727 | Deferred | 未確認 | CWE-862 | The Hello Plus plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.7.7. This is due to the plugin not properly verifying that a user |
| CVE-2026-57446 | Deferred | 未確認 | CWE-415, CWE-664, CWE-672 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS |
| CVE-2026-57447 | Deferred | 未確認 | CWE-200 | Discourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index refresh resolves linked titles for p |
| CVE-2026-57458 | Deferred | 未確認 | CWE-269 | Vikunja is an open-source self-hosted task management platform. In version 2.3.0, a scoped API token limited to the `oauth.authorize` permission can call `POST /api/v1/oauth/author |
| CVE-2026-57486 | Analyzed | 未確認 | CWE-476 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the nullable nodeValue, namespaceURI, pref |
| CVE-2026-57487 | Analyzed | 未確認 | CWE-770 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in upnp/src/genlib/net/http/httppar |
| CVE-2026-57488 | Analyzed | 未確認 | CWE-190, CWE-444 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c parses Content-Length with strtol |
| CVE-2026-57489 | Deferred | 未確認 | CWE-290 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise deployments with AUTH_BYPASS enabled trust the con |
| CVE-2026-57490 | Deferred | 未確認 | CWE-308 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, when an administrator has enabled WebDAV, FileRise WebDAV B |
| CVE-2026-57491 | Deferred | 未確認 | CWE-434 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise archive extraction does not apply UploadNamePolicy |
| CVE-2026-57492 | Deferred | 未確認 | CWE-306 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise treats an empty or missing users.txt file as a fre |
| CVE-2026-57493 | Deferred | 未確認 | CWE-613 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.16.0, FileRise stores the isAdmin flag in remember-me tokens and |
| CVE-2026-57496 | Deferred | 未確認 | CWE-22 | NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Prior to 0.1.8, netlice |
| CVE-2026-57512 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57513 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57514 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57515 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57519 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57526 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57528 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57529 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57537 | Analyzed | 未確認 | CWE-416 | Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization. |
| CVE-2026-57545 | Analyzed | 未確認 | CWE-822 | Memory corruption when processing draw objects of incorrect type during graphics command list execution. |
| CVE-2026-57546 | Analyzed | 未確認 | CWE-126 | Transient DOS when processing a continuous receive command with a zero-sized global configuration override. |
| CVE-2026-57554 | Analyzed | 未確認 | CWE-416 | Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations. |
| CVE-2026-57555 | Analyzed | 未確認 | CWE-416 | Memory Corruption when executing system service routines due to improper handling of user input buffers. |
| CVE-2026-57559 | Analyzed | 未確認 | CWE-416 | Memory corruption while processing service requests. |
| CVE-2026-57568 | Deferred | 未確認 | CWE-79 | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit permissions to store a javascript URI in an album or photo |
| CVE-2026-57569 | Deferred | 未確認 | CWE-367, CWE-918 | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule. |
| CVE-2026-5759 | Deferred | 未確認 | CWE-415, CWE-416 | A double free and use-after-free vulnerability in the RdbLoadDeletedNodes function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before |
| CVE-2026-5769 | Analyzed | 未確認 | CWE-313 | A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintext within a memory swap file on the server hosting the Brocad |
| CVE-2026-57742 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Plan |
| CVE-2026-57806 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Refl |
| CVE-2026-5782 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in MRV Technology Foreign Trade Ltd. Co. TurkHotspot allows Reflected XSS. This |
| CVE-2026-57845 | Awaiting Analysis | 未確認 | CWE-502 | Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file lo |
| CVE-2026-57849 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-57941 | Analyzed | 未確認 | CWE-416 | Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. |
| CVE-2026-58064 | Deferred | 未確認 | CWE-770 | The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was availa |
| CVE-2026-58068 | Awaiting Analysis | 未確認 | CWE-862 | This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system. |
| CVE-2026-58069 | Awaiting Analysis | 未確認 | CWE-22 | This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. |
| CVE-2026-58098 | Analyzed | 未確認 | CWE-787 | When semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps. Upon waking, it checks the sequence number embedded in the semaphore set's IPC ide |
| CVE-2026-58099 | Analyzed | 未確認 | CWE-362, CWE-416 | When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes (used internally to track list traversal position) before marking them as |
| CVE-2026-58100 | Analyzed | 未確認 | CWE-125, CWE-362 | kqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before k |
| CVE-2026-5819 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58202 | Received | 未確認 | CWE-640 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.0.0, the account-confirmation link in emails is built |
| CVE-2026-58242 | Awaiting Analysis | 未確認 | CWE-191 | SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker through specially crafted requests. Exploitation requires the at |
| CVE-2026-58249 | Awaiting Analysis | 未確認 | CWE-191 | SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker co |
| CVE-2026-58280 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-58390 | Deferred | 未確認 | CWE-79 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js |
| CVE-2026-58391 | Deferred | 未確認 | CWE-79, CWE-83 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, Firewall Rules and NAT views place stored category names and alias descriptions into HTML title |
| CVE-2026-58392 | Deferred | 未確認 | CWE-79 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the NTP GPS page stores the operator-supplied initcmd value in base64 form, applies legacy_html |
| CVE-2026-58393 | Deferred | 未確認 | CWE-22 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common_name field accepts path traversal sequences and ope |
| CVE-2026-58394 | Deferred | 未確認 | CWE-79 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, src/www/system_advanced_admin.php reads certificate records into $a_cert but omits that array f |
| CVE-2026-58395 | Deferred | 未確認 | CWE-643 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the safe-delete path reached through ApiMutableModelControllerBase::delBase() interpolates an u |
| CVE-2026-58415 | Analyzed | 未確認 | CWE-552 | Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read Web |
| CVE-2026-58462 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-58497 | Deferred | 未確認 | CWE-346, CWE-352 | Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON- |
| CVE-2026-58663 | Awaiting Analysis | 未確認 | An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade | |
| CVE-2026-58815 | Analyzed | 未確認 | CWE-119 | In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privi |
| CVE-2026-58834 | Analyzed | 未確認 | CWE-20 | In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of |
| CVE-2026-58835 | Analyzed | 未確認 | CWE-122 | In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privile |
| CVE-2026-58841 | Analyzed | 未確認 | CWE-269 | In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege w |
| CVE-2026-58854 | Analyzed | 未確認 | CWE-843 | In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. |
| CVE-2026-58856 | Analyzed | 未確認 | CWE-119 | In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information discl |
| CVE-2026-58859 | Analyzed | 未確認 | CWE-248 | In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges ne |
| CVE-2026-58865 | Analyzed | 未確認 | CWE-119 | In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with no additio |
| CVE-2026-58880 | Analyzed | 未確認 | CWE-362 | In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additi |
| CVE-2026-59116 | Undergoing Analysis | 未確認 | CWE-327 | Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-59188 | Deferred | 未確認 | CWE-434, CWE-79 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.3, Part-DB-server sanitizes SVG files based solely on the user-controlled fil |
| CVE-2026-59229 | Awaiting Analysis | 未確認 | The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing data loading and deletion operations. A user with only SYSTE | |
| CVE-2026-59241 | Deferred | 未確認 | CWE-266 | A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC V8.1 (All versions < V8.1 Update 7). The |
| CVE-2026-59265 | Deferred | 未確認 | CWE-426 | A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary (even remote) code when o |
| CVE-2026-59346 | Awaiting Analysis | 未確認 | CWE-190 | VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNET3 virtual network ad |
| CVE-2026-59347 | Awaiting Analysis | 未確認 | CWE-121 | VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit t |
| CVE-2026-59357 | Awaiting Analysis | 未確認 | CWE-345 | Insufficient verification of data authenticity (CWE-345) in the external OIDC login callback in Cloud Foundry UAA v4.5.0 to v79.6.0 (inclusive) allows an authenticated UAA user to |
| CVE-2026-59358 | Awaiting Analysis | 未確認 | CWE-287 | Improper authentication (CWE-287) in the OAuth token endpoint in Cloud Foundry UAA allows a remote, authenticated attacker holding a valid user access token to obtain a fully-privi |
| CVE-2026-59508 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. This issue affects i-Bos: 3.0. |
| CVE-2026-5954 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-59562 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to ver |
| CVE-2026-59659 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59660 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59661 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59662 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59663 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59664 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59665 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59666 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59667 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59668 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59669 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59670 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59671 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59672 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59673 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-59685 | Analyzed | 未確認 | CWE-787 | Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache HTTP Server: from |
| CVE-2026-59766 | Deferred | 未確認 | CWE-284 | Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated with the requesting user. A user whose acc |
| CVE-2026-59774 | Deferred | 未確認 | CWE-22 | Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An unauthenticated attacker |
| CVE-2026-59782 | Awaiting Analysis | 未確認 | CWE-125 | The JavaScript preprocessing (Duktape) engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data |
| CVE-2026-59783 | Awaiting Analysis | 未確認 | CWE-787 | The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects de |
| CVE-2026-59785 | Awaiting Analysis | 未確認 | CWE-204 | Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK credentials. A user with read access can guess a credential and see from th |
| CVE-2026-59786 | Awaiting Analysis | 未確認 | CWE-940 | Zabbix Server and Proxy accept the active agent heartbeat message regardless of the configured PSK or certificate authentication. This means someone with access to the Zabbix trapp |
| CVE-2026-59787 | Awaiting Analysis | 未確認 | CWE-143 | The Perl SNMP trap receiver script shipped with Zabbix does not properly neutralize the ZBXTRAP record delimiter in trap content. This means someone able to send SNMP traps can inj |
| CVE-2026-59788 | Awaiting Analysis | 未確認 | CWE-79 | The email media type OAuth form passes the Authorization endpoint value to window.open() without validating the URL scheme, so a javascript: URL is executed in the browser. This me |
| CVE-2026-59797 | Analyzed | 未確認 | CWE-269 | Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 throug |
| CVE-2026-59951 | Awaiting Analysis | 未確認 | CWE-400, CWE-772 | The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). From 1.8.0 until 1.30.0 and 2.2.0, stateful Streamable HTTP servers, includi |
| CVE-2026-59962 | Deferred | 未確認 | CWE-943 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes unvalidated sort_order and order_field strings into Dja |
| CVE-2026-59963 | Deferred | 未確認 | CWE-639 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, recipe utility endpoints retrieve same-Space Recipe objects wi |
| CVE-2026-59966 | Deferred | 未確認 | CWE-1333 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, executes user-controlled Automation regular-expression pattern |
| CVE-2026-59967 | Deferred | 未確認 | CWE-639 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, looks up BookmarkletImport by sequential primary key within th |
| CVE-2026-59970 | Deferred | 未確認 | CWE-918 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes an administrator-controlled AI provider URL directly to |
| CVE-2026-59976 | Deferred | 未確認 | CWE-22, CWE-73 | ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output path. If an authentic |
| CVE-2026-59977 | Deferred | 未確認 | CWE-352 | ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanent deletion without CSRF protection. If an authenticated user |
| CVE-2026-59994 | Deferred | 未確認 | CWE-79 | EspoCRM is an open source customer relationship management application. Prior to 9.3.9, an unauthenticated remote attacker can send an email to a monitored group or IMAP address, i |
| CVE-2026-60008 | Deferred | 未確認 | CWE-1021, CWE-79 | Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in the main docu |
| CVE-2026-60010 | Deferred | 未確認 | CWE-266, CWE-863 | Gitea's repository-side team-link API allows a repository administrator who is not an organization owner to attach organization teams to a repository despite RepoAdminChangeTeamAcc |
| CVE-2026-60018 | Deferred | 未確認 | CWE-400 | Gitea's OneDev migration downloader reads the entire remote version response into memory without a size limit and uses a client without a timeout. An authenticated user who can sta |
| CVE-2026-60021 | Deferred | 未確認 | CWE-400 | Gitea's initial GitLab migration version probe uses an HTTP client without a timeout and does not attach the migration task's cancellation context. An authenticated user who can st |
| CVE-2026-60432 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vuln |
| CVE-2026-60453 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Easily exploitable vulnerability allow | |
| CVE-2026-60500 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are 8.61-8.63. Easily exploitable | |
| CVE-2026-60662 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low p | |
| CVE-2026-60743 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to exploit | |
| CVE-2026-60745 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. Easi | |
| CVE-2026-60746 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Dif | |
| CVE-2026-60809 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.61-8.63. Difficult to exploit | |
| CVE-2026-60814 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Difficult | |
| CVE-2026-60819 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Server - JRE). Supported versions that are affected are 8.61-8.63. Diff | |
| CVE-2026-60839 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). Supported versions that are affected are 8.61 and 8.62. Difficult to explo | |
| CVE-2026-60869 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Application Data Sets). Supported versions that are affected are 8.61-8.63. Difficu | |
| CVE-2026-60874 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61 and 8.62. Difficult to expl | |
| CVE-2026-60876 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). The supported version that is affected is 8.62. Difficult to ex | |
| CVE-2026-60878 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). Supported versions that are affected are 8.61 and 8.62. Diffic | |
| CVE-2026-60881 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Meta Data). Supported versions that are affected are 8.61-8.63. Easily exploitable | |
| CVE-2026-60882 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Search Framework). Supported versions that are affected are 8.61 and 8.62. Difficu | |
| CVE-2026-60885 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Push Notifications). Supported versions that are affected are 8.61 and 8.62. Easil | |
| CVE-2026-60887 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover). Supported versions that are affected are 8.61-8.63. Difficult to explo | |
| CVE-2026-60964 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Open Query). Supported versions that are affected are 8.61 and 8.62. Difficult to | |
| CVE-2026-60968 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Easi | |
| CVE-2026-61373 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java TSaslNonblockingServer. This issue affects Apache Thrift: before 0.25.0. Users are re |
| CVE-2026-61374 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to u |
| CVE-2026-61411 | Analyzed | 未確認 | CWE-532 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access |
| CVE-2026-61421 | Analyzed | 未確認 | CWE-798 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remot |
| CVE-2026-61610 | Deferred | 未確認 | CWE-284 | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo wit |
| CVE-2026-61611 | Deferred | 未確認 | CWE-307 | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has no throttle, attempt counter, backoff, CAPTCHA, or lockout. UnlockAlbumRequest:: |
| CVE-2026-61642 | Awaiting Analysis | 未確認 | CWE-444 | Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow bug, Squid is vulnerable to a Request Smuggling attack again |
| CVE-2026-61702 | Analyzed | 未確認 | CWE-22 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the attacker-controlled |
| CVE-2026-61726 | Deferred | 未確認 | CWE-284, CWE-639, CWE-863 | Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.12, StepViewSet and IngredientViewSet filter only by active Space |
| CVE-2026-61791 | Deferred | 未確認 | CWE-83 | OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile device management. Prior to 1.2.1, `Html::commandButton()` in `l |
| CVE-2026-61801 | Deferred | 未確認 | CWE-400 | The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficient |
| CVE-2026-61838 | Deferred | 未確認 | CWE-285, CWE-639 | Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes album and photo archives through AlbumPolicy::canDownload() and PhotoPolicy::canDown |
| CVE-2026-61843 | Deferred | 未確認 | CWE-862 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise upload-enabled shared-folder and upload-only links |
| CVE-2026-61844 | Deferred | 未確認 | CWE-706 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.18.0, FileRise flattens logical folder paths into metadata filena |
| CVE-2026-61902 | Deferred | 未確認 | CWE-400 | Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive HTTP/1 and HTTP/2 parsing and in memcache and couchbase respons |
| CVE-2026-61916 | Deferred | 未確認 | CWE-125 | Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char is unsigned, such as ARM64, allow remote at |
| CVE-2026-61931 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-61994 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in RocketGeek WP-Members wp-members allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Members: from |
| CVE-2026-62020 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in TouchUp < 1.4 versions. |
| CVE-2026-62021 | Deferred | 未確認 | CWE-502 | Subscriber PHP Object Injection in Angio <= 1.1.1 versions. |
| CVE-2026-62022 | Deferred | 未確認 | CWE-266 | Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions. |
| CVE-2026-62024 | Deferred | 未確認 | CWE-434 | Subscriber Arbitrary File Upload in CodeBard Help Desk <= 1.1.2 versions. |
| CVE-2026-62025 | Deferred | 未確認 | CWE-434 | Unauthenticated Arbitrary File Upload in Tailored Tools <= 3.0.3 versions. |
| CVE-2026-62026 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in MIGHTYminnow Dashboard Notes dashboard-notes allows Cross Site Request Forgery.This issue affects Dashboard Notes: from n/a throu |
| CVE-2026-62027 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions. |
| CVE-2026-62028 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting Incorrectly Configured Access C |
| CVE-2026-62029 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPFunnels Team WPFunnels wpfunnels allows Stored XSS.This issue affects WPFunn |
| CVE-2026-62030 | Deferred | 未確認 | CWE-918 | Unauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions. |
| CVE-2026-62031 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in uListing <= 2.2.0 versions. |
| CVE-2026-62032 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in DirectoryPress <= 3.6.27 versions. |
| CVE-2026-62033 | Deferred | 未確認 | CWE-862 | Subscriber Settings Change in uListing <= 2.2.0 versions. |
| CVE-2026-62034 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions. |
| CVE-2026-62035 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in AWS S3 for WordPress Plugin – Upcasted <= 3.1.0 versions. |
| CVE-2026-62036 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows Retrieve Embedded Sensitive Data. |
| CVE-2026-62037 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions. |
| CVE-2026-62038 | Deferred | 未確認 | CWE-288 | Unauthenticated Broken Authentication in eRoom <= 1.7.1 versions. |
| CVE-2026-62039 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player allows Stored XSS.This issue af |
| CVE-2026-62040 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in DEV Institute Restrict User Access – Membership Plugin with Force restrict-user-access allows Exploiting Incorrectly Configured Access Contro |
| CVE-2026-62041 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Ashok Dudhat WP Event Manager wp-event-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP |
| CVE-2026-62042 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in unFocus Projects Scripts n Styles scripts-n-styles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects |
| CVE-2026-62043 | Deferred | 未確認 | CWE-201 | Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions. |
| CVE-2026-62044 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super Video Player: from n/a through 1. |
| CVE-2026-62045 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Booklovers booklovers allows Object Injection.This issue affects Booklovers: from n/a through 2.13.0. |
| CVE-2026-62046 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Gutentype gutentype allows Object Injection.This issue affects Gutentype: from n/a through 2.1.12. |
| CVE-2026-62049 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This issue aff |
| CVE-2026-62050 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Splendour <= 1.23 versions. |
| CVE-2026-62051 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Stargaze <= 1.10 versions. |
| CVE-2026-62052 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Tipsy <= 1.6 versions. |
| CVE-2026-62053 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Wine House <= 3.20 versions. |
| CVE-2026-62054 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Yacht Rental <= 2.6 versions. |
| CVE-2026-62058 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot allows Retrieve Embedded Sensitive Data.This issue affects CF7 Apps: f |
| CVE-2026-62059 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ultimate Member Ultimate Member ultimate-member allows Blind SQL Injection.Thi |
| CVE-2026-62060 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in captivateaudio Captivate Sync captivatesync-trade allows Blind SQL Injection.T |
| CVE-2026-62061 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Exploiting Incorrectly Configured Ac |
| CVE-2026-62063 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. WpTravelly tour-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wp |
| CVE-2026-62064 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Ambed <= 1.0.0 versions. |
| CVE-2026-62065 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Cardea <= 2.3 versions. |
| CVE-2026-62066 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Volos <= 1.2 versions. |
| CVE-2026-62067 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Kaven <= 1.2 versions. |
| CVE-2026-62068 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Teoro <= 1.1 versions. |
| CVE-2026-62069 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Fabius <= 1.0 versions. |
| CVE-2026-62070 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Flipmart <= 2.8 versions. |
| CVE-2026-62071 | Deferred | 未確認 | CWE-89 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions. |
| CVE-2026-62072 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Progress Planner <= 1.10.0 versions. |
| CVE-2026-62073 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in WP Full Stripe Free <= 8.5.6 versions. |
| CVE-2026-62074 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Ozeum <= 1.3.0 versions. |
| CVE-2026-62075 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Backhoe <= 2.0 versions. |
| CVE-2026-62076 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Kalles <= 1.1.7.1 versions. |
| CVE-2026-62077 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Avala <= 1.1.4 versions. |
| CVE-2026-62082 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions. |
| CVE-2026-62086 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Juno <= 2.25 versions. |
| CVE-2026-62087 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Equadio <= 1.1.4 versions. |
| CVE-2026-62090 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in WineShop <= 3.20 versions. |
| CVE-2026-62091 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Armania <= 1.4.8 versions. |
| CVE-2026-62092 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Armania <= 1.4.8 versions. |
| CVE-2026-62093 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in TechOne <= 3.0.3 versions. |
| CVE-2026-62094 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in TechOne <= 3.0.3 versions. |
| CVE-2026-62095 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Biolife <= 3.2.3 versions. |
| CVE-2026-62096 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Biolife <= 3.2.3 versions. |
| CVE-2026-62098 | Deferred | 未確認 | CWE-94 | Unauthenticated Content Injection in Boutique <= 2.3.3 versions. |
| CVE-2026-62099 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Boutique <= 2.3.3 versions. |
| CVE-2026-62100 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in KuteShop <= 4.2.9 versions. |
| CVE-2026-62115 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in KuteShop <= 4.2.9 versions. |
| CVE-2026-62116 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. |
| CVE-2026-62117 | Deferred | 未確認 | CWE-89 | Subscriber SQL Injection in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. |
| CVE-2026-62118 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in Barcode Scanner with Inventory & Order Manager <= 1.13.1 versions. |
| CVE-2026-62120 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Law Office <= 3.20 versions. |
| CVE-2026-62123 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Invetex <= 2.18 versions. |
| CVE-2026-62124 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in N7 | Golf Club Sports & Events <= 2.21 versions. |
| CVE-2026-62125 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Asia Garden <= 1.3.1 versions. |
| CVE-2026-62127 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MediaRon LLC WP Plugin Info Card wp-plugin-info-card allows Stored XSS.This is |
| CVE-2026-62128 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Creator LMS: fr |
| CVE-2026-62129 | Deferred | 未確認 | CWE-434 | Contributor Arbitrary File Upload in Creator LMS <= 1.2.21 versions. |
| CVE-2026-62130 | Deferred | 未確認 | CWE-502 | Shop manager PHP Object Injection in WooCommerce Multilingual & Multicurrency <= 5.5.8 versions. |
| CVE-2026-62142 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Melapress WP 2FA wp-2fa allows Cross Site Request Forgery.This issue affects WP 2FA: from n/a through 4.1.0. |
| CVE-2026-62163 | Rejected | 未確認 | Rejected reason: Reason: This candidate is a duplicate of CVE-2026-60089. | |
| CVE-2026-62166 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-62167 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-62170 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-62171 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-62176 | Deferred | 未確認 | CWE-94 | PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the `deploy/api.py` module generates Python server code by directly interpolating the `agents_file` parameter into |
| CVE-2026-62179 | Awaiting Analysis | 未確認 | CWE-862, CWE-863 | PraisonAI is a multi-agent teams system. In `praisonai-platform` prior to version 0.1.9, issue dependency deletion can be authorized against the wrong side of a dependency edge. A |
| CVE-2026-62181 | Rejected | 未確認 | Rejected reason: This CVE is a duplicate of another CVE. | |
| CVE-2026-62251 | Awaiting Analysis | 未確認 | CWE-89 | Homer is open source telecom observability software. Prior to version 11.0.283, the `V4StatisticsQuery` handler passes the user-supplied `rawquery` field directly to DuckDB without |
| CVE-2026-62252 | Awaiting Analysis | 未確認 | CWE-798 | Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer deployment using internal authentication, the bootstrap process automatically c |
| CVE-2026-62253 | Awaiting Analysis | 未確認 | CWE-306 | Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware functions (`JWTMiddleware` and `JWTMiddlewareV4`) immediately return `next(c)` w |
| CVE-2026-6232 | Deferred | 未確認 | CWE-787 | An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can |
| CVE-2026-62322 | Awaiting Analysis | 未確認 | CWE-352 | Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an authorization code without validating the returned OAuth state. |
| CVE-2026-62362 | Deferred | 未確認 | CWE-89 | PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules. From 5.0.0 until 9.3.15, the /api/statistic/analysis/field |
| CVE-2026-62367 | Deferred | 未確認 | CWE-287, CWE-290, CWE-345 | Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider `emailfallback` option on an OpenID |
| CVE-2026-62376 | Deferred | 未確認 | CWE-312, CWE-916 | Vikunja is an open-source self-hosted task management platform. Versions prior to 2.4.0 store password-reset, email-confirmation, and account-deletion tokens in the `user_tokens` t |
| CVE-2026-6243 | Deferred | 未確認 | CWE-79 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via kses bypass / mutation XSS in all versions up to, and including, 3.28.36. Thi |
| CVE-2026-62438 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in GIMP. An attacker can cause a Denial of Service (DoS) or potentially disclose sensitive memory contents by convincing a user to open or preview a specially craf |
| CVE-2026-62439 | Awaiting Analysis | 未確認 | CWE-190 | A flaw was found in GIMP. An integer overflow occurs in the file-pvr plug-in when calculating memory buffer sizes for image dimensions. By tricking a user into opening or previewin |
| CVE-2026-62664 | Deferred | 未確認 | CWE-22 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folderName string but does |
| CVE-2026-62679 | Deferred | 未確認 | CWE-22 | Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled path with the local |
| CVE-2026-62687 | Undergoing Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally. |
| CVE-2026-62840 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-62858 | Deferred | 未確認 | CWE-98 | YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourls_get_request() extracted the request path without sanitization, after which yourls_saniti |
| CVE-2026-62879 | Undergoing Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally. |
| CVE-2026-62925 | Deferred | 未確認 | CWE-400 | Gitea parses Alpine package uploads before enforcing package-size quotas and does not bound the decompressed .PKGINFO data or its dependency and provides entry counts. An authentic |
| CVE-2026-63021 | Deferred | 未確認 | CWE-400 | Gitea's Swift package parser limits each manifest to 128 KiB but does not limit the number of manifests or their aggregate size before reading them into memory. An authenticated us |
| CVE-2026-63045 | Analyzed | 未確認 | CWE-284 | Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows, in forward proxy configurati |
| CVE-2026-63120 | Deferred | 未確認 | CWE-22 | pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows |
| CVE-2026-63130 | Deferred | 未確認 | CWE-22 | EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the administrative Label Manage |
| CVE-2026-63146 | Deferred | 未確認 | CWE-94 | Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file du |
| CVE-2026-63147 | Deferred | 未確認 | CWE-79 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a file with HTML |
| CVE-2026-63148 | Deferred | 未確認 | CWE-79 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploading a poll-res |
| CVE-2026-63149 | Deferred | 未確認 | CWE-330 | Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated by Txt::defau |
| CVE-2026-63152 | Deferred | 未確認 | CWE-89 | Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategoryFilter par |
| CVE-2026-63153 | Deferred | 未確認 | CWE-639 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right records for a |
| CVE-2026-63154 | Deferred | 未確認 | CWE-89 | Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-controlled ago |
| CVE-2026-63156 | Deferred | 未確認 | CWE-79 | Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML attributes by manipula |
| CVE-2026-63157 | Deferred | 未確認 | CWE-79 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts by submitting an unsanitized |
| CVE-2026-63158 | Deferred | 未確認 | CWE-836 | Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authenticate as that |
| CVE-2026-63159 | Deferred | 未確認 | CWE-640 | Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the r |
| CVE-2026-63160 | Deferred | 未確認 | CWE-522 | Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bear |
| CVE-2026-63161 | Deferred | 未確認 | CWE-384 | Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifie |
| CVE-2026-63162 | Deferred | 未確認 | CWE-22 | Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying |
| CVE-2026-63163 | Deferred | 未確認 | CWE-639 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary fi |
| CVE-2026-63165 | Deferred | 未確認 | CWE-89 | Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulating the sortEv |
| CVE-2026-63168 | Deferred | 未確認 | CWE-79 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to persist unneutralized markup by submitting malici |
| CVE-2026-63169 | Deferred | 未確認 | CWE-79 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes |
| CVE-2026-63171 | Deferred | 未確認 | CWE-79 | Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious script by submitting a crafted f |
| CVE-2026-63172 | Deferred | 未確認 | CWE-862 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invoking the user- |
| CVE-2026-63174 | Deferred | 未確認 | CWE-862 | Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority because |
| CVE-2026-63243 | Awaiting Analysis | 未確認 | An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker within Bluetooth range to connect to an af | |
| CVE-2026-63244 | Deferred | 未確認 | An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote attacker to bypass password authentication a | |
| CVE-2026-63266 | Deferred | 未確認 | CWE-22 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database th |
| CVE-2026-63267 | Deferred | 未確認 | CWE-200, CWE-918 | LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded, so opening a docume |
| CVE-2026-63268 | Deferred | 未確認 | CWE-200 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a databa |
| CVE-2026-63269 | Deferred | 未確認 | CWE-200, CWE-918 | LibreOffice can link to audio and video files from a document, and on Linux it plays them with GStreamer. A linked media file could be an HLS playlist that made GStreamer read the |
| CVE-2026-63270 | Deferred | 未確認 | CWE-200 | URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document |
| CVE-2026-63277 | Deferred | 未確認 | CWE-829 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A document could name a Java database driver for such a link to be loaded |
| CVE-2026-63292 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service |
| CVE-2026-63314 | Deferred | 未確認 | CWE-89 | WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint. Improper neutralization of input allows an authenticated attacke |
| CVE-2026-63315 | Deferred | 未確認 | CWE-256 | WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext. An attacker with access to the database can obtain the user's password and log |
| CVE-2026-63316 | Deferred | 未確認 | CWE-89 | A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "not_in" query paramethers allows an authenticated |
| CVE-2026-63350 | Awaiting Analysis | 未確認 | CWE-95 | Affected devices do not properly restrict executable content contained in imported trace files. This could allow an attacker to social engineer an authorized user who holds the |
| CVE-2026-63351 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before rendering them on the Trace page. Thi |
| CVE-2026-63352 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attacker to soc |
| CVE-2026-63353 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page. This could allow an attacker to social engine |
| CVE-2026-63354 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on the Trace page. This could allow an attack |
| CVE-2026-63355 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly sanitize signal names contained in imported CSV trace files before rendering them in selection menus on the Trace page. This could allow an atta |
| CVE-2026-63356 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly sanitize calculated signal names contained in imported CSV trace files before including them in error messages on the Trace page. This could all |
| CVE-2026-63357 | Awaiting Analysis | 未確認 | CWE-79 | Affected devices do not properly sanitize calculated signal data contained in imported calculated signal files before rendering it on the Trace page. This could allow an attacke |
| CVE-2026-63430 | Awaiting Analysis | 未確認 | CWE-79 | ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that explicitly allow the math tag, annotation-xml, and at least |
| CVE-2026-63442 | Deferred | 未確認 | CWE-117 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGUI login usernamefld accepts carriage-return and line-feed characters t |
| CVE-2026-63566 | Undergoing Analysis | 未確認 | CWE-789 | Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 all |
| CVE-2026-63567 | Undergoing Analysis | 未確認 | CWE-203 | Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker who has captured an IES or ECIES ciphertext, an |
| CVE-2026-63568 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in the CMP/CRMF password-based MAC verifier (PKMacBuilder) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a |
| CVE-2026-63569 | Undergoing Analysis | 未確認 | CWE-20 | Improper input validation in DHAgreement.CalculateAgreement (MTI/A0 two-pass Diffie-Hellman) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker t |
| CVE-2026-63570 | Undergoing Analysis | 未確認 | CWE-835 | Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a crafted PKCS# |
| CVE-2026-63571 | Undergoing Analysis | 未確認 | CWE-347 | Improper verification of cryptographic signature in the attribute certificate path validator (PkixAttrCertPathValidator, also used by PkixAttrCertPathBuilder) in Legion of the Boun |
| CVE-2026-63572 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits in PKCS#12 keystore loading (Pkcs12Store.Load) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can supply a |
| CVE-2026-63573 | Undergoing Analysis | 未確認 | CWE-203 | Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a |
| CVE-2026-63574 | Undergoing Analysis | 未確認 | CWE-789 | Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (SignatureSubpacketsParser.ReadPacket, UserAttributeSubpacketsParser.ReadP |
| CVE-2026-63575 | Undergoing Analysis | 未確認 | CWE-835 | Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an attacker who can |
| CVE-2026-63576 | Undergoing Analysis | 未確認 | CWE-295 | Improper certificate validation in PkixNameConstraintValidator (ExtractHostFromURL) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a name-constrained subordinate |
| CVE-2026-63577 | Undergoing Analysis | 未確認 | CWE-295 | Improper certificate validation in the directoryName name-constraint check (PkixNameConstraintValidator.WithinDNSubtree) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 |
| CVE-2026-63578 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits in password-based private-key decryption (PbeUtilities.GenerateCipherParameters) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 a |
| CVE-2026-63618 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information (system level configuration info) to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4 |
| CVE-2026-63619 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Apache Kylin. A backend metadata dump API misses the enough authorization and the path-confinement. Impact most to the kylin services that ar |
| CVE-2026-63626 | Deferred | 未確認 | CWE-122, CWE-125 | Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2_ppp.c trusts the 16-bit IPv6CP len field without checking it against the receiv |
| CVE-2026-63686 | Analyzed | 未確認 | CWE-476 | A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of se |
| CVE-2026-63688 | Analyzed | 未確認 | CWE-306 | Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. |
| CVE-2026-63689 | Analyzed | 未確認 | CWE-532 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access |
| CVE-2026-63690 | Analyzed | 未確認 | CWE-306 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore |
| CVE-2026-63691 | Analyzed | 未確認 | CWE-862 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticate |
| CVE-2026-63692 | Analyzed | 未確認 | CWE-306 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access co |
| CVE-2026-63697 | Analyzed | 未確認 | CWE-295 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privileged attacker with remote access could potentially exploit th |
| CVE-2026-63718 | Analyzed | 未確認 | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi and a crafted uwsgi resp |
| CVE-2026-63721 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-63724 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-63772 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upg |
| CVE-2026-63792 | Deferred | 未確認 | CWE-280 | Gitea's collaborative-owner authorization path for reading cross-repository reusable workflows does not exclude fork pull request runs. An approved fork workflow targeting a privat |
| CVE-2026-64610 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Kylin. Unsafe Java deserialization could happen from a broken external cache service. This issue affects Apache Kylin: |
| CVE-2026-64818 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-64856 | Deferred | 未確認 | CWE-200, CWE-306 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.20.0, FileRise /api/file/snippet.php does not apply the standard |
| CVE-2026-64862 | Deferred | 未確認 | CWE-862 | Frappe HR is an open-source human resources management solution (HRMS). Prior to 15.58.3 and 16.4.3, HRMS PWA API endpoints for employee data do not consistently authorize employee |
| CVE-2026-64892 | Deferred | 未確認 | CWE-200 | - Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63 |
| CVE-2026-64893 | Deferred | 未確認 | CWE-319 | - Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25. |
| CVE-2026-64943 | Deferred | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written to application logs |
| CVE-2026-64944 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The import |
| CVE-2026-64945 | Deferred | 未確認 | CWE-863 | A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The question operation controller gates hide/show operations on the wrong permission check re |
| CVE-2026-64946 | Deferred | 未確認 | CWE-352, CWE-79 | A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator |
| CVE-2026-64947 | Deferred | 未確認 | CWE-352, CWE-434 | A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Ex |
| CVE-2026-64948 | Deferred | 未確認 | CWE-639 | Missing authorization in module data retrieval allows unauthorized cross-group access to module history. Affects Pandora FMS from 777 onwards. |
| CVE-2026-64949 | Deferred | 未確認 | CWE-434 | Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards. |
| CVE-2026-64950 | Deferred | 未確認 | CWE-79 | Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pando |
| CVE-2026-64959 | Awaiting Analysis | 未確認 | CWE-306, CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for Critical Function vulnerability in Apache Kylin. Impact most to the |
| CVE-2026-65101 | Awaiting Analysis | 未確認 | CWE-918 | NVIDIA AIStore for Linux contains a vulnerability in the distributed sort component where an attacker could cause server-side request forgery by supplying a crafted external key ma |
| CVE-2026-65103 | Awaiting Analysis | 未確認 | CWE-22 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitati |
| CVE-2026-65104 | Awaiting Analysis | 未確認 | CWE-328 | NVIDIA Megatron-LM for all platforms contains a vulnerability in inference, where an attacker could cause hash collisions in the cache used for inference requests. A successful exp |
| CVE-2026-65110 | Awaiting Analysis | 未確認 | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where, an attacker could cause an RCE by convincing a user to load a maliciously crafted file. A successful exploi |
| CVE-2026-65122 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service. |
| CVE-2026-65131 | Awaiting Analysis | 未確認 | CWE-306 | NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, |
| CVE-2026-65141 | Awaiting Analysis | 未確認 | CWE-95 | NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disc |
| CVE-2026-65142 | Awaiting Analysis | 未確認 | CWE-502 | NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code executi |
| CVE-2026-65147 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability might lead to information disclosu |
| CVE-2026-65148 | Awaiting Analysis | 未確認 | CWE-121 | NVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might lead to code execution, informati |
| CVE-2026-65149 | Awaiting Analysis | 未確認 | CWE-787 | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, |
| CVE-2026-65150 | Awaiting Analysis | 未確認 | CWE-125 | NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability mighty lead to information disclos |
| CVE-2026-65161 | Awaiting Analysis | 未確認 | CWE-22 | NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a crafted |
| CVE-2026-65162 | Awaiting Analysis | 未確認 | CWE-250 | NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container |
| CVE-2026-65164 | Awaiting Analysis | 未確認 | CWE-22 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to |
| CVE-2026-65170 | Awaiting Analysis | 未確認 | CWE-918 | NVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side request forgery by supplying a craft |
| CVE-2026-65172 | Awaiting Analysis | 未確認 | CWE-862 | NVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote attacker may access ETL information |
| CVE-2026-65173 | Awaiting Analysis | 未確認 | CWE-306 | NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocati |
| CVE-2026-65180 | Awaiting Analysis | 未確認 | CWE-502 | NVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously crafted file. A successful exploit o |
| CVE-2026-65197 | Deferred | 未確認 | CWE-347 | H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file `/conf/public.pem`. That file is writable by an authenticated Re |
| CVE-2026-65198 | Deferred | 未確認 | CWE-321 | Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key (recoverable from the open-source build) can |
| CVE-2026-65199 | Deferred | 未確認 | CWE-266 | openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers. An authenticated, but low-privilege, SNMP user can therefore invoke mapped backend operation |
| CVE-2026-65200 | Deferred | 未確認 | CWE-191 | The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and three response parsers in the shared transport libraries subtract |
| CVE-2026-65356 | Undergoing Analysis | 未確認 | CWE-284 | An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensiti |
| CVE-2026-65372 | Undergoing Analysis | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to |
| CVE-2026-65379 | Undergoing Analysis | 未確認 | CWE-200, CWE-284 | The issue was addressed with improved handling of secure input state. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to acces |
| CVE-2026-65396 | Undergoing Analysis | 未確認 | CWE-119 | A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpe |
| CVE-2026-65459 | Deferred | 未確認 | CWE-862 | Unauthenticated Arbitrary Content Deletion in Forminator <= 1.57.3 versions. |
| CVE-2026-6567 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-65674 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-65824 | Received | 未確認 | CWE-294 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.1, an attacker who captures a pending invite token |
| CVE-2026-65825 | Received | 未確認 | CWE-307 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, a returning client's six-digit booking PIN |
| CVE-2026-65954 | Deferred | 未確認 | CWE-95 | PHPCSUtils is a suite of utility functions for use with PHP_CodeSniffer. From 1.0.0-alpha1 until 1.2.3, PHPCSUtils\AbstractSniffs\AbstractArrayDeclarationSniff::getActualArrayKey() |
| CVE-2026-66054 | Deferred | 未確認 | CWE-409, CWE-770 | Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++ bindings. This issue af |
| CVE-2026-66055 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift C++, Java, Go, netstd, Python and Delphi bindings. This issue affects Apache Thrift: before 0 |
| CVE-2026-66057 | Deferred | 未確認 | CWE-601 | Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitized client-controlled state parameter to select post-authentic |
| CVE-2026-66081 | Deferred | 未確認 | CWE-824 | Access of Uninitialized Pointer vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0 |
| CVE-2026-66082 | Deferred | 未確認 | CWE-863 | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to perform unauthorized operations on workflow schedules, workflow definitions, and task |
| CVE-2026-66084 | Deferred | 未確認 | CWE-863 | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to modify task definitions in projects they are not authorized to access through the /do |
| CVE-2026-66085 | Awaiting Analysis | 未確認 | CWE-20 | In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional e |
| CVE-2026-66086 | Awaiting Analysis | 未確認 | CWE-121 | In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execut |
| CVE-2026-66087 | Deferred | 未確認 | CWE-863 | An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance in projects they are not authorized to access through the |
| CVE-2026-66246 | Deferred | 未確認 | CWE-250 | iControl is affected by a Broken Access Control vulnerability, which could allow an attacker to exploit missing authentication checks or insecure direct object references (IDOR), e |
| CVE-2026-66247 | Deferred | 未確認 | CWE-942 | iControl is affected by an insecure Cross-Origin Resource Sharing (CORS) policy vulnerability, which could allow a malicious website to execute cross-origin requests with included |
| CVE-2026-66248 | Deferred | 未確認 | CWE-209 | iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosu |
| CVE-2026-66249 | Deferred | 未確認 | CWE-614 | iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the una |
| CVE-2026-66253 | Deferred | 未確認 | CWE-613 | iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthorized access to the app |
| CVE-2026-66279 | Awaiting Analysis | 未確認 | CWE-940 | In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerabil |
| CVE-2026-66281 | Undergoing Analysis | 未確認 | CWE-835 | In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condition (infinite loop). These messages must come from a device |
| CVE-2026-66282 | Undergoing Analysis | 未確認 | CWE-674 | In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come |
| CVE-2026-66331 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Delphi bindings buffered transport. This issue affects Apache Thrift: before 0.25.0. Users |
| CVE-2026-66392 | Deferred | 未確認 | CWE-297 | Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled, but do not bind the certificate to an expected DNS name or IP |
| CVE-2026-66435 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows Retrieve Embedded Sensitive Data.This issue affects WP Rollback: from |
| CVE-2026-66479 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Liquid Web / StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPComplete: from n/a through 2.9.5.6. |
| CVE-2026-66480 | Deferred | 未確認 | CWE-497 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in YITH YITH WooCommerce Product Add-Ons allows Retrieve Embedded Sensitive Data. This iss |
| CVE-2026-66481 | Deferred | 未確認 | CWE-22 | Author Arbitrary File Deletion in Presto Player Pro <= 3.0.1 versions. |
| CVE-2026-66482 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Drone Media <= 2.2.0 versions. |
| CVE-2026-66483 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Education Center <= 3.6.12 versions. |
| CVE-2026-66563 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Windsor <= 2.10 versions. |
| CVE-2026-66564 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in ShiftCV <= 3.0.14 versions. |
| CVE-2026-66565 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions. |
| CVE-2026-66566 | Deferred | 未確認 | CWE-98 | Unauthenticated Local File Inclusion in Ambient <= 1.7 versions. |
| CVE-2026-66567 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Anesta <= 1.5.3 versions. |
| CVE-2026-66568 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Original <= 1.9.0 versions. |
| CVE-2026-66569 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions. |
| CVE-2026-66588 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False-positive. | |
| CVE-2026-66666 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedded Sensitive Data. This issue affects WordPress: from 7.1 through 7.1 |
| CVE-2026-66822 | Awaiting Analysis | 未確認 | CWE-201 | Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-66837 | Deferred | 未確認 | CWE-121, CWE-190 | Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommende |
| CVE-2026-66849 | Deferred | 未確認 | CWE-284 | Gitea's package registry grants authenticated users read access to packages owned by Limited-visibility users without excluding restricted accounts. A restricted user can enumerate |
| CVE-2026-66853 | Deferred | 未確認 | CWE-200, CWE-863 | Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restriction enforced by the singl |
| CVE-2026-66858 | Deferred | 未確認 | CWE-674 | The protocol skip routine in several Apache Thrift bindings did not apply the binding's recursion limit, so a message that nests unknown fields deeply enough can exhaust the stack. |
| CVE-2026-66859 | Deferred | 未確認 | CWE-457, CWE-476 | NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended |
| CVE-2026-66874 | Deferred | 未確認 | CWE-284, CWE-345, CWE-693, CWE-807 | For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution. A |
| CVE-2026-66877 | Deferred | 未確認 | CWE-284 | Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement. A separate run shar |
| CVE-2026-67075 | Awaiting Analysis | 未確認 | CWE-79 | HCL Digital Experience is affected by improper input sanitation. This can result in HTML injection which could be leveraged in content spoofing from a trusted domain. Apply HCL Di |
| CVE-2026-67104 | Analyzed | 未確認 | CWE-200, CWE-798 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability, which could allow an unauthenticated attacker to analyze publicly accessible JavaScript files, |
| CVE-2026-67105 | Analyzed | 未確認 | CWE-319 | HCL BigFix Service Management is affected by an Insecure Communication vulnerability, which could allow an attacker with internal network access to intercept unencrypted HTTP traff |
| CVE-2026-67106 | Analyzed | 未確認 | CWE-200, CWE-209 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API endpoints return sensitive data. This information could enable an attac |
| CVE-2026-67165 | Awaiting Analysis | 未確認 | CWE-79 | HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user whi |
| CVE-2026-67171 | Analyzed | 未確認 | CWE-200, CWE-209 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API endpoint exposes sensitive internal database information. This informati |
| CVE-2026-67172 | Analyzed | 未確認 | CWE-200, CWE-209 | HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns sensitive information in error messages when invalid inputs are sent to |
| CVE-2026-6719 | Awaiting Analysis | 未確認 | CWE-330 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
| CVE-2026-6723 | Deferred | 未確認 | CWE-863 | The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to Incorrect Authorization in all versions up to, and including, 1 |
| CVE-2026-67249 | Deferred | 未確認 | CWE-863 | A vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A verification code issued for one email-based workflow could be accepted by another sensitiv |
| CVE-2026-67269 | Analyzed | 未確認 | CWE-269 | Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconc |
| CVE-2026-67270 | Analyzed | 未確認 | CWE-295 | Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent |
| CVE-2026-67273 | Analyzed | 未確認 | CWE-1336 | Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attack |
| CVE-2026-67414 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_common/src/amqp10_binary_parser.erl materializes each element of AMQP |
| CVE-2026-67416 | Awaiting Analysis | 未確認 | CWE-20, CWE-248, CWE-754 | RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, the optimized AMQP 1.0 server_mode parser in deps/amqp10_common/src/amqp10_binary_ |
| CVE-2026-67418 | Awaiting Analysis | 未確認 | CWE-1286, CWE-248 | RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, the MQTT 5 parser in deps/rabbitmq_mqtt/src/rabbit_mqtt_packet.erl accep |
| CVE-2026-67456 | Awaiting Analysis | 未確認 | CWE-122 | NVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to denial of service. |
| CVE-2026-67577 | Deferred | 未確認 | CWE-284 | Gitea's activity-feed and contribution-heatmap API handlers do not apply the profile visibility check for restricted accounts viewing Limited-visibility users. A restricted user ca |
| CVE-2026-67597 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-67625 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-67626 | Awaiting Analysis | 未確認 | CWE-400 | Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network. |
| CVE-2026-67628 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-67693 | Awaiting Analysis | 未確認 | CWE-367 | An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject end-entity X.509 certificates that contain a contradictory combination of Key U |
| CVE-2026-67989 | Awaiting Analysis | 未確認 | CWE-1333 | crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in Mistral model capability matching on |
| CVE-2026-68482 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An unauthenticated or unauthorized user can retrieve the invited-user lis |
| CVE-2026-68495 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength limi |
| CVE-2026-68496 | Awaiting Analysis | 未確認 | CWE-400, CWE-770 | The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when decoding JSON object property names, so the maxNameLength lim |
| CVE-2026-68498 | Deferred | 未確認 | CWE-400 | StreamReadConstraints.maxNameLength (default 50,000 characters) is intended to bound how much memory a single JSON Object property name can consume while being parsed, independentl |
| CVE-2026-68571 | Awaiting Analysis | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin. Special parameter in JDBC URL can lead to code injection. Impact most to the kylin service |
| CVE-2026-68572 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgr |
| CVE-2026-68573 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Kylin. Unauthenticated user may access to system cleanup actions. Impact most to the kylin services that are directly exposed to pub |
| CVE-2026-68764 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-68836 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally. |
| CVE-2026-68883 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-68906 | Deferred | 未確認 | CWE-125, CWE-835 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, parseUserInformation in s |
| CVE-2026-68907 | Deferred | 未確認 | CWE-125, CWE-457, CWE-628 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, checkDataSetAccess revers |
| CVE-2026-68908 | Deferred | 未確認 | CWE-590, CWE-664, CWE-763 | libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, Reporting_RCBWriteAccessH |
| CVE-2026-68957 | Deferred | 未確認 | CWE-284 | Gitea's API and web issue-search paths do not treat restricted accounts as anonymous viewers when evaluating Limited-visibility repository owners. A restricted user can search and |
| CVE-2026-68964 | Deferred | 未確認 | CWE-284 | Gitea's user SSH and GPG key-list API endpoints omit the profile visibility check applied by their web equivalents. A restricted account can retrieve public keys, key titles, finge |
| CVE-2026-69076 | Deferred | 未確認 | CWE-200 | Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. |
| CVE-2026-69077 | Deferred | 未確認 | CWE-200 | Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not c |
| CVE-2026-69080 | Deferred | 未確認 | CWE-200 | Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4 through 5.0.4. Users are recommended to upgrade to |
| CVE-2026-69150 | Awaiting Analysis | 未確認 | CWE-416 | KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password Safe. Prior to 2.8.0-beta1, KeePass1 / KDB legacy import retains raw Entry pointers |
| CVE-2026-69191 | Deferred | 未確認 | CWE-287 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise enforces disableFormLogin, disableBasicAuth, and d |
| CVE-2026-69193 | Deferred | 未確認 | CWE-307 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise tracks failed logins only by the combination of so |
| CVE-2026-69194 | Deferred | 未確認 | CWE-79 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.21.0, FileRise returns the stored branding.footerHtml value throu |
| CVE-2026-69226 | Awaiting Analysis | 未確認 | CWE-863 | A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when self-service account registration is disabled (disableSignup= |
| CVE-2026-69227 | Awaiting Analysis | 未確認 | CWE-306 | A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions. This could enable an attacker to access adminis |
| CVE-2026-6930 | Awaiting Analysis | 未確認 | CWE-327 | IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. |
| CVE-2026-69326 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69354 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69363 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69370 | Awaiting Analysis | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69387 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69435 | Analyzed | 未確認 | CWE-918 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-6945 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-69452 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-69454 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69471 | Analyzed | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69506 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
| CVE-2026-69521 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69577 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69596 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69633 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69634 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69635 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack. |
| CVE-2026-69639 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69640 | Undergoing Analysis | 未確認 | CWE-863 | Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-69644 | Awaiting Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally. |
| CVE-2026-69650 | Awaiting Analysis | 未確認 | CWE-347 | Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69651 | Awaiting Analysis | 未確認 | CWE-407 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-69673 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69675 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally. |
| CVE-2026-69705 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69718 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69721 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally. |
| CVE-2026-69733 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69736 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Manager allows an authorized attacker to elevate privileges locall |
| CVE-2026-69743 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69763 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69765 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69766 | Undergoing Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69783 | Undergoing Analysis | 未確認 | CWE-73 | External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69789 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-69795 | Undergoing Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69798 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69802 | Undergoing Analysis | 未確認 | CWE-1390 | Weak authentication in Network Device Enrollment Service (NDES) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69830 | Undergoing Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69840 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69850 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69856 | Undergoing Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69867 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69877 | Undergoing Analysis | 未確認 | CWE-346 | Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69880 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69882 | Analyzed | 未確認 | CWE-426 | Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69883 | Analyzed | 未確認 | CWE-416 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69884 | Undergoing Analysis | 未確認 | CWE-126 | Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69886 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69898 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69902 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-69905 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally. |
| CVE-2026-69909 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69913 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69914 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
| CVE-2026-69915 | Analyzed | 未確認 | CWE-416 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69916 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69918 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69919 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
| CVE-2026-69922 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69923 | Analyzed | 未確認 | CWE-427 | Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69926 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69931 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69934 | Analyzed | 未確認 | CWE-190, CWE-20 | Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69935 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69940 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69942 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
| CVE-2026-69943 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-69945 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69947 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-69949 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69950 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69952 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69953 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69954 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
| CVE-2026-69955 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-69957 | Analyzed | 未確認 | CWE-126, CWE-190 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69958 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack. |
| CVE-2026-69959 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. |
| CVE-2026-69963 | Awaiting Analysis | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69964 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69966 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69967 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally. |
| CVE-2026-69968 | Undergoing Analysis | 未確認 | CWE-23 | Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-69969 | Undergoing Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
| CVE-2026-69970 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69971 | Undergoing Analysis | 未確認 | CWE-863 | Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
| CVE-2026-69973 | Undergoing Analysis | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-69974 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
| CVE-2026-69976 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69977 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-69978 | Undergoing Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. |
| CVE-2026-69979 | Undergoing Analysis | 未確認 | CWE-424 | Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-69982 | Undergoing Analysis | 未確認 | CWE-1390 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-69984 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69985 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69986 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69987 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69988 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69991 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69992 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69994 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69995 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69996 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69997 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69998 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-69999 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Update allows an authorized attacker to disclose information locally. |
| CVE-2026-70004 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70005 | Undergoing Analysis | 未確認 | CWE-1390 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-70006 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70007 | Undergoing Analysis | 未確認 | CWE-787 | Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70008 | Undergoing Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70010 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70011 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally. |
| CVE-2026-70012 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70013 | Analyzed | 未確認 | CWE-416 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70014 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network. |
| CVE-2026-70015 | Analyzed | 未確認 | CWE-122 | Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70017 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. |
| CVE-2026-70021 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70023 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70024 | Analyzed | 未確認 | CWE-121, CWE-20 | Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70025 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. |
| CVE-2026-70026 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70027 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70031 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70033 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70035 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in .NET Framework allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70038 | Analyzed | 未確認 | CWE-122, CWE-416 | Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70041 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-70044 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70045 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70048 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70049 | Undergoing Analysis | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an |
| CVE-2026-70051 | Undergoing Analysis | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70052 | Undergoing Analysis | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. |
| CVE-2026-70054 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70055 | Undergoing Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information locally. |
| CVE-2026-70056 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70057 | Undergoing Analysis | 未確認 | CWE-863 | Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-70058 | Undergoing Analysis | 未確認 | CWE-787 | Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70059 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70060 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70062 | Undergoing Analysis | 未確認 | CWE-415 | Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70063 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-70064 | Undergoing Analysis | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70066 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70067 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70068 | Undergoing Analysis | 未確認 | CWE-122, CWE-822 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70069 | Undergoing Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network. |
| CVE-2026-70071 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-70072 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network. |
| CVE-2026-70074 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally. |
| CVE-2026-70075 | Undergoing Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-70076 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70077 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-70079 | Analyzed | 未確認 | CWE-841 | Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70082 | Analyzed | 未確認 | CWE-248 | Uncaught exception in Windows DNS allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70083 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-70084 | Undergoing Analysis | 未確認 | CWE-22 | Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. |
| CVE-2026-70085 | Analyzed | 未確認 | CWE-862 | Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-70086 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70087 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-70089 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70090 | Undergoing Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. |
| CVE-2026-70092 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-70093 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70095 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70096 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70097 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to |
| CVE-2026-70098 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70102 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70103 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70104 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70106 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70108 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70109 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-70110 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-70111 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70112 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally. |
| CVE-2026-70113 | Undergoing Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70114 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70115 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70116 | Undergoing Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack. |
| CVE-2026-70117 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70118 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70119 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DNS allows an authorized attacker to execute code over a network. |
| CVE-2026-70121 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70122 | Undergoing Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70123 | Undergoing Analysis | 未確認 | CWE-122, CWE-197 | Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70126 | Undergoing Analysis | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-70127 | Analyzed | 未確認 | CWE-416 | Use after free in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70128 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-70131 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally. |
| CVE-2026-70132 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70133 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70134 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70135 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-70136 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70137 | Undergoing Analysis | 未確認 | CWE-306 | Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally. |
| CVE-2026-70138 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70139 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70140 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70141 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-70142 | Awaiting Analysis | 未確認 | CWE-426 | Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70143 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally. |
| CVE-2026-70144 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70147 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70148 | Undergoing Analysis | 未確認 | CWE-441 | Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
| CVE-2026-70149 | Undergoing Analysis | 未確認 | CWE-122, CWE-190 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. |
| CVE-2026-70150 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70151 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70153 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70155 | Analyzed | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70156 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70157 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70158 | Undergoing Analysis | 未確認 | CWE-415 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-70159 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70160 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70161 | Awaiting Analysis | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70162 | Awaiting Analysis | 未確認 | CWE-405 | A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability cou |
| CVE-2026-70163 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70164 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70165 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70166 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network. |
| CVE-2026-70167 | Analyzed | 未確認 | CWE-822, CWE-843 | Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. |
| CVE-2026-70168 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70169 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate p |
| CVE-2026-70170 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. |
| CVE-2026-70172 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70173 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-70174 | Awaiting Analysis | 未確認 | CWE-358 | Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70175 | Awaiting Analysis | 未確認 | CWE-640 | Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70176 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70177 | Awaiting Analysis | 未確認 | CWE-197, CWE-20 | Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70179 | Awaiting Analysis | 未確認 | CWE-290 | Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70181 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70183 | Awaiting Analysis | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70184 | Awaiting Analysis | 未確認 | CWE-41 | Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70185 | Awaiting Analysis | 未確認 | CWE-639 | Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-70186 | Awaiting Analysis | 未確認 | CWE-833 | Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70187 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70188 | Awaiting Analysis | 未確認 | CWE-444 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-70189 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
| CVE-2026-70190 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70194 | Awaiting Analysis | 未確認 | CWE-295 | Improper certificate validation in .NET Framework allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-70195 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally. |
| CVE-2026-70196 | Awaiting Analysis | 未確認 | CWE-407 | Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-70197 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70198 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70199 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-70201 | Awaiting Analysis | 未確認 | CWE-125, CWE-416 | Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally. |
| CVE-2026-70202 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70205 | Awaiting Analysis | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70206 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70207 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network. |
| CVE-2026-70208 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-70209 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70210 | Awaiting Analysis | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70211 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70212 | Awaiting Analysis | 未確認 | CWE-923 | Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70213 | Awaiting Analysis | 未確認 | CWE-346 | Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network. |
| CVE-2026-70214 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70215 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70216 | Awaiting Analysis | 未確認 | CWE-1220 | Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally. |
| CVE-2026-70217 | Analyzed | 未確認 | CWE-284 | Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-70218 | Awaiting Analysis | 未確認 | CWE-1220, CWE-285 | Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70219 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70220 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-70222 | Awaiting Analysis | 未確認 | CWE-23 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70223 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70225 | Awaiting Analysis | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70227 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
| CVE-2026-70228 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70229 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70230 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70232 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-70233 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70234 | Awaiting Analysis | 未確認 | CWE-126 | Buffer over-read in Desktop Window Manager allows an authorized attacker to disclose information locally. |
| CVE-2026-70235 | Awaiting Analysis | 未確認 | CWE-862 | Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. |
| CVE-2026-70236 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70237 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70238 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70241 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70242 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70243 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70244 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70245 | Awaiting Analysis | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70246 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70247 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally. |
| CVE-2026-70248 | Awaiting Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
| CVE-2026-70249 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70250 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Windows DHCP Client allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-70251 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-70252 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70253 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70254 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70255 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70256 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70257 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70258 | Awaiting Analysis | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70259 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-70260 | Awaiting Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. |
| CVE-2026-70261 | Awaiting Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally. |
| CVE-2026-70262 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-70263 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70264 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally. |
| CVE-2026-70266 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a netwo |
| CVE-2026-70267 | Analyzed | 未確認 | CWE-829 | Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-70268 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70269 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70270 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70271 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70272 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70273 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70274 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70275 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70276 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70277 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally. |
| CVE-2026-70278 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70279 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network |
| CVE-2026-70280 | Undergoing Analysis | 未確認 | CWE-863 | Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-70281 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70282 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70284 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70285 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70286 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70287 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70288 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70291 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70292 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70293 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70294 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70295 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70297 | Awaiting Analysis | 未確認 | CWE-36 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network. |
| CVE-2026-70298 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-70299 | Awaiting Analysis | 未確認 | CWE-863 | Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70300 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70301 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70302 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70303 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70343 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft MPEG-2 Video Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70357 | Analyzed | 未確認 | CWE-918 | Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves the hostname when conne |
| CVE-2026-70386 | Deferred | 未確認 | CWE-78, CWE-862 | Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally insta |
| CVE-2026-70387 | Deferred | 未確認 | CWE-749, CWE-863 | Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork()'s and calls |
| CVE-2026-70396 | Deferred | 未確認 | CWE-863 | Gitea's organization repository-creation API requires write:organization but omits the write:repository token scope enforced by other repository-creation routes. A personal access |
| CVE-2026-70400 | Deferred | 未確認 | CWE-863 | Gitea's repository migration API accepts a public-only token when the request specifies creation of a private repository. A delegated token intended to operate only on public resou |
| CVE-2026-70402 | Deferred | 未確認 | CWE-732 | Gitea creates server-side Git hook directories and scripts with mode 0777 and relies on the process umask to restrict access. With a permissive umask such as 0000 or 0002, another |
| CVE-2026-70406 | Deferred | 未確認 | CWE-863 | Gitea's shared comparison helper omits the token repository-access check used when updating pull requests. A public-only token with read:repository scope can route a comparison or |
| CVE-2026-70407 | Deferred | 未確認 | CWE-285 | Gitea's organization-list API does not enforce the read:organization token scope. A token limited to another category, such as read:misc, can retrieve organization metadata visible |
| CVE-2026-70411 | Analyzed | 未確認 | CWE-306 | Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service ( |
| CVE-2026-70414 | Analyzed | 未確認 | CWE-256 | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exp |
| CVE-2026-70566 | Awaiting Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-70571 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-70580 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally. |
| CVE-2026-70650 | Deferred | 未確認 | CWE-79 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated stored Cross-Site Scri |
| CVE-2026-70860 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Dif | |
| CVE-2026-70869 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker). Supported versions that are affected are 8.61-8.63. Difficult | |
| CVE-2026-71168 | Analyzed | 未確認 | CWE-22 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker w |
| CVE-2026-71169 | Deferred | 未確認 | CWE-732 | Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access cou |
| CVE-2026-71170 | Deferred | 未確認 | CWE-427 | Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this |
| CVE-2026-71183 | Deferred | 未確認 | CWE-863 | An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data sources they are not authorized to access through the /unauth- |
| CVE-2026-71184 | Deferred | 未確認 | CWE-863 | Gitea's pull request review notifier does not attach the pull request to the Actions notification, so the fork workflow approval gate does not recognize the run as originating from |
| CVE-2026-71195 | Awaiting Analysis | 未確認 | CWE-863 | In OpenStack Manila before 23.0.1, multiple Manila API operations on public shares do not verify that the caller owns the share. The API controllers authorize operations against th |
| CVE-2026-71253 | Deferred | 未確認 | CWE-470 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon. ClassConverter loads & static-initializes an attacker-named c |
| CVE-2026-71297 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacke |
| CVE-2026-71298 | Awaiting Analysis | 未確認 | CWE-89 | A flaw was found in maestro. A remote attacker could exploit a SQL injection vulnerability in the `orderBy` query parameter of its REST API list endpoints. This flaw, which does no |
| CVE-2026-71299 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write oper |
| CVE-2026-71301 | Deferred | 未確認 | CWE-284 | Gitea's repository markup endpoint resolves same-repository pull request references without enforcing the viewer's Pull Requests permission. A member with only Wiki access to a pri |
| CVE-2026-71347 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Security Center allows an authorized attacker to elevate privileges locally. |
| CVE-2026-71385 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privilege |
| CVE-2026-71426 | Deferred | 未確認 | CWE-22, CWE-98 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-editing |
| CVE-2026-71448 | Deferred | 未確認 | CWE-1188 | : Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63. |
| CVE-2026-71449 | Deferred | 未確認 | CWE-321 | : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63. |
| CVE-2026-71451 | Deferred | 未確認 | CWE-78 | - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63. |
| CVE-2026-71452 | Deferred | 未確認 | CWE-78 | - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63. |
| CVE-2026-71453 | Deferred | 未確認 | CWE-73 | - External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63. |
| CVE-2026-71454 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). Thi |
| CVE-2026-71490 | Deferred | 未確認 | CWE-863 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.11, OPNsense\Core\ACL::hasPrivilege() appends a directly assigned comma-separated <priv> value as one strin |
| CVE-2026-71542 | Deferred | 未確認 | CWE-79 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, GetSimpleCMS-CE is vulnerable to stored |
| CVE-2026-71563 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An authorization flaw in the MCP answer retrieval tool allows holders of |
| CVE-2026-71575 | Analyzed | 未確認 | CWE-613 | The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a milliseconds/seconds unit mismatch and an inverted comparison polarity. Any relyi |
| CVE-2026-7173 | Deferred | 未確認 | CWE-79 | CVE-2026-7173: Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL t |
| CVE-2026-7174 | Deferred | 未確認 | CWE-79 | CVE-2026-7174: Stored Cross-Site Scripting vulnerability in Entradium, by Crocantickets. Specifically, in the Name and Field parameters of the endpoint /tools/discount_wizard/disco |
| CVE-2026-7175 | Deferred | 未確認 | CWE-79 | CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that wil |
| CVE-2026-7176 | Deferred | 未確認 | CWE-79 | CVE-2026-7176: the Help text and Title parameters in the endpoint /events/<event_name>-<event_city>/custom_form/edit during the process of creating or modifying forms associated wi |
| CVE-2026-71854 | Deferred | 未確認 | CWE-306, CWE-639, CWE-862 | OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests. Prior to version 2.260622.0, on a default ins |
| CVE-2026-71883 | Awaiting Analysis | 未確認 | CWE-200 | In Bouncy Castle for Java LTS before 2.73.13, the one-shot native packet ciphers for AES-CBC, CCM, CFB, CTR, GCM and GCM-SIV released the caller's key, IV and additional authentica |
| CVE-2026-71884 | Awaiting Analysis | 未確認 | CWE-323 | In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In CTR mode |
| CVE-2026-71885 | Awaiting Analysis | 未確認 | CWE-287, CWE-295 | In Bouncy Castle for Java before 1.86, the Messaging Layer Security (MLS, RFC 9420) implementation did not bind an X.509 credential to a LeafNode's signature_key. LeafNode.verify() |
| CVE-2026-71886 | Awaiting Analysis | 未確認 | CWE-285, CWE-863 | In Bouncy Castle for Java before 1.86, the high-level OpenPGP certificate API accepted a third-party certification or trust delegation from any component key of the issuing certifi |
| CVE-2026-71887 | Awaiting Analysis | 未確認 | CWE-345, CWE-347 | In Bouncy Castle for Java before 1.86, the high-level OpenPGP API accepted a data signature made by a signing subkey whose Subkey Binding signature carried no embedded Primary Key |
| CVE-2026-71888 | Awaiting Analysis | 未確認 | CWE-354 | In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose digestAlgorithm and authAttrs fields disagreed about whether authenticate |
| CVE-2026-71889 | Awaiting Analysis | 未確認 | CWE-295 | In Bouncy Castle for Java before 1.86, neither copy of PKIXCertPathReviewer - org.bouncycastle.pkix.jcajce.PKIXCertPathReviewer nor the legacy org.bouncycastle.x509.PKIXCertPathRev |
| CVE-2026-71890 | Awaiting Analysis | 未確認 | CWE-863 | In Bouncy Castle for Java before 1.86, validation of an MLS (RFC 9420) external commit's proposal list, org.bouncycastle.mls.protocol.Group.validateExternalCachedProposals, counted |
| CVE-2026-71891 | Awaiting Analysis | 未確認 | CWE-347 | In Bouncy Castle for Java before 1.86, BLS12_381BasicScheme.keyValidate, and so BLSPublicKeyParameters and every BasicScheme, MessageAugmentation and ProofOfPossession verify and a |
| CVE-2026-71892 | Awaiting Analysis | 未確認 | CWE-697 | In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidation(true), |
| CVE-2026-71895 | Deferred | 未確認 | CWE-862 | An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster |
| CVE-2026-71896 | Deferred | 未確認 | CWE-863 | An authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve other users' account information through the /dolphinscheduler/users/list-all endpo |
| CVE-2026-72528 | Deferred | 未確認 | CWE-601 | "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by the attacker may be |
| CVE-2026-72895 | Deferred | 未確認 | CWE-1394 | A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G |
| CVE-2026-72934 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72955 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72968 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-72969 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73027 | Awaiting Analysis | 未確認 | CWE-15 | External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
| CVE-2026-73126 | Deferred | 未確認 | CWE-863 | Gitea's Actions workflow status badge endpoint does not enforce repository-read scope or the public-only restriction on the token authenticating the request. A token lacking read:r |
| CVE-2026-73130 | Deferred | 未確認 | CWE-400 | Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedl |
| CVE-2026-73135 | Deferred | 未確認 | CWE-200 | Gitea uses inconsistent repository visibility predicates, and the condition used by some repository-listing endpoints admits repositories whose owners are hidden from the viewer. T |
| CVE-2026-73179 | Analyzed | 未確認 | CWE-367 | Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant provider in Apache CXFallows a remote attacker to obtain multiple valid a |
| CVE-2026-73252 | Deferred | 未確認 | CWE-125, CWE-191 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MG_TLS_BUILTIN in src/tls_builtin.c accepts a TLS 1.3 record whose decrypt |
| CVE-2026-73260 | Deferred | 未確認 | CWE-125 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate parser selected by MG_TLS_BUILTIN fails to verify that a long-form DER element l |
| CVE-2026-73261 | Deferred | 未確認 | CWE-125, CWE-20 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TCPIP in src/net_builtin.c does not reject a TCP option whose |
| CVE-2026-73273 | Deferred | 未確認 | CWE-770 | Gitea's Maven upload handler reads checksum uploads entirely into memory and returns before enforcing package-size quotas. An authenticated user with package-publish permission can |
| CVE-2026-73278 | Analyzed | 未確認 | CWE-287 | Gitea's OAuth2 and OpenID Connect sign-in paths do not require a WebAuthn challenge when WebAuthn is the account's only configured second factor. A party able to authenticate throu |
| CVE-2026-73535 | Deferred | 未確認 | CWE-304, CWE-696 | Gitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier. When O |
| CVE-2026-73539 | Deferred | 未確認 | CWE-88 | Gitea substitutes a URL derived from the markup Context field into external renderer command templates without escaping the reference path before shell-style argument splitting. A |
| CVE-2026-73636 | Analyzed | 未確認 | CWE-294 | Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.4.x on all platforms allows a man-in-the-middle (MITM) attacker to rep |
| CVE-2026-73637 | Analyzed | 未確認 | CWE-416 | Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an unauthenticated remote client to cause authentication st |
| CVE-2026-73790 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown. |
| CVE-2026-73791 | Awaiting Analysis | 未確認 | CWE-122 | A security vulnerability in HPE NonStop Hpjmeter can cause stack and heap buffer overflow. |
| CVE-2026-73792 | Awaiting Analysis | 未確認 | CWE-78 | A security vulnerability in HPE NonStop Java JToolkit can allow command Injection and buffer overflow. |
| CVE-2026-73793 | Awaiting Analysis | 未確認 | CWE-502 | HPE NonStop Middleware software has secret key handling and data deserialization vulnerability. |
| CVE-2026-73794 | Awaiting Analysis | 未確認 | CWE-337 | HPE NonStop MODULAR NSJ contains a predictable seed vulnerability in Random Number Generation (PRNG) |
| CVE-2026-73795 | Awaiting Analysis | 未確認 | CWE-121 | A security vulnerability in HPE NonStop TMF Auditread2 can cause Denial of Service. |
| CVE-2026-73796 | Awaiting Analysis | 未確認 | CWE-564 | A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query. |
| CVE-2026-73797 | Awaiting Analysis | 未確認 | CWE-475 | A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called. |
| CVE-2026-73798 | Awaiting Analysis | 未確認 | CWE-115 | A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service. |
| CVE-2026-73799 | Awaiting Analysis | 未確認 | CWE-121 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption |
| CVE-2026-73800 | Deferred | 未確認 | CWE-829, CWE-94 | Gitea resolves local reusable workflow files from a fork's head commit when a trusted base-branch workflow runs for a pull_request_target event. A fork author can modify a referenc |
| CVE-2026-73802 | Deferred | 未確認 | CWE-269 | Gitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled. Host namespace settings, expanded capabilities, |
| CVE-2026-73804 | Deferred | 未確認 | CWE-266, CWE-863 | Gitea allows a token with write:user scope to register an attacker-controlled SSH public key on the token owner's account. API requests signed with the corresponding private key au |
| CVE-2026-73814 | Deferred | 未確認 | CWE-266 | Gitea's collaboration access-mode endpoint accepts the Owner access mode from an authenticated repository collaborator with Admin access. The collaborator can promote their effecti |
| CVE-2026-73964 | Awaiting Analysis | 未確認 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.32 and 21.3-21.23. Easily exploitable vulnerability allows high p | |
| CVE-2026-73975 | Deferred | 未確認 | CWE-943 | djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, an authenticated depositor can inject arbitrary SPARQL into a state-modifying ( |
| CVE-2026-73976 | Deferred | 未確認 | CWE-943 | djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated attacker can inject SPARQL into the search/listing queries t |
| CVE-2026-74030 | Awaiting Analysis | 未確認 | CWE-776 | Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy to exhaust agent memory. Attack |
| CVE-2026-74031 | Awaiting Analysis | 未確認 | CWE-22 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows malicious cluster workers to delete arbit |
| CVE-2026-74032 | Awaiting Analysis | 未確認 | CWE-863 | Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected securi |
| CVE-2026-74033 | Awaiting Analysis | 未確認 | CWE-22 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB list handlers that allows compromised cluster workers to read o |
| CVE-2026-74034 | Awaiting Analysis | 未確認 | CWE-862 | Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with attacker-controlled file_path. |
| CVE-2026-74035 | Awaiting Analysis | 未確認 | CWE-863 | Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and password policy inside a falsy |
| CVE-2026-74036 | Awaiting Analysis | 未確認 | CWE-863 | Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than configuration source. Attackers controll |
| CVE-2026-74037 | Awaiting Analysis | 未確認 | CWE-613 | Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the blacklist. Attackers with revoked admini |
| CVE-2026-74040 | Awaiting Analysis | 未確認 | CWE-862 | Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a cluster worker to overwrite protecte |
| CVE-2026-74041 | Awaiting Analysis | 未確認 | CWE-178 | Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command validation. Authenticated users |
| CVE-2026-74043 | Awaiting Analysis | 未確認 | CWE-22 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows malicious cluster workers to write |
| CVE-2026-74045 | Awaiting Analysis | 未確認 | CWE-122 | Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by OS_MAXSTR. An enrolled agent can s |
| CVE-2026-74047 | Awaiting Analysis | 未確認 | CWE-200 | Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the plaintext authd.pass enrollment pas |
| CVE-2026-74048 | Awaiting Analysis | 未確認 | CWE-636 | Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and erro |
| CVE-2026-74049 | Awaiting Analysis | 未確認 | CWE-698 | Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 th |
| CVE-2026-74755 | Deferred | 未確認 | CWE-191 | An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash a bRPC server by sending a request containing a |
| CVE-2026-74757 | Deferred | 未確認 | CWE-770 | Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server allocate a large amount of |
| CVE-2026-74758 | Deferred | 未確認 | CWE-416 | A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control mess |
| CVE-2026-74920 | Deferred | 未確認 | CWE-79 | The Document Gallery WordPress plugin through 5.1.1 does not properly sanitise and escape user input before reflecting it inside an HTML attribute in the response of an unauthentic |
| CVE-2026-74921 | Deferred | 未確認 | CWE-79 | The Document Gallery WordPress plugin through 5.1.1 does not sanitise or escape several gallery shortcode attributes before embedding them in a single-quoted HTML attribute in the |
| CVE-2026-74922 | Deferred | 未確認 | CWE-345 | The Document Gallery WordPress plugin through 5.1.1 does not verify the signature on one of its unauthenticated webhook endpoints when no shared secret has been configured, which i |
| CVE-2026-74923 | Deferred | 未確認 | CWE-200 | The Document Gallery WordPress plugin through 5.1.1 does not perform any capability or ownership check when generating a gallery on demand, allowing unauthenticated users to enumer |
| CVE-2026-75028 | Deferred | 未確認 | CWE-98 | The WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.18 vi |
| CVE-2026-75061 | Analyzed | 未確認 | CWE-22 | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" |
| CVE-2026-75063 | Analyzed | 未確認 | CWE-79 | IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to improper output encoding. |
| CVE-2026-75076 | Awaiting Analysis | 未確認 | CWE-200 | IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files. |
| CVE-2026-75083 | Awaiting Analysis | 未確認 | CWE-191 | The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len = len - KW41Z_FCS_LENGTH in a uint |
| CVE-2026-75084 | Awaiting Analysis | 未確認 | CWE-787 | The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and validates it in verify_rxfifo_validity() ( |
| CVE-2026-75085 | Awaiting Analysis | 未確認 | CWE-125 | The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len = rx_frame->length - IEEE802154_FCS_LENGTH w |
| CVE-2026-75095 | Awaiting Analysis | 未確認 | CWE-400 | IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-75120 | Awaiting Analysis | 未確認 | CWE-290 | The OpenText™ (EnCase SAFE Agents) component utilized by OpenText™ Endpoint Investigator, OpenText™ Endpoint Forensics & Response, OpenText™ Information Assurance, and OpenText™ En |
| CVE-2026-75128 | Awaiting Analysis | 未確認 | CWE-306 | Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool |
| CVE-2026-75345 | Deferred | 未確認 | CWE-400 | OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service. |
| CVE-2026-75346 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master through commit 76b95cf in the server-side CIP SetAttributeList service. This allows a remote atta |
| CVE-2026-75347 | Deferred | 未確認 | CWE-400 | EIPStackGroup OpENer v2.3 and master up to commit 76b95cf contain an expired pointer dereference vulnerability in the EtherNet/IP Common Packet Format (CPF) handling logic. This al |
| CVE-2026-75348 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in EIPStackGroup OpENer v2.3 and master up to commit 76b95cf in the EtherNet/IP TCP SendRRData Common Packet Format parser. The issue occ |
| CVE-2026-75349 | Deferred | 未確認 | CWE-400 | EIPStackGroup OpENer v2.3.0/master up to commit 76b95cf contains an out-of-bounds read vulnerability in Connection Manager request parsing. This allows a remote attacker to cause a |
| CVE-2026-75350 | Deferred | 未確認 | CWE-400 | EIPStackGroup OpENer v2.3 / master commit 76b95cf contains a buffer overflow in the GetAttributeList() implementation for the EtherNet/IP Get_Attribute_List service. This allows a |
| CVE-2026-75351 | Awaiting Analysis | 未確認 | CWE-125 | OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of ser |
| CVE-2026-75352 | Awaiting Analysis | 未確認 | CWE-191 | OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of serv |
| CVE-2026-75353 | Awaiting Analysis | 未確認 | CWE-125 | OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remtoe attacker to cause a denial of se |
| CVE-2026-75505 | Deferred | 未確認 | CWE-862 | EspoCRM is an open source customer relationship management application. Prior to 10.0.2, an authenticated user with mass-update permission can supply a known attachment identifier |
| CVE-2026-75507 | Deferred | 未確認 | CWE-400, CWE-407 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specified_rules repeatedly |
| CVE-2026-75508 | Deferred | 未確認 | CWE-400, CWE-770 | GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in Parser.advance_lexer counts only no |
| CVE-2026-75524 | Received | 未確認 | CWE-367 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 2.2.2, an attacker overbooks an agent, placing multiple |
| CVE-2026-75525 | Received | 未確認 | CWE-863 | OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. In versions 2.1.0 and prior, an unauthenticated attacker can store an ar |
| CVE-2026-75559 | Deferred | 未確認 | CWE-201 | The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the application, p |
| CVE-2026-75597 | Deferred | 未確認 | CWE-209, CWE-306 | pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/<path:filename>` route in `src/pyload/webui/app/blueprints/app_blueprint.py` |
| CVE-2026-75621 | Awaiting Analysis | 未確認 | CWE-250 | IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to excessive permissions assigned to a service account. |
| CVE-2026-75732 | Undergoing Analysis | 未確認 | CWE-863 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini |
| CVE-2026-75747 | Rejected | 未確認 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-75748 | Analyzed | 未確認 | CWE-918 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerab |
| CVE-2026-75751 | Rejected | 未確認 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-75753 | Awaiting Analysis | 未確認 | CWE-306 | Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTP requests, causing the router to return |
| CVE-2026-75775 | Awaiting Analysis | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted paramete |
| CVE-2026-75779 | Awaiting Analysis | 未確認 | CWE-352, CWE-78 | Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick |
| CVE-2026-75782 | Awaiting Analysis | 未確認 | CWE-426 | IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a misconfigured PATH environment variable. |
| CVE-2026-75786 | Deferred | 未確認 | CWE-89 | Unsanitized concatenation of the module parameter in the Grafana datasource endpoint allows authenticated blind SQL injection. Affects Pandora FMS from 777 onwards. |
| CVE-2026-75818 | Deferred | 未確認 | CWE-122 | GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted |
| CVE-2026-75819 | Deferred | 未確認 | CWE-125 | GNU Aspell contains an out-of-bounds read vulnerability in ReadOnlyDict::load() in readonly_ws.cpp. When loading a binary .rws dictionary file, it uses offset fields from the file |
| CVE-2026-75820 | Deferred | 未確認 | CWE-190 | GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wordlist, the word leng |
| CVE-2026-75826 | Deferred | 未確認 | CWE-78 | Command injection in the backup function in Teltonika Networks RUTOS 7.22 before 7.24.6 and 7.25 before 7.25.2 (RUT, RUTX, RUTM, RUTC, ATRM, CAP, OXA, DAP, TRB, OTD, and EBG device |
| CVE-2026-75875 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal. |
| CVE-2026-75881 | Awaiting Analysis | 未確認 | CWE-400 | IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to an infinite parsing loop when processing cert |
| CVE-2026-75888 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in the OpenShift console. An authenticated console user can exploit a Server-Side Request Forgery (SSRF) vulnerability by providing a specially crafted Helm chart |
| CVE-2026-75903 | Deferred | 未確認 | CWE-287 | The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.4.3 This is due to insufficient protection of the delegated |
| CVE-2026-75937 | Awaiting Analysis | 未確認 | CWE-78 | A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on |
| CVE-2026-75941 | Awaiting Analysis | 未確認 | CWE-502 | A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same logical networ |
| CVE-2026-75957 | Deferred | 未確認 | CWE-287 | The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.15.0 via the ` |
| CVE-2026-75962 | Deferred | 未確認 | CWE-79 | The Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2026-75994 | Analyzed | 未確認 | CWE-863 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this |
| CVE-2026-75995 | Analyzed | 未確認 | CWE-20 | ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privile |
| CVE-2026-75996 | Analyzed | 未確認 | CWE-400 | ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhau |
| CVE-2026-75997 | Rejected | 未確認 | Rejected reason: this CVE was issued in error. | |
| CVE-2026-76001 | Analyzed | 未確認 | CWE-918 | ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability t |
| CVE-2026-76061 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malicious container or local attacker could use a Container Runtim |
| CVE-2026-76066 | Deferred | 未確認 | CWE-862 | IntentKit through 2.6.3, fixed in commit 5b91da5, contains an authorization bypass vulnerability where the executor validates tool calls against the full tool registry rather than |
| CVE-2026-76083 | Awaiting Analysis | 未確認 | CWE-918 | Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/query_runner/json_ds.py used _get_all_results() to com |
| CVE-2026-76105 | Analyzed | 未確認 | CWE-330 | Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potent |
| CVE-2026-76113 | Awaiting Analysis | 未確認 | CWE-532 | Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfish_certificate r |
| CVE-2026-76142 | Deferred | 未確認 | CWE-284, CWE-306 | Insufficient authentication and access control on the internal-only IPC SOAP endpoint of the Genian NAC/ZTNA policy server allows an unauthenticated attacker to invoke internal fun |
| CVE-2026-76143 | Deferred | 未確認 | CWE-862 | A missing authorization vulnerability in Genian SSL PNS allows an attacker to bypass multi-factor authentication by manipulating a login request parameter. |
| CVE-2026-76144 | Deferred | 未確認 | CWE-434 | An unrestricted file upload vulnerability caused by insufficient file extension and integrity verification in Genian SSL PNS allows an attacker to upload a dangerous file that is n |
| CVE-2026-76145 | Deferred | 未確認 | CWE-269 | An improper privilege management vulnerability in Genian SSL PNS allows an attacker to escalate to super administrator privileges and force the creation of an OS account by manipul |
| CVE-2026-76146 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability in Genian SSL PNS allows an attacker who knows only the client access ID, without the password, to execute arbitrary commands remotely |
| CVE-2026-76147 | Deferred | 未確認 | CWE-22, CWE-807, CWE-862 | A path traversal (ZIP Slip) vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker t |
| CVE-2026-76182 | Awaiting Analysis | 未確認 | CWE-74 | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in contex |
| CVE-2026-76184 | Awaiting Analysis | 未確認 | CWE-200 | In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches authen |
| CVE-2026-76264 | Analyzed | 未確認 | CWE-863 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could create or edit scripted lookup definitio |
| CVE-2026-76265 | Analyzed | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold the "admin" |
| CVE-2026-76266 | Analyzed | 未確認 | CWE-269 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an aff |
| CVE-2026-76267 | Analyzed | 未確認 | CWE-117 | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could inject forged entries into the app log through |
| CVE-2026-76268 | Analyzed | 未確認 | CWE-306 | In Splunk Enterprise versions below 10.4.3 and 10.2.7, an unauthenticated user with network access to the Patroni Representational State Transfer (REST) Application Programming Int |
| CVE-2026-76269 | Analyzed | 未確認 | CWE-639 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could use a user-controlled job identifier to |
| CVE-2026-76270 | Analyzed | 未確認 | CWE-89 | In Splunk Enterprise versions below 10.4.3, a user that holds a role with the list_spl2_modules capability could use SQL injection in SPL2 module filtering to access all relevant d |
| CVE-2026-76271 | Analyzed | 未確認 | CWE-407 | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could cause a denial of service agains |
| CVE-2026-76272 | Analyzed | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could cause Splunk Secure Gateway to sign atta |
| CVE-2026-76273 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language ( |
| CVE-2026-76274 | Analyzed | 未確認 | CWE-918 | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_content capability could redirect an outbound request from Splunk App f |
| CVE-2026-76275 | Analyzed | 未確認 | CWE-285 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could access search query text and job metadat |
| CVE-2026-76276 | Analyzed | 未確認 | CWE-1188 | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve original source code fo |
| CVE-2026-76277 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username that ends with |
| CVE-2026-76278 | Analyzed | 未確認 | CWE-639 | In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the edit_spl2_module_permissions capability could use the affected Representational S |
| CVE-2026-76279 | Analyzed | 未確認 | CWE-20 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processing Language ( |
| CVE-2026-76280 | Analyzed | 未確認 | CWE-732 | In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, an authenticated user who does not ho |
| CVE-2026-76281 | Modified | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76282 | Modified | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76283 | Modified | 未確認 | CWE-693 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76284 | Modified | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76285 | Modified | 未確認 | CWE-710 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76286 | Awaiting Analysis | 未確認 | CWE-918 | In Splunk MCP Server versions below 1.2.1, Splunk MCP Server could send the Splunk platform authentication token of a user who runs a custom Application Programming Interface (API) |
| CVE-2026-76287 | Undergoing Analysis | 未確認 | CWE-639 | In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline capability or edit_data_management_pipeline_job capability could read |
| CVE-2026-76288 | Undergoing Analysis | 未確認 | CWE-400 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single crafted request to the Splunk Web JavaScript logger endpoint an |
| CVE-2026-76289 | Undergoing Analysis | 未確認 | CWE-770 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could make the Splunk Enterprise instance unav |
| CVE-2026-76290 | Undergoing Analysis | 未確認 | CWE-400 | In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests to the Edge Processor package download endpoint in the Splunk |
| CVE-2026-76291 | Undergoing Analysis | 未確認 | CWE-284 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the schedule_search capability could bypass the expected safeguards in the sc |
| CVE-2026-76292 | Undergoing Analysis | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a low-privileged user that does not h |
| CVE-2026-76293 | Undergoing Analysis | 未確認 | CWE-94 | In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the edit_manager_xml capability could execute arbitrary operating-system comm |
| CVE-2026-76294 | Undergoing Analysis | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could move field extractions or field transfor |
| CVE-2026-76295 | Undergoing Analysis | 未確認 | CWE-943 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below 3.10.12, 3.9.26, and 3.8.73, a user who does not hold the "admin" |
| CVE-2026-76296 | Undergoing Analysis | 未確認 | CWE-862 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or "power" Splunk roles could create, move, edit, or delete sourcetype |
| CVE-2026-76297 | Undergoing Analysis | 未確認 | CWE-352 | In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user that holds a role with the edit_federated_providers capability i |
| CVE-2026-76298 | Undergoing Analysis | 未確認 | CWE-321 | In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles could derive the PostgreSQL sidecar database superuser password |
| CVE-2026-76299 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76300 | Awaiting Analysis | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76301 | Awaiting Analysis | 未確認 | CWE-693 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76302 | Awaiting Analysis | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76303 | Undergoing Analysis | 未確認 | CWE-79 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store attacker-controlled content that Splunk SOAR displays in app documentatio |
| CVE-2026-76304 | Undergoing Analysis | 未確認 | CWE-862 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation Brokers could download the Splunk SOAR Automation Broker Dock |
| CVE-2026-76305 | Undergoing Analysis | 未確認 | CWE-862 | In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could download an archive of an installed app. This could expose al |
| CVE-2026-76306 | Undergoing Analysis | 未確認 | CWE-200 | In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the Representational State Transfer (REST) API to infer password hashes and auth |
| CVE-2026-76307 | Undergoing Analysis | 未確認 | CWE-200 | In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the Representational State Transfer (REST) API to infer authenticat |
| CVE-2026-76308 | Undergoing Analysis | 未確認 | CWE-862 | In Splunk SOAR versions below 8.7.0, an authenticated user could change the Enterprise Security edition through the Representational State Transfer (REST) API and cause Splunk SOAR |
| CVE-2026-76406 | Undergoing Analysis | 未確認 | CWE-203 | In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an affected Splunk SOAR instance could submit Basic authentication data t |
| CVE-2026-76407 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76408 | Awaiting Analysis | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76435 | Awaiting Analysis | 未確認 | CWE-497 | A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to |
| CVE-2026-76437 | Awaiting Analysis | 未確認 | CWE-78 | A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker |
| CVE-2026-76445 | Awaiting Analysis | 未確認 | CWE-835 | Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpe |
| CVE-2026-76452 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote at |
| CVE-2026-76453 | Awaiting Analysis | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie |
| CVE-2026-76454 | Awaiting Analysis | 未確認 | CWE-23 | A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remo |
| CVE-2026-76455 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie |
| CVE-2026-76456 | Awaiting Analysis | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie |
| CVE-2026-76457 | Awaiting Analysis | 未確認 | CWE-125 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie |
| CVE-2026-76458 | Awaiting Analysis | 未確認 | CWE-703 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie |
| CVE-2026-76459 | Awaiting Analysis | 未確認 | CWE-787 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This revie |
| CVE-2026-76462 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate |
| CVE-2026-76463 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This |
| CVE-2026-76464 | Awaiting Analysis | 未確認 | CWE-119 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This |
| CVE-2026-76465 | Awaiting Analysis | 未確認 | CWE-590 | A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switch |
| CVE-2026-76466 | Awaiting Analysis | 未確認 | CWE-798 | A vulnerability in the database service feature of Cisco Expressway Series could allow an unauthenticated, remote attacker with network access to a Cisco Expressway device to execu |
| CVE-2026-76467 | Awaiting Analysis | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This |
| CVE-2026-76468 | Awaiting Analysis | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This |
| CVE-2026-76469 | Awaiting Analysis | 未確認 | CWE-691 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This |
| CVE-2026-76470 | Awaiting Analysis | 未確認 | CWE-682 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This |
| CVE-2026-76471 | Awaiting Analysis | 未確認 | CWE-122 | A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of se |
| CVE-2026-76472 | Awaiting Analysis | 未確認 | CWE-74 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This |
| CVE-2026-76473 | Awaiting Analysis | 未確認 | CWE-74 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76474 | Awaiting Analysis | 未確認 | CWE-287 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76475 | Awaiting Analysis | 未確認 | CWE-79 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76476 | Awaiting Analysis | 未確認 | CWE-20 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76477 | Awaiting Analysis | 未確認 | CWE-89 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76478 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76479 | Awaiting Analysis | 未確認 | CWE-22 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76480 | Awaiting Analysis | 未確認 | CWE-306 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM |
| CVE-2026-76481 | Awaiting Analysis | 未確認 | CWE-703 | As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unifie |
| CVE-2026-76482 | Awaiting Analysis | 未確認 | CWE-347 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM |
| CVE-2026-76483 | Awaiting Analysis | 未確認 | CWE-522 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM |
| CVE-2026-76484 | Awaiting Analysis | 未確認 | CWE-94 | As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM |
| CVE-2026-76485 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to ex |
| CVE-2026-76486 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to ex |
| CVE-2026-76487 | Awaiting Analysis | 未確認 | CWE-749 | A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthentic |
| CVE-2026-76488 | Awaiting Analysis | 未確認 | CWE-264 | A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive |
| CVE-2026-76489 | Awaiting Analysis | 未確認 | CWE-401 | Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could allow an unauthenticated, remote attacker to cause the Snort 3 |
| CVE-2026-76490 | Awaiting Analysis | 未確認 | CWE-787 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76491 | Awaiting Analysis | 未確認 | CWE-617 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76492 | Awaiting Analysis | 未確認 | CWE-476 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76493 | Awaiting Analysis | 未確認 | CWE-248 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76494 | Awaiting Analysis | 未確認 | CWE-94 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76495 | Awaiting Analysis | 未確認 | CWE-732 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76496 | Awaiting Analysis | 未確認 | CWE-59 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76497 | Awaiting Analysis | 未確認 | CWE-377 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal securi |
| CVE-2026-76498 | Awaiting Analysis | 未確認 | CWE-284 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comp |
| CVE-2026-76499 | Awaiting Analysis | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comp |
| CVE-2026-76500 | Awaiting Analysis | 未確認 | CWE-664 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conducted a comp |
| CVE-2026-76501 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthentic |
| CVE-2026-76505 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and 9900 Series Aggregation Services Routers as well as Cisco ASR 9 |
| CVE-2026-76519 | Analyzed | 掲載 | CWE-23 | A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the under |
| CVE-2026-76524 | Awaiting Analysis | 未確認 | CWE-306 | A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated, local attacker with low privileges to execute arbitrary comma |
| CVE-2026-76526 | Awaiting Analysis | 未確認 | CWE-707 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76527 | Awaiting Analysis | 未確認 | CWE-703 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76528 | Awaiting Analysis | 未確認 | CWE-693 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76529 | Awaiting Analysis | 未確認 | CWE-424 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76530 | Awaiting Analysis | 未確認 | CWE-647 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76531 | Awaiting Analysis | 未確認 | CWE-552 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software ha |
| CVE-2026-76587 | Awaiting Analysis | 未確認 | CWE-121 | IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary |
| CVE-2026-76655 | Awaiting Analysis | 未確認 | CWE-121 | A security vulnerability in HPE NonStop SNMP Trap Multiplexer may allow remote code execution |
| CVE-2026-76656 | Awaiting Analysis | 未確認 | CWE-306 | A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditio |
| CVE-2026-76659 | Awaiting Analysis | 未確認 | CWE-306 | A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service. |
| CVE-2026-76660 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data. |
| CVE-2026-76661 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data. |
| CVE-2026-76662 | Awaiting Analysis | 未確認 | CWE-121 | A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS. |
| CVE-2026-76663 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS. |
| CVE-2026-76664 | Awaiting Analysis | 未確認 | CWE-125 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operations |
| CVE-2026-76665 | Awaiting Analysis | 未確認 | CWE-125 | A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow. |
| CVE-2026-76666 | Awaiting Analysis | 未確認 | CWE-125 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. |
| CVE-2026-76667 | Awaiting Analysis | 未確認 | CWE-125 | A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read. |
| CVE-2026-76668 | Awaiting Analysis | 未確認 | CWE-1260 | A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data. |
| CVE-2026-76739 | Awaiting Analysis | 未確認 | CWE-20 | A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server could be remotely exploited to list and modify RMC filesystem. |
| CVE-2026-76740 | Awaiting Analysis | 未確認 | CWE-78 | A security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms, Superdome Flex and Superdome Flex 280 servers could be exploited remotely to execute arbitrary comm |
| CVE-2026-76741 | Awaiting Analysis | 未確認 | CWE-121 | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an authenticated remote attacker to cause a denial-of-service conditio |
| CVE-2026-76742 | Awaiting Analysis | 未確認 | CWE-269 | Authentication bypass vulnerabilities exist in the web management interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized ac |
| CVE-2026-76743 | Awaiting Analysis | 未確認 | CWE-287 | A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unauthenticated remote attacker to circumvent existing authentication cont |
| CVE-2026-76744 | Awaiting Analysis | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code. |
| CVE-2026-76745 | Awaiting Analysis | 未確認 | CWE-119 | Memory corruption vulnerabilities exist in AOS-S that are reachable by an unauthenticated adjacent attacker. Successful exploitation could allow an attacker to execute arbitrary co |
| CVE-2026-76746 | Awaiting Analysis | 未確認 | CWE-120 | An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated adjacent attacker to expose sensitive memory contents and c |
| CVE-2026-76747 | Awaiting Analysis | 未確認 | CWE-120 | Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow an unauthenticated remote attacker to expose sensitive memory contents |
| CVE-2026-76748 | Awaiting Analysis | 未確認 | CWE-269 | A privilege escalation vulnerability exists in the API of AOS-S. Successful exploitation could allow an authenticated read-only user to escalate their privileges and gain administr |
| CVE-2026-76749 | Awaiting Analysis | 未確認 | CWE-200 | A sensitive information disclosure vulnerability exists in AOS-S. Successful exploitation could allow an unauthenticated remote attacker to access sensitive information. |
| CVE-2026-76750 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of untrusted data vulnerabilities exist in the web interface of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauthenticated remo |
| CVE-2026-76751 | Awaiting Analysis | 未確認 | CWE-353 | A missing integrity verification vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an unauthenticated, remote attacker to e |
| CVE-2026-76752 | Awaiting Analysis | 未確認 | CWE-287 | Authentication bypass vulnerabilities exist in the web-based management and API interfaces of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an unauth |
| CVE-2026-76753 | Awaiting Analysis | 未確認 | CWE-134 | A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. |
| CVE-2026-76754 | Awaiting Analysis | 未確認 | CWE-77 | A vulnerability in an affected interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Ma |
| CVE-2026-76769 | Analyzed | 未確認 | CWE-862 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could p |
| CVE-2026-76779 | Analyzed | 未確認 | CWE-307 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthentica |
| CVE-2026-76787 | Awaiting Analysis | 未確認 | CWE-476 | The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgmt/updatehub/updatehub.c). The decoder tr |
| CVE-2026-76788 | Awaiting Analysis | 未確認 | CWE-787 | The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a Peripheral Device into a stack-allocated struct osdp_event. For th |
| CVE-2026-76972 | Awaiting Analysis | 未確認 | CWE-79 | Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the applica |
| CVE-2026-76975 | Awaiting Analysis | 未確認 | CWE-79 | Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated user a |
| CVE-2026-76976 | Awaiting Analysis | 未確認 | CWE-79 | Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticat |
| CVE-2026-76994 | Deferred | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could obta |
| CVE-2026-77050 | Deferred | 未確認 | CWE-789 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.utils.translation.get_supported_language_variant()` is subject to a potential |
| CVE-2026-77090 | Awaiting Analysis | 未確認 | CWE-611 | CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosure. Software customers upgrade to resolved maintenance release. Update CVFS. |
| CVE-2026-77093 | Awaiting Analysis | 未確認 | CWE-190 | CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommS |
| CVE-2026-77094 | Awaiting Analysis | 未確認 | CWE-787 | CvFWD contained an out-of-bounds write affecting service availability. Software customers upgrade to resolved maintenance release. Software customers upgrade to resolved maintenan |
| CVE-2026-77095 | Awaiting Analysis | 未確認 | CWE-476 | CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, includin |
| CVE-2026-77096 | Awaiting Analysis | 未確認 | CWE-306 | CVFS contained a missing authentication condition affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS. |
| CVE-2026-77099 | Awaiting Analysis | 未確認 | CWE-78 | CVFS contained an input validation issue affecting command execution. Software customers upgrade to resolved maintenance release. Update CVFS. |
| CVE-2026-77100 | Awaiting Analysis | 未確認 | CWE-122 | MediaAgent contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update Commvault installation o |
| CVE-2026-77114 | Deferred | 未確認 | CWE-79 | The Document Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dg_thumber_webhook' Action Request Body in all versions up to, and including, 5.1.1 due |
| CVE-2026-77156 | Deferred | 未確認 | CWE-22 | Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when installing the Vorpal ASCA real-time engine and the SCA Resol |
| CVE-2026-77157 | Deferred | 未確認 | CWE-353 | ast-cli downloads two helper binaries, the Vorpal ASCA real-time engine and the SCA Resolver, from "download.checkmarx.com" as part of its auto-update flow, triggered by the Checkm |
| CVE-2026-77178 | Awaiting Analysis | 未確認 | CWE-787 | Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet (Am79C970A) network device |
| CVE-2026-77183 | Deferred | 未確認 | CWE-269 | The FooSales – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.43.0. Thi |
| CVE-2026-77205 | Awaiting Analysis | 未確認 | CWE-772 | Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the sa |
| CVE-2026-77206 | Awaiting Analysis | 未確認 | CWE-476 | Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, th |
| CVE-2026-77207 | Awaiting Analysis | 未確認 | CWE-252, CWE-476 | Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X |
| CVE-2026-77214 | Awaiting Analysis | 未確認 | CWE-125 | libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XML_ParseBuffer advances the parse buffer end with parser->m_bufferEnd += len using a c |
| CVE-2026-77225 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77226 | Awaiting Analysis | 未確認 | CWE-863 | Camunda 7.24.0 before 7.24.15 contains an incorrect authorization vulnerability in the Admin web application's first-run setup endpoint, where SetupResource incorrectly determines |
| CVE-2026-77227 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77228 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-77361 | Awaiting Analysis | 未確認 | CWE-59, CWE-863 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical vault-relative path wh |
| CVE-2026-77362 | Awaiting Analysis | 未確認 | CWE-200, CWE-863 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the read access-control list (ACL) |
| CVE-2026-77363 | Deferred | 未確認 | CWE-1385, CWE-346 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, the Streamable HTTP transport does not validate the Host or Origin header |
| CVE-2026-77364 | Awaiting Analysis | 未確認 | CWE-200, CWE-276 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, undefined readPaths and writePaths settings allow all paths, strictReadDef |
| CVE-2026-77366 | Awaiting Analysis | 未確認 | CWE-639, CWE-863 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, tool dispatch does not compare the caller-controlled input.vault value wit |
| CVE-2026-77371 | Awaiting Analysis | 未確認 | CWE-284 | Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's _connect() path in redash/query_runner/duckdb.py created connections wit |
| CVE-2026-77375 | Deferred | 未確認 | CWE-129 | SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an u |
| CVE-2026-77387 | Awaiting Analysis | 未確認 | CWE-1333 | geopy is a geocoding library for Python. Prior to 2.5.0, geopy.Point and Point.from_string() can spend excessive CPU time due to inefficient regular-expression behavior when an app |
| CVE-2026-77427 | Deferred | 未確認 | CWE-1188, CWE-798 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. From 3.9.0 until 3.22.0, pristine manual FileRise installations without PERS |
| CVE-2026-77459 | Undergoing Analysis | 未確認 | CWE-863 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without |
| CVE-2026-77460 | Deferred | 未確認 | CWE-639 | EspoCRM is an open source customer relationship management application. Prior to 10.0.3, a user with email-template edit access and mass-email sending access can reference restrict |
| CVE-2026-77466 | Deferred | 未確認 | CWE-184, CWE-20 | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the checkout options in production through OmnipayFactory::ge |
| CVE-2026-77467 | Deferred | 未確認 | CWE-400, CWE-770 | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript but does not apply an effective pre-render limit to PDF |
| CVE-2026-77468 | Deferred | 未確認 | CWE-770 | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAPI documentation configured by config/scramble.php to unauthe |
| CVE-2026-77470 | Deferred | 未確認 | CWE-20, CWE-472, CWE-915 | Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop POST /api/v2/Shop/Checkout/Process flow accepts an unrestricted additional_data ar |
| CVE-2026-77474 | Deferred | 未確認 | CWE-400, CWE-407, CWE-693 | destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to 0.6.6, nested or unclosed substituti |
| CVE-2026-77496 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77524 | Awaiting Analysis | 未確認 | CWE-269, CWE-918 | KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resour |
| CVE-2026-77564 | Awaiting Analysis | 未確認 | CWE-312 | Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos. |
| CVE-2026-77572 | Awaiting Analysis | 未確認 | CWE-200 | VeraCrypt provides disk encryption with strong security based on TrueCrypt. In 1.26.29 and earlier, selected metadata IOCTL handlers in the VeraCrypt Windows veracrypt.sys driver a |
| CVE-2026-77630 | Analyzed | 未確認 | CWE-400 | pupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c synchronously calls getaddrinfo whil |
| CVE-2026-7767 | Analyzed | 未確認 | CWE-601 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could hav |
| CVE-2026-77684 | Awaiting Analysis | 未確認 | CWE-401 | The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the |
| CVE-2026-77711 | Awaiting Analysis | 未確認 | CWE-200 | When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The client mistakenly interprets t |
| CVE-2026-77802 | Awaiting Analysis | 未確認 | CWE-444 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, HTTP request smuggling is possible in the proxy request forwarding component. Requests conta |
| CVE-2026-77803 | Awaiting Analysis | 未確認 | CWE-444 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, front-end request desynchronization is possible in the proxy request forwarding component. A |
| CVE-2026-77804 | Awaiting Analysis | 未確認 | CWE-367 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, a time-of-check time-of-use (TOCTOU) race condition exists in the installation of the HTTPS |
| CVE-2026-77805 | Awaiting Analysis | 未確認 | CWE-347 | In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insu |
| CVE-2026-77816 | Awaiting Analysis | 未確認 | CWE-295 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 administrative client could allow man-in-the-middle attacks. An attacker could exploit this vulnerability to ob |
| CVE-2026-77829 | Deferred | 未確認 | CWE-79 | The Cooked – Recipe Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via [cooked-timer] Shortcode Content in all versions up to, and including, 1.16.1 d |
| CVE-2026-77900 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77902 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-77910 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-77926 | Deferred | 未確認 | CWE-749 | Aix-DB 1.2.4 contains a remote code execution vulnerability that allows authenticated non-admin users to run operating system commands through the ChatBI common agent's ungated dee |
| CVE-2026-77930 | Deferred | 未確認 | CWE-862 | EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating them to async sub-agents lacking an interru |
| CVE-2026-77931 | Deferred | 未確認 | MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content | |
| CVE-2026-77932 | Deferred | 未確認 | CWE-306 | DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock get_user_from_headers function t |
| CVE-2026-77933 | Deferred | 未確認 | CWE-1392 | DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publishes port 3306 on all interfac |
| CVE-2026-77934 | Awaiting Analysis | 未確認 | CWE-1188 | Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands by running workflow code nodes in an unsandboxed python3 sub |
| CVE-2026-77935 | Awaiting Analysis | 未確認 | CWE-639 | Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows authenticated users to access other spaces' workflows by supplying f |
| CVE-2026-77936 | Awaiting Analysis | 未確認 | CWE-1188 | Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are unauthenticated, and it exposes |
| CVE-2026-77937 | Deferred | 未確認 | CWE-639 | Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users by supplying a self-asserted user_id HTTP header. Attackers |
| CVE-2026-77938 | Deferred | 未確認 | CWE-526 | Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server secrets because LocalSandbox subprocesses inherit the full serv |
| CVE-2026-78001 | Deferred | 未確認 | CWE-79 | The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table Designer 'data-label' Attribute |
| CVE-2026-78013 | Analyzed | 未確認 | CWE-1188 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged a |
| CVE-2026-78015 | Analyzed | 未確認 | CWE-348 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access |
| CVE-2026-78016 | Analyzed | 未確認 | CWE-1287 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker |
| CVE-2026-78017 | Analyzed | 未確認 | CWE-754 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged at |
| CVE-2026-78018 | Analyzed | 未確認 | CWE-1188 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged at |
| CVE-2026-78019 | Analyzed | 未確認 | CWE-829 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged |
| CVE-2026-78020 | Analyzed | 未確認 | CWE-295 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote a |
| CVE-2026-78021 | Analyzed | 未確認 | CWE-209 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenti |
| CVE-2026-78022 | Analyzed | 未確認 | CWE-636 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remot |
| CVE-2026-78023 | Analyzed | 未確認 | CWE-639 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacke |
| CVE-2026-78024 | Analyzed | 未確認 | CWE-918 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote |
| CVE-2026-78025 | Analyzed | 未確認 | CWE-306 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker w |
| CVE-2026-78026 | Analyzed | 未確認 | CWE-639 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacke |
| CVE-2026-78027 | Analyzed | 未確認 | CWE-918 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote |
| CVE-2026-78048 | Deferred | 未確認 | CWE-617 | A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to cras |
| CVE-2026-78058 | Deferred | 未確認 | CWE-400, CWE-476 | Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms allows a remote unauthenticated attacker to crash the server or |
| CVE-2026-78066 | Deferred | 未確認 | CWE-770 | Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on |
| CVE-2026-78068 | Deferred | 未確認 | CWE-79 | The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell Content in all versions up to, and including, 1.3.35 due to |
| CVE-2026-78087 | Deferred | 未確認 | CWE-79 | The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Group Block 'linkToPost' Feature in all versions up to, and including, 1.126.1 due to insufficie |
| CVE-2026-78116 | Awaiting Analysis | 未確認 | CWE-415 | The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails. In data_ready_work_handler() (drivers/sensor/broadcom/afbr |
| CVE-2026-78117 | Awaiting Analysis | 未確認 | CWE-362 | The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet descriptor in a file-scope variable, static cy_stc_ble_hci_t |
| CVE-2026-78118 | Awaiting Analysis | 未確認 | CWE-362 | The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it was called from several places without holding the scheduler |
| CVE-2026-78119 | Awaiting Analysis | 未確認 | CWE-787 | The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse() (drivers/espi/espi_npcx.c), taking the 12-bit length field directly out of the request |
| CVE-2026-78162 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast com |
| CVE-2026-78163 | Undergoing Analysis | 未確認 | CWE-200, CWE-22, CWE-918 | Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vu |
| CVE-2026-78164 | Undergoing Analysis | 未確認 | CWE-1336, CWE-200 | Improper Neutralization of Special Elements Used in a Template Engine and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP, Netty HTTP, |
| CVE-2026-78165 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component. This issue affects Apache Camel: from 2.11.0 before 4.18.5, from 4.19.0 before 4.22.1. |
| CVE-2026-78193 | Deferred | 未確認 | CWE-89 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up to, and including, 2.4.3 du |
| CVE-2026-78210 | Awaiting Analysis | 未確認 | CWE-863 | In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without possessing the required authorization. |
| CVE-2026-78231 | Deferred | 未確認 | CWE-918 | When OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint during verificat |
| CVE-2026-78242 | Deferred | 未確認 | CWE-532 | Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a cer |
| CVE-2026-78243 | Deferred | 未確認 | CWE-248 | Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a g |
| CVE-2026-78249 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or |
| CVE-2026-7826 | Deferred | 未確認 | CWE-125 | A heap-based out-of-bounds read in the BufferSerializerIOv2_ReadBuffer function (src/serializers/serializer_io.c) in FalkorDB before 4.18.4 allows a remote attacker who can issue R |
| CVE-2026-7827 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decode_graph_entities.c) in FalkorDB before 4.18.4 allows a remot |
| CVE-2026-78334 | Deferred | 未確認 | CWE-306 | Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to bypass server authentication and inject or deliver s |
| CVE-2026-78335 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-78339 | Analyzed | 未確認 | CWE-732 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged at |
| CVE-2026-78340 | Analyzed | 未確認 | CWE-22 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabi |
| CVE-2026-78341 | Analyzed | 未確認 | CWE-863 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access cou |
| CVE-2026-78355 | Deferred | 未確認 | CWE-22 | A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may a |
| CVE-2026-78356 | Deferred | 未確認 | CWE-497 | The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application configuration that |
| CVE-2026-78357 | Deferred | 未確認 | CWE-613 | Previously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is changed. As a result, an exist |
| CVE-2026-78358 | Deferred | 未確認 | CWE-352 | Several administrative actions do not sufficiently validate whether a request was intentionally initiated by the authenticated user. In particular, the DBUpdateLogCleanUp action ca |
| CVE-2026-78359 | Deferred | 未確認 | CWE-694, CWE-706 | OTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple backends, such as a database and LDAP, |
| CVE-2026-78371 | Deferred | 未確認 | CWE-639 | The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a customer-uploaded file is the customer who uploaded it, allowing u |
| CVE-2026-78384 | Analyzed | 未確認 | CWE-409 | CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB) crafted payload could expand to gigabytes on the heap. Reachable via |
| CVE-2026-78388 | Analyzed | 未確認 | CWE-352 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attacker to exe |
| CVE-2026-78392 | Deferred | 未確認 | CWE-79 | The Link Library WordPress plugin before 7.9.6 does not sanitise and escape a link field before outputting it inside an attribute of a link preview, allowing users with the Contrib |
| CVE-2026-78399 | Analyzed | 未確認 | CWE-770 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a specially |
| CVE-2026-78401 | Analyzed | 未確認 | CWE-502 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the s |
| CVE-2026-78404 | Undergoing Analysis | 未確認 | CWE-269 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a local privilege escalation via the db2pd utility. |
| CVE-2026-78406 | Analyzed | 未確認 | CWE-502 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the s |
| CVE-2026-78407 | Modified | 未確認 | CWE-79 | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticat |
| CVE-2026-78411 | Awaiting Analysis | 未確認 | CWE-863 | Velociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server. This allows a user with LABEL_CLIENTS permission to update the server me |
| CVE-2026-78412 | Awaiting Analysis | 未確認 | CWE-639 | Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions against the caller's Org instead of |
| CVE-2026-78413 | Awaiting Analysis | 未確認 | CWE-276 | Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with elevated permissions. To limit |
| CVE-2026-78433 | Deferred | 未確認 | CWE-1220, CWE-284, CWE-639, CWE-863 | Gitea's web attachment handler skips its cross-repository ownership check for attachments created before 16 January 2026 and checks permissions against the repository named in the |
| CVE-2026-78459 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-78471 | Deferred | 未確認 | CWE-79 | The Autoptimize plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 3.1.15.1 due to insufficient input s |
| CVE-2026-78497 | Awaiting Analysis | 未確認 | CWE-95 | JQ::Lite versions before 2.51 for Perl execute Perl code embedded in a query's regular expression by compiling it with string eval. The pattern given to test(), match(), or the ma |
| CVE-2026-78529 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Alliance <= 3.11 versions. |
| CVE-2026-78530 | Deferred | 未確認 | CWE-22 | Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions. |
| CVE-2026-78531 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Jacqueline <= 2.22 versions. |
| CVE-2026-78532 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in LMS <= 8.3 versions. |
| CVE-2026-78533 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Qwery <= 3.6.1 versions. |
| CVE-2026-78534 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Educavo <= 3.4.2 versions. |
| CVE-2026-78535 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Photolia <= 1.0.3 versions. |
| CVE-2026-78556 | Awaiting Analysis | 未確認 | CWE-295 | A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly validate the server certificate when initiati |
| CVE-2026-78557 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or escape data received from the backend b |
| CVE-2026-78577 | Deferred | 未確認 | CWE-306 | Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. After initial setup, an unauthenticated attacker on the same l |
| CVE-2026-78578 | Deferred | 未確認 | CWE-306 | Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setup. An unauthenticated adjacent attacker can submit unauthor |
| CVE-2026-78628 | Awaiting Analysis | 未確認 | CWE-125, CWE-20, CWE-787 | The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure. The buffer size and packed string of |
| CVE-2026-78632 | Awaiting Analysis | 未確認 | CWE-732 | The Okta RADIUS Agent Windows installer assigns write permissions to the NT SERVICE\ALL SERVICES and CREATOR OWNER security principals on the directories containing the agent confi |
| CVE-2026-78633 | Awaiting Analysis | 未確認 | CWE-835 | The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, re |
| CVE-2026-78659 | Awaiting Analysis | 未確認 | CWE-405 | When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Tra |
| CVE-2026-78660 | Awaiting Analysis | 未確認 | CWE-444 | Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it pos |
| CVE-2026-78663 | Awaiting Analysis | 未確認 | CWE-675 | The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream |
| CVE-2026-78667 | Awaiting Analysis | 未確認 | CWE-770 | When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU. |
| CVE-2026-78669 | Awaiting Analysis | 未確認 | CWE-405 | A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETT |
| CVE-2026-78673 | Awaiting Analysis | 未確認 | CWE-20 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper input validation. |
| CVE-2026-78795 | Deferred | 未確認 | CWE-200 | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to obtain sensitive information |
| CVE-2026-78796 | Deferred | 未確認 | CWE-78 | An issue in Netcore B11 Enterprise-level full Gigabit 9-port shop wireless router v1.3.241114.024540 and before allows a remote attacker to execute arbitrary code via the www\cgi-b |
| CVE-2026-78797 | Deferred | 未確認 | CWE-94 | An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in tasks-lib.lua. |
| CVE-2026-78799 | Deferred | 未確認 | CWE-22 | Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Ente |
| CVE-2026-78801 | Deferred | 未確認 | An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to obtain sensitive information via the hidden_factory_swi | |
| CVE-2026-78802 | Deferred | 未確認 | CWE-94 | An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbitrary code. |
| CVE-2026-78835 | Awaiting Analysis | 未確認 | CWE-522 | Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials. |
| CVE-2026-78846 | Deferred | 未確認 | AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing. | |
| CVE-2026-78850 | Awaiting Analysis | 未確認 | CWE-918 | An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager component |
| CVE-2026-78851 | Deferred | 未確認 | CWE-200, CWE-22 | Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method. |
| CVE-2026-78860 | Deferred | 未確認 | CWE-311, CWE-347 | An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext |
| CVE-2026-78861 | Deferred | 未確認 | CWE-789 | An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key |
| CVE-2026-78862 | Deferred | 未確認 | CWE-1299 | An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board (PCB) |
| CVE-2026-79113 | Deferred | 未確認 | CWE-190 | OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow. |
| CVE-2026-79363 | Deferred | 未確認 | CWE-79 | Cloudron 9.1.7 and 9.2 contain a stored cross-site scripting (XSS) vulnerability in the Branding Footer feature. An authenticated administrator can store crafted HTML containing Ja |
| CVE-2026-79607 | Awaiting Analysis | 未確認 | CWE-119 | During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes missing. This results in an inconsistent state when reading |
| CVE-2026-79608 | Awaiting Analysis | 未確認 | CWE-670 | The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was i |
| CVE-2026-79609 | Awaiting Analysis | 未確認 | CWE-284 | XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (CVE-2017-5754, one aspect of XSA-254). This involves copying 64-bit PV guest page table entries from guest-cho |
| CVE-2026-79610 | Awaiting Analysis | 未確認 | CWE-362 | XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing certain other grant table operations. Sadly a v2 -> v1 -> v2 change has yet another effect which wasn't accounte |
| CVE-2026-79611 | Awaiting Analysis | 未確認 | CWE-843 | For XSA-308 logic was introduced, as VMX VMEntry checks do not like the exact combination of state which occurs when #DB in intercepted, Single Stepping is active, and blocked by S |
| CVE-2026-79613 | Deferred | 未確認 | CWE-202 | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Unauthenticated attackers could access comments associated with non-public content through pu |
| CVE-2026-79618 | Deferred | 未確認 | CWE-862 | The WP User Frontend WordPress plugin before 4.3.12 does not enforce its subscription-purchase requirement in one of its post-creation handlers, allowing authenticated users with s |
| CVE-2026-79620 | Deferred | 未確認 | CWE-202 | Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the |
| CVE-2026-79624 | Deferred | 未確認 | CWE-613 | Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session invalidation allowed revoked users to co |
| CVE-2026-79627 | Deferred | 未確認 | CWE-79 | The Advanced File Manager WordPress plugin before 6.0.0 does not correctly determine whether a stored file is an SVG before sanitising it, allowing users granted file-manager acce |
| CVE-2026-79633 | Deferred | 未確認 | CWE-202 | vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform actions on non-public con |
| CVE-2026-79650 | Analyzed | 未確認 | CWE-601 | Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occurs because attacker-controlled state par |
| CVE-2026-79704 | Deferred | 未確認 | CWE-125 | An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through 1.17.0) on all platforms. A client that creates multiple streams in |
| CVE-2026-79715 | Awaiting Analysis | 未確認 | CWE-22 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted a |
| CVE-2026-79768 | Analyzed | 未確認 | CWE-55 | Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form i |
| CVE-2026-79794 | Awaiting Analysis | 未確認 | CWE-89 | A SQL injection vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks agains |
| CVE-2026-79796 | Awaiting Analysis | 未確認 | CWE-287 | Vulnerabilities have been identified in the affected interface of ClearPass Policy Manager that could potentially allow an unauthenticated remote attacker to circumvent existing au |
| CVE-2026-79797 | Awaiting Analysis | 未確認 | CWE-284 | An improper access control vulnerability exists in the Android client application for HPE Networking ClearPass Policy Manager, where application functionality may be invoked by unt |
| CVE-2026-79798 | Awaiting Analysis | 未確認 | CWE-89 | SQL injection vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow a low-privileged authenticated remote attacker to conduct SQL injection |
| CVE-2026-79799 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) atta |
| CVE-2026-79800 | Awaiting Analysis | 未確認 | CWE-22 | An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated r |
| CVE-2026-79801 | Awaiting Analysis | 未確認 | CWE-353 | A missing integrity verification vulnerability in the client agent software of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to introduce u |
| CVE-2026-79802 | Awaiting Analysis | 未確認 | CWE-77 | A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to |
| CVE-2026-79803 | Awaiting Analysis | 未確認 | CWE-77 | A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gai |
| CVE-2026-79805 | Awaiting Analysis | 未確認 | CWE-22 | An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying |
| CVE-2026-79806 | Awaiting Analysis | 未確認 | CWE-269 | A privilege escalation vulnerability in the ClearPass Policy Manager OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A success |
| CVE-2026-79807 | Awaiting Analysis | 未確認 | CWE-347 | A missing integrity verification vulnerability in the Windows client software for ClearPass Policy Manager could allow malicious users on a local instance to elevate their user pri |
| CVE-2026-79808 | Awaiting Analysis | 未確認 | CWE-120 | A buffer overflow vulnerability exists in the OnGuard agent of ClearPass Policy Manager. Successful exploitation could allow an authenticated local user to execute arbitrary code w |
| CVE-2026-79809 | Awaiting Analysis | 未確認 | CWE-22 | An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an unauthenticated remot |
| CVE-2026-79810 | Awaiting Analysis | 未確認 | CWE-94 | Remote code execution vulnerabilities exist in the affected interface of HPE Networking ClearPass Policy Manager that could allow an authenticated remote attacker with high privile |
| CVE-2026-79811 | Awaiting Analysis | 未確認 | CWE-89 | A SQL injection vulnerability in the API of ClearPass Policy Manager could allow a remote authenticated attacker with administrative privileges to conduct SQL injection attacks aga |
| CVE-2026-79812 | Awaiting Analysis | 未確認 | CWE-400 | A denial of service vulnerability exists in the OnGuard agent of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an authenticated local attacker to int |
| CVE-2026-79813 | Awaiting Analysis | 未確認 | CWE-269 | A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute commands with elevate |
| CVE-2026-79814 | Awaiting Analysis | 未確認 | CWE-73 | An arbitrary file write vulnerability in the ClearPass Policy Manager OnGuard agent could allow malicious users on a local instance to elevate their user privileges if certain prec |
| CVE-2026-79815 | Awaiting Analysis | 未確認 | CWE-77 | A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitatio |
| CVE-2026-79816 | Awaiting Analysis | 未確認 | CWE-79 | A vulnerability in a client interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to conduct a DOM-based cross-site scripting (XSS) at |
| CVE-2026-79817 | Awaiting Analysis | 未確認 | CWE-200 | A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with loca |
| CVE-2026-79818 | Awaiting Analysis | 未確認 | CWE-306 | A vulnerability in an API interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitati |
| CVE-2026-79820 | Awaiting Analysis | 未確認 | CWE-287 | A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. |
| CVE-2026-79821 | Awaiting Analysis | 未確認 | CWE-20 | A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down. |
| CVE-2026-79822 | Awaiting Analysis | 未確認 | CWE-122 | A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. |
| CVE-2026-79823 | Awaiting Analysis | 未確認 | CWE-121 | HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior. |
| CVE-2026-79824 | Awaiting Analysis | 未確認 | CWE-30 | A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive. |
| CVE-2026-79825 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow. |
| CVE-2026-79826 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow. |
| CVE-2026-79827 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow. |
| CVE-2026-79828 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow. |
| CVE-2026-79829 | Awaiting Analysis | 未確認 | CWE-20 | A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt. |
| CVE-2026-79830 | Awaiting Analysis | 未確認 | CWE-121 | A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution. |
| CVE-2026-79831 | Awaiting Analysis | 未確認 | CWE-122 | A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution. |
| CVE-2026-79832 | Awaiting Analysis | 未確認 | CWE-121 | A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash. |
| CVE-2026-79833 | Awaiting Analysis | 未確認 | CWE-248 | A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service. |
| CVE-2026-79834 | Awaiting Analysis | 未確認 | CWE-20 | A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution. |
| CVE-2026-79835 | Awaiting Analysis | 未確認 | CWE-20 | A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server. |
| CVE-2026-79836 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability HPE NonStop SQL/MX Run-Time Statistics may allow an attacker to cause memory corruption and null pointer dereference, potentially leading to process crash, DoS or |
| CVE-2026-79837 | Awaiting Analysis | 未確認 | CWE-20 | A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior. |
| CVE-2026-79838 | Awaiting Analysis | 未確認 | CWE-121 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash. |
| CVE-2026-79839 | Awaiting Analysis | 未確認 | CWE-121 | A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash. |
| CVE-2026-79840 | Awaiting Analysis | 未確認 | CWE-121 | A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash. |
| CVE-2026-79841 | Awaiting Analysis | 未確認 | CWE-787 | A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption. |
| CVE-2026-79842 | Awaiting Analysis | 未確認 | CWE-862 | An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 |
| CVE-2026-79843 | Awaiting Analysis | 未確認 | CWE-125 | A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, CPU halt, or d |
| CVE-2026-79844 | Received | 未確認 | CWE-288 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain |
| CVE-2026-79846 | Received | 未確認 | Command injection vulnerabilities exist in the affected interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if c | |
| CVE-2026-79847 | Received | 未確認 | CWE-119 | Buffer overflow vulnerabilities in the affected interface of AOS-10 could lead to unauthenticated remote code execution by sending specially crafted packets to the affected interfa |
| CVE-2026-79848 | Received | 未確認 | CWE-89 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful ex |
| CVE-2026-79849 | Received | 未確認 | CWE-89 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to conduct SQL injection attacks against an affected AOS-8 instance. Successful ex |
| CVE-2026-79850 | Received | 未確認 | CWE-288 | Vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated remote attacker to bypass existing authentication controls and run arbitrary commands on the under |
| CVE-2026-79851 | Received | 未確認 | CWE-119 | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker |
| CVE-2026-79852 | Received | 未確認 | CWE-89 | A vulnerability in the web-based management interface of AOS could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS instance. Successful ex |
| CVE-2026-79853 | Received | 未確認 | Sensitive information disclosure vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to obtain sensitive information from the affecte | |
| CVE-2026-79854 | Received | 未確認 | CWE-89 | A vulnerability in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct SQL injection attacks against the AOS-10 instance. Successful exploita |
| CVE-2026-79855 | Received | 未確認 | CWE-288 | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation |
| CVE-2026-79856 | Received | 未確認 | CWE-119 | A buffer overflow vulnerability exists in the PAPI protocol of AOS-8 that could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful |
| CVE-2026-79857 | Received | 未確認 | CWE-77 | There is a command injection vulnerability in the PAPI protocol (Aruba's access point management protocol) of AOS-8 that could lead to unauthenticated remote code execution by send |
| CVE-2026-79858 | Received | 未確認 | An unauthenticated SQL injection vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to obtain and modify sen | |
| CVE-2026-79859 | Received | 未確認 | Buffer overflow vulnerabilities exist in the affected interface of AOS-8 that could lead to unauthenticated remote code execution. Successful exploitation could allow an attacker t | |
| CVE-2026-79860 | Received | 未確認 | Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted packets destined to th | |
| CVE-2026-79861 | Received | 未確認 | There is a command injection vulnerability in AOS-10 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of | |
| CVE-2026-79862 | Received | 未確認 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted | |
| CVE-2026-79863 | Received | 未確認 | Buffer overflow vulnerabilities in the affected interface of AOS-10 or AOS-8 could allow an unauthenticated adjacent attacker to execute arbitrary code by sending specially crafted | |
| CVE-2026-79864 | Received | 未確認 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an unauthenticated adjacent attacker to perform command injection. Successful exploitat | |
| CVE-2026-79865 | Received | 未確認 | A memory corruption vulnerability in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to achieve remote code execution. Successful exploitation cou | |
| CVE-2026-79866 | Received | 未確認 | An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker | |
| CVE-2026-79867 | Received | 未確認 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls and run arb | |
| CVE-2026-79868 | Received | 未確認 | Authentication bypass vulnerabilities in the affected interface of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful | |
| CVE-2026-79869 | Received | 未確認 | Authentication bypass vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successfu | |
| CVE-2026-79870 | Received | 未確認 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exp | |
| CVE-2026-79871 | Received | 未確認 | A sensitive information disclosure vulnerability in the command line interface of AOS-10 could allow an unauthenticated remote attacker to access sensitive information. Successful | |
| CVE-2026-79872 | Received | 未確認 | A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote code execution by an unauthenticated remote attacker. Suc | |
| CVE-2026-79873 | Received | 未確認 | Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exp | |
| CVE-2026-79874 | Received | 未確認 | An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an att | |
| CVE-2026-79875 | Received | 未確認 | A vulnerability has been identified in the PAPI protocol of AOS-8 that could potentially allow an unauthenticated adjacent attacker to circumvent existing authentication controls. | |
| CVE-2026-79876 | Received | 未確認 | A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successfu | |
| CVE-2026-79877 | Received | 未確認 | A remote code execution vulnerability in the underlying operating system of AOS-10 could allow an unauthenticated adjacent attacker to execute arbitrary code on an affected device. | |
| CVE-2026-79878 | Received | 未確認 | A command injection vulnerability in the AOS-8 command line interface accessed by the PAPI protocol could lead to unauthenticated remote code execution by an adjacent attacker send | |
| CVE-2026-79879 | Received | 未確認 | Memory corruption vulnerabilities in the affected interface of AOS-10 could lead to remote code execution by an unauthenticated adjacent attacker. Successful exploitation could all | |
| CVE-2026-79880 | Received | 未確認 | A vulnerability in the command line interface of AOS-8 could allow an authenticated remote attacker with high privileges to conduct a server-side request forgery (SSRF) attack. Suc | |
| CVE-2026-79881 | Received | 未確認 | An authentication bypass vulnerability in the underlying operating system of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Su | |
| CVE-2026-79882 | Received | 未確認 | There is a command injection vulnerability in the PAPI protocol of AOS-10 that could lead to unauthenticated remote code execution by an adjacent attacker sending specially crafted | |
| CVE-2026-79883 | Received | 未確認 | A buffer overflow vulnerability in the PAPI protocol of HPE Networking AOS-10 could allow an unauthenticated adjacent attacker to access sensitive information. Successful exploitat | |
| CVE-2026-79884 | Received | 未確認 | A vulnerability in the web-based management interface of AOS-8 could allow an unauthenticated adjacent attacker to bypass existing authentication controls and access sensitive info | |
| CVE-2026-79885 | Received | 未確認 | An unauthenticated file write vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation could allow an unauthenticated remote attacker to make limited modificatio | |
| CVE-2026-79886 | Received | 未確認 | An unauthenticated buffer overflow vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availab | |
| CVE-2026-79887 | Received | 未確認 | CWE-306, CWE-94 | A vulnerability in the web interface of AOS-8 could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could lead to complete device |
| CVE-2026-79888 | Received | 未確認 | CWE-119 | A vulnerability in a certain web interface endpoint of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow. Successful exploitation could allo |
| CVE-2026-79889 | Received | 未確認 | CWE-119 | Vulnerabilities in multiple web interface endpoints of AOS-8 devices could allow an unauthenticated remote attacker to trigger a buffer overflow by using specially crafted requests |
| CVE-2026-79890 | Received | 未確認 | CWE-77 | There are command injection vulnerabilities in AOS-8 that could lead to unauthenticated remote code execution by sending specially crafted PAPI packets. Successful exploitation of |
| CVE-2026-79891 | Received | 未確認 | CWE-119 | A buffer overflow vulnerability exists in the command line interface of AOS-8 that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host i |
| CVE-2026-79892 | Received | 未確認 | CWE-119 | A memory corruption vulnerability exists in AOS-8 that could allow an authenticated local attacker to execute arbitrary code. Successful exploitation could allow the attacker to ex |
| CVE-2026-79893 | Received | 未確認 | CWE-119 | Memory corruption vulnerabilities in AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to |
| CVE-2026-79894 | Received | 未確認 | CWE-400 | An unauthenticated Denial-of-Service (DoS) vulnerability exists in the PAPI protocol of AOS-8. Successful exploitation of this vulnerability results in the ability to disrupt the a |
| CVE-2026-79895 | Received | 未確認 | CWE-400 | Vulnerabilities in the affected interface of AOS-10 could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an att |
| CVE-2026-79896 | Awaiting Analysis | 未確認 | CWE-125 | Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed |
| CVE-2026-79898 | Awaiting Analysis | 未確認 | CWE-78 | Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user authorized to add CRL URLs through BCC, the WSI REST or SOAP API, or the cacrl co |
| CVE-2026-79899 | Awaiting Analysis | 未確認 | CWE-377 | Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. |
| CVE-2026-79900 | Awaiting Analysis | 未確認 | CWE-787 | boks_ksllogsd accepts a checksum algorithm name in the MD field of an authenticated KSL start message. Affected releases verify that OpenSSL recognizes the digest name but do not v |
| CVE-2026-79901 | Deferred | 未確認 | CWE-338 | In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-account passwords from a predictable pseudo-random sequence seeded |
| CVE-2026-79955 | Received | 未確認 | CWE-119 | An unauthenticated memory corruption vulnerability exists in a service accessed via the PAPI protocol in AOS-8 that could allow an unauthenticated remote attacker to conduct a deni |
| CVE-2026-79956 | Received | 未確認 | CWE-77 | A vulnerability in the CLI command handling of the AOS-8 web interface could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system |
| CVE-2026-79957 | Deferred | 未確認 | CWE-639 | ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request body without ver |
| CVE-2026-79960 | Analyzed | 未確認 | CWE-863 | When a push was authenticated with a deploy key, Gitea recorded the repository owner as the pusher, so permission checks in the push hook pipeline evaluated the owner instead of th |
| CVE-2026-79976 | Awaiting Analysis | 未確認 | CWE-476 | The MCTP-over-I2C+GPIO target binding in subsys/pmci/mctp/mctp_i2c_gpio_target.c emulates a small pseudo-register file, where the bus controller first writes a register number and |
| CVE-2026-79977 | Received | 未確認 | CWE-306, CWE-346 | The WireGuard VPN service in subsys/net/lib/wireguard/wg.c updated the peer endpoint from a message it could not authenticate. In handle_transport_data(), when the 32-bit receiver |
| CVE-2026-79978 | Received | 未確認 | CWE-787 | The RTIO streaming completion callback adxl345_process_fifo_samples_cb() in drivers/sensor/adi/adxl345/adxl345_stream.c clamps the amount of FIFO data it will report (read_len = MI |
| CVE-2026-79979 | Received | 未確認 | CWE-416 | The arm64 MMU backend invalidates a single virtual address from the TLB with invalidate_tlb_page() in arch/arm64/core/mmu.c, which issued TLBI VAE1{IS} with an operand of virt >> 1 |
| CVE-2026-79980 | Received | 未確認 | CWE-340 | The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as a counter rather than as a per-transaction random value. It |
| CVE-2026-79981 | Received | 未確認 | CWE-330 | The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver context is initialised (dns_resolve_init_locked() -> register_dis |
| CVE-2026-79982 | Received | 未確認 | CWE-787 | The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every controller-to-host HCI packet into a USB transfer buffer befo |
| CVE-2026-79983 | Undergoing Analysis | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache Camel: from 4.0.0 before 4. |
| CVE-2026-79984 | Undergoing Analysis | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP component. This issue affects Apache Camel: from 4.18.0 be |
| CVE-2026-79985 | Undergoing Analysis | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB component. This issue affects Apache Camel: from 4.2.0 before 4. |
| CVE-2026-79986 | Undergoing Analysis | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0 b |
| CVE-2026-80048 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in `sssd-kcm`. A local user or process able to connect to the `sssd-kcm` UNIX socket can exploit this vulnerability. By sending a large request length header and t |
| CVE-2026-80092 | Awaiting Analysis | 未確認 | CWE-302 | Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-80275 | Deferred | 未確認 | CWE-425 | Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 fail to enforce server-side authorization on an administrative password-change function. |
| CVE-2026-80276 | Deferred | 未確認 | CWE-306 | Comelit Multi-User Gateway for VIP System (model 1456B) firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Th |
| CVE-2026-80298 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows SQL Injection. This issue affe |
| CVE-2026-80312 | Undergoing Analysis | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-oauth |
| CVE-2026-80327 | Awaiting Analysis | 未確認 | CWE-601 | An open redirect vulnerability exists in the PingGateway Fragment Filter feature. This issue affects PingGateway versions 7.1.0 and later, 2023.2.0 through 2024.11.1, and 2025.3.0 |
| CVE-2026-80337 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Sef - AI Chatbot |
| CVE-2026-80343 | Undergoing Analysis | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. |
| CVE-2026-80344 | Undergoing Analysis | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the AS2 p |
| CVE-2026-80353 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for the APR/Native connector allows an unauthorised local user to |
| CVE-2026-80381 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection. |
| CVE-2026-80443 | Deferred | 未確認 | CWE-295 | Improper certificate validation vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Adversary in the Middle (AiTM). This issue affects Sef - AI Chatbot Platform: befor |
| CVE-2026-80463 | Deferred | 未確認 | CWE-770 | Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to exhaust the memory of a server (de |
| CVE-2026-80464 | Deferred | 未確認 | CWE-918 | Server-Side request forgery (SSRF) vulnerability in HAVELSAN Inc. Sef - AI Chatbot Platform allows Server Side Request Forgery. This issue affects Sef - AI Chatbot Platform: befor |
| CVE-2026-80517 | Deferred | 未確認 | CWE-79 | The WP Ultimate CSV Importer WordPress plugin before 9.2 does not properly validate the file types contained in an uploaded archive nor sanitise their content before storing them |
| CVE-2026-80518 | Deferred | 未確認 | CWE-200 | The WP Ultimate CSV Importer WordPress plugin before 9.2 does not use a site-specific secret when deriving the storage location of the import logs it writes under the uploads dire |
| CVE-2026-81153 | Deferred | 未確認 | CWE-79 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its image settings before outputting them in a gallery page, allowing users with the Author rol |
| CVE-2026-81154 | Deferred | 未確認 | CWE-79 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape image alt text before outputting it in one of its gallery layouts, allowing users with the Author role |
| CVE-2026-81155 | Deferred | 未確認 | CWE-79 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape a gallery setting before outputting it on a frontend page, allowing users with the Author role and abov |
| CVE-2026-81156 | Deferred | 未確認 | CWE-79 | The Robo Gallery WordPress plugin before 5.2.6 does not sanitise and escape some of its gallery settings before outputting them on the gallery edit screen, allowing users with the |
| CVE-2026-81163 | Awaiting Analysis | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drupal Media Library Importer allows Path Traversal. This issue affects Media Librar |
| CVE-2026-81212 | Awaiting Analysis | 未確認 | CWE-285 | IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key. This collapses the platform's cre |
| CVE-2026-81343 | Deferred | 未確認 | CWE-862 | The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not perform a capability check on one of its form-submission actions before writing submitted values into |
| CVE-2026-81344 | Deferred | 未確認 | CWE-502 | The ACF Frontend Admin by DynamiApps WordPress plugin through 3.29.13 does not restrict which PHP classes may be instantiated when it deserialises stored post content that is rende |
| CVE-2026-81420 | Deferred | 未確認 | CWE-89 | The Tcard WP WordPress plugin through 1.8.0 does not sanitise and escape a parameter before using it in a SQL statement in one of its unauthenticated AJAX actions, allowing unauthe |
| CVE-2026-8145 | Deferred | 未確認 | CWE-269 | The WholesaleX – B2B & Wholesale Plugin for WooCommerce with Wholesale Prices plugin for WordPress is vulnerable to Limited Privilege Escalation in all versions up to, and includin |
| CVE-2026-81452 | Awaiting Analysis | 未確認 | CWE-272 | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially |
| CVE-2026-81507 | Awaiting Analysis | 未確認 | CWE-125 | ESF-IDF is the Espressif Internet of Things (IOT) Development Framework. Prior to 5.2.8, 5.3.6, 5.5.5, 6.0.3, and 6.1-rc1, ESP-IDF BlueDroid L2CAP configuration-option processing i |
| CVE-2026-81534 | Deferred | 未確認 | CWE-74 | The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5. This is due to insufficient authoriz |
| CVE-2026-81535 | Analyzed | 未確認 | CWE-862, CWE-863 | In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens |
| CVE-2026-81649 | Deferred | 未確認 | CWE-863 | The Fundiin cho WooCommerce WordPress plugin through 3.4.0 does not have proper authorisation on several of its REST API routes, relying instead on a credential that is identical o |
| CVE-2026-8168 | Awaiting Analysis | 未確認 | CWE-674 | Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaust |
| CVE-2026-81739 | Deferred | 未確認 | CWE-79 | The Paytm Payment Gateway WordPress plugin before 2.8.9 does not sanitize and escape data it stores from payment callbacks before outputting it in an admin page, and the integrity |
| CVE-2026-81740 | Deferred | 未確認 | CWE-287 | The Paytm Payment Gateway WordPress plugin before 2.8.9 does not verify that payment callbacks genuinely originate from the payment provider when its secret key has not been config |
| CVE-2026-81755 | Deferred | 未確認 | CWE-400 | Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) allows a remote attacker to exhaust server memory and cause denial of service by |
| CVE-2026-81797 | Deferred | 未確認 | CWE-502 | Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions. |
| CVE-2026-81809 | Deferred | 未確認 | CWE-89 | The Paytm Payment Gateway WordPress plugin before 2.8.9 does not properly escape data taken from payment callbacks before using it in a SQL statement, and the integrity check on th |
| CVE-2026-81812 | Deferred | 未確認 | CWE-79 | The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route, allowing users with the Author role and above to upload a f |
| CVE-2026-81813 | Deferred | 未確認 | CWE-79 | The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize the text content of SVG files, checking only their elements and attributes, allowing users with the C |
| CVE-2026-81839 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have al |
| CVE-2026-81856 | Deferred | 未確認 | CWE-150 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to inject terminal cont |
| CVE-2026-81858 | Analyzed | 未確認 | CWE-125 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in the File Server. |
| CVE-2026-81929 | Deferred | 未確認 | CWE-79 | The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including |
| CVE-2026-81932 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow t |
| CVE-2026-81964 | Awaiting Analysis | 未確認 | CWE-798 | Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-81969 | Awaiting Analysis | 未確認 | CWE-1220 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81971 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-82026 | Deferred | 未確認 | CWE-862 | Radar before 1.12.2 contains a missing authorization vulnerability in the handleLocalTerminal WebSocket endpoint (/api/local-terminal) that allows authenticated or unauthenticated |
| CVE-2026-82039 | Deferred | 未確認 | CWE-89 | UTMStack before 11.2.16 contains a SQL injection vulnerability in UtmAssetGroupService.searchQueryBuilder() that allows authenticated attackers to inject arbitrary SQL by supplying |
| CVE-2026-82040 | Deferred | 未確認 | CWE-918 | UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl() that allows authenticated attackers to make the server |
| CVE-2026-82041 | Deferred | 未確認 | CWE-862 | UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocket.processCommand(), the handler mapped to the /command/{hostname} STOMP destinat |
| CVE-2026-82042 | Deferred | 未確認 | CWE-306 | UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access by presenting a valid Utm-Internal-Key h |
| CVE-2026-82043 | Deferred | 未確認 | CWE-204 | UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to determine registered email addresses by observing differing HTTP resp |
| CVE-2026-82044 | Deferred | 未確認 | CWE-918 | UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by supplyin |
| CVE-2026-82045 | Deferred | 未確認 | CWE-89 | UTMStack before 11.2.16 contains a JPQL injection vulnerability that allows authenticated attackers to read arbitrary entity data by exploiting UtmNetworkScanService.searchProperty |
| CVE-2026-82096 | Analyzed | 未確認 | CWE-78 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an |
| CVE-2026-82101 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
| CVE-2026-82103 | Analyzed | 未確認 | CWE-200 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to an unauthoriz |
| CVE-2026-82108 | Analyzed | 未確認 | CWE-94 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS c |
| CVE-2026-82110 | Analyzed | 未確認 | CWE-22 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal. |
| CVE-2026-82153 | Awaiting Analysis | 未確認 | CWE-922 | Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Information vulnerability. A low privileged attacker with physical access could potentiall |
| CVE-2026-82162 | Analyzed | 未確認 | CWE-175 | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could poten |
| CVE-2026-82166 | Deferred | 未確認 | CWE-306 | Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access |
| CVE-2026-82210 | Deferred | 未確認 | CWE-617 | Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a malformed stream |
| CVE-2026-82211 | Deferred | 未確認 | CWE-862 | The Nexi XPay Build WordPress plugin through 7.6.2 does not verify the payment result supplied to several of its unauthenticated routes, allowing attackers to mark arbitrary orders |
| CVE-2026-82212 | Deferred | 未確認 | CWE-345 | The Nexi XPay Build WordPress plugin through 7.6.2 does not correctly validate the security token on its payment notification route, accepting the request when the target order has |
| CVE-2026-82230 | Deferred | 未確認 | CWE-674 | Uncontrolled recursion in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to make the server crash via sending deeply nested mcpa |
| CVE-2026-82231 | Deferred | 未確認 | CWE-248 | A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the server peer it talks to. When the server returns a T_EXCEPTI |
| CVE-2026-82334 | Analyzed | 未確認 | CWE-125 | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted |
| CVE-2026-82335 | Analyzed | 未確認 | CWE-119, CWE-787 | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB |
| CVE-2026-82344 | Analyzed | 未確認 | CWE-119, CWE-787 | IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker |
| CVE-2026-82357 | Deferred | 未確認 | CWE-476 | RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all requir |
| CVE-2026-82358 | Deferred | 未確認 | CWE-863 | RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO (Service Data Object) server implementation 'src/co_sdo_server.c' that fails to properly validate write perm |
| CVE-2026-82402 | Deferred | 未確認 | CWE-601 | Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, an unauthenticated attacker can provide a backslash-containing target to the /redirect endpoint, and similar po |
| CVE-2026-82416 | Deferred | 未確認 | CWE-362, CWE-488 | FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state between requests when the session extension is loaded as a s |
| CVE-2026-82425 | Deferred | 未確認 | CWE-617 | A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a So |
| CVE-2026-82458 | Deferred | 未確認 | CWE-770, CWE-789 | Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, |
| CVE-2026-82459 | Deferred | 未確認 | CWE-191, CWE-787 | Integer underflow (wrap or wraparound), Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users |
| CVE-2026-82531 | Awaiting Analysis | 未確認 | CWE-94 | Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never restored during extends:/multi-component template inherit |
| CVE-2026-82627 | Deferred | 未確認 | CWE-502 | The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to PHP Object Injection in all versions |
| CVE-2026-82632 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-82715 | Deferred | 未確認 | CWE-377 | Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for A |
| CVE-2026-82806 | Deferred | 未確認 | CWE-488 | Exposure of data element to wrong session vulnerability in Apache APISIX. This issue affects Apache APISIX: from 2.3.0 before 3.7.0. Under a supported authz-keycloak configur |
| CVE-2026-82814 | Deferred | 未確認 | CWE-502 | The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserializ |
| CVE-2026-82819 | Awaiting Analysis | 未確認 | CWE-40 | A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, a |
| CVE-2026-82824 | Deferred | 未確認 | CWE-35 | Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affe |
| CVE-2026-82825 | Deferred | 未確認 | CWE-306 | Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invoke a critical API, po |
| CVE-2026-82826 | Deferred | 未確認 | CWE-319 | Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication c |
| CVE-2026-82827 | Deferred | 未確認 | CWE-321 | Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attacker to generate unaut |
| CVE-2026-82828 | Deferred | 未確認 | CWE-863 | Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations. This issue affects Hit |
| CVE-2026-82829 | Deferred | 未確認 | CWE-912 | Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability which allows an attacker to gain unauthorized access by exploiting hidden accou |
| CVE-2026-82844 | Deferred | 未確認 | CWE-345 | The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Commerce gateway, |
| CVE-2026-82891 | Awaiting Analysis | 未確認 | CWE-321 | IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key. |
| CVE-2026-82895 | Analyzed | 未確認 | CWE-120 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-82900 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory. |
| CVE-2026-82924 | Deferred | 未確認 | CWE-799 | Improper Control of Interaction Frequency vulnerability in Pusula Communication, IT, and Internet Industry and Trade Co. Ltd. Expert Mail allows Brute Force. This issue affects Ex |
| CVE-2026-82942 | Deferred | 未確認 | CWE-362 | A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process (denial of service) when RDMA is enabled at build time and r |
| CVE-2026-82953 | Deferred | 未確認 | CWE-476 | NULL pointer dereference in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to crash the server (denial of service) via |
| CVE-2026-82987 | Deferred | 未確認 | There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the curre | |
| CVE-2026-82988 | Deferred | 未確認 | CWE-287, CWE-434, CWE-502 | There exists an arbitrary file download in vCast APK delivery mechanism in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to trigger unprivileged APK install |
| CVE-2026-82989 | Deferred | 未確認 | CWE-147, CWE-74 | There is an input injection in vCast exposed network services in ViewSonic ViewBoard that allows a remote, unauthenticated attacker to inject arbitrary input into service endpoints |
| CVE-2026-8311 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-83139 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools). Supported versions that are affected are 12.2.3-12.2.15. Eas | |
| CVE-2026-83358 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily expl | |
| CVE-2026-83359 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl | |
| CVE-2026-83360 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easil | |
| CVE-2026-83361 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2 | |
| CVE-2026-83363 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award/PO). Supported versions that are affected are 12.2 | |
| CVE-2026-83366 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult | |
| CVE-2026-83367 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.3-12.2.15. Difficult | |
| CVE-2026-83370 | Awaiting Analysis | 未確認 | Vulnerability in the Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability | |
| CVE-2026-83371 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83372 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Easily exploitable vul | |
| CVE-2026-83373 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit v | |
| CVE-2026-83374 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affecte | |
| CVE-2026-83375 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Administer Workforce). The supported version that is affected is 9.2. Diff | |
| CVE-2026-83376 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected ar | |
| CVE-2026-83377 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83378 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability all | |
| CVE-2026-83379 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported ver | |
| CVE-2026-83380 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS). Supported versions that are affected ar | |
| CVE-2026-83381 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; O | |
| CVE-2026-83382 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exp | |
| CVE-2026-83383 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83384 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83385 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83386 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83387 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC). Supported versions that are affected ar | |
| CVE-2026-83388 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to | |
| CVE-2026-83389 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83390 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to | |
| CVE-2026-83391 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-83392 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.3-12.2.15. Difficult to | |
| CVE-2026-83393 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to | |
| CVE-2026-83394 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Demand Planning product of Oracle Supply Chain (component: Internal Operations). Supported versions that are affected are 12.1 and 12.2. Easily exploi | |
| CVE-2026-83395 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec |
| CVE-2026-83396 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are affected are 12.2.1.4.0 and |
| CVE-2026-83397 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Console / Repository Explorer). Supported versions that are affected are 12.2.1.4.0 and |
| CVE-2026-83398 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Data Transforms). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-83399 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-83400 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected ar |
| CVE-2026-83401 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E | |
| CVE-2026-83402 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E | |
| CVE-2026-83403 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E | |
| CVE-2026-83404 | Awaiting Analysis | 未確認 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability al | |
| CVE-2026-83406 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0 | |
| CVE-2026-83407 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. | |
| CVE-2026-83409 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. | |
| CVE-2026-83426 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. | |
| CVE-2026-83427 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected are 8.61-8.63. Diffic | |
| CVE-2026-83499 | Awaiting Analysis | 未確認 | CWE-1220 | Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83500 | Awaiting Analysis | 未確認 | CWE-601 | Url redirection to untrusted site ('open redirect') in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack. |
| CVE-2026-83504 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows SmartScreen allows an authorized attacker to disclose information locally. |
| CVE-2026-83505 | Awaiting Analysis | 未確認 | CWE-367, CWE-426 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83506 | Awaiting Analysis | 未確認 | CWE-426 | Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83507 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83508 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83509 | Awaiting Analysis | 未確認 | CWE-426 | Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83510 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83511 | Awaiting Analysis | 未確認 | CWE-1390 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-83513 | Awaiting Analysis | 未確認 | CWE-122 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83514 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83515 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-83516 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83517 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83518 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83519 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83520 | Awaiting Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83521 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows IKE Extension allows an authorized attacker to disclose information over a network. |
| CVE-2026-83522 | Awaiting Analysis | 未確認 | CWE-807 | Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-83523 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83526 | Deferred | 未確認 | CWE-434 | The FV Player 8 plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 8.1.7 via the check_mimetype function. This is due to insufficient |
| CVE-2026-83531 | Undergoing Analysis | 未確認 | CWE-917, CWE-94 | Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vu |
| CVE-2026-83535 | Awaiting Analysis | 未確認 | CWE-208 | A flaw was found in openstack-network-exporter. When an operator configures user authentication but omits or misconfigures Transport Layer Security (TLS), the basic authentication |
| CVE-2026-83536 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in openstack-network-exporter. The HTTP server within the component is configured without essential timeout settings, such as ReadHeaderTimeout. This vulnerability |
| CVE-2026-83540 | Analyzed | 未確認 | CWE-287, CWE-613 | When password or public key authentication is used with the Windows port of wolfSSHd, the Windows logon token acquired for one authenticated connection is not released before a tok |
| CVE-2026-8355 | Awaiting Analysis | 未確認 | CWE-918 | IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authenticated users with gateway creation privileges to perform a |
| CVE-2026-83550 | Awaiting Analysis | 未確認 | CWE-489 | A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the unauthenticated metrics listener. A remote attacker within th |
| CVE-2026-83564 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83565 | Awaiting Analysis | 未確認 | CWE-126 | Buffer over-read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-83566 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83567 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83568 | Undergoing Analysis | 未確認 | CWE-862 | Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83569 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83570 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83571 | Awaiting Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83573 | Undergoing Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-83574 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83575 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83578 | Awaiting Analysis | 未確認 | CWE-122, CWE-190, CWE-191 | Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83579 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83580 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83582 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-83583 | Awaiting Analysis | 未確認 | CWE-862 | Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83584 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83585 | Awaiting Analysis | 未確認 | CWE-134 | Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83586 | Awaiting Analysis | 未確認 | CWE-1390 | Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83587 | Awaiting Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83588 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83589 | Awaiting Analysis | 未確認 | CWE-601 | A flaw was found in oauth-proxy. The application fails to properly validate the destination redirect parameter (`rd`) during post-login redirection. A remote attacker can exploit t |
| CVE-2026-83592 | Deferred | 未確認 | CWE-79 | The Contact Form DB for Enfold plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form Field Values in all versions up to, and including, 2.0.2 due to in |
| CVE-2026-83632 | Deferred | 未確認 | CWE-122, CWE-190, CWE-770 | Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift. This issue affects Apache Thrift |
| CVE-2026-83634 | Awaiting Analysis | 未確認 | CWE-415 | Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83635 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83636 | Awaiting Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
| CVE-2026-83637 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83638 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83639 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83640 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-83641 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83642 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83643 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83644 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83645 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83646 | Awaiting Analysis | 未確認 | CWE-601 | Url redirection to untrusted site ('open redirect') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-83647 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83648 | Awaiting Analysis | 未確認 | CWE-476 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-83649 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network. |
| CVE-2026-83650 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83651 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-83652 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83654 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83655 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83656 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83657 | Awaiting Analysis | 未確認 | CWE-1390 | Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83658 | Awaiting Analysis | 未確認 | CWE-862 | Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. |
| CVE-2026-83659 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83661 | Analyzed | 未確認 | CWE-190 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-83662 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web pa |
| CVE-2026-83663 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read t |
| CVE-2026-83664 | Awaiting Analysis | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-83665 | Awaiting Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83666 | Awaiting Analysis | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevat |
| CVE-2026-83667 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-83668 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83669 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83670 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-83671 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally. |
| CVE-2026-83672 | Awaiting Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally. |
| CVE-2026-83674 | Awaiting Analysis | 未確認 | CWE-1390 | Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-83675 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83676 | Awaiting Analysis | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83677 | Awaiting Analysis | 未確認 | CWE-401 | Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83678 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83679 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83680 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83681 | Awaiting Analysis | 未確認 | CWE-1390 | Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally. |
| CVE-2026-83682 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83683 | Awaiting Analysis | 未確認 | CWE-36 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network. |
| CVE-2026-83685 | Awaiting Analysis | 未確認 | CWE-126 | Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network. |
| CVE-2026-83686 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-83687 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83688 | Awaiting Analysis | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83689 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83690 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83691 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83692 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83693 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83694 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83695 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83696 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83697 | Awaiting Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83698 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83699 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83700 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83701 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83702 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83703 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network. |
| CVE-2026-83704 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83705 | Awaiting Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-83706 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83707 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83708 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83709 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83710 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83712 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-83713 | Awaiting Analysis | 未確認 | CWE-497 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-83714 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-83715 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally. |
| CVE-2026-83716 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-83717 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83718 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83719 | Awaiting Analysis | 未確認 | CWE-126 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
| CVE-2026-83720 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83721 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83722 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83723 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83724 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83725 | Awaiting Analysis | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83726 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83727 | Awaiting Analysis | 未確認 | CWE-126 | Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83728 | Awaiting Analysis | 未確認 | CWE-1286 | Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally. |
| CVE-2026-83732 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83733 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| CVE-2026-83735 | Undergoing Analysis | 未確認 | CWE-763 | Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83736 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83737 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-83738 | Awaiting Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83739 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-8374 | Deferred | 未確認 | CWE-1204, CWE-1240 | Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communic |
| CVE-2026-83740 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83741 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83742 | Analyzed | 未確認 | CWE-121, CWE-191, CWE-193 | Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one |
| CVE-2026-83745 | Deferred | 未確認 | CWE-130, CWE-789 | Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSock |
| CVE-2026-83746 | Awaiting Analysis | 未確認 | CWE-36 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-83747 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally. |
| CVE-2026-83748 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83749 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83750 | Awaiting Analysis | 未確認 | CWE-122, CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83751 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83752 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83753 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83754 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83755 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-83756 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83757 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83758 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally. |
| CVE-2026-83759 | Awaiting Analysis | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network. |
| CVE-2026-83760 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-83761 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83762 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83763 | Awaiting Analysis | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83764 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83765 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally. |
| CVE-2026-83766 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. |
| CVE-2026-83767 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83768 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83769 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83770 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83771 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-83773 | Awaiting Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally. |
| CVE-2026-83774 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-83775 | Awaiting Analysis | 未確認 | CWE-122, CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83776 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-83777 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-83778 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83779 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83780 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83781 | Awaiting Analysis | 未確認 | CWE-170 | Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83782 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83783 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83784 | Awaiting Analysis | 未確認 | CWE-36 | Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-83785 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83786 | Awaiting Analysis | 未確認 | CWE-209 | Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-83787 | Awaiting Analysis | 未確認 | CWE-288 | Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-83788 | Awaiting Analysis | 未確認 | CWE-126 | Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-83789 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83790 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83791 | Awaiting Analysis | 未確認 | CWE-283 | Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83792 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83793 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83794 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-83795 | Undergoing Analysis | 未確認 | CWE-122, CWE-125 | Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83796 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83797 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83798 | Undergoing Analysis | 未確認 | CWE-20, CWE-347 | Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally. |
| CVE-2026-83813 | Received | 未確認 | CWE-346 | Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a p |
| CVE-2026-83826 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83827 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83828 | Undergoing Analysis | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83829 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83830 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83832 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83833 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83834 | Undergoing Analysis | 未確認 | CWE-367, CWE-416 | Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83835 | Undergoing Analysis | 未確認 | CWE-126, CWE-497 | Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-83836 | Undergoing Analysis | 未確認 | CWE-122, CWE-191 | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. |
| CVE-2026-83837 | Undergoing Analysis | 未確認 | CWE-441 | Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83838 | Undergoing Analysis | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-83839 | Undergoing Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83840 | Undergoing Analysis | 未確認 | CWE-1390 | Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83841 | Undergoing Analysis | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83842 | Undergoing Analysis | 未確認 | CWE-415 | Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83843 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83844 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83845 | Undergoing Analysis | 未確認 | CWE-290 | Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. |
| CVE-2026-83846 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83847 | Awaiting Analysis | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83848 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83849 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally. |
| CVE-2026-83850 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83851 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83852 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83853 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83854 | Analyzed | 未確認 | CWE-306 | Improper access control in Windows Notification allows an authorized attacker to disclose information locally. |
| CVE-2026-83855 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83856 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83857 | Analyzed | 未確認 | CWE-121 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83859 | Analyzed | 未確認 | CWE-416 | Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83860 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network. |
| CVE-2026-83861 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83862 | Modified | 未確認 | CWE-416 | Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-83863 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83864 | Analyzed | 未確認 | CWE-290 | Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-83865 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally. |
| CVE-2026-83866 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83867 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83868 | Awaiting Analysis | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locall |
| CVE-2026-83869 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83870 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83871 | Analyzed | 未確認 | CWE-122, CWE-367 | Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83872 | Analyzed | 未確認 | CWE-681 | Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83873 | Analyzed | 未確認 | CWE-23 | Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83874 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83875 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-83876 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83877 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83879 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83881 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83882 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83883 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83884 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-83885 | Analyzed | 未確認 | CWE-326 | Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally. |
| CVE-2026-83886 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83887 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-83888 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83889 | Analyzed | 未確認 | CWE-763 | Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network. |
| CVE-2026-83891 | Analyzed | 未確認 | CWE-121, CWE-20 | Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83892 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-83893 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83895 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-83896 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83897 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-83898 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-83899 | Analyzed | 未確認 | CWE-362 | Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83900 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83901 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83902 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83903 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83904 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. |
| CVE-2026-83905 | Undergoing Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally. |
| CVE-2026-83906 | Undergoing Analysis | 未確認 | CWE-303 | Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-83907 | Undergoing Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally. |
| CVE-2026-83908 | Undergoing Analysis | 未確認 | CWE-763 | Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83909 | Undergoing Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-83910 | Undergoing Analysis | 未確認 | CWE-787 | Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83911 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83912 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83913 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83914 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83915 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83916 | Undergoing Analysis | 未確認 | CWE-415 | Double free in Windows Error Reporting allows an authorized attacker to execute code locally. |
| CVE-2026-83917 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83918 | Undergoing Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83919 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally. |
| CVE-2026-83920 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83921 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83922 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83923 | Undergoing Analysis | 未確認 | CWE-23 | Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83924 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83925 | Undergoing Analysis | 未確認 | CWE-497, CWE-908 | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-83926 | Undergoing Analysis | 未確認 | CWE-295 | Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-83927 | Undergoing Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83928 | Undergoing Analysis | 未確認 | CWE-306 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83929 | Undergoing Analysis | 未確認 | CWE-787 | Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83930 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83931 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. |
| CVE-2026-83932 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83933 | Undergoing Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83934 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83935 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network. |
| CVE-2026-83938 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-83943 | Awaiting Analysis | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-83945 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-83947 | Analyzed | 未確認 | CWE-862 | Missing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-83958 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-83960 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute ma |
| CVE-2026-83965 | Analyzed | 未確認 | CWE-121 | Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-83966 | Analyzed | 未確認 | CWE-787 | Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this iss |
| CVE-2026-84007 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network. |
| CVE-2026-84008 | Awaiting Analysis | 未確認 | CWE-407 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-84009 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally. |
| CVE-2026-84011 | Analyzed | 未確認 | CWE-863 | Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-84012 | Analyzed | 未確認 | CWE-415 | Double free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network. |
| CVE-2026-84013 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84014 | Analyzed | 未確認 | CWE-122, CWE-362 | Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84015 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-84016 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84017 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-84018 | Analyzed | 未確認 | CWE-367, CWE-416 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84019 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84020 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-84032 | Analyzed | 未確認 | CWE-295 | IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation. |
| CVE-2026-84035 | Analyzed | 未確認 | CWE-121 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-84057 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command. |
| CVE-2026-84058 | Analyzed | 未確認 | CWE-119 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet decoder. A remote attacker who can send a spec |
| CVE-2026-84166 | Deferred | 未確認 | CWE-352 | The Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order management, allowing attackers to trick a logged-in administra |
| CVE-2026-84167 | Deferred | 未確認 | CWE-639 | The Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated user such as a Subscriber to read |
| CVE-2026-84169 | Deferred | 未確認 | CWE-639 | The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actually belongs to the order and customer it claims to confirm, |
| CVE-2026-84176 | Undergoing Analysis | 未確認 | CWE-942 | Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from |
| CVE-2026-84178 | Undergoing Analysis | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4.11.0 before 4.18.5, from 4.19.0 before 4.22.1. The auth |
| CVE-2026-84180 | Undergoing Analysis | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19. |
| CVE-2026-84181 | Undergoing Analysis | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security |
| CVE-2026-84198 | Analyzed | 未確認 | CWE-120 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-84209 | Analyzed | 未確認 | CWE-89 | IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL comm |
| CVE-2026-84220 | Deferred | 未確認 | CWE-74 | The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of their moderation |
| CVE-2026-84224 | Deferred | 未確認 | CWE-918 | The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the site issue |
| CVE-2026-84230 | Analyzed | 未確認 | CWE-362 | IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared m |
| CVE-2026-84244 | Analyzed | 未確認 | CWE-79 | IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cross-site scripting (XSS) in the Quick Search results grid. An unauthenticated atta |
| CVE-2026-84245 | Analyzed | 未確認 | CWE-269 | IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user could exploit this vulnerability to gain ro |
| CVE-2026-84246 | Analyzed | 未確認 | CWE-120 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-84247 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
| CVE-2026-84249 | Analyzed | 未確認 | CWE-306 | IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function. |
| CVE-2026-84250 | Analyzed | 未確認 | CWE-798 | IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey component. A local attacker could exploit |
| CVE-2026-84251 | Deferred | 未確認 | CWE-862 | The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that |
| CVE-2026-84252 | Deferred | 未確認 | CWE-862 | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure that the |
| CVE-2026-84253 | Deferred | 未確認 | CWE-862 | The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure tha |
| CVE-2026-84254 | Deferred | 未確認 | CWE-862 | The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not have authorisation and CSRF checks when updating options via a REST endpoint, and does not ensure th |
| CVE-2026-84258 | Deferred | 未確認 | CWE-79 | The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in |
| CVE-2026-84259 | Deferred | 未確認 | CWE-79 | The click5 CRM add-on to WPForms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an a |
| CVE-2026-84260 | Deferred | 未確認 | CWE-79 | The click5 CRM add-on to Gravity Forms WordPress plugin through 1.0.3 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back i |
| CVE-2026-84261 | Deferred | 未確認 | CWE-79 | The click5 CRM add-on to Contact Form 7 WordPress plugin through 1.0.4 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back |
| CVE-2026-84271 | Analyzed | 未確認 | CWE-347, CWE-362 | IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute |
| CVE-2026-84272 | Analyzed | 未確認 | CWE-306 | IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulner |
| CVE-2026-84274 | Analyzed | 未確認 | CWE-200 | IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. During SECRET and API_KEY rotation processing, sensitive credential material is l |
| CVE-2026-84275 | Analyzed | 未確認 | CWE-22 | IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitr |
| CVE-2026-84276 | Analyzed | 未確認 | CWE-400 | IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-cont |
| CVE-2026-84278 | Analyzed | 未確認 | CWE-78 | IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authenticated high-privileged user can inject a |
| CVE-2026-84284 | Modified | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.11 before 19.2.8, 19.3 before 19.3.6, and 19.4 before 19.4.2 that, under certain conditions, could hav |
| CVE-2026-84286 | Awaiting Analysis | 未確認 | CWE-125, CWE-20, CWE-787 | ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the cod |
| CVE-2026-84290 | Analyzed | 未確認 | CWE-119 | IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied pointers in the WfpMonitor kernel driver. Certain METHOD_NEITHER IOCTL handlers |
| CVE-2026-84312 | Deferred | 未確認 | CWE-287, CWE-352 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GetCasdoorUri uses the configured Casdoor application name as a constant OAuth state value and CasdoorCal |
| CVE-2026-84313 | Deferred | 未確認 | CWE-287, CWE-306 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, POST /api/otp_enroll and POST /api/finish_passkey_register are registered outside RequireSecureSession an |
| CVE-2026-84314 | Deferred | 未確認 | CWE-285, CWE-862 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the POST /api/users/:id user-management endpoint permits an authenticated user to change another user's p |
| CVE-2026-84315 | Deferred | 未確認 | CWE-862 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI does not apply RequireSecureSession to multiple authenticated mutation routes even though OTP-en |
| CVE-2026-84316 | Deferred | 未確認 | CWE-184, CWE-20 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, config.ValidateConfigDirectives splits configuration by newline and checks only the first directive token |
| CVE-2026-84317 | Deferred | 未確認 | CWE-20, CWE-693 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, internal/config/validation.go (ValidateConfigFile) is a security control that blocks dangerous nginx dire |
| CVE-2026-84318 | Deferred | 未確認 | CWE-693 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0-rc.6 until 2.4.1, the MCP tool nginx_config_add writes nginx configuration files to disk and triggers an nginx |
| CVE-2026-84319 | Deferred | 未確認 | CWE-693 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the regular HTTP configuration API rejects restricted Nginx directives such as load_module, js_import, an |
| CVE-2026-84320 | Deferred | 未確認 | CWE-22 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storage_path, but AutoBackup.GetName returns a user-controlled n |
| CVE-2026-84321 | Deferred | 未確認 | CWE-613 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GenerateShortToken creates standalone short-token records without a long Token value, but DeleteUserToken |
| CVE-2026-84360 | Deferred | 未確認 | CWE-288 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the HTTP configuration mutation routes require RequireSecureSession, but /mcp and /mcp_message require on |
| CVE-2026-84411 | Awaiting Analysis | 未確認 | CWE-191 | The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be levera |
| CVE-2026-84418 | Analyzed | 未確認 | CWE-295 | IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authori |
| CVE-2026-84419 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR |
| CVE-2026-84420 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before L |
| CVE-2026-84429 | Deferred | 未確認 | CWE-407 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.utils.http.parse_header_parameters()` was subject to a potential denial-of-serv |
| CVE-2026-84471 | Awaiting Analysis | 未確認 | CWE-416 | The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7_alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a de |
| CVE-2026-84490 | Awaiting Analysis | 未確認 | CWE-287 | This issue was addressed through improved state management. This issue is fixed in iOS 27 and iPadOS 27. An attacker with physical access to a locked device may be able to bypass D |
| CVE-2026-84508 | Undergoing Analysis | 未確認 | CWE-284 | This issue was addressed with improved validation of the caller's access. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, visionOS 27. An app m |
| CVE-2026-84547 | Undergoing Analysis | 未確認 | CWE-20 | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker in physical p |
| CVE-2026-84579 | Undergoing Analysis | 未確認 | A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Opening a file referencing a network share may | |
| CVE-2026-84582 | Awaiting Analysis | 未確認 | A privacy issue was addressed with improved access restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An app may be | |
| CVE-2026-84613 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia |
| CVE-2026-84682 | Deferred | 未確認 | CWE-78 | A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adjacent-network attacker can exploit the setProductVer command |
| CVE-2026-84727 | Deferred | 未確認 | CWE-416 | Use-after-free in the RTMP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows a malicious RTMP peer to crash the process or potentially corrupt memor |
| CVE-2026-84731 | Awaiting Analysis | 未確認 | CWE-290, CWE-302, CWE-306 | An unauthenticated remote attacker can bypass authentication and gain full access to administrative API endpoints in Nutanix Prism Element by including a crafted internal managemen |
| CVE-2026-84734 | Deferred | 未確認 | CWE-287 | The Mindstien Quick Login WordPress plugin through 1.0 does not correctly validate a value supplied in the request against the visitor's own session before authenticating them, all |
| CVE-2026-84737 | Deferred | 未確認 | CWE-287 | The Freeton WP WordPress plugin through 1.0.0 does not correctly validate the activation code when authenticating a user, allowing unauthenticated attackers to log in as any user w |
| CVE-2026-84740 | Deferred | 未確認 | CWE-74 | The Events Calendar WordPress plugin before 6.17.5.1 does not validate or sanitise data submitted to an unauthenticated AJAX action before merging it into its rendering context, al |
| CVE-2026-84747 | Deferred | 未確認 | CWE-436 | Interpretation conflict in the HTTP protocol implementation in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to bypass access control rules enforced by a |
| CVE-2026-84748 | Deferred | 未確認 | CWE-285 | Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public port. Root Cause: ServerOptions.in |
| CVE-2026-84790 | Awaiting Analysis | 未確認 | CWE-158, CWE-290 | OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject field |
| CVE-2026-84823 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal vulnerability in the ` |
| CVE-2026-84854 | Deferred | 未確認 | CWE-787 | In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer could cause small amounts of data to be wri |
| CVE-2026-84875 | Analyzed | 未確認 | CWE-119 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow. |
| CVE-2026-84891 | Analyzed | 未確認 | CWE-798 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of hard-coded credentials. |
| CVE-2026-84897 | Analyzed | 未確認 | CWE-372, CWE-400, CWE-405 | src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and SSH_MSG_KEX_DH_GEX_REPLY (33) w |
| CVE-2026-84900 | Awaiting Analysis | 未確認 | CWE-354 | Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilities. HP has released HP ThinPro 8.1 SP10, which includes updates to mi |
| CVE-2026-84910 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Advanced Search allows Forceful Browsing. This issue affects Advanced Search versions: from 0.0.0 to 2.4.5. |
| CVE-2026-84911 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI (Artificial Intelligence) allows Stored XSS. This issue affects AI ( |
| CVE-2026-84912 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Forceful Browsing. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.3.13, |
| CVE-2026-84913 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal AI Translate allows Forceful Browsing. This issue affects AI Translate versions: from 0.0.0 to 1.3.2, from 1.4.0 to 1.4.1. |
| CVE-2026-84914 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Calculate Working Days allows Forceful Browsing. This issue affects Calculate Working Days versions: from 0.0.0 to 2.0.3. |
| CVE-2026-84915 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Component blocks allows Stored XSS. This issue affects Component blocks |
| CVE-2026-84916 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Islandora allows Forceful Browsing. This issue affects Islandora versions: from 0.0.0 to 2.19.0. |
| CVE-2026-84917 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Jsonapi Role Access allows Forceful Browsing. This issue affects Jsonapi Role Access versions: from 0.0.0 to 2.0.2. |
| CVE-2026-84918 | Awaiting Analysis | 未確認 | CWE-347 | Improper Verification of Cryptographic Signature vulnerability in Drupal Monobank payment API allows Signature Spoof. This issue affects Monobank payment API versions: from 0.0.0 t |
| CVE-2026-84919 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal PhotoSwipe - Responsive JavaScript Modal Image Gallery allows Stored XS |
| CVE-2026-84920 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Unpublished Node Permissions allows Forceful Browsing. This issue affects Unpublished Node Permissions versions: from 0.0.0 to 1.8.0 |
| CVE-2026-84921 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Webform Submissions Delete allows Forceful Browsing. This issue affects Webform Submissions Delete versions: from 0.0.0 to 1.2.0. |
| CVE-2026-84923 | Awaiting Analysis | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Authentication Bypass. This issue a |
| CVE-2026-84924 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Email Verification / SMS Verification / OTP Verification allows Reflect |
| CVE-2026-84925 | Deferred | 未確認 | CWE-79 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'lang' parameter in all versions up to, and incl |
| CVE-2026-84994 | Awaiting Analysis | 未確認 | CWE-248 | Qwik is a performance-focused JavaScript framework. Prior to @builder.io/qwik 1.20.0 and @qwik.dev/core 2.0.0-beta.37, default server-side qwik-json deserialization causes Resource |
| CVE-2026-85000 | Deferred | 未確認 | CWE-284 | The EmbedPress WordPress plugin before 4.6.8 does not perform any capability or nonce check on an unauthenticated request that triggers a server-side, credential-bearing request t |
| CVE-2026-85004 | Deferred | 未確認 | CWE-284 | The Popup Maker WordPress plugin through 1.4.5 does not perform a capability check on one of its account-connection actions, only verifying a nonce, allowing authenticated users w |
| CVE-2026-85005 | Deferred | 未確認 | CWE-862 | The Popup Maker WP WordPress plugin through 1.4.5 does not perform authorization checks on several of its actions and exposes its management page to any logged-in user, allowing us |
| CVE-2026-85015 | Deferred | 未確認 | CWE-22 | The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing authenticated users with |
| CVE-2026-85016 | Deferred | 未確認 | CWE-79 | The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not escape an icon value before concatenating it into an HTML attribute in its shared widget-parameter proc |
| CVE-2026-85079 | Undergoing Analysis | 未確認 | CWE-121 | In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote code execution. This response must come from |
| CVE-2026-85080 | Undergoing Analysis | 未確認 | CWE-121 | In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash. A limited number of values can be written using this |
| CVE-2026-85086 | Deferred | 未確認 | CWE-1188, CWE-295 | Improper certificate validation, Initialization of a resource with an insecure default vulnerability in Apache Thrift perl bindings. This issue affects Apache Thrift: before 0.2 |
| CVE-2026-85087 | Deferred | 未確認 | CWE-295, CWE-393 | Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recomm |
| CVE-2026-85088 | Deferred | 未確認 | CWE-295, CWE-297 | Improper Validation of Certificate with Host Mismatch in the C++ and D libraries of Apache Thrift. Both libraries install a default access manager for client sockets — TSSLSocke |
| CVE-2026-85097 | Deferred | 未確認 | CWE-434 | The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the |
| CVE-2026-85114 | Deferred | 未確認 | CWE-22 | A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames received |
| CVE-2026-85115 | Deferred | 未確認 | CWE-209 | A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62). Affected applications do not properly redact PLC restore passwords |
| CVE-2026-85118 | Deferred | 未確認 | CWE-269 | The AI Content Generator Marketing WordPress plugin through 1.0.0 does not enforce a nonce or capability check on some of its AJAX actions, allowing unauthenticated users to update |
| CVE-2026-85121 | Deferred | 未確認 | CWE-862 | The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to create and overwrite arbitrary |
| CVE-2026-85126 | Deferred | 未確認 | CWE-269 | The Crowdfundly WordPress plugin through 2.2.2 does not have capability checks on some of its AJAX actions, allowing users holding one of its own low privileged roles to grant them |
| CVE-2026-85153 | Deferred | 未確認 | CWE-321 | This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in the client application. An unauthenticated remote attacker could exp |
| CVE-2026-85209 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows Exploiting Incorrectly Configured |
| CVE-2026-85215 | Deferred | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in GG Soft Software Services Inc. Paperwork allows SQL Injection. This issue aff |
| CVE-2026-85231 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC (Remote Procedure Call) service |
| CVE-2026-85235 | Deferred | 未確認 | CWE-79 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Rich-Text Textarea Field in all versio |
| CVE-2026-85243 | Undergoing Analysis | 未確認 | CWE-354 | Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22 |
| CVE-2026-85245 | Undergoing Analysis | 未確認 | CWE-488 | Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. |
| CVE-2026-85246 | Undergoing Analysis | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 b |
| CVE-2026-85247 | Undergoing Analysis | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When SSL wa |
| CVE-2026-85248 | Undergoing Analysis | 未確認 | CWE-362 | Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12 |
| CVE-2026-85249 | Undergoing Analysis | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Tika producer ma |
| CVE-2026-85250 | Undergoing Analysis | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before |
| CVE-2026-85251 | Undergoing Analysis | 未確認 | CWE-200 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 bef |
| CVE-2026-85254 | Undergoing Analysis | 未確認 | CWE-178 | Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. |
| CVE-2026-85257 | Undergoing Analysis | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 be |
| CVE-2026-85260 | Undergoing Analysis | 未確認 | CWE-532 | Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1 |
| CVE-2026-85267 | Awaiting Analysis | 未確認 | CWE-1385 | A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell sessio |
| CVE-2026-85296 | Undergoing Analysis | 未確認 | CWE-488 | Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. Signi |
| CVE-2026-85298 | Awaiting Analysis | 未確認 | CWE-863 | An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows |
| CVE-2026-85300 | Undergoing Analysis | 未確認 | CWE-276 | Incorrect Default Permissions vulnerability in Apache Camel PQC component. This issue affects Apache Camel: from 4.12.0 before 4.18.5, from 4.19.0 before 4.22.1. When the compone |
| CVE-2026-85301 | Undergoing Analysis | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache Camel Keycloak component. This issue affects Apache Camel: from 4.15.0 before 4.18.5, from 4.19.0 before 4.22.1. The security p |
| CVE-2026-85312 | Undergoing Analysis | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The saga processor c |
| CVE-2026-85313 | Undergoing Analysis | 未確認 | CWE-942 | Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before |
| CVE-2026-85314 | Undergoing Analysis | 未確認 | CWE-20 | Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. CVE-2026-46584 addre |
| CVE-2026-85315 | Undergoing Analysis | 未確認 | CWE-209 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 b |
| CVE-2026-85316 | Undergoing Analysis | 未確認 | CWE-1220 | Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.2 |
| CVE-2026-85317 | Undergoing Analysis | 未確認 | CWE-524 | Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. |
| CVE-2026-85318 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85319 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-85320 | Undergoing Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| CVE-2026-85321 | Undergoing Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-85322 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85323 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. |
| CVE-2026-85324 | Analyzed | 未確認 | CWE-789 | Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-85327 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85328 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85329 | Analyzed | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Account allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85331 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network. |
| CVE-2026-85332 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85333 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges local |
| CVE-2026-85334 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85336 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
| CVE-2026-85337 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85338 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85339 | Undergoing Analysis | 未確認 | CWE-122, CWE-191 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-85340 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85341 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85342 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85343 | Undergoing Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85345 | Deferred | 未確認 | CWE-918 | The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existing host-based |
| CVE-2026-85348 | Deferred | 未確認 | CWE-352 | The GDPR Data Request Form WordPress plugin through 1.7.1 does not have CSRF protection when updating one of its settings, allowing attackers to change that setting via a forged re |
| CVE-2026-85352 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85353 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85354 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85355 | Undergoing Analysis | 未確認 | CWE-829 | Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85356 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85357 | Undergoing Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85358 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85359 | Undergoing Analysis | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85361 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85362 | Undergoing Analysis | 未確認 | CWE-763 | Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85363 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-85364 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85365 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85366 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85367 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85368 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85369 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85370 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85371 | Analyzed | 未確認 | CWE-416 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85372 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85373 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85374 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. |
| CVE-2026-85375 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85376 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85377 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85421 | Analyzed | 未確認 | CWE-306 | A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to properly enforce authentication or access control checks on |
| CVE-2026-85422 | Analyzed | 未確認 | CWE-798 | A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardcoded into the software binaries to secure sensitive data at r |
| CVE-2026-85423 | Analyzed | 未確認 | CWE-306 | A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authent |
| CVE-2026-85457 | Awaiting Analysis | 未確認 | CWE-121 | IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. |
| CVE-2026-85471 | Awaiting Analysis | 未確認 | CWE-918 | A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery (SSRF) vu |
| CVE-2026-85473 | Awaiting Analysis | 未確認 | CWE-20, CWE-755 | The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value. The condition occurs during token pa |
| CVE-2026-85476 | Deferred | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended |
| CVE-2026-85479 | Awaiting Analysis | 未確認 | CWE-306 | The STTP-based data publisher on openPDC accepts network connections without authentication in its default configuration. An unauthenticated network attacker can connect to this in |
| CVE-2026-85483 | Deferred | 未確認 | CWE-393, CWE-908 | Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommen |
| CVE-2026-85486 | Analyzed | 未確認 | CWE-95 | Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authenticated user submits a configuration form, the submitted text c |
| CVE-2026-85487 | Analyzed | 未確認 | CWE-22 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network could send a manipulated |
| CVE-2026-85488 | Analyzed | 未確認 | CWE-798 | Brocade ASCG before 3.5.0 has a well-known Brocade default password embedded in a script distributed to every customer. Any local authenticated user with read access to the install |
| CVE-2026-85489 | Analyzed | 未確認 | CWE-306 | An authentication flaw exists in the Brocade ASCG administrative management service component. An unauthenticated network user can issue direct API requests to perform privileged a |
| CVE-2026-85490 | Analyzed | 未確認 | CWE-22 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences contained wi |
| CVE-2026-85492 | Deferred | 未確認 | CWE-79 | The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting |
| CVE-2026-85493 | Deferred | 未確認 | CWE-248, CWE-674 | Uncontrolled Recursion vulnerability in Apache Thrift Dart and Java ME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version |
| CVE-2026-85494 | Deferred | 未確認 | CWE-1188, CWE-130, CWE-248, CWE-407, CWE-789 | Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, Memory allocation with excessive size value, Initialization of a resour |
| CVE-2026-85499 | Deferred | 未確認 | CWE-863 | Improper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy functionality. Under a non-default |
| CVE-2026-85515 | Awaiting Analysis | 未確認 | CWE-345, CWE-354 | In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error reported, and on the SEIPD version 1 path with no integrity check performed |
| CVE-2026-85518 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal |
| CVE-2026-85523 | Deferred | 未確認 | CWE-78 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Felisify Information Technologies Industry and Trade Inc. SambaBox allow |
| CVE-2026-85529 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-85531 | Deferred | 未確認 | CWE-347 | Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. OpenCart Virtual POS Module allows Signature Spoofing by Improper |
| CVE-2026-85568 | Deferred | 未確認 | CWE-89 | The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not correctly handle a search value before rewriting an already prepared SQL statement, allowing unauthenti |
| CVE-2026-85571 | Deferred | 未確認 | CWE-639 | The Tutor LMS WordPress plugin before 4.1.1 does not verify that the posts named in its course content ordering requests belong to a course the requester manages, allowing users w |
| CVE-2026-85634 | Awaiting Analysis | 未確認 | CWE-22 | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The iss |
| CVE-2026-85642 | Deferred | 未確認 | CWE-400 | The Formidable Forms WordPress plugin before 7.0 does not verify the identity of the caller before recording the timestamp it uses to rate limit payment gateway verification reque |
| CVE-2026-85659 | Deferred | 未確認 | CWE-269 | The PilotPress plugin for WordPress is vulnerable to Privilege Escalation via Account Takeover in all versions up to, and including, 2.0.43. The vulnerability exists because the `u |
| CVE-2026-85679 | Deferred | 未確認 | CWE-79 | The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in all versions up to, and including, 3.1.6 due to insufficient i |
| CVE-2026-85683 | Deferred | 未確認 | CWE-79 | The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by unauthenticated users, allowing them to |
| CVE-2026-85714 | Awaiting Analysis | 未確認 | CWE-94 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 2.13.2, an authenticated administrator using the default H2 database and |
| CVE-2026-85733 | Deferred | 未確認 | CWE-200 | FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker images include a default /app/public/index.php that executes ph |
| CVE-2026-85745 | Analyzed | 未確認 | CWE-126 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads beyond the allocated buffer wh |
| CVE-2026-85746 | Analyzed | 未確認 | CWE-787 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can write beyond an allocated outp |
| CVE-2026-85747 | Awaiting Analysis | 未確認 | CWE-354 | Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned requ |
| CVE-2026-85748 | Analyzed | 未確認 | CWE-416 | MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because cursor-array reallocation can leave st |
| CVE-2026-85783 | Awaiting Analysis | 未確認 | CWE-405, CWE-770 | Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_key. The h |
| CVE-2026-85790 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85791 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85792 | Analyzed | 未確認 | CWE-416 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-85793 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Sysmain Service allows an authorized attacker to disclose information locally. |
| CVE-2026-85794 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to disclose information locally. |
| CVE-2026-85795 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85796 | Analyzed | 未確認 | CWE-121, CWE-197 | Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85797 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85798 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
| CVE-2026-85799 | Analyzed | 未確認 | CWE-416 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85800 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85802 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85803 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85804 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85805 | Analyzed | 未確認 | CWE-358 | Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-85806 | Analyzed | 未確認 | CWE-121, CWE-191 | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85807 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85808 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-85809 | Analyzed | 未確認 | CWE-122 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
| CVE-2026-85810 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85811 | Analyzed | 未確認 | CWE-416 | Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network. |
| CVE-2026-85812 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-85814 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85815 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally. |
| CVE-2026-85816 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network. |
| CVE-2026-85817 | Analyzed | 未確認 | CWE-807 | Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85818 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-85820 | Analyzed | 未確認 | CWE-122, CWE-190 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85821 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-85822 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85823 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85824 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85825 | Analyzed | 未確認 | CWE-362 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85826 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85827 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85828 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85829 | Undergoing Analysis | 未確認 | CWE-415 | Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85830 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally. |
| CVE-2026-85831 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally. |
| CVE-2026-85832 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85833 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85834 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85835 | Awaiting Analysis | 未確認 | CWE-126 | Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally. |
| CVE-2026-85836 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85837 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85840 | Undergoing Analysis | 未確認 | CWE-552 | Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network. |
| CVE-2026-85841 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network. |
| CVE-2026-85842 | Undergoing Analysis | 未確認 | CWE-134 | Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85843 | Undergoing Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85846 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85847 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85848 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85849 | Undergoing Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85850 | Undergoing Analysis | 未確認 | CWE-763 | Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85851 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85852 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
| CVE-2026-85853 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85854 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85855 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85856 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network. |
| CVE-2026-85857 | Undergoing Analysis | 未確認 | CWE-532 | Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
| CVE-2026-85858 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85859 | Undergoing Analysis | 未確認 | CWE-476 | Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network. |
| CVE-2026-85860 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85861 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85863 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85864 | Undergoing Analysis | 未確認 | CWE-641 | Improper privilege management in Python allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85865 | Undergoing Analysis | 未確認 | CWE-288 | Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally. |
| CVE-2026-85866 | Undergoing Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally. |
| CVE-2026-85867 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85868 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85869 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85870 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85871 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85872 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85873 | Undergoing Analysis | 未確認 | CWE-639 | Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-85874 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. |
| CVE-2026-85876 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85879 | Undergoing Analysis | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85881 | Undergoing Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-85884 | Undergoing Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85886 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-85888 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-85891 | Undergoing Analysis | 未確認 | CWE-200 | Exposure of sensitive information to an unauthorized actor in Azure HDInsight allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85900 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-85901 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85902 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85903 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85904 | Analyzed | 未確認 | CWE-362, CWE-415 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privilege |
| CVE-2026-85905 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85906 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85908 | Undergoing Analysis | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85909 | Undergoing Analysis | 未確認 | CWE-822 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-85910 | Undergoing Analysis | 未確認 | CWE-126 | Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally. |
| CVE-2026-85911 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85912 | Undergoing Analysis | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges lo |
| CVE-2026-85914 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85915 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85916 | Analyzed | 未確認 | CWE-359 | Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally. |
| CVE-2026-85918 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85919 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85920 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85922 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Azure Key Vault allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-85925 | Analyzed | 未確認 | CWE-923 | Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-85926 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85927 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85928 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85930 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85931 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network. |
| CVE-2026-85932 | Analyzed | 未確認 | CWE-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. |
| CVE-2026-85933 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85934 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85935 | Undergoing Analysis | 未確認 | CWE-126 | Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-85936 | Undergoing Analysis | 未確認 | CWE-122, CWE-415 | Double free in Windows Shell allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85938 | Undergoing Analysis | 未確認 | CWE-862 | Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
| CVE-2026-85939 | Undergoing Analysis | 未確認 | CWE-1390 | Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-85941 | Undergoing Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85943 | Undergoing Analysis | 未確認 | CWE-122, CWE-367 | Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85945 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85947 | Awaiting Analysis | 未確認 | CWE-269 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attacker with |
| CVE-2026-85948 | Awaiting Analysis | 未確認 | CWE-269 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacke |
| CVE-2026-85949 | Awaiting Analysis | 未確認 | CWE-532 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An |
| CVE-2026-85950 | Awaiting Analysis | 未確認 | CWE-269 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privilege |
| CVE-2026-85951 | Awaiting Analysis | 未確認 | CWE-918 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated |
| CVE-2026-85952 | Awaiting Analysis | 未確認 | CWE-918 | Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an a |
| CVE-2026-85953 | Awaiting Analysis | 未確認 | CWE-22, CWE-269 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled |
| CVE-2026-85954 | Awaiting Analysis | 未確認 | CWE-269 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an el |
| CVE-2026-85955 | Awaiting Analysis | 未確認 | CWE-269 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluation function wi |
| CVE-2026-85956 | Awaiting Analysis | 未確認 | CWE-269 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or |
| CVE-2026-85957 | Awaiting Analysis | 未確認 | CWE-611 | Affected Progress MarkLogic Server 11.x releases before 11.3.7 use a SAML parser configuration that can process external DTDs or entities, which could result in unintended network |
| CVE-2026-85958 | Awaiting Analysis | 未確認 | CWE-287 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authentication validation weakness that could allow an attacker to use a token that |
| CVE-2026-85959 | Awaiting Analysis | 未確認 | CWE-778 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently record successful authentication events in audit logs, which could limit c |
| CVE-2026-85960 | Awaiting Analysis | 未確認 | CWE-352 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 use predictable CSRF tokens in Query Console. A remote attacker who lures an authenticated Que |
| CVE-2026-85961 | Awaiting Analysis | 未確認 | CWE-532 | On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive authentication information in diagnostic l |
| CVE-2026-85962 | Awaiting Analysis | 未確認 | CWE-287, CWE-347 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an improper authentication vulnerability in SAML processing. In deployments that use S |
| CVE-2026-85963 | Awaiting Analysis | 未確認 | CWE-321, CWE-918 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 include deprecated OpsDirector functionality with weaknesses that could allow an unauthenticat |
| CVE-2026-85964 | Awaiting Analysis | 未確認 | CWE-22 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to a privileged filesys |
| CVE-2026-85965 | Awaiting Analysis | 未確認 | CWE-416 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain memory-safety defects in the JavaScript engine integration that could result in memory |
| CVE-2026-85966 | Awaiting Analysis | 未確認 | CWE-200 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently restrict access to certain security-sensitive information. A remote authen |
| CVE-2026-85967 | Awaiting Analysis | 未確認 | CWE-79 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a cross-site scripting vulnerability that could allow a remote attacker to execute scr |
| CVE-2026-85968 | Awaiting Analysis | 未確認 | CWE-125 | Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality. A remote authenticated attacker could e |
| CVE-2026-85969 | Awaiting Analysis | 未確認 | CWE-787 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality. A r |
| CVE-2026-85970 | Awaiting Analysis | 未確認 | CWE-611 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 enable XML external entity processing by default in multiple server paths, which could allow c |
| CVE-2026-85971 | Awaiting Analysis | 未確認 | CWE-732 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow |
| CVE-2026-85972 | Awaiting Analysis | 未確認 | CWE-303 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently verify the identity of a Kerberos authentication service in certain passwo |
| CVE-2026-85973 | Awaiting Analysis | 未確認 | CWE-319 | Progress MarkLogic Server 12.x releases before 12.1.0 may use cleartext transport for certain cluster-management communications. A network-positioned attacker could intercept or mo |
| CVE-2026-85974 | Awaiting Analysis | 未確認 | CWE-297 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not consistently validate TLS certificate hostnames for certain outbound connections. A net |
| CVE-2026-85975 | Awaiting Analysis | 未確認 | CWE-319 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may use cleartext transport for Amazon S3 connections by default. A network-positioned attacke |
| CVE-2026-85976 | Awaiting Analysis | 未確認 | CWE-113 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which |
| CVE-2026-85977 | Awaiting Analysis | 未確認 | CWE-1050 | A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC_DUMP replies to a client application that uses the pmap_getmaps |
| CVE-2026-85985 | Analyzed | 未確認 | CWE-862 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine plugin file-access UDFs j |
| CVE-2026-85990 | Deferred | 未確認 | CWE-269, CWE-862 | Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation and plugin-management surfaces, Leantime's JSON-RPC dispatcher |
| CVE-2026-86002 | Awaiting Analysis | 未確認 | CWE-95 | Dokku is a docker-powered platform as a service. In Dokku versions before 0.38.25, a user with app-level Dokku access and remote SSH access to execute docker-options commands can s |
| CVE-2026-86008 | Deferred | 未確認 | CWE-269, CWE-285 | Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an administrative account or another dom |
| CVE-2026-86009 | Deferred | 未確認 | CWE-285, CWE-863 | Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing for hosted domains they do not |
| CVE-2026-86016 | Deferred | 未確認 | CWE-79 | VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metada |
| CVE-2026-86018 | Deferred | 未確認 | CWE-400, CWE-770 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated users to bypass the configured maximum attach |
| CVE-2026-86019 | Deferred | 未確認 | CWE-400, CWE-770 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB allows authenticated API users to bypass the configured maximum at |
| CVE-2026-86020 | Deferred | 未確認 | CWE-1236, CWE-20 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.2, Part-DB contains a spreadsheet formula injection vulnerability in the part |
| CVE-2026-86022 | Deferred | 未確認 | CWE-78, CWE-88 | VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProc |
| CVE-2026-86047 | Analyzed | 未確認 | CWE-89 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE SERVER, SHOW CREATE USER, and ma |
| CVE-2026-86055 | Deferred | 未確認 | CWE-640 | Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a |
| CVE-2026-86063 | Awaiting Analysis | 未確認 | CWE-494, CWE-829 | Claude Code is an agentic coding tool. Prior to 2.1.179, the Claude Code and Claude Desktop plugin installation flow runs git checkout for a marketplace-pinned commit without verif |
| CVE-2026-86146 | Deferred | 未確認 | CWE-444 | Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache bRPC (version < 1.18.0) on all platforms allows remote attac |
| CVE-2026-86147 | Deferred | 未確認 | CWE-400, CWE-73 | External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) on all platforms allows remote attackers who can reach the builtin ser |
| CVE-2026-8618 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insufficient validation of decrypted request data length before it i |
| CVE-2026-86249 | Deferred | 未確認 | CWE-287 | On a brpc::Server that sets both ServerOptions.auth and ServerOptions.internal_port, the HTTP built-in service exemption on internal_port can be abused to bypass authentication ent |
| CVE-2026-86325 | Awaiting Analysis | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in protocol gateways' account management interface. The vulnerability is caused by insufficient length validation of the `account |
| CVE-2026-86326 | Awaiting Analysis | 未確認 | CWE-347 | An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware |
| CVE-2026-86344 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in 389-ds-base. An unauthenticated remote attacker can send a complete LDAP operation followed by the first bytes of an incomplete LDAPMessage on the same connecti |
| CVE-2026-86345 | Awaiting Analysis | 未確認 | CWE-923 | A flaw was found in 389-ds-base. The server does not discard plaintext bytes already buffered from a client connection when negotiating StartTLS, allowing an on-path attacker to in |
| CVE-2026-86360 | Analyzed | 未確認 | CWE-22 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker |
| CVE-2026-86361 | Analyzed | 未確認 | CWE-732 | Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could po |
| CVE-2026-86362 | Analyzed | 未確認 | CWE-284 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnera |
| CVE-2026-86375 | Deferred | 未確認 | CWE-311 | Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potential |
| CVE-2026-86405 | Deferred | 未確認 | CWE-347 | Improper verification of cryptographic signature vulnerability in Sipay Electronic Money and Payment Services Inc. PrestaShop Virtual POS Module allows Signature Spoofing by Improp |
| CVE-2026-86409 | Awaiting Analysis | 未確認 | Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentation. A subsequent transfer on the same handle still sends an ` | |
| CVE-2026-86410 | Awaiting Analysis | 未確認 | A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirec | |
| CVE-2026-86411 | Awaiting Analysis | 未確認 | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy handle upgraded with `STARTTLS` and authenticated using a clie | |
| CVE-2026-86412 | Awaiting Analysis | 未確認 | A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and `--cook | |
| CVE-2026-86413 | Awaiting Analysis | 未確認 | When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second orig | |
| CVE-2026-86414 | Awaiting Analysis | 未確認 | An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT` tunnel reques | |
| CVE-2026-86415 | Awaiting Analysis | 未確認 | libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfe | |
| CVE-2026-86461 | Deferred | 未確認 | CWE-434 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the check_mimetype function |
| CVE-2026-86463 | Analyzed | 未確認 | CWE-400 | Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying many combinations when it encounte |
| CVE-2026-86467 | Awaiting Analysis | 未確認 | CWE-352 | Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the authentication response to the browser that began it. The login handler discards the AuthnR |
| CVE-2026-86471 | Deferred | 未確認 | CWE-78 | An unvalidated runtime configuration value in Apache CouchDB 3.5.2 and below on all platforms allows a CouchDB server admin to run arbitrary shell commands as the CouchDB operating |
| CVE-2026-86476 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in gst-plugins-base. A heap buffer overflow can be triggered when processing video buffers whose attached GstVideoMeta metadata declares plane strides and offsets |
| CVE-2026-86535 | Deferred | 未確認 | CWE-1321, CWE-835 | Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift Nod |
| CVE-2026-86536 | Deferred | 未確認 | CWE-1321 | Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in Apache Thrift all JS bindings. This issue affects Apache Thrift: befor |
| CVE-2026-86537 | Deferred | 未確認 | CWE-191, CWE-248, CWE-835 | Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparound) vulnerability in Apache Thrift D language bindings. This issue |
| CVE-2026-86561 | Awaiting Analysis | 未確認 | CWE-770 | A flaw was found in DPDK lib/vhost. Memory size is not adequately validated before mmap during vhost memory-region setup, which can lead to a host crash or memory corruption. |
| CVE-2026-86562 | Awaiting Analysis | 未確認 | CWE-362 | A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content in the VDUSE control-queue han |
| CVE-2026-86563 | Awaiting Analysis | 未確認 | CWE-131 | A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access. |
| CVE-2026-86565 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process. |
| CVE-2026-86566 | Awaiting Analysis | 未確認 | CWE-191 | A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a shared vhost backend such as O |
| CVE-2026-86567 | Awaiting Analysis | 未確認 | CWE-416 | A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap. |
| CVE-2026-86573 | Deferred | 未確認 | CWE-787 | Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: |
| CVE-2026-86589 | Deferred | 未確認 | CWE-303 | Incorrect implementation of authentication algorithm vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. A flaw in the User Center login integrat |
| CVE-2026-86607 | Awaiting Analysis | 未確認 | CWE-209 | Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This issue affects Hitachi Ops Center Administrator: before 11.0.9-01. |
| CVE-2026-86610 | Deferred | 未確認 | CWE-79 | The Download Manager WordPress plugin before 3.3.71 does not sufficiently sanitise and escape a package setting before outputting it back in a page, which could allow users with th |
| CVE-2026-86611 | Deferred | 未確認 | CWE-352 | The Download Manager WordPress plugin before 3.3.71, Download Manager WordPress plugin before 7.5.9 does not have CSRF checks in some places, allowing attackers to make a logged in |
| CVE-2026-86671 | Awaiting Analysis | 未確認 | CWE-522, CWE-73, CWE-918 | In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to `URLFetcher.fetch()`, which calls |
| CVE-2026-86684 | Analyzed | 未確認 | CWE-863 | The Gitea push mirror API checked whether the repository owner, instead of the requesting user, may use local file system paths. On instances with `[security] IMPORT_LOCAL_PATHS = |
| CVE-2026-86696 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthenticated attacker to exhaust the Erlang VM atom table and crash the no |
| CVE-2026-86706 | Deferred | 未確認 | CWE-862 | The Quick quotes WordPress plugin through 1.0.0 does not perform any capability or nonce check on one of its AJAX actions and lets the caller choose which option is written, allow |
| CVE-2026-86717 | Deferred | 未確認 | CWE-862 | The Insurify WordPress plugin through 1.0 does not have authorisation and nonce checks on one of its AJAX actions, allowing unauthenticated users to delete arbitrary WordPress opt |
| CVE-2026-86786 | Deferred | 未確認 | CWE-200 | The Slider Pro WordPress plugin through 1.0.0 does not perform any capability or authorisation check on one of its AJAX actions, allowing unauthenticated users to retrieve the titl |
| CVE-2026-86787 | Deferred | 未確認 | CWE-94 | The affiliate-toolkit WordPress plugin before 3.9.1 does not prevent a low-privileged user from supplying a template body that its bundled templating engine compiles and executes |
| CVE-2026-86791 | Deferred | 未確認 | CWE-345 | The iPOSpays Payment Gateway for WooCommerce WordPress plugin before 1.4.7 does not verify that a payment was actually completed before recording an order as paid, allowing unauthe |
| CVE-2026-86797 | Deferred | 未確認 | CWE-79 | The Pricing Table WordPress plugin before 2.1.5 does not validate the scheme of a user-supplied link value in one of its blocks before rendering it, allowing users with contributo |
| CVE-2026-86798 | Deferred | 未確認 | CWE-79 | The HootBoard WordPress plugin through 3.1.4 does not perform any authorisation check on some of its REST endpoints, and does not escape the values stored through them before outp |
| CVE-2026-86799 | Deferred | 未確認 | CWE-79 | The Forms WordPress plugin before 3.0.2 does not sanitise submitted form values on storage, nor escape them before outputting them on the form submissions screen in the administrat |
| CVE-2026-86803 | Deferred | 未確認 | CWE-94 | The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to the software allowing users to ex |
| CVE-2026-86816 | Deferred | 未確認 | CWE-200 | The WPCafe WordPress plugin before 3.0.21 does not restrict access to some of its REST API endpoints, allowing unauthenticated attackers to read WooCommerce product data, includin |
| CVE-2026-86817 | Deferred | 未確認 | CWE-200 | The Five Star Business Profile and Schema WordPress plugin before 2.4.0 does not properly restrict the callbacks used to resolve schema field default values, allowing authenticated |
| CVE-2026-86826 | Deferred | 未確認 | CWE-200 | The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on we |
| CVE-2026-86827 | Deferred | 未確認 | CWE-862 | The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-ev |
| CVE-2026-86828 | Deferred | 未確認 | CWE-22 | The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, al |
| CVE-2026-86832 | Deferred | 未確認 | CWE-200 | The MetForm WordPress plugin before 4.3.1 does not properly restrict access to form submission data, allowing unauthenticated attackers to view submitter information through the R |
| CVE-2026-86833 | Deferred | 未確認 | CWE-74 | The MetForm WordPress plugin before 4.3.1 does not sanitize or escape submitted form-field values before inserting them into the HTML body of its email notifications, allowing unau |
| CVE-2026-86834 | Deferred | 未確認 | CWE-200 | The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration i |
| CVE-2026-86845 | Awaiting Analysis | 未確認 | CWE-825 | A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the session type before attaching it, le |
| CVE-2026-86846 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an out-of-bounds write in the host |
| CVE-2026-86847 | Awaiting Analysis | 未確認 | CWE-824 | A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-cry |
| CVE-2026-86848 | Awaiting Analysis | 未確認 | CWE-367 | A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious guest to cause an out-of-bounds |
| CVE-2026-86849 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a host buffer in the vhost-crypto |
| CVE-2026-86850 | Deferred | 未確認 | CWE-862 | The SKU Error Fixer for WooCommerce WordPress plugin through 1.0 does not perform any capability or nonce checks on two of its AJAX actions, which are also available to unauthentic |
| CVE-2026-86851 | Deferred | 未確認 | CWE-862 | The Livees Checkout WordPress plugin through 7.0.2 does not perform any capability, nonce or order-key check before acting on request parameters on the order confirmation page, all |
| CVE-2026-86856 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are configured, leading to a host crash or |
| CVE-2026-86868 | Undergoing Analysis | 未確認 | An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker may be able to | |
| CVE-2026-86871 | Undergoing Analysis | 未確認 | CWE-190, CWE-20 | An integer underflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An attacker with control of a |
| CVE-2026-86872 | Awaiting Analysis | 未確認 | CWE-843 | A logic issue was addressed with improved state management. This issue is fixed in Safari 27, visionOS 27, watchOS 27. Processing maliciously crafted web content may lead to unexpe |
| CVE-2026-86874 | Undergoing Analysis | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected tool termination. |
| CVE-2026-86875 | Undergoing Analysis | 未確認 | CWE-20 | An input validation issue was addressed with improved input validation. This issue is fixed in Xcode 27. Parsing a maliciously crafted binary may lead to unexpected app termination |
| CVE-2026-86907 | Undergoing Analysis | 未確認 | CWE-862 | An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app with admin privileges may be able to modi |
| CVE-2026-86913 | Awaiting Analysis | 未確認 | CWE-416 | A use after free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15. |
| CVE-2026-86914 | Undergoing Analysis | 未確認 | CWE-200 | An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able |
| CVE-2026-86915 | Undergoing Analysis | 未確認 | CWE-362 | A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27. An app may be able to cause unexpected system termination. |
| CVE-2026-86918 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Proce |
| CVE-2026-86919 | Awaiting Analysis | 未確認 | CWE-121 | A stack overflow was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macO |
| CVE-2026-86921 | Awaiting Analysis | 未確認 | CWE-269 | A permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A local attack |
| CVE-2026-86922 | Awaiting Analysis | 未確認 | CWE-843 | A type confusion issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. Processing malicious |
| CVE-2026-86928 | Undergoing Analysis | 未確認 | CWE-22 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data. |
| CVE-2026-86932 | Undergoing Analysis | 未確認 | CWE-862 | An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. |
| CVE-2026-86933 | Undergoing Analysis | 未確認 | CWE-269 | A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Golden Gate 27. An app may be able to access information about a user's contact |
| CVE-2026-86935 | Undergoing Analysis | 未確認 | This issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden Gate 27. An app may be able to access user-sensitive data. | |
| CVE-2026-86940 | Undergoing Analysis | 未確認 | CWE-200 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27. An app may be able to disclose kernel memory. |
| CVE-2026-86944 | Awaiting Analysis | 未確認 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able | |
| CVE-2026-86948 | Undergoing Analysis | 未確認 | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. An app may be able to break out of its sandbox. | |
| CVE-2026-86949 | Undergoing Analysis | 未確認 | CWE-829 | This issue was addressed by enforcing library validation on the affected binaries. This issue is fixed in Xcode 27. A malicious app may be able to break out of its sandbox. |
| CVE-2026-86953 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. An at |
| CVE-2026-86955 | Awaiting Analysis | 未確認 | CWE-862 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to access sensitive user data. |
| CVE-2026-86957 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-86959 | Awaiting Analysis | 未確認 | An input validation issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 1 | |
| CVE-2026-86961 | Awaiting Analysis | 未確認 | CWE-362 | A race condition was addressed with additional validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. A malicious app may be able to break out of its sandbo |
| CVE-2026-86962 | Awaiting Analysis | 未確認 | CWE-415 | A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, |
| CVE-2026-86963 | Awaiting Analysis | 未確認 | CWE-20 | A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27. An attacker in a privileged network p |
| CVE-2026-86975 | Awaiting Analysis | 未確認 | CWE-125 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, tvOS 27, visionOS 27, watchOS 27. Processing a |
| CVE-2026-86976 | Awaiting Analysis | 未確認 | CWE-285 | An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27. An app may be able to access sensitive user |
| CVE-2026-86977 | Awaiting Analysis | 未確認 | An authorization issue was addressed with improved network restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may be able to initiate calls or send messages. | |
| CVE-2026-86979 | Awaiting Analysis | 未確認 | CWE-200 | A privacy issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to access sensitive user data. |
| CVE-2026-86981 | Awaiting Analysis | 未確認 | CWE-787 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to cause unexpected system |
| CVE-2026-87018 | Analyzed | 未確認 | CWE-248, CWE-617 | undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, the client process crashes when a TLS 1.2 server ren |
| CVE-2026-87029 | Analyzed | 未確認 | CWE-248 | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the down |
| CVE-2026-87091 | Deferred | 未確認 | CWE-79 | The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Settlement Notification Parameters in all versions up to, and including, 2.12.2 due to |
| CVE-2026-87093 | Analyzed | 未確認 | CWE-732 | Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026. |
| CVE-2026-87095 | Awaiting Analysis | 未確認 | CWE-863 | Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-1 |
| CVE-2026-87096 | Awaiting Analysis | 未確認 | CWE-863 | Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 6.0.1-1 |
| CVE-2026-87108 | Analyzed | 未確認 | CWE-639 | An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required recor |
| CVE-2026-87109 | Analyzed | 未確認 | CWE-201 | An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing endpoints while that member's enrollment i |
| CVE-2026-87110 | Analyzed | 未確認 | CWE-770 | An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work without rate limiting. This can tempora |
| CVE-2026-87111 | Deferred | 未確認 | CWE-79 | The User Registration PRO – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via HTTP Refer |
| CVE-2026-87115 | Deferred | 未確認 | CWE-22 | The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the extract function in all |
| CVE-2026-87117 | Deferred | 未確認 | CWE-476 | NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, whi |
| CVE-2026-87251 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. |
| CVE-2026-87255 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 25.0.4.1 and 27. Difficult to exploit vulnerability allows unauthe | |
| CVE-2026-87263 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 | |
| CVE-2026-87290 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected ar | |
| CVE-2026-87291 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Easily exploitable vulnerability all | |
| CVE-2026-87292 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec | |
| CVE-2026-87293 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Java SE (component: RMI). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. D | |
| CVE-2026-87294 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affecte | |
| CVE-2026-87295 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitabl | |
| CVE-2026-87296 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. | |
| CVE-2026-87297 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0 | |
| CVE-2026-87298 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87299 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87300 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported ver | |
| CVE-2026-87301 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a | |
| CVE-2026-87302 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-87303 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability a | |
| CVE-2026-87304 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi | |
| CVE-2026-87305 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87306 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easi | |
| CVE-2026-87307 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easi | |
| CVE-2026-87308 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87309 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily | |
| CVE-2026-87310 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Database and Comm SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-87311 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Difficult to exploit vulnerability | |
| CVE-2026-87312 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87313 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easi | |
| CVE-2026-87314 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Diff | |
| CVE-2026-87315 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87316 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87317 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87318 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87319 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87320 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26. | |
| CVE-2026-87321 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficu | |
| CVE-2026-87322 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.20. Easily exploitable vulnerability a | |
| CVE-2026-87323 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-87324 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87325 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87326 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87327 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87328 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87329 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87330 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26. | |
| CVE-2026-87331 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26. | |
| CVE-2026-87332 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - Cloud). Supported versions that are affected are 9.2.0.0-9.2.26 | |
| CVE-2026-87333 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-87334 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily expl | |
| CVE-2026-87335 | Awaiting Analysis | 未確認 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploita | |
| CVE-2026-87336 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit v | |
| CVE-2026-87337 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 and 14.1.2. | |
| CVE-2026-87338 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability a | |
| CVE-2026-87339 | Awaiting Analysis | 未確認 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability | |
| CVE-2026-87340 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit v | |
| CVE-2026-87342 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63. Difficult to exploit | |
| CVE-2026-87343 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.61-8.63. Difficult to exploit v | |
| CVE-2026-87344 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63. Easily exploitable vulne | |
| CVE-2026-87345 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink). Supported versions that are affected are 8.61-8.63. Easily exp | |
| CVE-2026-87346 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported versions that are a | |
| CVE-2026-87347 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily e | |
| CVE-2026-87348 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Easi | |
| CVE-2026-87349 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63. Easily exploitable v | |
| CVE-2026-87350 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.61-8.63. Difficult to exploit | |
| CVE-2026-87351 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily |
| CVE-2026-87352 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: LDAP). Supported versions that are affected are 8.61-8.63. Easily exploitable vulne | |
| CVE-2026-87353 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61-8.63. Difficult to exploit | |
| CVE-2026-87354 | Awaiting Analysis | 未確認 | Vulnerability in Oracle TimesTen In-Memory Database (component: Kubernetes Operator). Supported versions that are affected are 22.1-22.1.40.0 and 26.1-26.1.1.2.0. Easily exploita | |
| CVE-2026-87355 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61-8.63. Difficult to | |
| CVE-2026-87356 | Awaiting Analysis | 未確認 | Vulnerability in the Applications Platform Engineering product of Oracle E-Business Suite (component: Valid Session). Supported versions that are affected are 12.2.3-12.2.15. Easi | |
| CVE-2026-87357 | Awaiting Analysis | 未確認 | Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable | |
| CVE-2026-87358 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult | |
| CVE-2026-87359 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploita | |
| CVE-2026-87360 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87361 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 12.2.1.4.0. Easily exploi | |
| CVE-2026-87362 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Folders, Files & Attachments). The supported version that is affected is 9.3.6. Easily exploitabl | |
| CVE-2026-87363 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to expl | |
| CVE-2026-87364 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploita | |
| CVE-2026-87365 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87366 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily e | |
| CVE-2026-87367 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected ar | |
| CVE-2026-87369 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploita |
| CVE-2026-87370 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87371 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87372 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87373 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87374 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87375 | Awaiting Analysis | 未確認 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily | |
| CVE-2026-87376 | Awaiting Analysis | 未確認 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Difficult to exploit | |
| CVE-2026-87377 | Awaiting Analysis | 未確認 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Difficult to exploit | |
| CVE-2026-87378 | Awaiting Analysis | 未確認 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily | |
| CVE-2026-87379 | Awaiting Analysis | 未確認 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily | |
| CVE-2026-87380 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Sales Order Entry product of Oracle JD Edwards (component: Sales Order Entry). The supported version that is affected is 9.2. Easily | |
| CVE-2026-87381 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. | |
| CVE-2026-87382 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Operational Sourcing product of Oracle JD Edwards (component: Operational Sourcing). The supported version that is affected is 9.2. | |
| CVE-2026-87383 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily | |
| CVE-2026-87384 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. | |
| CVE-2026-87385 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. | |
| CVE-2026-87386 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected is 9.2. Difficult to | |
| CVE-2026-87387 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Homebuilder product of Oracle JD Edwards (component: Homebuilder Management). The supported version that is affected is 9.2. Easily | |
| CVE-2026-87388 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Configurator product of Oracle JD Edwards (component: Configuration Management). The supported version that is affected is 9.2. Diff | |
| CVE-2026-87389 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version that is affected is 9.2. | |
| CVE-2026-87390 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-87391 | Awaiting Analysis | 未確認 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily | |
| CVE-2026-87392 | Awaiting Analysis | 未確認 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily exploitable vu | |
| CVE-2026-87393 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi | |
| CVE-2026-87394 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi | |
| CVE-2026-87395 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi |
| CVE-2026-87396 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi | |
| CVE-2026-87397 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi | |
| CVE-2026-87398 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi |
| CVE-2026-87399 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi | |
| CVE-2026-87400 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to |
| CVE-2026-87401 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XML Publisher). Supported versions that are affected are 8.61-8.63. Easily exploita |
| CVE-2026-87402 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-87403 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vul |
| CVE-2026-87404 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerabi |
| CVE-2026-87407 | Awaiting Analysis | 未確認 | CWE-601 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Security). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi |
| CVE-2026-87408 | Awaiting Analysis | 未確認 | CWE-352 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 12.2.3-12.2.15. Easily |
| CVE-2026-87409 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). Supported versions that are affected are 8.61-8.63. Easily exploitable vu |
| CVE-2026-87410 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-87411 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows lo |
| CVE-2026-87412 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex |
| CVE-2026-87413 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The supported version that is affected is 11.4. Easily exploitable vulnerability allows lo |
| CVE-2026-87414 | Awaiting Analysis | 未確認 | CWE-345 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Difficult to exploit vulnerabil |
| CVE-2026-87415 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-87416 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Difficult |
| CVE-2026-87417 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerabilit |
| CVE-2026-87418 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Diff |
| CVE-2026-87419 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploita |
| CVE-2026-87420 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerabil |
| CVE-2026-87421 | Awaiting Analysis | 未確認 | CWE-285 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). The supported version that is affected is 11.4. Easily exploitable vulnerabilit |
| CVE-2026-87422 | Awaiting Analysis | 未確認 | CWE-285 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows una |
| CVE-2026-87423 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to exploit vulnerability all |
| CVE-2026-87424 | Analyzed | 未確認 | CWE-321 | A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments due to the us |
| CVE-2026-87425 | Analyzed | 未確認 | CWE-295 | An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority (CA) certificate |
| CVE-2026-87426 | Analyzed | 未確認 | CWE-200 | An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details and state of |
| CVE-2026-87428 | Analyzed | 未確認 | CWE-522 | In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management credentials for o |
| CVE-2026-87659 | Analyzed | 未確認 | CWE-306 | A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can |
| CVE-2026-87660 | Analyzed | 未確認 | CWE-732 | An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through |
| CVE-2026-87661 | Analyzed | 未確認 | CWE-93 | Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable |
| CVE-2026-87662 | Analyzed | 未確認 | CWE-78 | Brocade Fabric versions before 9.2.2d and 10.0.0 through 10.0.0a1 handling of specific download protocols utilizes unsanitized parameter strings. When processing upgrade requests, |
| CVE-2026-87663 | Analyzed | 未確認 | CWE-290 | An authentication bypass and command injection vulnerability exists in the inter-switch remote execution service of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0 |
| CVE-2026-87664 | Analyzed | 未確認 | CWE-306 | A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.0.0 through 10.0.0a1. When processing local inter-process co |
| CVE-2026-87665 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when |
| CVE-2026-87666 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system |
| CVE-2026-87667 | Analyzed | 未確認 | CWE-88 | An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When execut |
| CVE-2026-87668 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic |
| CVE-2026-87669 | Analyzed | 未確認 | CWE-862 | A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigne |
| CVE-2026-87670 | Analyzed | 未確認 | CWE-290 | An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies excl |
| CVE-2026-87671 | Analyzed | 未確認 | CWE-125 | An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL quer |
| CVE-2026-87672 | Analyzed | 未確認 | CWE-532 | An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use |
| CVE-2026-87673 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fa |
| CVE-2026-87674 | Analyzed | 未確認 | CWE-78 | A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls |
| CVE-2026-87675 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a co |
| CVE-2026-87676 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for m |
| CVE-2026-87677 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator init |
| CVE-2026-87678 | Analyzed | 未確認 | CWE-93 | An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication |
| CVE-2026-87679 | Analyzed | 未確認 | CWE-122 | When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays wit |
| CVE-2026-87680 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands |
| CVE-2026-87681 | Analyzed | 未確認 | CWE-269 | An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain managem |
| CVE-2026-87682 | Analyzed | 未確認 | CWE-78 | Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws |
| CVE-2026-87683 | Analyzed | 未確認 | CWE-121 | Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads |
| CVE-2026-87684 | Analyzed | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an inter |
| CVE-2026-87685 | Analyzed | 未確認 | CWE-73 | An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing co |
| CVE-2026-87686 | Analyzed | 未確認 | CWE-290 | An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine eval |
| CVE-2026-87687 | Analyzed | 未確認 | CWE-88 | An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges |
| CVE-2026-87688 | Analyzed | 未確認 | CWE-77 | An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate manage |
| CVE-2026-87689 | Awaiting Analysis | 未確認 | CWE-306 | The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet. Every mutating and read route in this servlet calls |
| CVE-2026-87690 | Awaiting Analysis | 未確認 | CWE-22 | The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The module interpolates file names take |
| CVE-2026-87691 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87692 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87693 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87694 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87695 | Undergoing Analysis | 未確認 | CWE-829 | Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87696 | Undergoing Analysis | 未確認 | CWE-347 | Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-87697 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-87698 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally. |
| CVE-2026-87699 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87700 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87702 | Undergoing Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87704 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87705 | Undergoing Analysis | 未確認 | CWE-940 | Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network. |
| CVE-2026-87706 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87707 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87708 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87709 | Undergoing Analysis | 未確認 | CWE-250 | Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally. |
| CVE-2026-87710 | Analyzed | 未確認 | CWE-362 | Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87711 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87712 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87713 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-87714 | Analyzed | 未確認 | CWE-862 | Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network. |
| CVE-2026-87715 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-87716 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network. |
| CVE-2026-87726 | Awaiting Analysis | 未確認 | CWE-787 | Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended |
| CVE-2026-87744 | Awaiting Analysis | 未確認 | CWE-425 | A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a |
| CVE-2026-87760 | Deferred | 未確認 | CWE-79 | The Web Vitals Tracking WordPress plugin through 5.4.2 does not validate or escape performance measurements submitted by unauthenticated visitors before storing them and outputting |
| CVE-2026-87761 | Deferred | 未確認 | CWE-79 | The Adwised Web Push Notification WordPress plugin through 2.5.7 does not perform any capability or nonce check before allowing an authenticated user to overwrite its site-wide con |
| CVE-2026-87762 | Deferred | 未確認 | CWE-79 | The Adwised Web Push Notification WordPress plugin through 2.5.7 does not have authorisation checks on several state-changing operations, and the secret comparison it uses instead |
| CVE-2026-87764 | Deferred | 未確認 | CWE-79 | The BuddyPress Instant Chat WordPress plugin through 1.6 does not check that the sender of a chat message belongs to the conversation it is being added to, nor does it escape messa |
| CVE-2026-87765 | Awaiting Analysis | 未確認 | CWE-20 | In the kernel apsys DVFS driver, there is a possible out-of-bounds read or hardware register corruption due to improper input validation of the frequency index. This could lead to |
| CVE-2026-87780 | Deferred | 未確認 | CWE-79 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape values submitted through an unauthenticated endpoint before storing them and outputting them bac |
| CVE-2026-87781 | Deferred | 未確認 | CWE-89 | The LTL Freight Quotes WordPress plugin before 4.2.19 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauth |
| CVE-2026-87782 | Deferred | 未確認 | CWE-269 | The Koinonia Link WordPress plugin before 1.1.5 does not check that a user is allowed to change roles before saving a role selection submitted with a profile update, allowing any a |
| CVE-2026-87800 | Awaiting Analysis | 未確認 | CWE-434 | IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type. |
| CVE-2026-87835 | Received | 未確認 | CWE-284 | The Front End Users WordPress plugin through 3.2.35 does not restrict which account attributes a visitor may set when registering through its front-end forms, allowing unauthentica |
| CVE-2026-87837 | Deferred | 未確認 | CWE-862 | The Wava Payment Plugin WordPress plugin before 0.3.10 does not verify the authenticity of incoming payment-provider notifications, nor restrict who may send them, allowing unauthe |
| CVE-2026-87838 | Deferred | 未確認 | CWE-862 | The Wava Payment Plugin WordPress plugin before 0.3.10 does not perform any authorisation, nonce or origin verification on one of its public REST endpoints, allowing unauthenticate |
| CVE-2026-87841 | Deferred | 未確認 | CWE-862 | The UnitechPay WordPress plugin through 1.0.6.3 does not verify the authenticity of the payment notifications it receives, allowing unauthenticated attackers to mark orders placed |
| CVE-2026-87843 | Deferred | 未確認 | CWE-284 | The Trust Payments Gateway for WooCommerce WordPress plugin before 3.1.0 does not verify the authenticity of the payment provider's response when a customer returns from the hosted |
| CVE-2026-87844 | Deferred | 未確認 | CWE-862 | The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests wi |
| CVE-2026-87846 | Deferred | 未確認 | CWE-862 | The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated u |
| CVE-2026-87849 | Deferred | 未確認 | CWE-125 | The Discovery naming-service reply parser in Apache bRPC (versions < 1.18.0) calls RapidJSON object-only accessors (FindMember) on JSON values without first validating that those v |
| CVE-2026-87855 | Deferred | 未確認 | CWE-434 | The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due |
| CVE-2026-87861 | Awaiting Analysis | 未確認 | When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leavi | |
| CVE-2026-87862 | Awaiting Analysis | 未確認 | Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child. Consequently, when the parent expires, the child's valid HSTS policy | |
| CVE-2026-87863 | Awaiting Analysis | 未確認 | An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values c | |
| CVE-2026-87864 | Awaiting Analysis | 未確認 | Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while transmitting line-ending expanded data. The server reads only $N$ b | |
| CVE-2026-87865 | Awaiting Analysis | 未確認 | When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_S | |
| CVE-2026-87866 | Awaiting Analysis | 未確認 | When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates the connec | |
| CVE-2026-87869 | Deferred | 未確認 | CWE-79 | The Filter Everything — WordPress & WooCommerce Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.9.6. This is due to |
| CVE-2026-87890 | Deferred | 未確認 | CWE-918 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker who c |
| CVE-2026-87901 | Deferred | 未確認 | CWE-79 | Improper sanitization in the registration module allows reflected Cross-Site Scripting. |
| CVE-2026-87920 | Deferred | 未確認 | CWE-79 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Output-Buffer Regex Rewrite in all versions up to, and including, 2.10. |
| CVE-2026-87936 | Awaiting Analysis | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects |
| CVE-2026-87937 | Awaiting Analysis | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal Central Authentication System (CAS) Server allows Fake the Source of Data. This issue affects Central Au |
| CVE-2026-87938 | Awaiting Analysis | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Drupal CSP log allows SQL Injection. This issue affects CSP log versions: from |
| CVE-2026-87939 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Feed Block allows Stored XSS. This issue affects Feed Block versions: f |
| CVE-2026-87940 | Awaiting Analysis | 未確認 | CWE-525 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affec |
| CVE-2026-87941 | Awaiting Analysis | 未確認 | Vulnerability in Drupal Patreon. This issue affects Patreon versions: 7.x. | |
| CVE-2026-87942 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SafeDelete allows Stored XSS. This issue affects SafeDelete versions: f |
| CVE-2026-87943 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal SAML SSO - Service Provider allows Forceful Browsing. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0. |
| CVE-2026-87944 | Awaiting Analysis | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider allows Adversary in the Middle (AiTM). This issue affects SAML SSO - Service Provider versions |
| CVE-2026-87945 | Awaiting Analysis | 未確認 | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Drupal SAML SSO - Service Provider allows Fake the Source of Data. This issue affects SAML SSO - Service Provi |
| CVE-2026-87946 | Awaiting Analysis | 未確認 | CWE-208 | Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows Brute Force. This issue affects SAML SSO - Service Provider versions: from 0.0.0 to 3.2.0 |
| CVE-2026-87947 | Awaiting Analysis | 未確認 | CWE-347 | Improper Verification of Cryptographic Signature vulnerability in Drupal SAML SSO - Service Provider allows Signature Spoof. This issue affects SAML SSO - Service Provider versio |
| CVE-2026-87948 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This is |
| CVE-2026-87949 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal SAML SSO - Service Provider allows Cross-Site Scripting (XSS). This is |
| CVE-2026-87950 | Awaiting Analysis | 未確認 | CWE-798 | Use of Hard-coded Credentials vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provider versions |
| CVE-2026-87951 | Awaiting Analysis | 未確認 | CWE-922 | Insecure Storage of Sensitive Information vulnerability in Drupal SAML SSO - Service Provider allows Retrieve Embedded Sensitive Data. This issue affects SAML SSO - Service Provid |
| CVE-2026-87952 | Awaiting Analysis | 未確認 | CWE-294 | Authentication Bypass by Capture-replay vulnerability in Drupal SAML SSO - Service Provider allows Remote Services with Stolen Credentials. This issue affects SAML SSO - Service P |
| CVE-2026-87953 | Awaiting Analysis | 未確認 | CWE-918 | Server-Side Request Forgery (SSRF) vulnerability in Drupal SAML SSO - Service Provider allows Server Side Request Forgery. This issue affects SAML SSO - Service Provider versions |
| CVE-2026-87954 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Taxonomy Term Glossary allows Forceful Browsing. This issue affects Taxonomy Term Glossary versions: from 0.0.0 to 4.6.0. |
| CVE-2026-87955 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Ultimate Table Field allows Forceful Browsing. This issue affects Ultimate Table Field versions: from 0.0.0 to 1.1.1, from 2.0.0 to 2. |
| CVE-2026-87968 | Deferred | 未確認 | CWE-284 | The Product Feed for Google Shopping, Microsoft Advertising and 40+ Channels for WooCommerce Merchant WordPress plugin before 5.3.2 does not perform a nonce or capability check on |
| CVE-2026-87970 | Deferred | 未確認 | CWE-79 | The If-So Dynamic Content WordPress plugin before 1.10.2 does not escape a request-supplied value before reflecting it in an unauthenticated AJAX response that is served as HTML, |
| CVE-2026-87971 | Deferred | 未確認 | CWE-79 | The If-So Dynamic Content WordPress plugin before 1.10.2 does not validate the URL scheme of a request-supplied value before reflecting it into a link on an admin page, allowing a |
| CVE-2026-87973 | Deferred | 未確認 | CWE-79 | The If-So Dynamic Content WordPress plugin before 1.10.2 does not sanitize a conversion name before storing it, nor escape it when rendering the analytics page, allowing users wit |
| CVE-2026-87974 | Deferred | 未確認 | CWE-287 | The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default configuration and |
| CVE-2026-87975 | Deferred | 未確認 | CWE-639 | An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.forms.models.BaseModelFormSet.save_existing_objects()` used the presence of a p |
| CVE-2026-87980 | Analyzed | 未確認 | CWE-532 | IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs. |
| CVE-2026-88041 | Deferred | 未確認 | CWE-459 | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a subsequent request. This issue affects Apache Tomcat: fro |
| CVE-2026-88043 | Deferred | 未確認 | CWE-79 | The Mang Board WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.0 due to insufficient in |
| CVE-2026-88070 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88071 | Analyzed | 未確認 | CWE-415 | Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88072 | Analyzed | 未確認 | CWE-59 | Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88073 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88074 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88075 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a n |
| CVE-2026-88076 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88079 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88080 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88081 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-88082 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88083 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88084 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network. |
| CVE-2026-88085 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88086 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network. |
| CVE-2026-88088 | Awaiting Analysis | 未確認 | CWE-190 | Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88089 | Awaiting Analysis | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally. |
| CVE-2026-88091 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88092 | Analyzed | 未確認 | CWE-444 | Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-88093 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88094 | Undergoing Analysis | 未確認 | CWE-74 | Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Storage Library allows an authorized attacker to elevate privileges over |
| CVE-2026-88096 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DCOM Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88098 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88099 | Analyzed | 未確認 | CWE-248 | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
| CVE-2026-88100 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88101 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88102 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88103 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88105 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88106 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88107 | Undergoing Analysis | 未確認 | CWE-362, CWE-416 | Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88109 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88110 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88112 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88113 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88114 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88115 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88116 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88117 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88118 | Undergoing Analysis | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88119 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88120 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88121 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88122 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
| CVE-2026-88123 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
| CVE-2026-88124 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88125 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
| CVE-2026-88126 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88127 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88128 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88129 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
| CVE-2026-88130 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network. |
| CVE-2026-88131 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88132 | Undergoing Analysis | 未確認 | CWE-346 | Origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88133 | Undergoing Analysis | 未確認 | CWE-59 | Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88134 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88135 | Undergoing Analysis | 未確認 | CWE-862 | Improper access control in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88136 | Undergoing Analysis | 未確認 | CWE-41 | Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network. |
| CVE-2026-88137 | Undergoing Analysis | 未確認 | CWE-552 | Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network. |
| CVE-2026-88139 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88140 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally. |
| CVE-2026-88141 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88142 | Undergoing Analysis | 未確認 | CWE-122 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88143 | Undergoing Analysis | 未確認 | CWE-122, CWE-191 | Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88144 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88145 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88146 | Undergoing Analysis | 未確認 | CWE-362, CWE-416 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker |
| CVE-2026-88147 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88149 | Undergoing Analysis | 未確認 | CWE-415 | Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88150 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88151 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88152 | Undergoing Analysis | 未確認 | CWE-416 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88153 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88154 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88155 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-88156 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88157 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88158 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally. |
| CVE-2026-88159 | Undergoing Analysis | 未確認 | CWE-125 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88160 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privilege |
| CVE-2026-88161 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88162 | Analyzed | 未確認 | CWE-863 | Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. |
| CVE-2026-88163 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-88164 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-88165 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Active Directory Domain Services allows an authorized attacker to execute code over a network. |
| CVE-2026-88166 | Analyzed | 未確認 | CWE-121, CWE-190 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
| CVE-2026-88167 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88168 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88169 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88171 | Analyzed | 未確認 | CWE-415 | Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88172 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88173 | Analyzed | 未確認 | CWE-367, CWE-416 | Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88174 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Deployment Services allows an unauthorized attacker to execute code over a ne |
| CVE-2026-88175 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88177 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88178 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88179 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88180 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88181 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88182 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88183 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88184 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88185 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88186 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88188 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88189 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88190 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88191 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88192 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88193 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88194 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally. |
| CVE-2026-88195 | Analyzed | 未確認 | CWE-126, CWE-191 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88196 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88197 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88198 | Analyzed | 未確認 | CWE-862 | Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-88200 | Analyzed | 未確認 | CWE-270 | Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-88201 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88202 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88203 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-88204 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-88206 | Analyzed | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-88207 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88208 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-88209 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network |
| CVE-2026-88210 | Analyzed | 未確認 | CWE-807 | Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally. |
| CVE-2026-88219 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. |
| CVE-2026-88226 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2026-88252 | Analyzed | 未確認 | CWE-835 | A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service's available file descriptors (system handles used for open connection |
| CVE-2026-88257 | Deferred | 未確認 | CWE-20 | Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beam_mcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input s |
| CVE-2026-88391 | Awaiting Analysis | 未確認 | CWE-94 | Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/**, so /h2-console is exposed with no a |
| CVE-2026-88392 | Deferred | 未確認 | CWE-22 | Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbitrary code. |
| CVE-2026-88393 | Deferred | 未確認 | CWE-94 | WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded and passed directly into the str |
| CVE-2026-88394 | Deferred | 未確認 | CWE-22 | WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the da |
| CVE-2026-88395 | Deferred | 未確認 | CWE-89 | GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter. |
| CVE-2026-88396 | Deferred | 未確認 | CWE-22 | ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim ther |
| CVE-2026-88397 | Deferred | 未確認 | CWE-89 | ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter. |
| CVE-2026-88424 | Deferred | 未確認 | CWE-89 | FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter(). This vulnerability allows attackers to acce |
| CVE-2026-88514 | Awaiting Analysis | 未確認 | CWE-200 | An issue in iTerm2 macOS before 3.6.12 allows a local attacker to obtain sensitive information. |
| CVE-2026-88647 | Awaiting Analysis | 未確認 | CWE-297 | A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate. |
| CVE-2026-88648 | Awaiting Analysis | 未確認 | Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certificate Authority to bypass cross-domain PKI restrictions and issue unauthorized ce | |
| CVE-2026-88753 | Deferred | 未確認 | CWE-400 | A Regular-Expression Denial of Service (ReDoS) in the Markdown2. extract_metadata() function (lib/markdown2.py) of trentm markdown2 through v2.5.5 allows attackers to cause a Denia |
| CVE-2026-88755 | Deferred | 未確認 | CWE-200, CWE-284, CWE-78, CWE-863 | Z.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace configuration, possibly allowing attackers t |
| CVE-2026-88779 | Analyzed | 掲載 | CWE-119 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before |
| CVE-2026-88782 | Deferred | 未確認 | CWE-79 | The Kubio AI Page Builder WordPress plugin before 2.9.3 does not validate the URI scheme of a user-supplied value before outputting it as a link target, allowing users with the con |
| CVE-2026-88783 | Deferred | 未確認 | CWE-79 | The Kubio AI Page Builder WordPress plugin before 2.9.3 does not limit its widening of the allowed HTML elements to the editor context, so the wider set is applied when filtering c |
| CVE-2026-88784 | Deferred | 未確認 | CWE-79 | The Translate WordPress with Weglot 2.0 WordPress plugin before 6.4.3 does not escape the URLs it re-inserts into a page when rewriting links for a translated language, and revers |
| CVE-2026-88785 | Deferred | 未確認 | CWE-200 | The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-aft |
| CVE-2026-88789 | Deferred | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference in the XSLT support extension (camel-quarkus-support-xalan) in Apache Camel Quarkus from 3.2.0 before 3.33.3 and from 3.34.0 b |
| CVE-2026-88794 | Awaiting Analysis | 未確認 | CWE-611 | Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature. When a user loads a crafted XML file containing a `DOCTYPE` with an external |
| CVE-2026-88826 | Deferred | 未確認 | CWE-79 | The SmugMug Embed WordPress plugin through 3.13 does not have authorisation or CSRF checks on an AJAX action that stores gallery data, and does not sanitise or escape that data bef |
| CVE-2026-88827 | Deferred | 未確認 | CWE-287 | The Disable Users WordPress plugin through 1.0.5 does not enforce its account-disabling control on all authentication paths, allowing the holder of an account an administrator has |
| CVE-2026-88829 | Awaiting Analysis | 未確認 | CWE-444 | A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request o |
| CVE-2026-88833 | Awaiting Analysis | 未確認 | CWE-191 | A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP he |
| CVE-2026-88834 | Awaiting Analysis | 未確認 | CWE-203 | A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence oracle may exist in certain build configurations. An attacker |
| CVE-2026-88836 | Rejected | 未確認 | Rejected reason: Red Hat Product Security determined this is not a security vulnerability. BusyBox internal TLS is intentionally minimal and documents in FEATURE_WGET_HTTPS that it | |
| CVE-2026-88838 | Awaiting Analysis | 未確認 | CWE-693 | A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These |
| CVE-2026-88842 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and t |
| CVE-2026-88849 | Deferred | 未確認 | CWE-863 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.55 does not verify that a user targeted through its student-enrolment feature has any relationship to the requesti |
| CVE-2026-88900 | Undergoing Analysis | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. |
| CVE-2026-88901 | Undergoing Analysis | 未確認 | CWE-611 | Improper Restriction of XML External Entity Reference vulnerability in Apache Camel. This issue affects Apache Camel: from 4.7.0 before 4.18.5, from 4.19.0 before 4.22.1. Imp |
| CVE-2026-88903 | Deferred | 未確認 | CWE-79 | The Topcontent WordPress plugin through 1.2.1 does not properly authorise one of its request handlers and disables HTML sanitisation before storing the submitted content, allowing |
| CVE-2026-88905 | Deferred | 未確認 | CWE-79 | The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthe |
| CVE-2026-88927 | Deferred | 未確認 | CWE-639 | The rtMedia for WordPress, BuddyPress and bbPress WordPress plugin before 4.7.14 does not verify that a user owns or may write to the album an upload is assigned to, allowing users |
| CVE-2026-88930 | Deferred | 未確認 | CWE-89 | The Social Web Suite WordPress plugin through 4.1.12 does not require its shared secret to be set before accepting requests authorised by it, and does not sanitise and escape a pa |
| CVE-2026-88931 | Deferred | 未確認 | CWE-862 | The Social Web Suite WordPress plugin through 4.1.12 does not restrict which of its settings may be written through an unauthenticated endpoint, allowing attackers to overwrite ar |
| CVE-2026-88962 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation. |
| CVE-2026-88963 | Deferred | 未確認 | CWE-79 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via the 'redirect_url' parameter in versions up to, and in |
| CVE-2026-88964 | Awaiting Analysis | 未確認 | CWE-125, CWE-191 | An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via cr |
| CVE-2026-88998 | Deferred | 未確認 | CWE-345 | The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the order or the a |
| CVE-2026-88999 | Deferred | 未確認 | CWE-862 | The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a |
| CVE-2026-89035 | Awaiting Analysis | 未確認 | CWE-613 | MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session |
| CVE-2026-89039 | Deferred | 未確認 | CWE-22, CWE-424 | A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the contents of any file readable by |
| CVE-2026-89047 | Deferred | 未確認 | CWE-79 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due t |
| CVE-2026-89051 | Deferred | 未確認 | CWE-79 | The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'replaceHeadersAndTags' function in versions up to, |
| CVE-2026-89052 | Deferred | 未確認 | CWE-321 | A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic key shared across devices. An attacker who obtains an encrypt |
| CVE-2026-89057 | Awaiting Analysis | 未確認 | CWE-288 | A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access. |
| CVE-2026-89062 | Awaiting Analysis | 未確認 | CWE-787 | A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error. |
| CVE-2026-89067 | Analyzed | 未確認 | CWE-288 | Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 20 |
| CVE-2026-89068 | Analyzed | 未確認 | CWE-304 | Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026. |
| CVE-2026-89069 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Progress MOVEit Transfer (Ad Hoc module). This issue affects MOVEit Transfer: |
| CVE-2026-89070 | Analyzed | 未確認 | CWE-294 | Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026. |
| CVE-2026-89071 | Analyzed | 未確認 | CWE-90 | Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module). This issue affects MOVEit Transfer: b |
| CVE-2026-89072 | Analyzed | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0 |
| CVE-2026-89073 | Analyzed | 未確認 | CWE-613 | Insufficient Session Expiration vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4. |
| CVE-2026-89074 | Analyzed | 未確認 | CWE-176 | Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4. |
| CVE-2026-89075 | Analyzed | 未確認 | CWE-922 | Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4. |
| CVE-2026-89076 | Analyzed | 未確認 | CWE-89 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module). This issue affects MOVEit T |
| CVE-2026-89077 | Analyzed | 未確認 | CWE-303 | Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module). This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 |
| CVE-2026-89079 | Deferred | 未確認 | CWE-269 | The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1. This is due to the plugin not properly v |
| CVE-2026-89085 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation |
| CVE-2026-89088 | Awaiting Analysis | 未確認 | CWE-787 | A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resi |
| CVE-2026-89091 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the archive extractor validates member paths using lexical path normalisati |
| CVE-2026-89096 | Awaiting Analysis | 未確認 | CWE-772 | A flaw was found in nfs-utils. An unauthenticated remote attacker can trigger a Denial of Service (DoS) by sending repeated state notification requests to an exposed rpc.statd serv |
| CVE-2026-89097 | Deferred | 未確認 | CWE-200 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.18 via the ai_wp_footer_ho |
| CVE-2026-89098 | Awaiting Analysis | 未確認 | CWE-617 | A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local |
| CVE-2026-89100 | Deferred | 未確認 | CWE-79 | The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '#response' URL Fragment in all versions up to, and including, 4 |
| CVE-2026-89105 | Awaiting Analysis | 未確認 | CWE-1188 | The HybridTokenAuthenticator component of the SAP/cloud-security-services-integration-library accepts tokens from unintended ambient IAS/XSUAA bindings, potentially allowing unauth |
| CVE-2026-89106 | Awaiting Analysis | 未確認 | CWE-183 | SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in |
| CVE-2026-89107 | Awaiting Analysis | 未確認 | CWE-94 | SAP S/4HANA (Manage Substitution/Validation Rules) does not sufficiently validate input processed by rule definition functionality that utilizes a domain-specific scripting languag |
| CVE-2026-89108 | Awaiting Analysis | 未確認 | CWE-862 | SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within certain administrative functionality. An attacker with MII administrato |
| CVE-2026-89110 | Awaiting Analysis | 未確認 | CWE-749 | SAP NetWeaver Visual Composer does not perform sufficient authorization checks in certain portal functionality. An attacker with low privileges could invoke internal operations on |
| CVE-2026-89111 | Awaiting Analysis | 未確認 | CWE-918 | The SAP Cloud SDK for Python contains an OAuth2 SSRF vulnerability affecting multi-tenant BTP applications. An attacker who controls the tenant_subdomain parameter can redirect OAu |
| CVE-2026-89112 | Awaiting Analysis | 未確認 | CWE-862 | The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an org |
| CVE-2026-89113 | Awaiting Analysis | 未確認 | CWE-89 | SAP Commerce Cloud does not sufficiently validate certain user-supplied input before it is incorporated into a database query. An authenticated user could send specially crafted re |
| CVE-2026-89116 | Awaiting Analysis | 未確認 | CWE-78 | The affected code used child_process.execSync with a shell string for generator installation and uninstallation. This allowed an attacker to execute arbitrary OS commands with the |
| CVE-2026-89117 | Awaiting Analysis | 未確認 | CWE-79 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed i |
| CVE-2026-89118 | Awaiting Analysis | 未確認 | CWE-552 | SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve non-critical application information, which leads to Low impact on Co |
| CVE-2026-89120 | Awaiting Analysis | 未確認 | CWE-1188 | A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness. The session manager can be opened in single transaction mode, incl |
| CVE-2026-89121 | Awaiting Analysis | 未確認 | CWE-862 | SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on associated business object data. An attacker with low privileges |
| CVE-2026-89122 | Awaiting Analysis | 未確認 | CWE-601 | SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component. An unauthenticated attacker could craft a malicious link that, when clicked by a |
| CVE-2026-89124 | Awaiting Analysis | 未確認 | CWE-863 | Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks within certain functionality, allowing an authenticated low-privil |
| CVE-2026-89140 | Awaiting Analysis | 未確認 | CWE-639 | Temporal Server does not bind internal completion callbacks to the namespace that attached them, which allows an authenticated caller with write permission in one namespace to alte |
| CVE-2026-89182 | Analyzed | 未確認 | CWE-863 | With `[repository] FORCE_PRIVATE = true`, Gitea creates new repositories as private, but the post-receive hook still applied the `repo.private=false` push option to an empty reposi |
| CVE-2026-89191 | Deferred | 未確認 | CWE-79 | Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sani |
| CVE-2026-89195 | Deferred | 未確認 | CWE-89 | The Site Setup Wizard WordPress plugin through 1.5.8 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to |
| CVE-2026-89196 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in facility names processed during the |
| CVE-2026-89197 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Value field of notification cond |
| CVE-2026-89198 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize the filename of firmware files uploaded to th |
| CVE-2026-89199 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to sensitive configuration items via specific data |
| CVE-2026-89200 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in the Name and Value fields for custom |
| CVE-2026-89201 | Awaiting Analysis | 未確認 | CWE-89 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input in device group or facility names proce |
| CVE-2026-89202 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform authorization checks for device disconnection requests. Th |
| CVE-2026-89203 | Awaiting Analysis | 未確認 | CWE-201 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to various database queries, allowing users to ret |
| CVE-2026-89204 | Awaiting Analysis | 未確認 | CWE-639 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly restrict access to database queries used for subnet management. Th |
| CVE-2026-89205 | Awaiting Analysis | 未確認 | CWE-602 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to schedule |
| CVE-2026-89206 | Awaiting Analysis | 未確認 | CWE-602 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly perform server-side authorization checks for requests to modify th |
| CVE-2026-89208 | Awaiting Analysis | 未確認 | CWE-125 | A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions |
| CVE-2026-89213 | Deferred | 未確認 | CWE-89 | The Llavero.io WordPress plugin through 0.1.4 does not properly sanitise and escape a parameter before using it in a SQL statement, which allows unauthenticated attackers to perfor |
| CVE-2026-89214 | Deferred | 未確認 | CWE-89 | The WpCues Basic Quiz WordPress plugin through 1.6.5 does not properly sanitise and escape values before using them in a SQL statement, which allows unauthenticated attackers to pe |
| CVE-2026-89232 | Deferred | 未確認 | CWE-89 | The Recordbrowser WordPress plugin through 1.1.7 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQ |
| CVE-2026-89234 | Deferred | 未確認 | CWE-89 | The WP-Partner WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL q |
| CVE-2026-89235 | Deferred | 未確認 | CWE-89 | The Testimonials by BestWebSoft WordPress plugin through 1.0.8 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append |
| CVE-2026-89236 | Deferred | 未確認 | CWE-89 | The SaveTo Wishlist Lite WordPress plugin before 1.1.5 does not sanitise and escape parameters before using them in the ORDER BY clause of a SQL query, allowing unauthenticated at |
| CVE-2026-89269 | Deferred | 未確認 | CWE-79 | The WP Testimonials WordPress plugin through 1.4.13 does not properly escape testimonial content and reverses WordPress's HTML sanitization when rendering it, allowing users with t |
| CVE-2026-89271 | Deferred | 未確認 | CWE-434 | The WP-BusinessDirectory WordPress plugin through 4.0.2 does not restrict the type or destination of files saved by an unauthenticated upload handler, allowing unauthenticated att |
| CVE-2026-89279 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc. Authtake allows Encryption Brute Forcing. This issue affects authtake: from v1.3 before v1.4. |
| CVE-2026-89280 | Deferred | 未確認 | CWE-639 | The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all |
| CVE-2026-89283 | Deferred | 未確認 | CWE-862 | The WP Posts Password Batch Manager WordPress plugin through 1.1 does not perform any capability or nonce check on a bulk post-password action that runs on an always-loaded admin h |
| CVE-2026-89285 | Deferred | 未確認 | CWE-89 | The Datalist it WordPress plugin through 0.0.3 does not sanitize and escape several request parameters before using them to build a SQL query, allowing unauthenticated attackers to |
| CVE-2026-89286 | Deferred | 未確認 | CWE-200 | The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes inside the publicly accessible uploads directory, allowing unaut |
| CVE-2026-89287 | Deferred | 未確認 | CWE-89 | The ASPL Product Quotation WordPress plugin through 1.1.0 does not sanitize and escape a parameter before using it in SQL statements, allowing unauthenticated attackers to perform |
| CVE-2026-89288 | Deferred | 未確認 | CWE-89 | The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attac |
| CVE-2026-89289 | Deferred | 未確認 | CWE-862 | The Fast Courier WordPress plugin through 5.2.3 does not restrict an unauthenticated REST route that writes order fulfillment data, allowing unauthenticated attackers to overwrite |
| CVE-2026-89290 | Deferred | 未確認 | CWE-80 | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Stored XSS. |
| CVE-2026-89296 | Deferred | 未確認 | CWE-89 | The Pro Like Button WordPress plugin before 2.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL inje |
| CVE-2026-89297 | Deferred | 未確認 | CWE-89 | The Loja Automática WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL i |
| CVE-2026-89299 | Deferred | 未確認 | CWE-89 | The WP Verify API WordPress plugin through 1.0.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL inj |
| CVE-2026-89301 | Deferred | 未確認 | CWE-862 | The rtMedia for WordPress, BuddyPress and bbPress plugin for WordPress is vulnerable to limited file deletion due to insufficient file path validation in the process function in al |
| CVE-2026-89302 | Deferred | 未確認 | CWE-89 | The Post Voting System WordPress plugin through 1.0 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform SQL |
| CVE-2026-89304 | Deferred | 未確認 | CWE-89 | The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing unauthenticated users to perform blind SQL inj |
| CVE-2026-89305 | Deferred | 未確認 | CWE-89 | The paymendo WordPress plugin through 1.1 does not properly sanitize and escape a parameter before using it in a SQL query, allowing any authenticated user to perform SQL injectio |
| CVE-2026-89309 | Deferred | 未確認 | CWE-306 | The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases. First, it only requires an Authorization header for GET and HEAD request |
| CVE-2026-89310 | Deferred | 未確認 | CWE-89 | A parameter taken from the request body is inserted into a T-SQL statement without parameterization or escaping, allowing a remote attacker to execute arbitrary SQL statements in t |
| CVE-2026-89312 | Deferred | 未確認 | CWE-248 | `AesGcmCryptor.Open` passed a caller-supplied nonce straight to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rather than returning an error wh |
| CVE-2026-89313 | Deferred | 未確認 | CWE-706 | `JwksTrustStore.Get` assigned each parsed key to the function's **named return value** while refreshing the JWKS cache. When the requested `kid` was not present, the trailing naked |
| CVE-2026-89314 | Deferred | 未確認 | CWE-407 | `jwkFields.CheckConsistency` detected duplicate `key_ops` entries with a pairwise nested loop, making validation cost grow with the **square** of the entry count. Because the check |
| CVE-2026-89315 | Deferred | 未確認 | CWE-248 | `JwtClaims.MarshalJSON` built a Go struct at runtime with `reflect.StructOf`, synthesising a field named `"A" + claimName` for each untyped claim. `reflect.StructOf` **panics** whe |
| CVE-2026-89316 | Deferred | 未確認 | CWE-248 | `LoadPublicKey` resolved an EC key's curve with an unchecked type assertion, `algToOptsMap[alg].(*ECDSAOptions)`. A JWK declaring `"kty":"EC"` together with a non-EC `"alg"` — whic |
| CVE-2026-89317 | Deferred | 未確認 | CWE-1288, CWE-20, CWE-347 | gose parsed the JWS `crit` header into `JwsHeader.Crit` and then never read it. RFC 7515 §4.1.11 requires a recipient to reject a JWS whose listed critical extension parameters it |
| CVE-2026-89318 | Deferred | 未確認 | CWE-248 | `JweRsaKeyEncryptionDecryptorImpl.Decrypt` passed the JWE's initialization vector to `cipher.AEAD.Open` without checking its length. The Go standard library **panics** rather than |
| CVE-2026-89319 | Deferred | 未確認 | CWE-129 | `JweDirectDecryptorBlock.Decrypt` read a 64-bit plaintext length from the `_thales_aad` protected-header field and used it without any validation. A truncated field panics `binary. |
| CVE-2026-89320 | Deferred | 未確認 | CWE-354 | `HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of the empty message under the key. Every AES-CBC-HMAC JWE produced or verified by go |
| CVE-2026-89322 | Awaiting Analysis | 未確認 | CWE-178 | Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy names. This may allow an authenticated user with delegated p |
| CVE-2026-89409 | Awaiting Analysis | 未確認 | CWE-940 | In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing checks in the ZWAVE_CMD_NODES_EXIST handler can result in nod |
| CVE-2026-89410 | Awaiting Analysis | 未確認 | CWE-1285 | In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information. |
| CVE-2026-89417 | Deferred | 未確認 | CWE-79 | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 's' Search Parameter via comments-atom Feed in all |
| CVE-2026-89419 | Awaiting Analysis | 未確認 | CWE-424 | OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to /v1/nodes/{ident} - in other words, not using the specific maintenan |
| CVE-2026-89424 | Deferred | 未確認 | CWE-79 | The Duplicate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noti_token' parameter in all versions up to, and including, 1.5.6 due to insufficient |
| CVE-2026-89427 | Deferred | 未確認 | CWE-79 | The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 's' Search Parameter in all versions up to, and including, 2.8.1 |
| CVE-2026-89430 | Analyzed | 未確認 | CWE-367, CWE-918 | Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created. Each synchronization passed the stored address dir |
| CVE-2026-9032 | Deferred | 未確認 | CWE-476 | Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup a |
| CVE-2026-90438 | Deferred | 未確認 | CWE-79 | The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission in all ve |
| CVE-2026-90440 | Deferred | 未確認 | CWE-248, CWE-404, CWE-755 | Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in Apache Thrift D thrift.server.nonblocking.TNonblockingServer. This i |
| CVE-2026-90458 | Awaiting Analysis | 未確認 | CWE-1287 | OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's Redfish service. |
| CVE-2026-90466 | Analyzed | 未確認 | CWE-23 | Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted_jar_p |
| CVE-2026-90484 | Deferred | 未確認 | CWE-476 | The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared paylo |
| CVE-2026-90530 | Awaiting Analysis | 未確認 | CWE-22 | ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An atta |
| CVE-2026-90531 | Undergoing Analysis | 未確認 | CWE-611 | Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-privileged a |
| CVE-2026-90532 | Undergoing Analysis | 未確認 | CWE-863 | Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaini |
| CVE-2026-90797 | Deferred | 未確認 | CWE-409 | An unlimited gzip decompression routine in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any remote client to cause a denial of service via memory exhaustion. Us |
| CVE-2026-90798 | Deferred | 未確認 | CWE-834 | A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a replication source or target to cause a denial of service via c |
| CVE-2026-90799 | Deferred | 未確認 | CWE-502 | Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to cause a denial of service via memory exhaustion. Users a |
| CVE-2026-90800 | Deferred | 未確認 | CWE-862 | Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read the full contents of a prefixed _user or _replicator database v |
| CVE-2026-90821 | Deferred | 未確認 | CWE-79 | An input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform stored XSS via malicious form |
| CVE-2026-90910 | Awaiting Analysis | 未確認 | CWE-306 | Missing authentication for critical function vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The reaction API did not enforce content visibil |
| CVE-2026-90911 | Awaiting Analysis | 未確認 | CWE-400 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-90912 | Awaiting Analysis | 未確認 | CWE-674 | IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to uncontrolled recursion. |
| CVE-2026-90920 | Awaiting Analysis | 未確認 | CWE-94 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control of code generation. |
| CVE-2026-90921 | Awaiting Analysis | 未確認 | CWE-130 | IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host |
| CVE-2026-90952 | Deferred | 未確認 | CWE-862 | The WP Edit Password Protected WordPress plugin before 2.0.7 does not enforce its site-wide access restriction on the WordPress REST API, allowing unauthenticated users to read the |
| CVE-2026-90954 | Awaiting Analysis | 未確認 | CWE-59 | A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, and unzip handlers whic |
| CVE-2026-90970 | Awaiting Analysis | 未確認 | CWE-1336 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19. |
| CVE-2026-90972 | Deferred | 未確認 | CWE-284 | The WP Fusion Lite WordPress plugin before 3.48.0 does not perform a capability check on two of its admin AJAX handlers, allowing any authenticated subscriber to read other users' |
| CVE-2026-90974 | Deferred | 未確認 | CWE-862 | The WP Fusion Lite WordPress plugin before 3.48.0 does not require authentication on a settings handler that runs during admin initialization, allowing unauthenticated users to ov |
| CVE-2026-90983 | Deferred | 未確認 | CWE-603 | Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. (Hayat Hospital) Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3 |
| CVE-2026-90987 | Deferred | 未確認 | CWE-472 | The Easy PayPal & Stripe Buy Now Button WordPress plugin before 2.0.6 does not derive the payment amount on the server, taking it from a client-supplied field, so an unauthenticate |
| CVE-2026-90988 | Deferred | 未確認 | CWE-200 | The Request a Quote WordPress plugin through 2.5.6 does not perform an authorization check on one of its unauthenticated AJAX handlers, allowing unauthenticated users to read the |
| CVE-2026-90989 | Deferred | 未確認 | CWE-200 | The Tainacan WordPress plugin before 1.4.0 does not restrict its reports REST endpoints to users with a management capability, allowing any authenticated subscriber to read the ema |
| CVE-2026-90992 | Deferred | 未確認 | CWE-79 | The Redux Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User Meta Merge via 'user-mediaurl' Media Field in all versions up to, and including, 4.5. |
| CVE-2026-91013 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicio |
| CVE-2026-91020 | Deferred | 未確認 | CWE-472 | The WebToffee Gift Cards for WooCommerce WordPress plugin before 1.3.1 does not validate a user-supplied gift card amount server-side before using it as the cart-item price and sto |
| CVE-2026-91022 | Deferred | 未確認 | CWE-79 | The Motors WordPress plugin before 1.4.124 does not sanitise and escape a listing badge setting before outputting it inside an HTML attribute, allowing users with a custom, admini |
| CVE-2026-91023 | Deferred | 未確認 | CWE-862 | The Motors WordPress plugin before 1.4.124 does not properly verify that a user is authorised to modify a listing before processing one of its listing management actions, allowing |
| CVE-2026-91041 | Awaiting Analysis | 未確認 | CWE-1284, CWE-787 | Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is attacker-positioned and attacker-valued, a |
| CVE-2026-91046 | Deferred | 未確認 | CWE-284 | The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt execution in several of its settings-save handlers, allowing u |
| CVE-2026-91047 | Deferred | 未確認 | CWE-862 | The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected WooCommerce product downloads, allowing unauthenticated users t |
| CVE-2026-91050 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference / Missing Authorization in v |
| CVE-2026-91057 | Awaiting Analysis | 未確認 | CWE-125 | `_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends with a carriage return (`\r`). The over- |
| CVE-2026-91059 | Awaiting Analysis | 未確認 | CWE-125 | The GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header after `SOS` re-runs the frame header parser after the output bu |
| CVE-2026-91074 | Deferred | 未確認 | CWE-89 | The BSK PDF Manager WordPress plugin through 3.8.1 does not properly sanitise and escape a parameter before using it in a SQL statement, which could allow authenticated users with |
| CVE-2026-91076 | Deferred | 未確認 | CWE-862 | The Robokassa payment gateway for Woocommerce WordPress plugin before 1.9.0 does not verify the authenticity of an incoming payment-notification request before acting on the order |
| CVE-2026-91078 | Deferred | 未確認 | CWE-287 | The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of the privileged POS account it creates on activation to be changed before use, and i |
| CVE-2026-91093 | Awaiting Analysis | 未確認 | CWE-427 | A potential security vulnerability has been identified in HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or arbitrary cod |
| CVE-2026-91107 | Awaiting Analysis | 未確認 | CWE-639 | openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path t |
| CVE-2026-91108 | Deferred | 未確認 | CWE-862 | The Alt Text AI – Automatically generate image alt text for SEO and accessibility plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1 |
| CVE-2026-91109 | Deferred | 未確認 | CWE-639 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.6.12.31 via the 'complete_group' par |
| CVE-2026-91135 | Deferred | 未確認 | CWE-122 | Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB transform for the frames it sends, THeaderTransport::transfo |
| CVE-2026-91136 | Deferred | 未確認 | CWE-22 | The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modules |
| CVE-2026-91137 | Deferred | 未確認 | CWE-1284, CWE-770, CWE-834 | Improper validation of specified quantity in input, Allocation of resources without limits or throttling, Excessive Iteration vulnerability in Apache Thrift PHP bindings. This i |
| CVE-2026-91140 | Awaiting Analysis | 未確認 | CWE-78 | An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software Autonomous REST Connector GenAI Agents ARCGenAI-Generator version |
| CVE-2026-91156 | Deferred | 未確認 | CWE-862 | Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, MessageBus audience calculation could deliver messages from a read-restricted |
| CVE-2026-91157 | Deferred | 未確認 | CWE-200, CWE-863 | Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, sites with secure uploads enabled did not reconcile existing upload security m |
| CVE-2026-91159 | Deferred | 未確認 | CWE-79 | Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, oEmbed processing treated an entire attacker-controlled HTML fragment as trust |
| CVE-2026-91184 | Awaiting Analysis | 未確認 | CWE-76 | Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and u |
| CVE-2026-91186 | Awaiting Analysis | 未確認 | CWE-125, CWE-787 | The PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already supplied transparency, but nothing prevents an IHDR be |
| CVE-2026-91189 | Awaiting Analysis | 未確認 | CWE-190, CWE-680, CWE-787 | The GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and `gx_page_header_last_glyph` are read verbatim from the |
| CVE-2026-91208 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows una | |
| CVE-2026-91209 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The supported version that is affected is 11.4. Difficult to exploit vulnerability all | |
| CVE-2026-91210 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to | |
| CVE-2026-91211 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Connectors and Connector Server). Supported versions that are affected are 1 | |
| CVE-2026-91212 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1 | |
| CVE-2026-91213 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer). Supported versions that are affected are 12.2.1.4.0 an | |
| CVE-2026-91214 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex |
| CVE-2026-91215 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91216 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91217 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91218 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91219 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91220 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 |
| CVE-2026-91221 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91222 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported versions that are affected are 12.2 | |
| CVE-2026-91223 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91224 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91225 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploi | |
| CVE-2026-91226 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult | |
| CVE-2026-91227 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult | |
| CVE-2026-91228 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91229 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult | |
| CVE-2026-91230 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91231 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploi | |
| CVE-2026-91232 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91233 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise Scheduling System). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-91234 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex |
| CVE-2026-91235 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex |
| CVE-2026-91236 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex |
| CVE-2026-91237 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91238 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91239 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily ex | |
| CVE-2026-91240 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-91241 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions that are affected ar | |
| CVE-2026-91242 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). The supported version that is affected is 11.4. Easily exploitable vulnerability allows high p | |
| CVE-2026-91243 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 an | |
| CVE-2026-91244 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows low | |
| CVE-2026-91245 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E | |
| CVE-2026-91246 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E | |
| CVE-2026-91247 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. D | |
| CVE-2026-91248 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. E | |
| CVE-2026-91249 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low | |
| CVE-2026-91250 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploi | |
| CVE-2026-91251 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploi | |
| CVE-2026-91252 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unaut | |
| CVE-2026-91253 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low pri | |
| CVE-2026-91254 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthe |
| CVE-2026-91255 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthe |
| CVE-2026-91256 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low p | |
| CVE-2026-91257 | Awaiting Analysis | 未確認 | Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera | |
| CVE-2026-91259 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. E | |
| CVE-2026-91260 | Awaiting Analysis | 未確認 | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi | |
| CVE-2026-91261 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Difficult to | |
| CVE-2026-91262 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploi | |
| CVE-2026-91263 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Notification Configuration). Supported versions that are affected are 8.61-8.63. Di | |
| CVE-2026-91264 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise SCM Manufacturing product of Oracle PeopleSoft (component: Security). The supported version that is affected is 9.2. Difficult to explo | |
| CVE-2026-91265 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 |
| CVE-2026-91266 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91267 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easi | |
| CVE-2026-91268 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex | |
| CVE-2026-91269 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-91270 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91271 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91272 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Diff | |
| CVE-2026-91273 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. E | |
| CVE-2026-91274 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91275 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91276 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0 | |
| CVE-2026-91277 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0 | |
| CVE-2026-91278 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91279 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex | |
| CVE-2026-91280 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex | |
| CVE-2026-91281 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-91282 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to e | |
| CVE-2026-91283 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex | |
| CVE-2026-91284 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26. | |
| CVE-2026-91285 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0 | |
| CVE-2026-91286 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91287 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-91288 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Diff | |
| CVE-2026-91289 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91290 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex | |
| CVE-2026-91291 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. | |
| CVE-2026-91292 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Localizations product of Oracle JD Edwards (component: LATAM). The supported version that is affected is 9.2. Easily exploitable vul | |
| CVE-2026-91293 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. | |
| CVE-2026-91294 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Business Logic Infra SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. | |
| CVE-2026-91295 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-91296 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-91297 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91298 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex | |
| CVE-2026-91299 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0 |
| CVE-2026-91300 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult | |
| CVE-2026-91301 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. | |
| CVE-2026-91302 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.2 | |
| CVE-2026-91303 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91304 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91305 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas |
| CVE-2026-91306 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91307 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91308 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91309 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Diff | |
| CVE-2026-91310 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily e | |
| CVE-2026-91311 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91312 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91313 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.4. Dif | |
| CVE-2026-91314 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91315 | Undergoing Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91316 | Awaiting Analysis | 未確認 | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported versions that are affected are 12.2.3-12.2.15. Easily exploi | |
| CVE-2026-91317 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Databinding). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Diffi | |
| CVE-2026-91318 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Ea | |
| CVE-2026-91319 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Java Business Objects). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-91320 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Dif | |
| CVE-2026-91321 | Awaiting Analysis | 未確認 | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exp | |
| CVE-2026-91322 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: Oracle JDeveloper). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Eas | |
| CVE-2026-91323 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-91324 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). The supported version that is affected is 11.4. Difficult to exploit vulnerability allows un | |
| CVE-2026-91325 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91326 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.4. Eas | |
| CVE-2026-91327 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Dif | |
| CVE-2026-91328 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Deployment SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exp | |
| CVE-2026-91329 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Dif | |
| CVE-2026-91330 | Awaiting Analysis | 未確認 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Eas | |
| CVE-2026-91331 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Common Application Objects). The supported version that is affec | |
| CVE-2026-91332 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle |
| CVE-2026-91333 | Awaiting Analysis | 未確認 | Vulnerability in Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and 27. Difficult to exploit vulnerability all | |
| CVE-2026-91334 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected | |
| CVE-2026-91335 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). Supported versions that are affected are | |
| CVE-2026-91336 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low pr | |
| CVE-2026-91337 | Awaiting Analysis | 未確認 | Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploi | |
| CVE-2026-91338 | Awaiting Analysis | 未確認 | Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vuln | |
| CVE-2026-91339 | Awaiting Analysis | 未確認 | Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera | |
| CVE-2026-91340 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91341 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91342 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91343 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91344 | Undergoing Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. |
| CVE-2026-91345 | Undergoing Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. |
| CVE-2026-91346 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91347 | Awaiting Analysis | 未確認 | Vulnerability in the iSupport product of Oracle E-Business Suite (component: Service Requests). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnera | |
| CVE-2026-91348 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allow | |
| CVE-2026-91349 | Undergoing Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. |
| CVE-2026-91350 | Undergoing Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. |
| CVE-2026-91351 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91352 | Undergoing Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. |
| CVE-2026-91353 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91354 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91355 | Undergoing Analysis | 未確認 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. | |
| CVE-2026-91356 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Switzerland product of Oracle PeopleSoft (component: Global Payroll for Switzerland). The supported version that is | |
| CVE-2026-91357 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Supported versions that are affected are 12.2.3-12.2.15. Difficult | |
| CVE-2026-91358 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+)). Supported versions that are affecte | |
| CVE-2026-91359 | Undergoing Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo | |
| CVE-2026-91360 | Undergoing Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo | |
| CVE-2026-91361 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo |
| CVE-2026-91362 | Undergoing Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo | |
| CVE-2026-91363 | Undergoing Analysis | 未確認 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to | |
| CVE-2026-91364 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to |
| CVE-2026-91365 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to |
| CVE-2026-91366 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to |
| CVE-2026-91367 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo |
| CVE-2026-91368 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to |
| CVE-2026-91369 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Difficult to |
| CVE-2026-91370 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo |
| CVE-2026-91371 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo |
| CVE-2026-91372 | Undergoing Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 22.3-26.9. Easily explo |
| CVE-2026-91373 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle Gr |
| CVE-2026-91374 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported versions that are a |
| CVE-2026-91375 | Awaiting Analysis | 未確認 | CWE-863 | Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle |
| CVE-2026-91376 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affec |
| CVE-2026-91377 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9. Easily exploitable vul |
| CVE-2026-91378 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open Integration). Supported versions that are affected are 25.12-26.9. Easily exploitable vul |
| CVE-2026-91379 | Awaiting Analysis | 未確認 | CWE-416 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools). Supported versions that are affect |
| CVE-2026-91380 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected |
| CVE-2026-91381 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503 an |
| CVE-2026-91382 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are |
| CVE-2026-91383 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2. |
| CVE-2026-91384 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily ex |
| CVE-2026-91385 | Awaiting Analysis | 未確認 | CWE-416 | Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracl |
| CVE-2026-91386 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0 |
| CVE-2026-91387 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al |
| CVE-2026-91388 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability |
| CVE-2026-91389 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al |
| CVE-2026-91390 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al |
| CVE-2026-91391 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability |
| CVE-2026-91392 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability |
| CVE-2026-91393 | Awaiting Analysis | 未確認 | CWE-352 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Difficult to exploit vulnerability |
| CVE-2026-91394 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 11.0.32.1, |
| CVE-2026-91395 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected |
| CVE-2026-91396 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected |
| CVE-2026-91397 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability). Supported versions that are a |
| CVE-2026-91398 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec |
| CVE-2026-91399 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affec |
| CVE-2026-91400 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected a | |
| CVE-2026-91402 | Awaiting Analysis | 未確認 | CWE-693 | Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracl |
| CVE-2026-91403 | Awaiting Analysis | 未確認 | CWE-327 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected ar |
| CVE-2026-91404 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Eas |
| CVE-2026-91405 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Dif |
| CVE-2026-91406 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK). The supported version that is affected is 8.5.8. Dif |
| CVE-2026-91407 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0 |
| CVE-2026-91408 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: End User Self Service). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-91409 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in Oracle Java SE (component: Networking). The supported version that is affected is Oracle Java SE: 27. Difficult to exploit vulnerability allows unauthenticated a |
| CVE-2026-91410 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Orac |
| CVE-2026-91411 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected ar |
| CVE-2026-91412 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al |
| CVE-2026-91413 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 17.0-26.9. Easily exploitab |
| CVE-2026-91414 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91415 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are |
| CVE-2026-91417 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are Oracle Java SE: 8u503 |
| CVE-2026-91418 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions th |
| CVE-2026-91419 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 12.2.1.4.0. Easily exploitable vul |
| CVE-2026-91420 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91421 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91422 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91423 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91424 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91426 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91427 | Awaiting Analysis | 未確認 | CWE-404 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91428 | Awaiting Analysis | 未確認 | CWE-601 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al |
| CVE-2026-91429 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91430 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel CRM (component: Financial Accounts). Supported versions that are affected are 17.0-26.9. Difficult t |
| CVE-2026-91431 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al |
| CVE-2026-91432 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). Supported versions that are affected are 17.0-26.9. Easily exploitable vulnerability al |
| CVE-2026-91433 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Siebel Apps - Field Service product of Oracle Siebel CRM (component: Smart Answer). Supported versions that are affected are 17.0-26.9. Easily exploitable vul |
| CVE-2026-91434 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91435 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91436 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91437 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91438 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91439 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91440 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91441 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel Apps - Customer Order Management product of Oracle Siebel CRM (component: Order Management). Supported versions that are affected are 17.0-26.9. Easily |
| CVE-2026-91442 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91443 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91444 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91445 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Communications Panel/Dashboard). Supported versions that are affected are 17.0-26.9. Easily explo |
| CVE-2026-91446 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91447 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91448 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Easily exploitable |
| CVE-2026-91449 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91450 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure). Supported versions that are affected are 17.0-26.9. Difficult to exploi |
| CVE-2026-91451 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Ora |
| CVE-2026-91452 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec |
| CVE-2026-91453 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server). Supported versions t |
| CVE-2026-91455 | Awaiting Analysis | 未確認 | CWE-601 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: E1 Dev Platform Tech - UNIX). Supported versions that are affected are 9.2.0.0-9.2.26. |
| CVE-2026-91457 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. E |
| CVE-2026-91458 | Awaiting Analysis | 未確認 | CWE-20 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi |
| CVE-2026-91459 | Awaiting Analysis | 未確認 | CWE-502 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. E |
| CVE-2026-91460 | Awaiting Analysis | 未確認 | CWE-502 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Image Export SDK). The supported version that is affected is 8.5.8. E |
| CVE-2026-91461 | Awaiting Analysis | 未確認 | CWE-295 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected ar |
| CVE-2026-91462 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected ar |
| CVE-2026-91463 | Awaiting Analysis | 未確認 | CWE-416 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected ar |
| CVE-2026-91464 | Awaiting Analysis | 未確認 | CWE-416 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected ar |
| CVE-2026-91465 | Awaiting Analysis | 未確認 | CWE-200 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easi |
| CVE-2026-91466 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Asset Management). The supported version that is affected is 9.1. |
| CVE-2026-91467 | Awaiting Analysis | 未確認 | CWE-287 | Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0 |
| CVE-2026-91468 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: QAS). Supported versions that are affected are 8.61-8.63. Easily exploitable vulner |
| CVE-2026-91471 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: BAM Framework). The supported version that is affected is 9.2. D |
| CVE-2026-91473 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vu |
| CVE-2026-91474 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily |
| CVE-2026-91475 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK). The supported version that is affected is 8.5.8. |
| CVE-2026-91476 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9.1. Easily | |
| CVE-2026-91477 | Awaiting Analysis | 未確認 | CWE-922 | Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle JavaFX: 25.0.4 and 27. Difficult to exploit vuln |
| CVE-2026-91478 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Eas |
| CVE-2026-91479 | Awaiting Analysis | 未確認 | CWE-400 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows unauthenticated at |
| CVE-2026-91480 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Strategic Sourcing). The supported version that is affected is 9.2. Eas |
| CVE-2026-91481 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Registration). The supported version that is affected is 9.2. Easily e |
| CVE-2026-91482 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing product of Oracle PeopleSoft (component: Bidder Registration). The supported version that is affected is 9.2. Ea |
| CVE-2026-91483 | Awaiting Analysis | 未確認 | CWE-502 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core). The supported version that is affected is 8.5.8. Easily exploi |
| CVE-2026-91484 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: Java plugin). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf. Difficult to exploit vulnerability allows |
| CVE-2026-91485 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). The supported version that is affected is 9.2. Difficult |
| CVE-2026-91486 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN General Ledger Brazil product of Oracle PeopleSoft (component: General Ledger). The supported version that is affected is 9.1. Easi |
| CVE-2026-91487 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle G |
| CVE-2026-91488 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Generic REST). Supported versions that are affected are 12.2.1.4.0 and 14.1 |
| CVE-2026-91489 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1 |
| CVE-2026-91490 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1 |
| CVE-2026-91491 | Undergoing Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1 |
| CVE-2026-91492 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: SAP ERP+). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1 |
| CVE-2026-91493 | Undergoing Analysis | 未確認 | CWE-287 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1 |
| CVE-2026-91494 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: LDAP Gateway). Supported versions that are affected are 12.2.1.4.0 and 14.1 |
| CVE-2026-91495 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. |
| CVE-2026-91496 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to e |
| CVE-2026-91497 | Undergoing Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mgmt). Supported versions that are affected are 8.61-8.63. Easi |
| CVE-2026-91499 | Awaiting Analysis | 未確認 | CWE-269 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att |
| CVE-2026-91501 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Installer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easil |
| CVE-2026-91502 | Awaiting Analysis | 未確認 | CWE-306 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and |
| CVE-2026-91503 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the VPD component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulnerability |
| CVE-2026-91504 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Portal Suite). Supported versions that are affected are 12.2.1.4.0 and 14.1. |
| CVE-2026-91505 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Porting). Supported versions that are affected are 8.61 and 8.62. Easily exploitabl | |
| CVE-2026-91506 | Awaiting Analysis | 未確認 | Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to e | |
| CVE-2026-91511 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to e | |
| CVE-2026-91512 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91514 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easi | |
| CVE-2026-91515 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91517 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Management Pack for Oracle GoldenGate product of Oracle GoldenGate (component: EM Plugin). Supported versions that are affected are 13.4.1.0.1-13.5.2.0 | |
| CVE-2026-91518 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01. | |
| CVE-2026-91519 | Undergoing Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution). Supported versions that are affected are 8.61-8.63. Easily ex | |
| CVE-2026-91520 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91521 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91523 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0 | |
| CVE-2026-91524 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is affected is 12.2.1.4.0. | |
| CVE-2026-91526 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Diff | |
| CVE-2026-91527 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability | |
| CVE-2026-91528 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2.1.4.0. Easily exploitable v | |
| CVE-2026-91530 | Awaiting Analysis | 未確認 | Vulnerability in Oracle GoldenGate (component: Admin Client Executable). Supported versions that are affected are 23.4-23.26.2.0.0. Difficult to exploit vulnerability allows high | |
| CVE-2026-91532 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Easi | |
| CVE-2026-91534 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that are affected are 8.2.0 | |
| CVE-2026-91535 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0, 12.2.1 | |
| CVE-2026-91536 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult | |
| CVE-2026-91537 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11.4. Easily exploitable vulnerability allows low pr | |
| CVE-2026-91539 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Presentation Services). The supported version that is affected is 12. | |
| CVE-2026-91541 | Awaiting Analysis | 未確認 | CWE-284 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Brazil product of Oracle PeopleSoft (component: Common Objects). The supported version that is affected is 9.1. Easi |
| CVE-2026-91542 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-91545 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 | |
| CVE-2026-91546 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is affected is 12.2.1.4.0. | |
| CVE-2026-91547 | Awaiting Analysis | 未確認 | Vulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily ex | |
| CVE-2026-91549 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 | |
| CVE-2026-91550 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91552 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. | |
| CVE-2026-91553 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise FIN Product Configurator Brazil product of Oracle PeopleSoft (component: Product Configurator). The supported version that is affected | |
| CVE-2026-91554 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerabili | |
| CVE-2026-91555 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easi | |
| CVE-2026-91557 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Foundation). The supported version that is affected is 12.2.1.4.0. | |
| CVE-2026-91559 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Brazil product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily e | |
| CVE-2026-91562 | Awaiting Analysis | 未確認 | Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft (component: Inventory). The supported version that is affected is 9.1. Easily exploit | |
| CVE-2026-91563 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle OLAP component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Easily exploitable vulne | |
| CVE-2026-91565 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91568 | Awaiting Analysis | 未確認 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 23.4.0-23.26.3. Easily exploitable vulnerability allows low privileged att | |
| CVE-2026-91573 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91574 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Publisher Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01. | |
| CVE-2026-91576 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is affected is 12.2.1.4 | |
| CVE-2026-91577 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Platform Security). The supported version that is affected is 12.2 | |
| CVE-2026-91579 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0 | |
| CVE-2026-91582 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). The supported version that is affected is 12.2.1.4.0. Dif | |
| CVE-2026-91588 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: BI Search). Supported versions that are affected are 8.2.0.0.0 and 12 | |
| CVE-2026-91590 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API). Supported versions that are affected are 8.2.0.0.0 and 26.01.0.0.0. Easily expl | |
| CVE-2026-91597 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). Supported versions that are affected are 8.2.0.0.0 | |
| CVE-2026-91598 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Majel Mobile Service). Supported versions that are affected are 8.2.0. | |
| CVE-2026-91600 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer). The supported version that is affected is 26.01.0.0 | |
| CVE-2026-91604 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91607 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are affected are 8.2.0.0.0 | |
| CVE-2026-91608 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 8.2.0.0.0, 12.2.1.4.0 and 26.01.0.0.0. Easi | |
| CVE-2026-91609 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: Graph QL). Supported versions that are affected are 24.2.0-26.2.1. Easily exploitable vulnerability allows low privileged at | |
| CVE-2026-91610 | Awaiting Analysis | 未確認 | Vulnerability in Oracle REST Data Services (component: General). Supported versions that are affected are 24.2.0-26.2.2. Easily exploitable vulnerability allows low privileged att | |
| CVE-2026-91612 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5 | |
| CVE-2026-91613 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5 | |
| CVE-2026-91614 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Unified Inventory Management product of Oracle Communications (component: Security). Supported versions that are affected are 7.5.0, 7.5 | |
| CVE-2026-91615 | Awaiting Analysis | 未確認 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.32, 21.3-21.23 and 23.4.0-23.26.3. Difficult to exploit vulnera | |
| CVE-2026-91616 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions that are affected ar | |
| CVE-2026-91617 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Middleware Common Libraries and Tools product of Oracle Fusion Middleware (component: Remote Diagnostic Agent). Supported versions that are affected ar | |
| CVE-2026-91622 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91623 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91624 | Awaiting Analysis | 未確認 | CWE-287, CWE-306 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a |
| CVE-2026-91625 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Product Quality Management). The supported version that is a | |
| CVE-2026-91627 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0 | |
| CVE-2026-91628 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server). Supported versions that are affected are 15.0.0 | |
| CVE-2026-91629 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform). Supported versions that are affected are 15.0.0.0 | |
| CVE-2026-91630 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with | |
| CVE-2026-91631 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91632 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91633 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attacker with | |
| CVE-2026-91634 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with | |
| CVE-2026-91635 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker wi |
| CVE-2026-91636 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91637 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with |
| CVE-2026-91638 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with |
| CVE-2026-91639 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91640 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91641 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91642 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with | |
| CVE-2026-91643 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attac | |
| CVE-2026-91644 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with | |
| CVE-2026-91645 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with | |
| CVE-2026-91646 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker wi | |
| CVE-2026-91647 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker wi |
| CVE-2026-91648 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attac | |
| CVE-2026-91649 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows high privileged attac | |
| CVE-2026-91650 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated att | |
| CVE-2026-91651 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged |
| CVE-2026-91652 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91653 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged at | |
| CVE-2026-91654 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91655 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91656 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Federated Partitions). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged at | |
| CVE-2026-91657 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91658 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with |
| CVE-2026-91659 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Build). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with net | |
| CVE-2026-91660 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91661 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with | |
| CVE-2026-91662 | Analyzed | 未確認 | Vulnerability in Oracle Essbase (component: Java Based Agent). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged atta | |
| CVE-2026-91663 | Analyzed | 未確認 | CWE-284 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with |
| CVE-2026-91664 | Analyzed | 未確認 | CWE-400 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with |
| CVE-2026-91665 | Analyzed | 未確認 | CWE-287, CWE-306 | Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with |
| CVE-2026-91668 | Awaiting Analysis | 未確認 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository). Supported versions that are affected are 12.2.1.4.0 and 14.1.2 | |
| CVE-2026-91784 | Deferred | 未確認 | CWE-88 | cjbassi/gotop is vulnerable to local argument injection via process termination functionality. The process name is passed directly to pkill without sanitization. A local attacker c |
| CVE-2026-91828 | Deferred | 未確認 | CWE-400 | The OMGF | GDPR/DSGVO Compliant, Faster Google Fonts. Easy. WordPress plugin before 6.3.11 does not require authentication or a valid nonce on an action that issues a slow server-s |
| CVE-2026-91829 | Deferred | 未確認 | CWE-79 | The Subscribe to Comments WordPress plugin before 2.3.3 does not properly validate a parameter before reflecting it into a link target, allowing unauthenticated attackers to perfor |
| CVE-2026-91830 | Deferred | 未確認 | CWE-200 | The Subscribe to Comments WordPress plugin before 2.3.3 does not sign or validate a cookie it trusts to identify a commenter, allowing unauthenticated attackers to disclose a subsc |
| CVE-2026-91831 | Deferred | 未確認 | CWE-93 | The Subscribe to Comments WordPress plugin before 2.3.3 does not sanitise newline characters from a notification sender-name setting before using it in e-mail headers, allowing use |
| CVE-2026-91833 | Deferred | 未確認 | CWE-89 | The WX Subscribe 微信支付付费订阅 WordPress plugin through 1.2.1 does not sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform |
| CVE-2026-91844 | Deferred | 未確認 | CWE-434 | Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects |
| CVE-2026-91858 | Awaiting Analysis | 未確認 | CWE-611 | FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance() and enabling only FEATURE_SECU |
| CVE-2026-91862 | Deferred | 未確認 | CWE-79 | The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-image-points' parameter in all versions up to, and including, 3.0.1 du |
| CVE-2026-91881 | Awaiting Analysis | 未確認 | CWE-295 | Dell Terraform Provider for Redfish, versions prior to 1.6.2, contains an Improper Certificate Validation vulnerability in the HTTP transport component. An unauthenticated attacker |
| CVE-2026-91882 | Awaiting Analysis | 未確認 | CWE-209 | Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API |
| CVE-2026-91883 | Awaiting Analysis | 未確認 | CWE-532 | Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A |
| CVE-2026-9191 | Awaiting Analysis | 未確認 | CWE-346 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and XDBC evaluati |
| CVE-2026-92084 | Deferred | 未確認 | CWE-94 | The The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.11.0 |
| CVE-2026-92085 | Deferred | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TMT Machinery Industry and Trade Co. Ltd. Talassoft Industrial Management Soft |
| CVE-2026-92088 | Awaiting Analysis | 未確認 | CWE-232 | Improper handling of undefined values vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation. This issue affects upKeeper Instant Privil |
| CVE-2026-9209 | Deferred | 未確認 | CWE-250, CWE-306 | mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Login.aspx admin panel handlers, where the runQueryButton postback and exportSqlQuer |
| CVE-2026-92097 | Deferred | 未確認 | CWE-94 | The Click to Chat for WhatsApp plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 4.44 This is due to the greetings_dialog() func |
| CVE-2026-92115 | Deferred | 未確認 | CWE-77 | The WP Photo Album Plus plugin for WordPress is vulnerable to authenticated Command Injection in all versions up to, and including, 9.3.02.002 via the `value` parameter of the `upd |
| CVE-2026-92116 | Deferred | 未確認 | CWE-601 | OAuth1 callback validation vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes t |
| CVE-2026-92119 | Deferred | 未確認 | CWE-915 | REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0, which fixes the |
| CVE-2026-92120 | Deferred | 未確認 | CWE-294 | OAuth1 Request Replay Attack vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Users are recommended to upgrade to version 1.22.0 which fixes |
| CVE-2026-92144 | Deferred | 未確認 | CWE-79 | The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'postdata-1[post-custom]' Parameter in |
| CVE-2026-92150 | Deferred | 未確認 | CWE-617 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriver_handle |
| CVE-2026-92151 | Deferred | 未確認 | CWE-617 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::Ccsds::SpacePacketDeframer dataIn_ |
| CVE-2026-92152 | Deferred | 未確認 | CWE-129 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0, Svc::GenericHub output-port dis |
| CVE-2026-92153 | Deferred | 未確認 | CWE-22, CWE-73 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileUplink handling of Fw::FilePac |
| CVE-2026-92154 | Deferred | 未確認 | CWE-190 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset |
| CVE-2026-92155 | Deferred | 未確認 | CWE-617 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Fw::FilePacket deserialization used by |
| CVE-2026-92156 | Deferred | 未確認 | CWE-131, CWE-617 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::EventManager loqQueue_internalInte |
| CVE-2026-92157 | Deferred | 未確認 | CWE-190, CWE-617 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range val |
| CVE-2026-92158 | Deferred | 未確認 | CWE-190, CWE-787 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer STORE directive stack |
| CVE-2026-92159 | Deferred | 未確認 | CWE-130, CWE-805 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::TlmPacketizer TlmRecv_handler fixe |
| CVE-2026-92160 | Deferred | 未確認 | CWE-190, CWE-617 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink SendPartial range val |
| CVE-2026-92162 | Awaiting Analysis | 未確認 | CWE-22 | Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Prior to version 1.18.1, on systems where at least one OCI remote is configured |
| CVE-2026-92174 | Deferred | 未確認 | CWE-98 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This make |
| CVE-2026-9218 | Awaiting Analysis | 未確認 | CWE-20 | Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the |
| CVE-2026-92183 | Awaiting Analysis | 未確認 | CWE-121 | GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installatio |
| CVE-2026-92202 | Awaiting Analysis | 未確認 | CWE-427 | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect |
| CVE-2026-92203 | Awaiting Analysis | 未確認 | CWE-918 | Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbit |
| CVE-2026-92204 | Awaiting Analysis | 未確認 | CWE-918 | Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitra |
| CVE-2026-92205 | Awaiting Analysis | 未確認 | CWE-22 | BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations |
| CVE-2026-92206 | Deferred | 未確認 | CWE-470 | CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal |
| CVE-2026-92207 | Deferred | 未確認 | CWE-94 | MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MindsDB. A |
| CVE-2026-92208 | Awaiting Analysis | 未確認 | CWE-122 | NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installati |
| CVE-2026-92209 | Awaiting Analysis | 未確認 | CWE-331 | NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMa |
| CVE-2026-92210 | Awaiting Analysis | 未確認 | CWE-918 | NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected |
| CVE-2026-92228 | Awaiting Analysis | 未確認 | CWE-732 | The Apache Airflow Keycloak provider's multi-team provisioning (`_attach_team_permissions`) granted every team role global read access to audit logs. Deployments that enable multi- |
| CVE-2026-92243 | Deferred | 未確認 | CWE-79 | The Ivory Search – WordPress Search Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 5.5.18 d |
| CVE-2026-92244 | Deferred | 未確認 | CWE-79 | The PDF Invoices & Packing Slips for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Billing First Name / Last Name / Company Fields in all versio |
| CVE-2026-92245 | Deferred | 未確認 | CWE-862 | The Simply Schedule Appointments plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.12.32 via the 'recursive' parameter. |
| CVE-2026-9226 | Awaiting Analysis | 未確認 | CWE-294 | Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captur |
| CVE-2026-92262 | Analyzed | 未確認 | CWE-706 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50# bypass prefix is affected beca |
| CVE-2026-92263 | Deferred | 未確認 | CWE-78 | SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an uploaded filename into a s |
| CVE-2026-92287 | Awaiting Analysis | 未確認 | CWE-20 | Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet |
| CVE-2026-92386 | Awaiting Analysis | 未確認 | When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, an | |
| CVE-2026-92387 | Awaiting Analysis | 未確認 | By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mecha | |
| CVE-2026-92388 | Awaiting Analysis | 未確認 | When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the | |
| CVE-2026-92389 | Awaiting Analysis | 未確認 | libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangea | |
| CVE-2026-92390 | Awaiting Analysis | 未確認 | When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTT | |
| CVE-2026-92391 | Awaiting Analysis | 未確認 | A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `cu | |
| CVE-2026-92392 | Awaiting Analysis | 未確認 | CWE-416 | During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_e |
| CVE-2026-92393 | Deferred | 未確認 | CWE-863 | Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the foll |
| CVE-2026-92409 | Deferred | 未確認 | CWE-79 | The Donation Thermometer WordPress plugin before 2.3.0 does not escape a colour value taken from a shortcode attribute before using it in an attribute of the generated legend marku |
| CVE-2026-92412 | Deferred | 未確認 | CWE-79 | The Five Star Restaurant Reviews WordPress plugin before 2.3.14 does not properly escape a user-supplied value before outputting it into an HTML tag, allowing unauthenticated attac |
| CVE-2026-92414 | Analyzed | 未確認 | CWE-384 | : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV server attaches a cached authenticated session on any Lock-Token/Transactio |
| CVE-2026-92415 | Analyzed | 未確認 | CWE-470 | — Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Davex client. A malicious WebDAV/DavEx server, or an attacker able to in |
| CVE-2026-92426 | Deferred | 未確認 | CWE-863 | The YITH WooCommerce Popup WordPress plugin before 1.60.0 does not check the capability of the requesting user before deleting post meta, allowing users with the Contributor role a |
| CVE-2026-92427 | Deferred | 未確認 | CWE-200 | The Coinsnap Bitcoin Crowdfunding WordPress plugin through 1.2.0 does not restrict access to the secret used to authenticate its payment gateway webhook, disclosing it to unauthent |
| CVE-2026-92428 | Deferred | 未確認 | CWE-345 | The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticate |
| CVE-2026-92429 | Deferred | 未確認 | CWE-345 | The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticate |
| CVE-2026-92431 | Deferred | 未確認 | CWE-862 | The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in a |
| CVE-2026-92432 | Deferred | 未確認 | CWE-601 | The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an |
| CVE-2026-92433 | Deferred | 未確認 | CWE-352 | The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the i |
| CVE-2026-92437 | Deferred | 未確認 | CWE-862 | The Mailchimp for WooCommerce WordPress plugin before 6.3 does not require authentication, a nonce or an ownership check before it acts on a customer's abandoned-cart record identi |
| CVE-2026-92446 | Awaiting Analysis | 未確認 | CWE-125 | `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BINRES_DATA_INFO` has no field to carry one. Every read is the |
| CVE-2026-92449 | Awaiting Analysis | 未確認 | CWE-129, CWE-457, CWE-787 | `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the resource file and never bounds it again |
| CVE-2026-92450 | Deferred | 未確認 | CWE-798 | The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the fir |
| CVE-2026-92454 | Awaiting Analysis | 未確認 | CWE-125, CWE-835 | The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated segment is therefore read past the en |
| CVE-2026-92464 | Undergoing Analysis | 未確認 | CWE-20 | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high pri |
| CVE-2026-92528 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have a |
| CVE-2026-92531 | Deferred | 未確認 | CWE-78 | Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the reposi |
| CVE-2026-92532 | Deferred | 未確認 | CWE-434 | Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuratio |
| CVE-2026-92533 | Deferred | 未確認 | CWE-24 | Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authentic |
| CVE-2026-92536 | Deferred | 未確認 | CWE-94 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Sensitive Informatio |
| CVE-2026-92537 | Deferred | 未確認 | CWE-522 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Insufficiently Protected Credentials in all versions up to, and including, 9.3.9 The plugi |
| CVE-2026-92538 | Deferred | 未確認 | CWE-79 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting via the 'orderby' parameter |
| CVE-2026-92539 | Awaiting Analysis | 未確認 | CWE-1220, CWE-639, CWE-863 | A service account with user-management permissions in one organization can read, modify, disable or delete users belonging to other organizations on the same Grafana instance throu |
| CVE-2026-92542 | Awaiting Analysis | 未確認 | CWE-290 | The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user processes. |
| CVE-2026-92543 | Awaiting Analysis | 未確認 | CWE-295, CWE-319 | Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by default. isCIDR |
| CVE-2026-92548 | Deferred | 未確認 | CWE-200 | The WP Popular Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2 via the 'context' parameter. This makes it pos |
| CVE-2026-92551 | Deferred | 未確認 | CWE-79 | The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to Reflected Cross-Site |
| CVE-2026-92553 | Deferred | 未確認 | CWE-434 | The YaySMTP – WP Mail SMTP with Email Logs, Tracking & Reports plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.7.7 via the putFi |
| CVE-2026-92555 | Deferred | 未確認 | CWE-201 | Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data f |
| CVE-2026-92559 | Awaiting Analysis | 未確認 | CWE-1327 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due to binding to an unrestricted IP address. |
| CVE-2026-92629 | Awaiting Analysis | 未確認 | CWE-862 | A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated use |
| CVE-2026-9268 | Analyzed | 未確認 | CWE-863 | GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have al |
| CVE-2026-92681 | Awaiting Analysis | 未確認 | CWE-306 | In @neo4j/graphql versions up to and including 7.6.3, @authentication directives applied at the schema level or on the Query or Mutation types are silently ignored for top-level fi |
| CVE-2026-92682 | Awaiting Analysis | 未確認 | CWE-863 | In @neo4j/graphql versions from 7.0.0 up to but not including 7.6.4, the none quantifier in @authorization filters on relationships and connections is not negated when translated t |
| CVE-2026-92705 | Deferred | 未確認 | CWE-158, CWE-829 | Aegisub is a cross-platform advanced subtitle editor. From 3.2.0 to 3.4.2, Aegisub automatically loads Automation scripts referenced by `Automation Scripts` metadata in `ASS` subti |
| CVE-2026-92707 | Awaiting Analysis | 未確認 | CWE-1325 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormat |
| CVE-2026-92709 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFile facility intentionally allows templates to generate flexible output |
| CVE-2026-92715 | Deferred | 未確認 | CWE-639 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' |
| CVE-2026-92727 | Deferred | 未確認 | CWE-79 | The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via ' |
| CVE-2026-92766 | Deferred | 未確認 | CWE-89 | The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to generic SQL Injection via the 'src_by' parameter in all versions up to, and including, 3.5.1 |
| CVE-2026-92767 | Deferred | 未確認 | CWE-79 | The Twenty20 Image Before-After plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'offset' Shortcode Attribute in all versions up to, and including, 2.0.5 due t |
| CVE-2026-92777 | Awaiting Analysis | 未確認 | CWE-1394 | A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execute arbitrary |
| CVE-2026-92798 | Deferred | 未確認 | CWE-94 | The User Registration & Membership plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions up to, and including, 5.2.8 This is due to insufficient input san |
| CVE-2026-92817 | Awaiting Analysis | 未確認 | CWE-863 | The Ignition Perspective module does not properly validate session privileges when determining Designer-level access. An authenticated user with access to a Vision project could pr |
| CVE-2026-92820 | Deferred | 未確認 | CWE-434 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external (Amazon S3) upload flow |
| CVE-2026-92821 | Undergoing Analysis | 未確認 | CWE-393 | A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP (Lightweight Directory Access Protocol) environments, an |
| CVE-2026-92822 | Awaiting Analysis | 未確認 | CWE-674 | A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a |
| CVE-2026-92823 | Awaiting Analysis | 未確認 | CWE-409 | A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative dec |
| CVE-2026-92824 | Awaiting Analysis | 未確認 | CWE-125 | A flaw was found in libmodulemd. In the module stream v2 rpm-map emission path, an inner loop incorrectly uses the count of digest algorithms as its bound instead of the number of |
| CVE-2026-92826 | Deferred | 未確認 | CWE-79 | The EWWW Image Optimizer plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Parameter Key in all versions up to, and including, 8.7.7 due to insuf |
| CVE-2026-92832 | Awaiting Analysis | 未確認 | CWE-319 | IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to cleartext transmission of sensitive information. |
| CVE-2026-92834 | Deferred | 未確認 | CWE-393, CWE-908 | Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are rec |
| CVE-2026-92843 | Awaiting Analysis | 未確認 | CWE-125 | A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an unsigned-integer underflow and a subsequent heap out-of-b |
| CVE-2026-92853 | Awaiting Analysis | 未確認 | CWE-125, CWE-191 | The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the message has a byte to skip. A zero-le |
| CVE-2026-92861 | Deferred | 未確認 | CWE-798 | The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application. |
| CVE-2026-92862 | Deferred | 未確認 | CWE-939 | The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted Intent. |
| CVE-2026-92876 | Awaiting Analysis | 未確認 | CWE-674 | IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion. |
| CVE-2026-92877 | Awaiting Analysis | 未確認 | CWE-611 | The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP implementations where that feature alone |
| CVE-2026-92883 | Analyzed | 未確認 | CWE-79 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could hav |
| CVE-2026-92892 | Awaiting Analysis | 未確認 | CWE-88 | Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or |
| CVE-2026-92908 | Undergoing Analysis | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability t |
| CVE-2026-92909 | Undergoing Analysis | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit t |
| CVE-2026-92910 | Undergoing Analysis | 未確認 | CWE-863 | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass secur |
| CVE-2026-92911 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form f |
| CVE-2026-92922 | Undergoing Analysis | 未確認 | CWE-79 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form |
| CVE-2026-92923 | Deferred | 未確認 | CWE-89 | The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise and escape a parameter before using it in a SQL statement, allowing users with a role as low a |
| CVE-2026-92924 | Deferred | 未確認 | CWE-74 | The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not check that a request to render widget output comes from a user allowed to make it, allowing users with |
| CVE-2026-92931 | Awaiting Analysis | 未確認 | CWE-918 | CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-sid |
| CVE-2026-92966 | Deferred | 未確認 | CWE-94 | The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and |
| CVE-2026-92974 | Deferred | 未確認 | CWE-79 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'thumb_url' parameter in all versions up to, |
| CVE-2026-92975 | Deferred | 未確認 | CWE-269 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.8.3 via the `create_s |
| CVE-2026-92977 | Deferred | 未確認 | CWE-79 | The Real Cookie Banner: GDPR & ePrivacy Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment in all versions up to, and including, 5.3.5 due |
| CVE-2026-92978 | Deferred | 未確認 | CWE-352 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vul |
| CVE-2026-92982 | Awaiting Analysis | 未確認 | CWE-1336 | A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) spec |
| CVE-2026-92989 | Deferred | 未確認 | CWE-284 | The SendPress Newsletters WordPress plugin through 1.26.1.20 does not check the user's capability on several newsletter-management actions, allowing any authenticated subscriber-le |
| CVE-2026-92990 | Deferred | 未確認 | CWE-200 | The SendPress Newsletters WordPress plugin through 1.26.1.20 protects a logging endpoint with a hardcoded token that is the same on every site rather than a per-site secret, allowi |
| CVE-2026-92997 | Deferred | 未確認 | CWE-89 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not properly validate a parameter before using it as a column identifier in a SQL query, allowing unau |
| CVE-2026-92998 | Deferred | 未確認 | CWE-89 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not sanitise sort parameters before using them in a SQL ORDER BY clause, allowing unauthenticated atta |
| CVE-2026-92999 | Deferred | 未確認 | CWE-200 | The Click n Chat (Chat Widget Integration) WordPress plugin before 1.1.3 does not perform any authorization check on a lead-export handler, allowing unauthenticated users to downlo |
| CVE-2026-93003 | Awaiting Analysis | 未確認 | CWE-444 | The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the header section. A header field name placed in the request bo |
| CVE-2026-93017 | Awaiting Analysis | 未確認 | CWE-269 | The `insights-operator-gather` ClusterRole grants the operator's service account read access to secrets in the core API group with no namespace or resourceNames restriction — there |
| CVE-2026-93026 | Awaiting Analysis | 未確認 | CWE-862 | This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials. |
| CVE-2026-93029 | Deferred | 未確認 | CWE-79 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts interface. |
| CVE-2026-93034 | Deferred | 未確認 | CWE-502 | SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap |
| CVE-2026-93294 | Awaiting Analysis | 未確認 | CWE-1220, CWE-441, CWE-863 | A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the data source's Azure ide |
| CVE-2026-93300 | Deferred | 未確認 | CWE-89 | The EventON - Subscriber plugin for WordPress is vulnerable to generic SQL Injection via the 'email' parameter in all versions up to, and including, 1.4.5 due to insufficient escap |
| CVE-2026-93315 | Awaiting Analysis | 未確認 | CWE-367 | When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail with |
| CVE-2026-93316 | Awaiting Analysis | 未確認 | CWE-476 | If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident. |
| CVE-2026-93317 | Awaiting Analysis | 未確認 | CWE-354 | An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cach |
| CVE-2026-93318 | Awaiting Analysis | 未確認 | CWE-354 | A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cach |
| CVE-2026-93319 | Awaiting Analysis | 未確認 | CWE-567 | A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic. |
| CVE-2026-93320 | Awaiting Analysis | 未確認 | CWE-441 | BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow uni |
| CVE-2026-93321 | Awaiting Analysis | 未確認 | CWE-129 | A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. |
| CVE-2026-93322 | Awaiting Analysis | 未確認 | CWE-129 | A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. |
| CVE-2026-93323 | Awaiting Analysis | 未確認 | CWE-789 | The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make b |
| CVE-2026-93326 | Awaiting Analysis | 未確認 | CWE-180 | A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from |
| CVE-2026-93336 | Awaiting Analysis | 未確認 | CWE-862 | Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal (a unit agent, or a user with only login |
| CVE-2026-93346 | Awaiting Analysis | 未確認 | CWE-307 | Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass max_login_attempts by sending concurrent requests. |
| CVE-2026-93347 | Awaiting Analysis | 未確認 | CWE-22 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary files via unvalidated fil |
| CVE-2026-93367 | Deferred | 未確認 | CWE-79 | The Visitors Traffic Real Time Statistics Pro plugin for WordPress is vulnerable to unauthenticated stored Cross-Site Scripting in all versions up to, and including, 11.22 via the |
| CVE-2026-93388 | Deferred | 未確認 | CWE-434 | The Printcart Store (PCDesigner / NB Designer) plugin for WooCommerce is vulnerable to unauthenticated arbitrary file upload leading to remote code execution in all versions up to, |
| CVE-2026-93428 | Deferred | 未確認 | CWE-862 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to authorization bypass in all |
| CVE-2026-93430 | Deferred | 未確認 | CWE-79 | The GD Rating System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX in all versions up to, and inclu |
| CVE-2026-93441 | Awaiting Analysis | 未確認 | CWE-400 | IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption. |
| CVE-2026-93442 | Awaiting Analysis | 未確認 | CWE-125 | IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive in |
| CVE-2026-93443 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code. |
| CVE-2026-93445 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. |
| CVE-2026-93446 | Awaiting Analysis | 未確認 | CWE-459 | Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently. This issue affects Apache Tomcat: from 11.0.0-M21 through 11.0.26, from |
| CVE-2026-93447 | Analyzed | 未確認 | CWE-502 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow an attacker with access to the server secret and Redis write access to submit a malicious serialized cache value. When the value w |
| CVE-2026-93448 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory |
| CVE-2026-93449 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of code generation. |
| CVE-2026-93471 | Deferred | 未確認 | CWE-409 | Improper Handling of Highly Compressed Data (Data Amplification) in esaml_binding in dropbox esaml allows an unauthenticated attacker to exhaust server memory and crash the Erlang |
| CVE-2026-93474 | Awaiting Analysis | 未確認 | CWE-522 | Charging station authentication identifiers are publicly accessible via web-based mapping platforms. |
| CVE-2026-93475 | Awaiting Analysis | 未確認 | CWE-1284, CWE-787 | The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the `NX_CRYPTO_MAX_RSA |
| CVE-2026-93479 | Awaiting Analysis | 未確認 | CWE-122 | A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root directive or access log format references the map's regex capture v |
| CVE-2026-93483 | Deferred | 未確認 | CWE-348 | In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request |
| CVE-2026-93484 | Deferred | 未確認 | CWE-89 | Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of p |
| CVE-2026-93489 | Awaiting Analysis | 未確認 | CWE-287 | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform a |
| CVE-2026-93495 | Awaiting Analysis | 未確認 | CWE-665 | Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device. Refer to the ' |
| CVE-2026-93509 | Deferred | 未確認 | CWE-20 | The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snap |
| CVE-2026-93535 | Deferred | 未確認 | CWE-79 | The Dark Mode – Improve Accessibility with AI Powered Dark Theme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'icon_light' Shortcode Attribute in all v |
| CVE-2026-93546 | Analyzed | 未確認 | CWE-190 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a dir |
| CVE-2026-93548 | Deferred | 未確認 | CWE-269 | The FooSales WordPress plugin before 1.43.3 does not verify that an authenticated caller is entitled to act as the user a request names, allowing any authenticated user to have th |
| CVE-2026-93549 | Deferred | 未確認 | CWE-352 | The CoCart WordPress plugin before 4.9.7 does not scope its REST API authentication filter to its own endpoints, which disables WordPress core's REST nonce protection for every ro |
| CVE-2026-93550 | Deferred | 未確認 | CWE-434 | The Veeqo for WooCommerce WordPress plugin through 2.2.8 does not restrict who can trigger its remote bridge-installation process or validate the URL it is given before downloading |
| CVE-2026-93581 | Deferred | 未確認 | CWE-1236 | User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by authenticated users or receive |
| CVE-2026-93582 | Deferred | 未確認 | CWE-290 | The HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or HTTP_REMOTE_USER environment variab |
| CVE-2026-93617 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a thro |
| CVE-2026-93627 | Undergoing Analysis | 未確認 | CWE-290 | An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to cancel or modify an existing meet |
| CVE-2026-93628 | Undergoing Analysis | 未確認 | CWE-290 | An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to forge another attendee's response |
| CVE-2026-93629 | Undergoing Analysis | 未確認 | CWE-290 | An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to insert calendar invitations attributed to another user. The |
| CVE-2026-93630 | Undergoing Analysis | 未確認 | CWE-180 | A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an unauthenticated sender to bypass the restriction on forms that |
| CVE-2026-93631 | Undergoing Analysis | 未確認 | CWE-352 | A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition allows an attacker to link an attacker-controlled external acc |
| CVE-2026-93633 | Undergoing Analysis | 未確認 | CWE-79 | A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access to publish a document that displays attacker-controlled cont |
| CVE-2026-93634 | Undergoing Analysis | 未確認 | CWE-639 | A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert forged shared-file records into another user's mailbox throug |
| CVE-2026-93635 | Awaiting Analysis | 未確認 | CWE-90 | LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On domains using search-filter au |
| CVE-2026-93636 | Undergoing Analysis | 未確認 | CWE-90 | An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query otherwise unreturned attributes of calendar resources through Searc |
| CVE-2026-93637 | Awaiting Analysis | 未確認 | CWE-307 | An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through GraphQL without |
| CVE-2026-93638 | Undergoing Analysis | 未確認 | CWE-79 | A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an unauthenticated attacker to execute JavaScript through the zrememberm |
| CVE-2026-93639 | Undergoing Analysis | 未確認 | CWE-862 | A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no explicit administrative grants to overwrite global Zimlet configu |
| CVE-2026-93640 | Undergoing Analysis | 未確認 | CWE-732 | A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to access files with root privileges. |
| CVE-2026-93649 | Awaiting Analysis | 未確認 | CWE-494, CWE-601 | In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-download page /[lo |
| CVE-2026-93674 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. |
| CVE-2026-93675 | Analyzed | 未確認 | CWE-440 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion. |
| CVE-2026-93677 | Analyzed | 未確認 | CWE-200 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to exposure of sensitive information to an unauthorized actor. |
| CVE-2026-93678 | Analyzed | 未確認 | CWE-639 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. |
| CVE-2026-93679 | Analyzed | 未確認 | CWE-400 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to cause a denial of service due to uncontrolled resource consumption during ZIP file extraction. |
| CVE-2026-93681 | Deferred | 未確認 | CWE-79 | The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name Parameter in all versions up to, and includi |
| CVE-2026-93683 | Awaiting Analysis | 未確認 | CWE-367 | A flaw was found in the DPDK vhost library. When handling a virtio indirect descriptor table, the host reads the table length more than once from guest memory and can allocate a ho |
| CVE-2026-93684 | Deferred | 未確認 | CWE-79 | An SQL user using Impala up to and including version 4.5.2 with only SELECT permission can put JavaScript in a table alias and make it run in another user's browser when that user |
| CVE-2026-93693 | Awaiting Analysis | 未確認 | CWE-116, CWE-20, CWE-306, CWE-918 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, improper validation of outbound request destinations and parameters, unsafe JSONP response formatting, and insuffi |
| CVE-2026-93694 | Awaiting Analysis | 未確認 | CWE-321, CWE-362, CWE-918 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, processing of queue items can send acknowledgements to an unvalidated callback URL, this behavior together with a |
| CVE-2026-93695 | Awaiting Analysis | 未確認 | CWE-22, CWE-73 | In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing cont |
| CVE-2026-93697 | Deferred | 未確認 | CWE-79 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface. |
| CVE-2026-93698 | Deferred | 未確認 | CWE-78 | Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. |
| CVE-2026-93699 | Awaiting Analysis | 未確認 | CWE-88 | Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server. |
| CVE-2026-93744 | Awaiting Analysis | 未確認 | CWE-287 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to improper access control. By sending a specially crafted HTTP reque |
| CVE-2026-93746 | Deferred | 未確認 | CWE-639 | The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, an |
| CVE-2026-93756 | Deferred | 未確認 | CWE-79 | The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Facebook Comment Message via v-html in |
| CVE-2026-93767 | Deferred | 未確認 | CWE-22 | The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This makes it possible for au |
| CVE-2026-93775 | Deferred | 未確認 | CWE-79 | The Podlove Podcast Publisher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Auphonic Webhook in all versions up to, and including, 4.5.6 due to insufficient |
| CVE-2026-93832 | Deferred | 未確認 | CWE-862 | A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps. |
| CVE-2026-93856 | Awaiting Analysis | 未確認 | CWE-669 | In OpenStack Cinder through 29.0.0, cross-project information disclosure can occur in the Messages API. A non-admin user with the project-scoped 'member' or 'reader' role making th |
| CVE-2026-93858 | Deferred | 未確認 | CWE-78 | In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gate |
| CVE-2026-93860 | Deferred | 未確認 | CWE-862 | In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance service directly without any policy enforcement. Any ho |
| CVE-2026-93861 | Deferred | 未確認 | CWE-863 | In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a |
| CVE-2026-93875 | Deferred | 未確認 | CWE-79 | The JetAppointment plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'friendlyTime' parameter in all versions up to, and including, 2.5.2.1 due to insuffici |
| CVE-2026-93878 | Deferred | 未確認 | CWE-79 | The DiviGear Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via update_license AJAX Action in all versions up to, and including, 5.2.0 due to insufficie |
| CVE-2026-93880 | Deferred | 未確認 | CWE-79 | The Greenshift – animation and page builder blocks plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via '{{GET:}}' Dynamic Placeholder in all versions up to, an |
| CVE-2026-93882 | Deferred | 未確認 | CWE-639 | The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4. |
| CVE-2026-93883 | Deferred | 未確認 | CWE-79 | The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'phone' parameter in all versions up to, and including, 3.4.4 due |
| CVE-2026-93885 | Deferred | 未確認 | CWE-79 | The Cryptocurrency Donation Box – Bitcoin & Crypto Donations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via data_object Parameter in all versions up to, and |
| CVE-2026-93886 | Analyzed | 未確認 | CWE-79 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to improper validation of user-supplied input. |
| CVE-2026-93888 | Awaiting Analysis | 未確認 | CWE-121 | IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable to a code injection due to insufficient validation of user i |
| CVE-2026-93889 | Deferred | 未確認 | CWE-79 | The Mail logging – WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via PHPMailer 'wp_mail_failed' Error Message in all versions up to, and includi |
| CVE-2026-93891 | Awaiting Analysis | 未確認 | CWE-611 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity (XXE) injection flaw. |
| CVE-2026-93892 | Awaiting Analysis | 未確認 | CWE-200 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML respo |
| CVE-2026-93895 | Analyzed | 未確認 | CWE-284 | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods. |
| CVE-2026-93896 | Deferred | 未確認 | CWE-79 | The WPFront Notification Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.5.1. This is due to the debug-log output path |
| CVE-2026-93905 | Analyzed | 未確認 | CWE-502 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances. |
| CVE-2026-93907 | Awaiting Analysis | 未確認 | CWE-287 | IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler. |
| CVE-2026-93909 | Analyzed | 未確認 | CWE-384 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass vulnerability when samlWeb-2.0 feature is enabled. |
| CVE-2026-93925 | Deferred | 未確認 | CWE-121, CWE-1335, CWE-835 | Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are |
| CVE-2026-93926 | Deferred | 未確認 | CWE-401, CWE-772 | Missing release of memory after effective lifetime, Missing release of resource after effective lifetime vulnerability in Apache Thrift THeaderTransport. This issue affects Apac |
| CVE-2026-93927 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0. |
| CVE-2026-93929 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Travesia travesia allows Object Injection.This issue affects Travesia: from n/a through 1.1.16. |
| CVE-2026-93930 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Tantra tantra allows Object Injection.This issue affects Tantra: from n/a through 2.9.0. |
| CVE-2026-93931 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Smash smash allows Object Injection.This issue affects Smash: from n/a through 1.12.0. |
| CVE-2026-93932 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Smart Casa smart-casa allows Object Injection.This issue affects Smart Casa: from n/a through 1.0.12. |
| CVE-2026-93933 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Rosalinda rosalinda allows Object Injection.This issue affects Rosalinda: from n/a through 1.2.4. |
| CVE-2026-93934 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Partiso partiso allows Object Injection.This issue affects Partiso: from n/a through 1.1.13. |
| CVE-2026-93935 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Let's Play playhockey allows Object Injection.This issue affects Let's Play: from n/a through 1.1.15. |
| CVE-2026-93936 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group IPharm ipharm allows Object Injection.This issue affects IPharm: from n/a through 1.2.4. |
| CVE-2026-93937 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hygia hygia allows Object Injection.This issue affects Hygia: from n/a through 1.21.0. |
| CVE-2026-93938 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Hogwords hogwords allows Object Injection.This issue affects Hogwords: from n/a through 1.2.7. |
| CVE-2026-93940 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Greeny greeny allows Object Injection.This issue affects Greeny: from n/a through 2.10.0. |
| CVE-2026-93941 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Edema edema allows Object Injection.This issue affects Edema: from n/a through 1.2.2.2. |
| CVE-2026-93942 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Dwell dwell allows Object Injection.This issue affects Dwell: from n/a through 1.16.0. |
| CVE-2026-93943 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Convex convex allows Object Injection.This issue affects Convex: from n/a through 1.16.0. |
| CVE-2026-93944 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Camelia camelia allows Object Injection.This issue affects Camelia: from n/a through 1.2.15. |
| CVE-2026-93945 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0. |
| CVE-2026-93947 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Traveler traveler allows Blind SQL Injection.This issue affects Tra |
| CVE-2026-93949 | Deferred | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Omegathemes Grocery Shopping Store grocery-shopping-store allows Password Recovery Exploitation.This issue |
| CVE-2026-93950 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a thro |
| CVE-2026-93951 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Zeinet zeinet allows Reflected XSS.This issue affects Zeinet: from |
| CVE-2026-93953 | Deferred | 未確認 | CWE-89 | The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to SQL Injection via the Biographical Info field (second-order, via restore) in all versions up |
| CVE-2026-94018 | Awaiting Analysis | 未確認 | CWE-457, CWE-824 | The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT` request. The condition is reac |
| CVE-2026-94023 | Awaiting Analysis | 未確認 | CWE-125, CWE-862 | A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one question about the pointer: does the object lie outside the m |
| CVE-2026-94024 | Awaiting Analysis | 未確認 | CWE-125, CWE-1284 | The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much of it as the module declared, in privileged mode, with the |
| CVE-2026-94058 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Treck treck allows Reflected XSS.This issue affects Treck: from n/a |
| CVE-2026-94059 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Ogency ogency allows Reflected XSS.This issue affects Ogency: from |
| CVE-2026-94060 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bracketweb Voldor voldor allows Reflected XSS.This issue affects Voldor: from |
| CVE-2026-94061 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Designthemes Whistle - Sports Club whistle-sports-club allows Reflected XSS.Th |
| CVE-2026-94062 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclus |
| CVE-2026-94063 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeREX Education Center education allows Reflected XSS.This issue affects Ed |
| CVE-2026-94064 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Them |
| CVE-2026-94065 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3. |
| CVE-2026-94066 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond allows Reflected XSS.This issue affects Pond: from n/a thro |
| CVE-2026-94067 | Deferred | 未確認 | CWE-98 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclus |
| CVE-2026-94075 | Received | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object Injection.This issue affects Newsletters: from n/a through 4.18.1. |
| CVE-2026-94114 | Awaiting Analysis | 未確認 | CWE-386 | Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lo |
| CVE-2026-94134 | Awaiting Analysis | 未確認 | CWE-322 | The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key` is configured or `no_host_key_check` is explicitly set to false, it accepts an |
| CVE-2026-94135 | Awaiting Analysis | 未確認 | CWE-322 | The Apache Airflow SFTP provider's deferrable code paths (`SFTPTrigger`, `SFTPHookAsync`, `SFTPClientPool`) disable SSH host-key verification by default unless the connection expli |
| CVE-2026-94140 | Awaiting Analysis | 未確認 | CWE-322 | Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync builds |
| CVE-2026-94154 | Deferred | 未確認 | CWE-79 | The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.7.2 due to insufficient input s |
| CVE-2026-94158 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.This issue |
| CVE-2026-94159 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Donations totaldonations allows Stored XSS.This issue affects T |
| CVE-2026-94160 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeStek ThemeStek Extras for LabtechCO Theme themestek-labtechco-extras allo |
| CVE-2026-94161 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue af |
| CVE-2026-94166 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue affects UpS |
| CVE-2026-94167 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This issue affe |
| CVE-2026-94169 | Deferred | 未確認 | CWE-94 | Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1. |
| CVE-2026-94170 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflected XSS.Thi |
| CVE-2026-94180 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Monetizemore Advanced Ads allows Retrieve Embedded Sensitive Data. This issue affects Advanced Ads: from n/a thro |
| CVE-2026-94192 | Awaiting Analysis | 未確認 | CWE-416, CWE-664 | A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by address with `txm_module_object_deall |
| CVE-2026-94197 | Awaiting Analysis | 未確認 | CWE-290 | An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the `ExternalAuth` policy or Ingress external a |
| CVE-2026-94200 | Deferred | 未確認 | CWE-1288 | Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store modules) allows a malicious TLS 1.3 se |
| CVE-2026-94201 | Deferred | 未確認 | CWE-770 | Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is coerced through Ash.Type.Atom. |
| CVE-2026-94202 | Awaiting Analysis | 未確認 | CWE-125 | The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a memory-protected module supplies lay inside the module's data, a |
| CVE-2026-94205 | Analyzed | 未確認 | CWE-441, CWE-863 | Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For `pull_request` activity tri |
| CVE-2026-94206 | Deferred | 未確認 | CWE-916 | Use of Password Hash With Insufficient Computational Effort vulnerability in danielberkompas cloak_ecto and danielberkompas cloak allows an attacker who holds the hashed values and |
| CVE-2026-94212 | Deferred | 未確認 | CWE-347 | Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route protected by the saml-aut |
| CVE-2026-94220 | Deferred | 未確認 | CWE-352 | Cross-Site request forgery (CSRF) vulnerability in feishu-auth and dingtalk-auth plugins in Apache APISIX. An attacker who can get a user to click a crafted link may cause that |
| CVE-2026-94228 | Deferred | 未確認 | CWE-862 | The TrueBooker WordPress plugin before 1.3.0 does not perform any capability check on one of its setup handlers, and the token it does check is issued to unauthenticated visitors, |
| CVE-2026-94229 | Deferred | 未確認 | CWE-639 | The TrueBooker WordPress plugin before 1.3.0 does not verify that the requester owns a booking before rendering its confirmation summary, allowing unauthenticated attackers to enum |
| CVE-2026-94230 | Deferred | 未確認 | CWE-862 | The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in some of its AJAX actions, and does not validate the submitted service price server-side, allowing |
| CVE-2026-94231 | Deferred | 未確認 | CWE-862 | The TrueBooker WordPress plugin before 1.3.0 does not have authorisation checks in place in some of its functionality, allowing unauthenticated users to create and modify booking s |
| CVE-2026-94235 | Deferred | 未確認 | CWE-862 | The MemberHero WordPress plugin through 6.9 does not perform any capability or nonce check on one of its AJAX actions, allowing any authenticated user, such as a subscriber, to ma |
| CVE-2026-94238 | Deferred | 未確認 | CWE-22 | The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will read, allowing users granted the Loco Translate WordPress plugi |
| CVE-2026-94239 | Deferred | 未確認 | CWE-79 | The Loco Translate WordPress plugin before 2.8.9 does not sanitise and escape some bundle configuration values before outputting them back in an admin page, allowing users with the |
| CVE-2026-94244 | Deferred | 未確認 | CWE-200 | The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not perform any capability check, and relies on a token any authenticated user can obtain from a front-end pag |
| CVE-2026-94245 | Deferred | 未確認 | CWE-639 | The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet transfer owns the wallet being debited, allowing any authenticate |
| CVE-2026-94246 | Deferred | 未確認 | CWE-639 | The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a withdrawal submission belongs to the user making it, allowing an |
| CVE-2026-94250 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unauthenticated caller can drive a gateway worker into OOM via a |
| CVE-2026-94254 | Deferred | 未確認 | CWE-862 | The SellKit WordPress plugin before 2.8.0 does not validate a client-supplied product price when totals are recalculated during checkout, allowing unauthenticated attackers to pla |
| CVE-2026-94256 | Deferred | 未確認 | CWE-287 | The SMS Alert WordPress plugin before 4.0.1 does not verify that the account being logged in is the one the verified one-time code belongs to, allowing unauthenticated attackers t |
| CVE-2026-94257 | Deferred | 未確認 | CWE-269 | The SMS Alert WordPress plugin before 4.0.1 does not bind the account whose password is being changed to the phone number that was actually verified during its OTP password reset, |
| CVE-2026-94258 | Deferred | 未確認 | CWE-200 | The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selected users before returning their stored billing phone number |
| CVE-2026-94260 | Deferred | 未確認 | CWE-862 | The Sifalo Pay WordPress plugin before 2.5.3 does not verify ownership of, or authorisation for, the order being updated when it handles a payment return, allowing unauthenticated |
| CVE-2026-94261 | Deferred | 未確認 | CWE-639 | The Sifalo Pay WordPress plugin before 2.5.3 does not verify that a payment transaction identifier belongs to the order it is confirming, nor that the requester owns that order, a |
| CVE-2026-94262 | Deferred | 未確認 | CWE-863 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not verify that the requester is aut |
| CVE-2026-94263 | Deferred | 未確認 | CWE-74 | The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7 do not consistently disable shortcode processing in the conf |
| CVE-2026-94264 | Deferred | 未確認 | CWE-79 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not validate or escape some of its f |
| CVE-2026-94265 | Awaiting Analysis | 未確認 | When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate au | |
| CVE-2026-94266 | Awaiting Analysis | 未確認 | libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the | |
| CVE-2026-94267 | Deferred | 未確認 | CWE-94 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability check whe |
| CVE-2026-94268 | Deferred | 未確認 | CWE-269 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not resolve the target of the update |
| CVE-2026-94269 | Deferred | 未確認 | CWE-647 | Use of Non-Canonical URL paths for authorization decisions vulnerability in Apache APISIX. In some configurations where a permissive route overlaps a protected one, a crafted en |
| CVE-2026-94270 | Deferred | 未確認 | CWE-287 | The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the authenticity of incoming payment provider notifications, and ships with that verification disabled by d |
| CVE-2026-94271 | Deferred | 未確認 | CWE-287 | The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check |
| CVE-2026-94272 | Deferred | 未確認 | CWE-862 | The Snap Finance WordPress plugin before 3.12.0 does not verify that a request to change a WooCommerce order's status comes from an authorised source, allowing unauthenticated atta |
| CVE-2026-94273 | Deferred | 未確認 | CWE-862 | The Snap Finance WordPress plugin through 3.11.0 does not verify that the payment provider's response actually confirms a completed, approved transaction before marking a WooCommer |
| CVE-2026-94275 | Deferred | 未確認 | CWE-200 | The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning its billing details, allowing unauthenticated attackers to ob |
| CVE-2026-94276 | Deferred | 未確認 | CWE-287 | Improper Authentication vulnerability in Apache APISIX. On a route using openid-connect plugin with remote introspection against an authorization server that serves multiple issue |
| CVE-2026-94278 | Deferred | 未確認 | CWE-284 | The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload pr |
| CVE-2026-94293 | Deferred | 未確認 | CWE-306 | An unauthenticated remote attacker can modify Asset Administration Shell submodel data via PATCH requests and can read all data exposed by the GET endpoints. |
| CVE-2026-94294 | Deferred | 未確認 | CWE-862 | The App Builder WordPress plugin before 5.7.1 does not require authentication or authorisation before writing attacker-supplied data to one of its options and, on a separate unauth |
| CVE-2026-94298 | Deferred | 未確認 | CWE-89 | The BuildKit WordPress plugin before 1.0.29 does not properly sanitise and escape data submitted by contributor-level users before storing it and later using it in a SQL query, al |
| CVE-2026-94299 | Deferred | 未確認 | CWE-863 | The elegro Crypto Payment WordPress plugin through 1.0.1 does not require a shared secret to be configured before trusting incoming payment notification requests, allowing unauthen |
| CVE-2026-94300 | Awaiting Analysis | 未確認 | CWE-362, CWE-415 | Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated |
| CVE-2026-94348 | Awaiting Analysis | 未確認 | CWE-89 | Dell PowerScale InsightIQ, versions 5.2.0 through 6.3.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privi |
| CVE-2026-94360 | Deferred | 未確認 | CWE-862 | The Paymentfor Gateway for WooCommerce WordPress plugin before 1.0.6 does not verify the authenticity of an inbound payment notification before marking an order as paid, allowing u |
| CVE-2026-94370 | Deferred | 未確認 | CWE-415, CWE-416, CWE-590, CWE-665 | A defect in the Qt for MCUs core string handling causes heap memory corruption. When an application passes text into Qt Quick Ultralite using the public Qul::String interface type, |
| CVE-2026-94375 | Deferred | 未確認 | CWE-552 | The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.7.8 via the get_file_pa |
| CVE-2026-94377 | Deferred | 未確認 | CWE-79 | The Verified Reviews (Avis Vérifiés) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'moderation' parameter in all versions up to, and including, 2.4.6 du |
| CVE-2026-94378 | Deferred | 未確認 | CWE-79 | The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name' parameter in all versions |
| CVE-2026-94388 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This is |
| CVE-2026-94390 | Deferred | 未確認 | CWE-502 | Editor PHP Object Injection in Hide Shipping Method For WooCommerce <= 1.5.4 versions. |
| CVE-2026-94402 | Awaiting Analysis | 未確認 | CWE-79 | IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting. The MeterChart component's Title.truncateTitle() function re-inserts a substring of user-supplied lab |
| CVE-2026-94405 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Shahjada Download Manager allows Retrieve Embedded Sensitive Data. This issue affects Download Manager: from n/a |
| CVE-2026-94410 | Deferred | 未確認 | CWE-862 | A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no part |
| CVE-2026-94415 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects Betheme: f |
| CVE-2026-94421 | Deferred | 未確認 | CWE-79 | The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input s |
| CVE-2026-94422 | Awaiting Analysis | 未確認 | CWE-290 | An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by set |
| CVE-2026-94423 | Awaiting Analysis | 未確認 | CWE-322 | Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon as s |
| CVE-2026-94432 | Deferred | 未確認 | CWE-639 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and inclu |
| CVE-2026-94439 | Awaiting Analysis | 未確認 | CWE-444 | When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve reques |
| CVE-2026-94440 | Awaiting Analysis | 未確認 | CWE-770 | Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. |
| CVE-2026-94444 | Awaiting Analysis | 未確認 | CWE-354 | Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a malicious GOMODPROXY the user chooses to connect to can serve a |
| CVE-2026-94447 | Awaiting Analysis | 未確認 | CWE-354 | Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and operates a malicious GOMODPROXY the user chooses to use can |
| CVE-2026-94448 | Awaiting Analysis | 未確認 | CWE-79 | When a JavaScript template literal contains consecutive expressions, the context tracking state was not properly reset upon entering a new expression. We now ensure that template-l |
| CVE-2026-94451 | Awaiting Analysis | 未確認 | CWE-20 | Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities. A flaw was found where certain endpoints do not properly check the sort paramet |
| CVE-2026-94453 | Awaiting Analysis | 未確認 | CWE-416 | Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicious) is receiv |
| CVE-2026-94482 | Awaiting Analysis | 未確認 | CWE-770 | Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications with at least one Se |
| CVE-2026-94483 | Analyzed | 未確認 | CWE-918 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL t |
| CVE-2026-94484 | Analyzed | 未確認 | CWE-524 | Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated |
| CVE-2026-94485 | Analyzed | 未確認 | CWE-346 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without |
| CVE-2026-94486 | Analyzed | 未確認 | CWE-346 | Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without r |
| CVE-2026-94502 | Undergoing Analysis | 未確認 | CWE-121 | In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to remote code execution. These messages must come |
| CVE-2026-94503 | Deferred | 未確認 | CWE-434 | Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a through 1.7.7 |
| CVE-2026-94505 | Deferred | 未確認 | CWE-862 | The Nelio Content – Editorial Calendar & Social Media Auto-Posting plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.0 This is du |
| CVE-2026-94506 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-94510 | Awaiting Analysis | 未確認 | CWE-639 | Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-94512 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network. |
| CVE-2026-94520 | Awaiting Analysis | 未確認 | CWE-134 | Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network. |
| CVE-2026-94538 | Deferred | 未確認 | CWE-862 | The WP File Download plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.3.9. This is due to the plugin not properly verifying that a |
| CVE-2026-94539 | Deferred | 未確認 | CWE-89 | The SupportCandy – AI Customer Support Ticket System & Live Chatbot Agent plugin for WordPress is vulnerable to time-based SQL Injection via the 'sort_by' parameter in all versions |
| CVE-2026-94541 | Deferred | 未確認 | CWE-862 | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 11.82 This is due to the plugin not |
| CVE-2026-94543 | Analyzed | 未確認 | CWE-524 | Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generat |
| CVE-2026-94544 | Analyzed | 未確認 | CWE-524 | Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode r |
| CVE-2026-94568 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for WooCommerce: |
| CVE-2026-94575 | Analyzed | 未確認 | CWE-483 | A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low-privileged user to bypass inner Role-Based Access Control (R |
| CVE-2026-94576 | Analyzed | 未確認 | CWE-187 | An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. U |
| CVE-2026-94577 | Analyzed | 未確認 | CWE-15 | A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanism of Brocade Fabric OS versions before 9.2.2d and 10.0.0 thr |
| CVE-2026-94578 | Analyzed | 未確認 | CWE-269 | Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote |
| CVE-2026-94579 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines during SSH session termination on Brocade Fabric OS versions befo |
| CVE-2026-94580 | Analyzed | 未確認 | CWE-22 | An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An a |
| CVE-2026-94581 | Analyzed | 未確認 | CWE-78 | An OS command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 allows an authenticated, h |
| CVE-2026-94582 | Analyzed | 未確認 | CWE-120 | A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of Brocade F |
| CVE-2026-94583 | Analyzed | 未確認 | CWE-362 | A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent incomin |
| CVE-2026-94584 | Analyzed | 未確認 | CWE-362 | A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across |
| CVE-2026-94585 | Analyzed | 未確認 | CWE-288 | An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, networ |
| CVE-2026-94586 | Analyzed | 未確認 | CWE-78 | A command injection vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9 |
| CVE-2026-94587 | Analyzed | 未確認 | CWE-120 | A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2 |
| CVE-2026-94589 | Deferred | 未確認 | CWE-434 | The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and includin |
| CVE-2026-94590 | Deferred | 未確認 | CWE-940 | Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects |
| CVE-2026-94591 | Awaiting Analysis | 未確認 | CWE-321 | Armatura One stores database and message-broker credentials in an install configuration file, encrypting them with AES-128-CBC when this protection is enabled. The encryption key a |
| CVE-2026-94592 | Awaiting Analysis | 未確認 | CWE-798 | Armatura One's database initialization routine assigns a fixed, vendor-defined password to the database superuser account at creation time, rather than generating a unique password |
| CVE-2026-94593 | Awaiting Analysis | 未確認 | CWE-532 | Armatura One's backup and restore routine records the full database connection command, including the superuser password, in plain text in a log file on the host. Credentials discl |
| CVE-2026-94594 | Awaiting Analysis | 未確認 | CWE-532 | Armatura One's message broker logs client connection credentials and the associated password in plain text during normal operation. Any party with read access to this log, or to a |
| CVE-2026-94603 | Awaiting Analysis | 未確認 | CWE-693 | Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carrying the io.podman.annotations.checkpoint.runtime.name annot |
| CVE-2026-94620 | Deferred | 未確認 | CWE-22, CWE-59 | Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's assign |
| CVE-2026-94621 | Deferred | 未確認 | CWE-367, CWE-918 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API favicon extractor validates a user-supplied hostname with a |
| CVE-2026-94632 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-builder-blo |
| CVE-2026-94633 | Deferred | 未確認 | CWE-130, CWE-789 | Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Dart bindings. This issue affects Apache Thrift: |
| CVE-2026-94634 | Deferred | 未確認 | CWE-1188, CWE-770 | Allocation of resources without limits or throttling, Initialization of a resource with an insecure default vulnerability in Apache Thrift Python bindings. This issue affects Ap |
| CVE-2026-94635 | Deferred | 未確認 | CWE-130, CWE-770 | Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vulnerability in Apache Thrift Lua bindings. This issue affects Apache |
| CVE-2026-94636 | Deferred | 未確認 | CWE-1284, CWE-409, CWE-628 | Improper handling of highly compressed data (data amplification), Function call with incorrectly specified arguments, Improper validation of specified quantity in input vulnerabili |
| CVE-2026-94637 | Deferred | 未確認 | CWE-409 | Improper handling of highly compressed data (data amplification) vulnerability in Apache Thrift Go bindings. This issue affects Apache Thrift: before 0.25.0. Users are recomm |
| CVE-2026-94638 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to up |
| CVE-2026-94639 | Deferred | 未確認 | CWE-248, CWE-755, CWE-770 | improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught exception vulnerability in Apache Thrift Java bindings. This issue af |
| CVE-2026-94641 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects UsersWP: from |
| CVE-2026-94642 | Deferred | 未確認 | CWE-248 | Uncaught exception vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fix |
| CVE-2026-94644 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to up |
| CVE-2026-94645 | Deferred | 未確認 | CWE-1284, CWE-770 | Improper validation of specified quantity in input, Allocation of resources without limits or throttling vulnerability in Apache Thrift nodejs bindings. This issue affects Apach |
| CVE-2026-94646 | Deferred | 未確認 | CWE-1284, CWE-1321, CWE-248 | Uncaught exception, Improper validation of specified quantity in input, Improperly controlled modification of object prototype attributes ('prototype pollution') vulnerability in A |
| CVE-2026-94648 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to u |
| CVE-2026-94650 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, wh |
| CVE-2026-94651 | Deferred | 未確認 | CWE-755, CWE-772 | improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerability in Apache Thrift java bindings. This issue affects Apache Thrift: |
| CVE-2026-94652 | Deferred | 未確認 | CWE-401 | Missing release of memory after effective lifetime vulnerability in Apache Thrift c++ bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgr |
| CVE-2026-94653 | Deferred | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0 |
| CVE-2026-94654 | Deferred | 未確認 | CWE-835 | Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended |
| CVE-2026-94655 | Deferred | 未確認 | CWE-407, CWE-770 | Allocation of resources without limits or throttling, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0. |
| CVE-2026-94656 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Thrift ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to u |
| CVE-2026-94657 | Deferred | 未確認 | CWE-770 | Allocation of resources without limits or throttling vulnerability in Apache Thrift JavaME bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to |
| CVE-2026-94658 | Deferred | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0 |
| CVE-2026-94661 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects JetBlog: f |
| CVE-2026-94662 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Tem |
| CVE-2026-94663 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows |
| CVE-2026-94664 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This |
| CVE-2026-94665 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored XSS.This is |
| CVE-2026-94666 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allow |
| CVE-2026-94667 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affects JetRevi |
| CVE-2026-94668 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Reflected XSS. |
| CVE-2026-94669 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP ManageNinja LLC Fluent Forms Pro Add On Pack fluentformpro allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-94670 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS. This issue affects Everest Forms: from n/ |
| CVE-2026-94675 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Fluent Forms Pro Add On Pack <= 6.2.13 versions. |
| CVE-2026-94676 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Tainacan Community Tainacan tainacan allows Object Injection.This issue affects Tainacan: from n/a through 1.3.0. |
| CVE-2026-95101 | Awaiting Analysis | 未確認 | CWE-172 | Description NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with proxy_request_buffering on directive, an unauthenticate |
| CVE-2026-95102 | Awaiting Analysis | 未確認 | CWE-306 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate charging stations. As a result, attackers can exploit this weakness to gain unauthorize |
| CVE-2026-95105 | Deferred | 未確認 | CWE-649 | Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking vulnerability in danielberkompas cloak allows an attacker with write access to stored c |
| CVE-2026-95106 | Analyzed | 未確認 | CWE-706 | Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gitea's web views resolved such a path to the first entry, whi |
| CVE-2026-95107 | Awaiting Analysis | 未確認 | CWE-190, CWE-680, CWE-787 | A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that size and asked the object pool for |
| CVE-2026-95108 | Awaiting Analysis | 未確認 | CWE-400, CWE-772 | One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a `TX_THREAD` control block through `tx |
| CVE-2026-95109 | Awaiting Analysis | 未確認 | CWE-125, CWE-787 | The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands its range check the module instan |
| CVE-2026-95111 | Awaiting Analysis | 未確認 | CWE-125, CWE-131 | A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the module's buffer the privileged queue copy may touch and |
| CVE-2026-95112 | Analyzed | 未確認 | CWE-407 | When processing issue and comment bodies, Gitea scanned the entire preceding text for action keywords such as "closes" or "fixes" once per Markdown link, giving processing time qua |
| CVE-2026-95114 | Deferred | 未確認 | CWE-125 | libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c. This allows a remote attacker to cause a denial of service |
| CVE-2026-95115 | Deferred | 未確認 | CWE-787 | Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via the LEJP JSON parser |
| CVE-2026-95116 | Awaiting Analysis | 未確認 | CWE-400 | An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c. |
| CVE-2026-95117 | Deferred | 未確認 | Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmn_parse(), example/jsondump.c, dump() compon | |
| CVE-2026-95121 | Deferred | 未確認 | CWE-190 | An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rt |
| CVE-2026-95122 | Deferred | 未確認 | CWE-476 | mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial of service |
| CVE-2026-95124 | Deferred | 未確認 | CWE-120 | Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled load_ini_bu |
| CVE-2026-95125 | Awaiting Analysis | 未確認 | CWE-122 | libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a malformed or truncated RECT header can cause a denial of servi |
| CVE-2026-95127 | Deferred | 未確認 | An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.c | |
| CVE-2026-95137 | Rejected | 未確認 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. | |
| CVE-2026-95140 | Deferred | 未確認 | CWE-22 | kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" paramete |
| CVE-2026-95153 | Deferred | 未確認 | CWE-200 | An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints |
| CVE-2026-95155 | Deferred | 未確認 | CWE-674 | FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying deeply nested J |
| CVE-2026-95165 | Deferred | 未確認 | CWE-79 | Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field. |
| CVE-2026-95166 | Deferred | 未確認 | CWE-79 | In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload. |
| CVE-2026-95168 | Deferred | 未確認 | CWE-94 | An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py |
| CVE-2026-95179 | Deferred | 未確認 | CWE-674 | An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic precompositi |
| CVE-2026-95180 | Deferred | 未確認 | CWE-284 | An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorr |
| CVE-2026-95182 | Deferred | 未確認 | CWE-426 | An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable files in place of legitim |
| CVE-2026-95183 | Deferred | 未確認 | CWE-94 | An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via crafted external content. |
| CVE-2026-95184 | Awaiting Analysis | 未確認 | CWE-400 | Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS). |
| CVE-2026-95208 | Awaiting Analysis | 未確認 | CWE-295 | An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of Service (DoS) via providing crafted Certi |
| CVE-2026-95209 | Awaiting Analysis | 未確認 | CWE-400 | An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS). |
| CVE-2026-95210 | Awaiting Analysis | 未確認 | CWE-295 | Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions. |
| CVE-2026-95263 | Deferred | 未確認 | CWE-284 | Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control. A low-privilege backend administrator with administrator-update permission can change the password of the built-in super |
| CVE-2026-95264 | Deferred | 未確認 | CWE-22 | Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article ima |
| CVE-2026-95265 | Deferred | 未確認 | CWE-918 | Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint. The private-IP validation does not block loopback or link-local addr |
| CVE-2026-95502 | Awaiting Analysis | 未確認 | CWE-409, CWE-770 | A Git server that Grafana's Git Sync (provisioning) is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses (uncontrolled resource c |
| CVE-2026-95512 | Awaiting Analysis | 未確認 | CWE-400 | A flaw was found in FreeType, specifically within its CID font loader. A remote attacker could exploit this vulnerability by tricking a user into opening content that embeds or ref |
| CVE-2026-95526 | Deferred | 未確認 | CWE-862 | Unauthenticated Broken Access Control in BEAR <= 1.2.2 versions. |
| CVE-2026-95534 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection. This issue affect |
| CVE-2026-95588 | Deferred | 未確認 | CWE-22 | Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions. |
| CVE-2026-95589 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting Incorrect |
| CVE-2026-95591 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Reflected XSS |
| CVE-2026-95594 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications sms-alert allows Privilege Escalation.This issue affects SMS Alert |
| CVE-2026-95595 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly disable-re |
| CVE-2026-95596 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder |
| CVE-2026-95597 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 워드프 |
| CVE-2026-95598 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This issue aff |
| CVE-2026-95599 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This issue affe |
| CVE-2026-95605 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injection. This i |
| CVE-2026-95606 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.1 |
| CVE-2026-95607 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affects WPLMS : |
| CVE-2026-95608 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS.This issue |
| CVE-2026-95609 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XS |
| CVE-2026-95610 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This issue affec |
| CVE-2026-95620 | Awaiting Analysis | 未確認 | CWE-416 | A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a malicious or compromised HTTP/2 server to cause the client ap |
| CVE-2026-95630 | Undergoing Analysis | 未確認 | CWE-20 | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability |
| CVE-2026-95631 | Undergoing Analysis | 未確認 | CWE-20 | Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high pri |
| CVE-2026-95632 | Analyzed | 未確認 | CWE-347 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage |
| CVE-2026-95633 | Analyzed | 未確認 | CWE-347 | CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage |
| CVE-2026-95634 | Analyzed | 未確認 | CWE-918 | CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require use |
| CVE-2026-95635 | Analyzed | 未確認 | CWE-415 | Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulner |
| CVE-2026-95636 | Analyzed | 未確認 | CWE-190 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of t |
| CVE-2026-95637 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-95638 | Analyzed | 未確認 | CWE-122 | Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this i |
| CVE-2026-95639 | Analyzed | 未確認 | CWE-863 | Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploi |
| CVE-2026-95640 | Analyzed | 未確認 | CWE-476 | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to cra |
| CVE-2026-95641 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-95662 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code i |
| CVE-2026-95670 | Deferred | 未確認 | CWE-79 | The No External Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect in all versions up to, and including, 5.2.0 due to i |
| CVE-2026-95680 | Awaiting Analysis | 未確認 | CWE-287 | IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell. |
| CVE-2026-95684 | Deferred | 未確認 | CWE-79 | The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'attachments[name]' Parameter in all versions up to, and including, |
| CVE-2026-95686 | Deferred | 未確認 | CWE-79 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via |
| CVE-2026-95687 | Deferred | 未確認 | CWE-269 | The WPC Shop as a Customer for WooCommerce plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 2.0.0 This is due t |
| CVE-2026-95695 | Analyzed | 未確認 | CWE-863 | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization. |
| CVE-2026-95696 | Analyzed | 未確認 | CWE-400 | IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception. |
| CVE-2026-95702 | Awaiting Analysis | 未確認 | CWE-415, CWE-416 | Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code executi |
| CVE-2026-95704 | Received | 未確認 | CWE-284 | A vulnerability in the web-based management interface of wireless network management systems could allow an authenticated remote attacker to execute remote code. Successful exploit |
| CVE-2026-95705 | Received | 未確認 | CWE-77 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful expl |
| CVE-2026-95706 | Received | 未確認 | CWE-77 | Command injection vulnerabilities in the affected interface of AOS-8 could allow an authenticated remote attacker with high privileges to perform command injection. Successful expl |
| CVE-2026-95707 | Received | 未確認 | CWE-119 | A buffer overflow vulnerability in the PAPI protocol of AOS-8 could allow an authenticated remote attacker with high privileges to achieve remote code execution. Successful exploit |
| CVE-2026-95708 | Received | 未確認 | CWE-77 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Suc |
| CVE-2026-95709 | Received | 未確認 | CWE-77 | Command injection vulnerabilities exist in the affected interface of AOS-10 that could allow an authenticated remote attacker with high privileges to perform command injection. Suc |
| CVE-2026-95710 | Received | 未確認 | CWE-119 | An unauthenticated buffer overflow vulnerability exists in the underlying operating system of AOS-10 or AOS-8 and could allow an unauthenticated adjacent attacker to conduct a deni |
| CVE-2026-95711 | Received | 未確認 | CWE-269 | An authentication bypass vulnerability in the web-based management interface of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing authentication contro |
| CVE-2026-95712 | Received | 未確認 | CWE-200 | A sensitive information disclosure vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated adjacent attacker to access limited information handled by the affecte |
| CVE-2026-95713 | Received | 未確認 | CWE-119 | An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt th |
| CVE-2026-95714 | Received | 未確認 | CWE-119 | A buffer overflow vulnerability exists in the API of AOS-10 that could allow an authenticated adjacent attacker with high privileges to achieve remote code execution. Successful ex |
| CVE-2026-95715 | Received | 未確認 | CWE-77 | An unauthenticated command injection vulnerability exists in the command line interface of AOS-10. Successful exploitation could allow an attacker with physical access to execute a |
| CVE-2026-95716 | Received | 未確認 | CWE-269 | An authentication bypass in the PAPI protocol of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation allows a |
| CVE-2026-95717 | Received | 未確認 | CWE-79 | A stored cross-site scripting (XSS) vulnerability exists in the web-based management interface of AOS that could allow an authenticated remote attacker with high privileges to inje |
| CVE-2026-95718 | Received | 未確認 | CWE-287 | An authentication bypass vulnerability in the PAPI protocol of AOS-8 could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful explo |
| CVE-2026-95719 | Received | 未確認 | CWE-266 | An arbitrary file deletion vulnerability exists in the command line interface of AOS-10 that could allow an authenticated attacker with administrative privileges to cause a denial |
| CVE-2026-95720 | Received | 未確認 | CWE-119 | A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allo |
| CVE-2026-95721 | Received | 未確認 | CWE-119 | A memory corruption vulnerability exists in the web-based management interface of AOS-8. Successful exploitation could allow an authenticated low privilege attacker with local acce |
| CVE-2026-95807 | Deferred | 未確認 | CWE-79 | The FV Player 8 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and including, 8.1.7 due to insufficient |
| CVE-2026-95808 | Deferred | 未確認 | CWE-89 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to blind SQL Injection via the 'inputs' parameter in all versions up t |
| CVE-2026-95809 | Deferred | 未確認 | CWE-79 | The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via |
| CVE-2026-95816 | Deferred | 未確認 | CWE-79 | The Smart Forms – when you need more than just a contact form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formString' parameter in all versions up to |
| CVE-2026-95817 | Deferred | 未確認 | CWE-79 | The DoFollow Case by Case plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.6.0 due to insufficient inpu |
| CVE-2026-95837 | Awaiting Analysis | 未確認 | CWE-269 | containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process se |
| CVE-2026-95838 | Awaiting Analysis | 未確認 | CWE-400, CWE-407 | containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd's layer unpack handler repeatedly traverses directories for certain opaque whi |
| CVE-2026-95859 | Deferred | 未確認 | CWE-770 | libp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling unconditionally adds attacker-sup |
| CVE-2026-95865 | Deferred | 未確認 | CWE-89 | The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to blind SQL Injection via 'fields[][value]' Parameter in all versions up to, and |
| CVE-2026-9589 | Deferred | 未確認 | CWE-639, CWE-862 | Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud deployment |
| CVE-2026-95904 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-95943 | Awaiting Analysis | 未確認 | CWE-415 | Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96012 | Awaiting Analysis | 未確認 | CWE-264 | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and i |
| CVE-2026-96044 | Modified | 未確認 | CWE-1287, CWE-269 | No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-96071 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96096 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96108 | Awaiting Analysis | 未確認 | CWE-416 | Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96113 | Analyzed | 未確認 | CWE-122, CWE-197 | Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96118 | Analyzed | 未確認 | CWE-125, CWE-190 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96119 | Analyzed | 未確認 | CWE-94 | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data sanitization b |
| CVE-2026-96173 | Deferred | 未確認 | CWE-639 | The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that the requester is authorized to view an order before redirecting a public payment-callback request, allowi |
| CVE-2026-96183 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally. |
| CVE-2026-96185 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. |
| CVE-2026-96186 | Analyzed | 未確認 | CWE-502 | Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96188 | Awaiting Analysis | 未確認 | CWE-15 | External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96200 | Deferred | 未確認 | CWE-862 | The Payments for Hubtel WordPress plugin before 1.0.2 does not verify that payment notifications received by its payment callback come from the payment provider, allowing unauthent |
| CVE-2026-96202 | Awaiting Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96204 | Awaiting Analysis | 未確認 | CWE-918 | Server-side request forgery (ssrf) in Azure Arc allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-96206 | Awaiting Analysis | 未確認 | CWE-908 | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally. |
| CVE-2026-96207 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-96209 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96215 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96216 | Analyzed | 未確認 | CWE-416, CWE-822 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96217 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96218 | Analyzed | 未確認 | CWE-15 | Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally. |
| CVE-2026-96219 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96220 | Analyzed | 未確認 | CWE-94 | Improper control of generation of code ('code injection') in Windows Assigned Access allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96222 | Analyzed | 未確認 | CWE-295 | Improper certificate validation in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-96223 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96224 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96225 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96227 | Deferred | 未確認 | CWE-79 | The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, al |
| CVE-2026-96229 | Awaiting Analysis | 未確認 | CWE-183 | Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96230 | Awaiting Analysis | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in ASP.NET Core allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96231 | Awaiting Analysis | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96232 | Awaiting Analysis | 未確認 | CWE-125 | Out-of-bounds read in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96233 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96234 | Awaiting Analysis | 未確認 | CWE-346 | Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96235 | Awaiting Analysis | 未確認 | CWE-787 | Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96236 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96237 | Awaiting Analysis | 未確認 | CWE-829 | Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96238 | Awaiting Analysis | 未確認 | CWE-346 | Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96243 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96244 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96245 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96246 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-96247 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
| CVE-2026-96248 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96249 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96250 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96251 | Analyzed | 未確認 | CWE-807 | Reliance on untrusted inputs in a security decision in Microsoft PowerShell allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96252 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network. |
| CVE-2026-96253 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96254 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96255 | Deferred | 未確認 | CWE-200 | The Payments for Hubtel WordPress plugin before 1.0.2 does not prevent public access to a debug log in which it records payment requests, including the store's payment gateway API |
| CVE-2026-96256 | Deferred | 未確認 | CWE-79 | The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Map block's 'marker' |
| CVE-2026-96261 | Awaiting Analysis | 未確認 | CWE-121 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to |
| CVE-2026-96262 | Awaiting Analysis | 未確認 | CWE-121 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level acces |
| CVE-2026-96263 | Awaiting Analysis | 未確認 | CWE-121 | IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmware boot proces |
| CVE-2026-96264 | Awaiting Analysis | 未確認 | CWE-121 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level acce |
| CVE-2026-96265 | Awaiting Analysis | 未確認 | CWE-119 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level acces |
| CVE-2026-96266 | Awaiting Analysis | 未確認 | CWE-121 | IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to |
| CVE-2026-96267 | Deferred | 未確認 | CWE-89 | The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to generic SQL Injection via the 'fullRef' parameter in all versions up to, and including, 8.7 due |
| CVE-2026-96268 | Deferred | 未確認 | CWE-79 | The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gdpr-data' parameter in all versions up to, and |
| CVE-2026-96270 | Deferred | 未確認 | CWE-79 | The Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2026-96277 | Deferred | 未確認 | CWE-248, CWE-755 | Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. This issue affects Apache Thrift: before 0.25.0. Users are recom |
| CVE-2026-96278 | Deferred | 未確認 | CWE-79 | The WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.002 due to in |
| CVE-2026-96286 | Deferred | 未確認 | CWE-248 | Uncaught exception vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fi |
| CVE-2026-96287 | Deferred | 未確認 | CWE-407 | Inefficient Algorithmic Complexity vulnerability in Apache Thrift Perl bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version |
| CVE-2026-96288 | Deferred | 未確認 | CWE-674, CWE-770 | Uncontrolled Recursion, Allocation of resources without limits or throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. |
| CVE-2026-96289 | Deferred | 未確認 | CWE-674 | Uncontrolled Recursion vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which |
| CVE-2026-96292 | Deferred | 未確認 | CWE-1333, CWE-407 | Inefficient regular expression complexity, Inefficient Algorithmic Complexity vulnerability in Apache Thrift Lua bindings. This issue affects Apache Thrift: before 0.25.0. Us |
| CVE-2026-96293 | Awaiting Analysis | 未確認 | CWE-312, CWE-532, CWE-732 | A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encryption feature for macOS allows a local, unprivileged user or process to |
| CVE-2026-96294 | Deferred | 未確認 | CWE-248, CWE-755 | Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings. This issue affects Apache Thrift: before 0.25.0. Users are rec |
| CVE-2026-96297 | Awaiting Analysis | 未確認 | CWE-416 | Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage |
| CVE-2026-96299 | Awaiting Analysis | 未確認 | CWE-617 | A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with readWrite privileges could crash the mongos process by crafting a sp |
| CVE-2026-96300 | Analyzed | 未確認 | CWE-770 | Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96301 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96302 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96303 | Analyzed | 未確認 | CWE-358 | Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96304 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96305 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96306 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96307 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96308 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96309 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96310 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96311 | Analyzed | 未確認 | CWE-862 | Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally. |
| CVE-2026-96312 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96313 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96314 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally. |
| CVE-2026-96315 | Analyzed | 未確認 | CWE-862 | Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally. |
| CVE-2026-96316 | Analyzed | 未確認 | CWE-862 | Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally. |
| CVE-2026-96317 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96318 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96319 | Analyzed | 未確認 | CWE-416 | Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96320 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96321 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Remote Desktop Display Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-96322 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96323 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Update allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96324 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96325 | Analyzed | 未確認 | CWE-771 | Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96327 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue affects WP |
| CVE-2026-96328 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Injection.This i |
| CVE-2026-96329 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This i |
| CVE-2026-96330 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Injection.This i |
| CVE-2026-96331 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection.This issue |
| CVE-2026-96332 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This issue affect |
| CVE-2026-96333 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in Liquid Web / StellarWP GiveWP give allows Identity Spoofing.This issue affects GiveWP: from n/a through 4.16.8.1. |
| CVE-2026-96334 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Use |
| CVE-2026-96335 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Forminator: from n/a through |
| CVE-2026-96336 | Deferred | 未確認 | CWE-290 | Authentication Bypass by Spoofing vulnerability in WPMU DEV Forminator forminator allows Identity Spoofing.This issue affects Forminator: from n/a through 1.57.2. |
| CVE-2026-96337 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Profile |
| CVE-2026-96339 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Houzez.co Houzez houzez allows Reflected XSS.This issue affects Houzez: from n |
| CVE-2026-96341 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3. |
| CVE-2026-96355 | Awaiting Analysis | 未確認 | CWE-1336 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code Injection. This issue affects Webform versions: from 0.0.0 to 6.2. |
| CVE-2026-96356 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96357 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0. |
| CVE-2026-96358 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform v |
| CVE-2026-96359 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform v |
| CVE-2026-96360 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform v |
| CVE-2026-96361 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform v |
| CVE-2026-96362 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Cross-Site Scripting (XSS). This issue affects Webform v |
| CVE-2026-96363 | Awaiting Analysis | 未確認 | CWE-267 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96364 | Awaiting Analysis | 未確認 | CWE-799 | Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3. |
| CVE-2026-96365 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform allows Excessive Allocation. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6. |
| CVE-2026-96366 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96367 | Awaiting Analysis | 未確認 | CWE-267 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96368 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0. |
| CVE-2026-96369 | Awaiting Analysis | 未確認 | CWE-525 | Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affect |
| CVE-2026-96370 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Webform allows Server Side Request Forgery. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96371 | Awaiting Analysis | 未確認 | CWE-267 | Privilege Defined With Unsafe Actions vulnerability in Drupal Webform allows Stored XSS. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96372 | Awaiting Analysis | 未確認 | CWE-1220 | Insufficient Granularity of Access Control vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96373 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96374 | Awaiting Analysis | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Project Browser allows Cross Site Request Forgery. This issue affects Project Browser versions: from 0.0.0 to 2.0.3, from |
| CVE-2026-96375 | Awaiting Analysis | 未確認 | CWE-295 | Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the Middle (AiTM). This issue affects Cloud versions: from 0.0.0 to 7.0.1. |
| CVE-2026-96376 | Awaiting Analysis | 未確認 | CWE-78 | Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal Cloud allows OS Command Injection. This issue affects Cloud versi |
| CVE-2026-96377 | Awaiting Analysis | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined image style allows Excessive Allocation. This issue affects Combined image style versions: fro |
| CVE-2026-96378 | Awaiting Analysis | 未確認 | CWE-915 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerce Decoupled Checkout allows Object Injection. This issue affects Comme |
| CVE-2026-96379 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CookieCuttr allows Stored XSS. This issue affects CookieCuttr versions: |
| CVE-2026-96380 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal CSS Usage Analyzer allows Forceful Browsing. This issue affects CSS Usage Analyzer versions: from 1.0.0 to 1.0.2. |
| CVE-2026-96382 | Awaiting Analysis | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Diba carousel slider allows Stored XSS. This issue affects Diba carouse |
| CVE-2026-96384 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Mermaid Diagram Field allows Forceful Browsing. This issue affects Mermaid Diagram Field versions: from 1.0.4 to 1.0.9. |
| CVE-2026-96385 | Awaiting Analysis | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal REST & JSON API Authentication for Drupal allows Authentication Bypass. This issue affects REST & J |
| CVE-2026-96386 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Smart Content allows Forceful Browsing. This issue affects Smart Content versions: from 0.0.0 to 3.2.1. |
| CVE-2026-96387 | Awaiting Analysis | 未確認 | CWE-288 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Stop administrator login allows Authentication Bypass. This issue affects Stop administrator login |
| CVE-2026-96388 | Awaiting Analysis | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in Drupal Tawk.to - Live chat application allows Cross Site Request Forgery. This issue affects Tawk.to - Live chat application vers |
| CVE-2026-96390 | Awaiting Analysis | 未確認 | CWE-267 | Privilege Defined With Unsafe Actions vulnerability in Drupal Editoria11y Accessibility Checker allows Privilege Escalation. This issue affects Editoria11y Accessibility Checker ve |
| CVE-2026-96391 | Awaiting Analysis | 未確認 | CWE-862 | Missing Authorization vulnerability in Drupal Webform REST allows Forceful Browsing. This issue affects Webform REST versions: from 0.0.0 to 4.2.1. |
| CVE-2026-96392 | Awaiting Analysis | 未確認 | CWE-1336 | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal AI CKEditor allows Code Injection. This issue affects AI CKEditor versions: from 0.0.0 |
| CVE-2026-96393 | Awaiting Analysis | 未確認 | CWE-822 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer der |
| CVE-2026-96394 | Awaiting Analysis | 未確認 | CWE-126 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not validate image dimensions against the size of the pixel data when generating QuickLook thumb |
| CVE-2026-96395 | Awaiting Analysis | 未確認 | CWE-125 | The Affinity by Canva app for macOS before 3.3.1 (October 2026 release) did not perform adequate bounds checking when generating QuickLook thumbnails and previews of Affinity docum |
| CVE-2026-96396 | Awaiting Analysis | 未確認 | CWE-122 | The Affinity by Canva application for macOS before 3.3.1 (October 2026 release) did not safely calculate the size of an image buffer when generating QuickLook thumbnails and previe |
| CVE-2026-96398 | Awaiting Analysis | 未確認 | CWE-863 | Incorrect Authorization vulnerability in Drupal Webform allows Forceful Browsing. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1. |
| CVE-2026-96399 | Analyzed | 未確認 | CWE-125, CWE-248 | A repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references, causing a r |
| CVE-2026-96400 | Analyzed | 未確認 | CWE-918 | With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, suc |
| CVE-2026-96402 | Awaiting Analysis | 未確認 | CWE-125 | A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents to the application or faulting |
| CVE-2026-96404 | Analyzed | 未確認 | CWE-287 | When Gitea's web installer is reachable against a database that already contains users, such as after `INSTALL_LOCK` has been reset to `false`, submitting the install form with an |
| CVE-2026-96405 | Awaiting Analysis | 未確認 | CWE-770 | NLnet Labs Unbound up to and including version 1.26.1 limits compression-pointer traversal for each individual domain-name operation but has no aggregate inbound decompression-work |
| CVE-2026-96406 | Awaiting Analysis | 未確認 | CWE-125 | A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of its input header. The USBX host recorded that figure and use |
| CVE-2026-96408 | Awaiting Analysis | 未確認 | CWE-94 | A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the |
| CVE-2026-96424 | Deferred | 未確認 | CWE-732 | Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus |
| CVE-2026-96425 | Deferred | 未確認 | CWE-732 | Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus |
| CVE-2026-96449 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WPExperts WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP EasyPay: from |
| CVE-2026-96451 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: fr |
| CVE-2026-96461 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in TMS Amelia ameliabooking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Amelia: from n/a through |
| CVE-2026-96518 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in properfraction ProfilePress wp-user-avatar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Profile |
| CVE-2026-96521 | Undergoing Analysis | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-96522 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-96523 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-96530 | Deferred | 未確認 | CWE-200 | The Optimole WordPress plugin before 4.2.15 does not perform a capability check before exposing its stored image-optimization account data in a dashboard widget, allowing any auth |
| CVE-2026-96534 | Deferred | 未確認 | CWE-89 | The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in |
| CVE-2026-96535 | Deferred | 未確認 | CWE-79 | Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL. This occurs due to a lack of sanitisati |
| CVE-2026-96537 | Deferred | 未確認 | CWE-862 | The Tutor LMS WordPress plugin before 4.1.1 does not perform a capability check in a routine that regenerates its managed pages, allowing unauthenticated users to force-publish un |
| CVE-2026-96539 | Deferred | 未確認 | CWE-266 | Incorrect Privilege Assignment vulnerability in Ultimate Member Ultimate Member ultimate-member allows Privilege Escalation.This issue affects Ultimate Member: from n/a through 2.1 |
| CVE-2026-96540 | Awaiting Analysis | 未確認 | CWE-863 | An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in export settings, potentially allowing a remote authenticated |
| CVE-2026-96542 | Deferred | 未確認 | CWE-732 | Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371, 1.0.14547437, 1.0.14789537, and 1.0.14940698) on Windows allo |
| CVE-2026-96553 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Damian Góra FiboSearch ajax-search-for-woocommerce allows Reflected XSS.This i |
| CVE-2026-96558 | Deferred | 未確認 | CWE-79 | The Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions' parameter in |
| CVE-2026-96561 | Deferred | 未確認 | CWE-79 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.8.0 This is due |
| CVE-2026-96562 | Deferred | 未確認 | CWE-94 | The The Broken Link Checker plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.4.14.1. This is due to the software allowing |
| CVE-2026-96563 | Deferred | 未確認 | CWE-79 | The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'stm_f_s' parameter in all versions up to, and in |
| CVE-2026-96564 | Deferred | 未確認 | CWE-79 | The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author Display Name in all versions up to, and including, 10.2 due |
| CVE-2026-96566 | Deferred | 未確認 | CWE-79 | The Newsletter – Send awesome emails from WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'np1' Custom Field Parameter in all versions up to, and in |
| CVE-2026-96567 | Deferred | 未確認 | CWE-79 | The MW WP Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_id' parameter in all versions up to, and including, 5.1.7 due to insufficient input s |
| CVE-2026-96570 | Deferred | 未確認 | CWE-79 | The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'saswp_review_text' parameter in all versions up to, and includi |
| CVE-2026-96572 | Deferred | 未確認 | CWE-79 | The WP Meteor Website Speed Optimization Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 3.4.1 |
| CVE-2026-96573 | Deferred | 未確認 | CWE-79 | The Appointment Hour Booking – Booking Calendar plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Booking Form Single-Line Field via Schedule Calendar |
| CVE-2026-96574 | Deferred | 未確認 | CWE-79 | The User Frontend – Membership, User Registration, User Profile, User Directory & Content Restriction with Frontend Post Submission plugin for WordPress is vulnerable to Stored Cro |
| CVE-2026-96575 | Deferred | 未確認 | CWE-79 | The Transliterator – Multilingual and Multi-script Text Conversion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Predictable {rstr_keep} |
| CVE-2026-96577 | Awaiting Analysis | 未確認 | CWE-306 | A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restri |
| CVE-2026-96578 | Deferred | 未確認 | CWE-79 | The GSpeech TTS – WordPress Text To Speech Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 3.22.0 |
| CVE-2026-96580 | Analyzed | 未確認 | CWE-400 | Gitea expanded a workflow's static `strategy.matrix` into its full Cartesian product without a size limit when creating a run, before the fork pull request approval gate applied. A |
| CVE-2026-96582 | Awaiting Analysis | 未確認 | CWE-125, CWE-1285 | A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by advancing over each header and parsing |
| CVE-2026-96589 | Analyzed | 未確認 | CWE-672, CWE-863 | When a private repository is transferred to a user who lacks access, Gitea grants that recipient temporary read access as a collaborator so they can review the repository. Rejectin |
| CVE-2026-9659 | Deferred | 未確認 | CWE-121 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A speci |
| CVE-2026-96594 | Analyzed | 未確認 | CWE-79 | The Gitea API endpoint `GET /api/v1/repos/{owner}/{repo}/media/{filepath}` wrote files of up to 1 KiB that are stored directly in Git, not in LFS, to the response without the conte |
| CVE-2026-96596 | Deferred | 未確認 | CWE-835 | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module), hexpm hex (mix_hex_erl_tar module) |
| CVE-2026-9660 | Deferred | 未確認 | CWE-121 | Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A speci |
| CVE-2026-96607 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Basix NEX-Forms nex-forms-express-wp-form-builder allows Reflected XSS.This is |
| CVE-2026-96612 | Deferred | 未確認 | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in hexpm hex allows a malicious package publisher to delete a directory outside the pro |
| CVE-2026-96613 | Deferred | 未確認 | CWE-862 | The Meari IoT Cloud Platform OpenAPI Service is vulnerable to an authorization flaw that allows authenticated users to access the complete device shadow of any device by specifying |
| CVE-2026-96614 | Deferred | 未確認 | CWE-939 | "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application's in-app browser to |
| CVE-2026-96615 | Awaiting Analysis | 未確認 | CWE-290 | Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agen |
| CVE-2026-96616 | Deferred | 未確認 | CWE-613 | Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expi |
| CVE-2026-96618 | Deferred | 未確認 | CWE-409, CWE-770 | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex allows an untrusted package mirror to exhaust the memory or disk space of the machine ru |
| CVE-2026-96620 | Awaiting Analysis | 未確認 | CWE-20, CWE-78, CWE-88 | Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is |
| CVE-2026-96626 | Deferred | 未確認 | CWE-200, CWE-522 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.5.0, UpdateRegistry and TestRegistry in backend/api/services/container_registry_ser |
| CVE-2026-96627 | Deferred | 未確認 | CWE-266, CWE-269 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.6.0, UpdateUser in backend/api/handlers/users.go sets PasswordHash for any target w |
| CVE-2026-96628 | Deferred | 未確認 | CWE-863 | Arcane is an interface for managing Docker containers, images, networks, and volumes. Prior to 2.11.0, AuthMiddleware.managerAuth accepts X-Arcane-Agent-Token credentials and the e |
| CVE-2026-96636 | Undergoing Analysis | 未確認 | CWE-400, CWE-409 | Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek() and DcxImageFile.seek() reparse later MPO or DCX frames and replace self._size without rerunning Image._dec |
| CVE-2026-96637 | Undergoing Analysis | 未確認 | CWE-400, CWE-409 | Pillow is a Python imaging library. Prior to 13.0.0, SpiderImageFile.seek() in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self._size without reru |
| CVE-2026-96638 | Undergoing Analysis | 未確認 | CWE-400, CWE-770 | Pillow is a Python imaging library. From 9.1.0 until 13.0.0, BmpRleDecoder.decode() in src/PIL/BmpImagePlugin.py permits crafted RLE BMP delta escapes and absolute-mode runs to app |
| CVE-2026-96639 | Undergoing Analysis | 未確認 | CWE-125, CWE-787 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the sa |
| CVE-2026-96640 | Undergoing Analysis | 未確認 | CWE-400, CWE-407 | Pillow is a Python imaging library. From 5.1.0 until 13.0.0, PdfParser.linearize_page_tree() in src/PIL/PdfParser.py treats a PDF /Pages graph as a tree without tracking duplicate |
| CVE-2026-96641 | Undergoing Analysis | 未確認 | CWE-190 | Pillow is a Python imaging library. Prior to 13.0.0, PILfont text-width accumulation in src/_imaging.c checks positive glyph advances against INT_MAX but does not check negative ad |
| CVE-2026-96642 | Undergoing Analysis | 未確認 | CWE-835 | Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negative octal member size and computes a backward seek that returns to the |
| CVE-2026-96643 | Undergoing Analysis | 未確認 | CWE-407 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, Exif.load() in src/PIL/Image.py repeatedly slices the remaining EXIF data while it begins with the six-byte Exif heade |
| CVE-2026-96644 | Undergoing Analysis | 未確認 | CWE-125 | Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display |
| CVE-2026-96647 | Deferred | 未確認 | CWE-79 | The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'lsd[remark]' Parameter in all versio |
| CVE-2026-96648 | Deferred | 未確認 | CWE-79 | The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Cell 'data' Value via updateRows Action in all versions up to, an |
| CVE-2026-96650 | Deferred | 未確認 | CWE-79 | The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'platform_user_photo' Custom Field in all versions up to, and including, 3.3.11 due to |
| CVE-2026-96653 | Deferred | 未確認 | CWE-89 | The WP Directory Kit plugin for WordPress is vulnerable to time-based SQL Injection via 'display_name' Profile Field (Second-Order) in all versions up to, and including, 1.5.9 due |
| CVE-2026-96658 | Modified | 未確認 | CWE-94 | A flaw was found in Foreman. This vulnerability allows an authenticated remote attacker with low-level read permissions to achieve arbitrary code execution on the underlying server |
| CVE-2026-96659 | Analyzed | 未確認 | CWE-267 | A flaw was found in Foreman. This vulnerability allows an authenticated user with low-level Viewer permissions to cause unauthorized information disclosure by submitting requests t |
| CVE-2026-96660 | Deferred | 未確認 | CWE-79 | The User Registration & Membership – Free & Paid Memberships, Subscriptions, Content Restriction, User Profile, Custom User Registration & Login Builder plugin for WordPress is vul |
| CVE-2026-96661 | Deferred | 未確認 | CWE-89 | The Gmedia Photo Gallery plugin for WordPress is vulnerable to time-based SQL Injection via the 'gmedia__in' parameter in all versions up to, and including, 1.25.1 due to insuffici |
| CVE-2026-96662 | Deferred | 未確認 | CWE-89 | The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to generic SQL Injection via 'booking[service_id]' Parameter in |
| CVE-2026-96667 | Deferred | 未確認 | CWE-79 | The Real Estate Manager – Property Listing and Agent Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up |
| CVE-2026-96671 | Deferred | 未確認 | CWE-352 | Cross-Site Request Forgery (CSRF) vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Cross Site Request Forgery.This issue affects Featured Image from |
| CVE-2026-96682 | Deferred | 未確認 | CWE-79 | The Presto Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via <presto-player> Tag in all versions up to, and including, 4.5.1 due to i |
| CVE-2026-96743 | Deferred | 未確認 | CWE-79 | The Table Field Add-on for ACF and SCF plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Table Field Value in all versions up to, and including, 1.4.1-RC2 due t |
| CVE-2026-96761 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Reflected XSS.This issue affects |
| CVE-2026-96765 | Deferred | 未確認 | CWE-79 | The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id_token' parameter in all versi |
| CVE-2026-96768 | Deferred | 未確認 | CWE-79 | The GoSMTP Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via Email Log Body in all versions up to, and including, 1.2.3 due to insuffici |
| CVE-2026-96778 | Undergoing Analysis | 未確認 | CWE-787 | Pillow is a Python imaging library. From 9.4.0 until 13.0.0, ImagingJpegEncode() in src/libImaging/JpegEncode.c can call jpeg_write_marker() for a JPEG COM comment when an ICC prof |
| CVE-2026-96780 | Deferred | 未確認 | CWE-835 | figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.11.3, text() and textSync() can enter an unbounded loop when whitespace |
| CVE-2026-96806 | Awaiting Analysis | 未確認 | CWE-613 | The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but `KeycloakJWTMiddleware` then issued a new, unrevoked t |
| CVE-2026-96809 | Deferred | 未確認 | CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interactive AB EduAdmin Booking eduadmin-booking allows Blind SQL Inj |
| CVE-2026-96813 | Deferred | 未確認 | CWE-79 | The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Mark on Map Longitude/Latitude Fiel |
| CVE-2026-96840 | Deferred | 未確認 | CWE-79 | The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via display_name User Field in all versions up to, and including, 5.1.0 due |
| CVE-2026-96843 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96844 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. |
| CVE-2026-96846 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. |
| CVE-2026-96847 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96848 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-96849 | Analyzed | 未確認 | CWE-908 | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
| CVE-2026-96850 | Analyzed | 未確認 | CWE-170, CWE-908 | Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. |
| CVE-2026-96851 | Analyzed | 未確認 | CWE-126 | Buffer over-read in Windows Management Instrumentation allows an authorized attacker to disclose information locally. |
| CVE-2026-96852 | Analyzed | 未確認 | CWE-416 | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96853 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-96854 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally. |
| CVE-2026-96855 | Analyzed | 未確認 | CWE-862 | Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. |
| CVE-2026-96856 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96857 | Analyzed | 未確認 | CWE-552 | Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally. |
| CVE-2026-96858 | Undergoing Analysis | 未確認 | CWE-306 | Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally. |
| CVE-2026-96859 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally. |
| CVE-2026-96860 | Undergoing Analysis | 未確認 | CWE-125, CWE-170 | Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally. |
| CVE-2026-96861 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96862 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96863 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
| CVE-2026-96864 | Undergoing Analysis | 未確認 | CWE-415 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96865 | Undergoing Analysis | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally. |
| CVE-2026-96866 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96867 | Undergoing Analysis | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. |
| CVE-2026-96868 | Undergoing Analysis | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96870 | Deferred | 未確認 | CWE-79 | The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and i |
| CVE-2026-96871 | Deferred | 未確認 | CWE-79 | The Mang Board plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data_type' parameter in all versions up to, and including, 2.4.2 due to insufficient input |
| CVE-2026-96888 | Awaiting Analysis | 未確認 | CWE-476, CWE-617 | A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects |
| CVE-2026-96890 | Analyzed | 未確認 | CWE-918 | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to atta |
| CVE-2026-96893 | Analyzed | 未確認 | CWE-74 | GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have al |
| CVE-2026-96900 | Deferred | 未確認 | CWE-639 | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.1.4 does not verify ownership of the email address used to select an abandoned-cart record before deleting |
| CVE-2026-96901 | Deferred | 未確認 | CWE-287 | The Cart Abandonment Recovery for WooCommerce WordPress plugin before 2.2.0 does not verify the integrity of its cart-recovery token before acting on it and still accepts an unsig |
| CVE-2026-96902 | Deferred | 未確認 | CWE-200 | The Easy Property Listings WordPress plugin before 3.5.28 does not restrict which listing fields it adds to the public REST API output, allowing unauthenticated users to read detai |
| CVE-2026-96903 | Deferred | 未確認 | CWE-200 | The Easy Property Listings WordPress plugin before 3.5.27 does not perform authorisation checks on several of its contact-management read AJAX actions, allowing any authenticated u |
| CVE-2026-96904 | Deferred | 未確認 | CWE-200 | The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing unauthenticated |
| CVE-2026-96909 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96910 | Undergoing Analysis | 未確認 | CWE-822 | Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
| CVE-2026-96911 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96912 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96913 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96914 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96915 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96916 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96917 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96918 | Analyzed | 未確認 | CWE-863 | Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96919 | Analyzed | 未確認 | CWE-362, CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96920 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96921 | Analyzed | 未確認 | CWE-843 | Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally. |
| CVE-2026-96923 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Workstation Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96924 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96925 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-96926 | Analyzed | 未確認 | CWE-862 | Missing authorization in DNS Server allows an authorized attacker to perform tampering locally. |
| CVE-2026-96927 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-96928 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96929 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96930 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
| CVE-2026-96931 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96932 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Embedded Mode Service allows an authorized attacker to elevate privileges loc |
| CVE-2026-96933 | Analyzed | 未確認 | CWE-822 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96934 | Analyzed | 未確認 | CWE-416 | Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96935 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Windows NTFS allows an authorized attacker to disclose information locally. |
| CVE-2026-96937 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96938 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96939 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96940 | Analyzed | 未確認 | CWE-1390 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-96943 | Analyzed | 未確認 | CWE-122, CWE-190 | Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96944 | Analyzed | 未確認 | CWE-538 | Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally. |
| CVE-2026-96945 | Analyzed | 未確認 | CWE-248 | Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96946 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96947 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96948 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. |
| CVE-2026-96949 | Analyzed | 未確認 | CWE-362 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96950 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96951 | Analyzed | 掲載 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96952 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96953 | Analyzed | 未確認 | CWE-476 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
| CVE-2026-96956 | Awaiting Analysis | 未確認 | CWE-121 | Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. |
| CVE-2026-96957 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network. |
| CVE-2026-96958 | Analyzed | 未確認 | CWE-407 | Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96959 | Analyzed | 未確認 | CWE-770 | Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-9696 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'not_found' parameter in all versions up to, and including, 3.3.58 due to insufficien |
| CVE-2026-96960 | Analyzed | 未確認 | CWE-405 | Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny service over a network. |
| CVE-2026-96962 | Deferred | 未確認 | CWE-200 | The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obta |
| CVE-2026-96990 | Deferred | 未確認 | CWE-770 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Erlang bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to |
| CVE-2026-96995 | Analyzed | 未確認 | CWE-121, CWE-197 | Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally. |
| CVE-2026-96996 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-96997 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97001 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
| CVE-2026-97003 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97004 | Analyzed | 未確認 | CWE-122, CWE-191 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97005 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-97007 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97008 | Analyzed | 未確認 | CWE-124 | Buffer underwrite ('buffer underflow') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97009 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
| CVE-2026-97010 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97011 | Analyzed | 未確認 | CWE-763, CWE-908 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97012 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97014 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-97016 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97017 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97020 | Deferred | 未確認 | CWE-79 | The PO/MO Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'podata' parameter in all versions up to, and including, 1.4.2 due to insufficient input |
| CVE-2026-9703 | Awaiting Analysis | 未確認 | CWE-284 | Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an affected Grafana ins |
| CVE-2026-97030 | Awaiting Analysis | 未確認 | CWE-79 | A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. We now ensure that valid keyword uses |
| CVE-2026-97031 | Awaiting Analysis | 未確認 | CWE-405 | Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server p |
| CVE-2026-97032 | Awaiting Analysis | 未確認 | CWE-362 | HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines w |
| CVE-2026-97070 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This is |
| CVE-2026-97071 | Deferred | 未確認 | CWE-682 | Incorrect Calculation vulnerability in VillaTheme CURCY woo-multi-currency allows Integer Attacks.This issue affects CURCY: from n/a through 2.2.17. |
| CVE-2026-97075 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in WP Media WP Rocket wp-rocket allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Rocket: from n/a b |
| CVE-2026-97076 | Deferred | 未確認 | CWE-624 | Executable Regular Expression Error vulnerability in WP Media WP Rocket wp-rocket allows Code Injection.This issue affects WP Rocket: from n/a before 3.23.5. |
| CVE-2026-97146 | Deferred | 未確認 | CWE-290 | Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks lim |
| CVE-2026-97147 | Deferred | 未確認 | CWE-863 | In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that can return another project's resource, then write to it. An authe |
| CVE-2026-97183 | Deferred | 未確認 | CWE-200 | The WP-Invoice WordPress plugin through 4.3.1 does not perform capability checks in several of its AJAX handlers, allowing any authenticated user, such as a Subscriber, to retriev |
| CVE-2026-97188 | Deferred | 未確認 | CWE-502 | The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing |
| CVE-2026-97204 | Awaiting Analysis | 未確認 | CWE-863 | Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap. A user with write access to |
| CVE-2026-97205 | Awaiting Analysis | 未確認 | CWE-416 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module. When asynchronous file I/O (AIO) is enabled in certain configurations, processing a Server |
| CVE-2026-97206 | Awaiting Analysis | 未確認 | CWE-416 | NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contains a DNS-over-QUIC (DoQ) lifetime bug reachable by a remote DoQ client under multi-threaded operation. A client |
| CVE-2026-97208 | Analyzed | 未確認 | CWE-863 | The Gitea API endpoint for creating push mirrors (`POST /api/v1/repos/{owner}/{repo}/push_mirrors`) checked only whether mirroring was enabled and not the `[mirror] DISABLE_NEW_PUS |
| CVE-2026-97212 | Awaiting Analysis | 未確認 | CWE-613 | The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier. This implementati |
| CVE-2026-97219 | Deferred | 未確認 | CWE-862 | The MStore API WordPress plugin before 4.22.1 does not restrict which fields of an order a customer may update, allowing any authenticated user with a self-registerable account to |
| CVE-2026-97229 | Analyzed | 未確認 | CWE-190 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have |
| CVE-2026-97251 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in Bus Ticket Booking with Seat Reservation <= 5.9.3 versions. |
| CVE-2026-97257 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in PressTigers Simple Event Planner simple-event-planner allows Object Injection.This issue affects Simple Event Planner: from n/a t |
| CVE-2026-97258 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Aruba Migration Tool <= 1.0.4 versions. |
| CVE-2026-97260 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in MaxGalleria <= 6.5.3 versions. |
| CVE-2026-97263 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Stored XSS.This issue affects WPAdve |
| CVE-2026-97264 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Greg Winiarski WPAdverts wpadverts allows Reflected XSS.This issue affects WPA |
| CVE-2026-97268 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. |
| CVE-2026-97269 | Deferred | 未確認 | CWE-639 | Unauthenticated Insecure Direct Object References (IDOR) in WPFunnels <= 3.13.1 versions. |
| CVE-2026-97273 | Deferred | 未確認 | CWE-79 | Unauthenticated Cross Site Scripting (XSS) in Premmerce Wishlist for WooCommerce <= 1.1.13 versions. |
| CVE-2026-97275 | Deferred | 未確認 | CWE-1284 | Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows Input Data |
| CVE-2026-97276 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VeronaLabs WP Statistics wp-statistics allows Reflected XSS.This issue affects |
| CVE-2026-97277 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Social Boost <= 3.6.2 versions. |
| CVE-2026-97278 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in WP SYNTEX Polylang polylang allows Object Injection.This issue affects Polylang: from n/a through 3.8.9. |
| CVE-2026-97280 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Mamunur Rashid Review Schema review-schema allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Revie |
| CVE-2026-97281 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in WP Project Manager <= 4.0.7 versions. |
| CVE-2026-97283 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced Post Manag |
| CVE-2026-97284 | Deferred | 未確認 | CWE-502 | Contributor PHP Object Injection in Icegram <= 3.1.31 versions. |
| CVE-2026-97294 | Deferred | 未確認 | CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows Stored XS |
| CVE-2026-97296 | Deferred | 未確認 | CWE-502 | Deserialization of Untrusted Data vulnerability in Rocketgenius, Inc Gravity Forms gravityforms allows Object Injection.This issue affects Gravity Forms: from n/a before 3.1.1. |
| CVE-2026-97297 | Deferred | 未確認 | CWE-862 | Subscriber Broken Access Control in Gratisfaction <= 4.6.3 versions. |
| CVE-2026-97300 | Deferred | 未確認 | CWE-799 | Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 versions. |
| CVE-2026-97303 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured Access Co |
| CVE-2026-97304 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: from n/a thr |
| CVE-2026-97305 | Deferred | 未確認 | CWE-639 | Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access Control S |
| CVE-2026-97307 | Deferred | 未確認 | CWE-201 | Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost-calculator-builder allows Retrieve Embedded Sensitive Data.This issue |
| CVE-2026-97308 | Deferred | 未確認 | CWE-290 | Unauthenticated Bypass Vulnerability in Login Lockdown <= 2.17 versions. |
| CVE-2026-97309 | Deferred | 未確認 | CWE-862 | Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a through 4. |
| CVE-2026-97312 | Analyzed | 未確認 | CWE-787 | Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue r |
| CVE-2026-97313 | Awaiting Analysis | 未確認 | CWE-617 | A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of se |
| CVE-2026-97314 | Deferred | 未確認 | CWE-200 | The ThirstyAffiliates WordPress plugin before 3.12.1 does not check the status or type of the object requested by its link redirect tracking handler, allowing unauthenticated atta |
| CVE-2026-97315 | Deferred | 未確認 | CWE-74 | The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email s |
| CVE-2026-97317 | Deferred | 未確認 | CWE-200 | The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not remove the reCAPTCHA secret key from the giveaway settings it embeds in public giveaway pages, a |
| CVE-2026-97318 | Deferred | 未確認 | CWE-601 | The Giveaways and Contests by RafflePress WordPress plugin before 1.12.27 does not properly validate a giveaway's parent page URL before saving it and later redirecting visitors t |
| CVE-2026-97328 | Deferred | 未確認 | CWE-79 | The WebP Express WordPress plugin before 0.25.16 does not escape values that its bundled HTML parser re-emits into element attributes when a non-default image delivery mode is enab |
| CVE-2026-97331 | Deferred | 未確認 | CWE-200 | The User Private Files WordPress plugin before 2.1.9 does not validate that a supplied user belongs to the document being operated on before returning that user's email address, a |
| CVE-2026-97332 | Deferred | 未確認 | CWE-284 | The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite installations, where the rewrite rule it relies on to route fi |
| CVE-2026-97333 | Awaiting Analysis | 未確認 | CWE-121 | QAPI contained a stack-based buffer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe, Web Server, Command Cent |
| CVE-2026-97334 | Awaiting Analysis | 未確認 | CWE-409 | The network messaging layer contained improper handling of highly compressed data affecting service availability. Software customers upgrade to resolved maintenance release. Updat |
| CVE-2026-97336 | Deferred | 未確認 | CWE-79 | The CMB2 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'file_list' Field Type in all versions up to, and including, 2.13.0 due to insufficient input sanitiz |
| CVE-2026-97337 | Deferred | 未確認 | CWE-862 | The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the r |
| CVE-2026-97338 | Deferred | 未確認 | CWE-79 | The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Display Name in all versions up to, and including, 3.3.70 due to insufficient input sanit |
| CVE-2026-97339 | Deferred | 未確認 | CWE-79 | The Complianz GDPR/CCPA Cookie Consent Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via yotu-wp Cookie-Blocker Filter in all version |
| CVE-2026-97340 | Deferred | 未確認 | CWE-79 | The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to Stored Cross-Site Scripting via the user profile 'Author Page' social link contact-meth |
| CVE-2026-97341 | Deferred | 未確認 | CWE-79 | The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via 'X-Real-IP' HTTP Header in all versions up to, and includin |
| CVE-2026-97342 | Deferred | 未確認 | CWE-79 | The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'choice' Post Meta via Insert/Update Post Action in all versi |
| CVE-2026-97343 | Deferred | 未確認 | CWE-287 | The Burst Statistics – Simple WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Improper Authentication leading to Account Persistence in all |
| CVE-2026-97344 | Deferred | 未確認 | CWE-79 | The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Avatar Alt Attribute via Arbitrary User Meta Write in all vers |
| CVE-2026-97348 | Deferred | 未確認 | CWE-22 | The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function. This makes i |
| CVE-2026-97352 | Received | 未確認 | CWE-862 | The News Kit Addons For Elementor WordPress plugin before 1.4.9 does not perform a capability check on one of its AJAX actions, allowing authenticated users with subscriber-level a |
| CVE-2026-97353 | Received | 未確認 | CWE-862 | The News Kit Addons For Elementor WordPress plugin through 1.4.7 does not perform capability or ownership checks before updating post metadata in one of its authenticated AJAX acti |
| CVE-2026-97354 | Deferred | 未確認 | CWE-918 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.11 does not validate the destination of redirects when fetching a user-supplied media URL, allowing users |
| CVE-2026-97363 | Awaiting Analysis | 未確認 | CWE-307 | The WebSocket Application Programming Interface lacks restrictions on the number of authentication requests. This absence of rate limiting may allow an attacker to conduct denial-o |
| CVE-2026-97370 | Deferred | 未確認 | CWE-835 | Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/unpack/vm/RarVM.java can repeatedly execute a VM_JMP instruc |
| CVE-2026-97380 | Analyzed | 未確認 | CWE-620, CWE-863 | MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFI |
| CVE-2026-97381 | Deferred | 未確認 | CWE-346, CWE-393 | Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through 1.13.1 contains an origin validation error in the IsPermitted meth |
| CVE-2026-97394 | Deferred | 未確認 | CWE-248, CWE-476 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword and then dereferences |
| CVE-2026-97396 | Deferred | 未確認 | CWE-79 | The Email Marketing for WordPress and WooCommerce – Retainful plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data' parameter in all versions up to, and |
| CVE-2026-97398 | Deferred | 未確認 | CWE-79 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'synopsis' Shortcode Attribute in all versions up to, and including, 7.5.54.721 |
| CVE-2026-97400 | Awaiting Analysis | 未確認 | CWE-611, CWE-618 | In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitra |
| CVE-2026-97406 | Deferred | 未確認 | XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persiste | |
| CVE-2026-97468 | Analyzed | 未確認 | CWE-328 | Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCode/hashCode() |
| CVE-2026-97470 | Deferred | 未確認 | CWE-79 | The Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via unfiltered_html Grant |
| CVE-2026-97471 | Deferred | 未確認 | CWE-200 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.16.1 via the 'args[link_target]' parameter. |
| CVE-2026-97626 | Awaiting Analysis | 未確認 | CWE-200, CWE-863 | Requesting a user or organization profile page (`GET /{username}`) with an `Accept: application/rss+xml` or `Accept: application/atom+xml` header returned the owner's activity feed |
| CVE-2026-97627 | Deferred | 未確認 | CWE-912 | Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privi |
| CVE-2026-97629 | Awaiting Analysis | 未確認 | CWE-908 | Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automaticall |
| CVE-2026-97630 | Deferred | 未確認 | CWE-79 | The FV Flowplayer Video Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Unquoted popup Shortcode Attribute in all versions up to, and including, 7.5.54 |
| CVE-2026-97631 | Deferred | 未確認 | CWE-120, CWE-131, CWE-787 | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and “Incorrect Calculation of Buffer Size” by remote access. Successful |
| CVE-2026-97634 | Deferred | 未確認 | CWE-89 | The Event Tickets and Registration plugin for WordPress is vulnerable to generic SQL Injection via the 'orderby' parameter in all versions up to, and including, 5.29.5 due to insuf |
| CVE-2026-97635 | Awaiting Analysis | 未確認 | CWE-79 | The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any in |
| CVE-2026-97637 | Deferred | 未確認 | CWE-287 | The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclosure in all versions up to, and including, 3.1.2. The vulnerability ex |
| CVE-2026-97640 | Deferred | 未確認 | CWE-79 | The WPConsent – Cookie Banner & Cookie Consent for Privacy Compliance (GDPR / CCPA / EU Compliance Cookie Notice) plugin for WordPress is vulnerable to Stored Cross-Site Scripting |
| CVE-2026-97641 | Deferred | 未確認 | CWE-79 | The Relevanssi – A Better Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content in all versions up to, and including, 4.28.3 due to insuffici |
| CVE-2026-97643 | Deferred | 未確認 | CWE-79 | The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `givewp_campaign_grid` shortcode in version |
| CVE-2026-97644 | Deferred | 未確認 | CWE-269 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Privilege Escalation via Contact Identity Rebinding in all versions up to, and inc |
| CVE-2026-97652 | Deferred | 未確認 | CWE-79 | The WP Statistics – Simple, privacy-friendly Google Analytics alternative plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Query-Parameter Key i |
| CVE-2026-97655 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an incomplete blocklist in the code security scanner. |
| CVE-2026-97657 | Deferred | 未確認 | CWE-639 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass via Malleable Encryption and Bypassable HMAC in all versions up to, and including |
| CVE-2026-97660 | Deferred | 未確認 | CWE-79 | The WPC Product Options for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via wpcpo-* Array Key via Multipart Field Name in all versions up to, and |
| CVE-2026-97661 | Deferred | 未確認 | CWE-79 | The Business Essentials for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gateway' Form Field in all versions up to, and including, 1.2.1 du |
| CVE-2026-97662 | Awaiting Analysis | 未確認 | CWE-73, CWE-88 | An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or tr |
| CVE-2026-97663 | Deferred | 未確認 | CWE-79 | The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 5.122.0 due to |
| CVE-2026-97664 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-97665 | Awaiting Analysis | 未確認 | CWE-862 | A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload and persist Nu |
| CVE-2026-97666 | Awaiting Analysis | 未確認 | CWE-470 | Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows th |
| CVE-2026-97667 | Awaiting Analysis | 未確認 | CWE-79 | Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package. The scri |
| CVE-2026-97668 | Deferred | 未確認 | CWE-89 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the guest cart persistent meta_value in all versions up to, and including, 10.8.0 due |
| CVE-2026-97670 | Deferred | 未確認 | CWE-94 | The Avada (Fusion) Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16.1. This is due to the plugin not properly verifying |
| CVE-2026-97671 | Analyzed | 未確認 | CWE-22 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability. |
| CVE-2026-97673 | Analyzed | 未確認 | CWE-693 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation. |
| CVE-2026-97674 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary OS commands due to improper neutralization of special elements used in an OS |
| CVE-2026-97676 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in code, resulti |
| CVE-2026-97678 | Analyzed | 未確認 | CWE-693 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper input validation. |
| CVE-2026-97679 | Analyzed | 未確認 | CWE-94 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command |
| CVE-2026-97680 | Analyzed | 未確認 | CWE-284 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the ver |
| CVE-2026-97691 | Deferred | 未確認 | CWE-284 | Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-08-1 |
| CVE-2026-97712 | Awaiting Analysis | 未確認 | CWE-862 | Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user |
| CVE-2026-97714 | Awaiting Analysis | 未確認 | CWE-400 | CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authenticati |
| CVE-2026-97715 | Awaiting Analysis | 未確認 | CWE-400 | CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server |
| CVE-2026-97716 | Awaiting Analysis | 未確認 | CWE-400 | CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic |
| CVE-2026-97717 | Awaiting Analysis | 未確認 | CWE-400 | CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persist |
| CVE-2026-97720 | Deferred | 未確認 | CWE-303 | Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions up to and including 4.5.2 which allows attacked to access resources served by the |
| CVE-2026-97738 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97739 | Analyzed | 未確認 | CWE-122, CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97740 | Analyzed | 未確認 | CWE-497 | Exposure of sensitive system information to an unauthorized control sphere in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97741 | Analyzed | 未確認 | CWE-122, CWE-193 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97742 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97743 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97744 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. |
| CVE-2026-97745 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97746 | Analyzed | 未確認 | CWE-191 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97747 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97748 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97749 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97750 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97751 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97752 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97753 | Analyzed | 未確認 | CWE-122, CWE-190 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97754 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97755 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97756 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97757 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97758 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97759 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97760 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97761 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97762 | Analyzed | 未確認 | CWE-787 | Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97763 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97765 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97766 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97767 | Analyzed | 未確認 | CWE-415, CWE-476 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97768 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97769 | Analyzed | 未確認 | CWE-122, CWE-20 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97770 | Analyzed | 未確認 | CWE-121 | Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97771 | Analyzed | 未確認 | CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97772 | Analyzed | 未確認 | CWE-415 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97773 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97774 | Analyzed | 未確認 | CWE-367 | Time-of-check time-of-use (toctou) race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97775 | Analyzed | 未確認 | CWE-400, CWE-416 | Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97776 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97777 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97778 | Analyzed | 未確認 | CWE-190 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97779 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97780 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97781 | Analyzed | 未確認 | CWE-77 | Improper neutralization of special elements used in a command ('command injection') in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97782 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network. |
| CVE-2026-97783 | Analyzed | 未確認 | CWE-79 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a netwo |
| CVE-2026-97785 | Awaiting Analysis | 未確認 | CWE-287 | Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. |
| CVE-2026-97787 | Analyzed | 未確認 | CWE-362 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attac |
| CVE-2026-97788 | Analyzed | 未確認 | CWE-203 | Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-97789 | Analyzed | 未確認 | CWE-416 | Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97790 | Analyzed | 未確認 | CWE-59 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering loca |
| CVE-2026-97791 | Analyzed | 未確認 | CWE-362 | In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shar |
| CVE-2026-97792 | Analyzed | 未確認 | CWE-732 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97793 | Analyzed | 未確認 | CWE-306 | Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97794 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97798 | Analyzed | 未確認 | CWE-88 | Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97799 | Analyzed | 未確認 | CWE-347 | Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97800 | Analyzed | 未確認 | CWE-732 | Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97801 | Awaiting Analysis | 未確認 | CWE-1287 | Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to perform tampering over a network. |
| CVE-2026-97803 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97804 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97805 | Analyzed | 未確認 | CWE-125, CWE-20 | Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97806 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97807 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97808 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97809 | Analyzed | 未確認 | CWE-416 | Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97810 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97811 | Analyzed | 未確認 | CWE-400, CWE-415 | Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97812 | Analyzed | 未確認 | CWE-415 | Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally. |
| CVE-2026-97813 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network. |
| CVE-2026-97814 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97815 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97816 | Analyzed | 未確認 | CWE-416 | Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. |
| CVE-2026-97817 | Analyzed | 未確認 | CWE-122 | Heap-based buffer overflow in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97819 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97820 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97821 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97822 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97823 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97824 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97825 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97826 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97827 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97828 | Analyzed | 未確認 | CWE-126 | Buffer over-read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97829 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97830 | Analyzed | 未確認 | CWE-415 | Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network. |
| CVE-2026-97831 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97832 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97833 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97834 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97835 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97836 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97837 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97838 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97839 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97840 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97841 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97842 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97843 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97844 | Analyzed | 未確認 | CWE-125 | Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network. |
| CVE-2026-97851 | Deferred | 未確認 | CWE-862 | The storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states. Changing a location to TO_DELETE caus |
| CVE-2026-97853 | Deferred | 未確認 | CWE-789 | Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal pl |
| CVE-2026-97858 | Deferred | 未確認 | CWE-915 | An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to |
| CVE-2026-97859 | Awaiting Analysis | 未確認 | CWE-862 | Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were registered without the `individua |
| CVE-2026-97873 | Awaiting Analysis | 未確認 | CWE-770 | In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 (PKCS#5 scheme 1) and PKCS#12 PBE families ran their password-based key derivation with an iteration coun |
| CVE-2026-97876 | Awaiting Analysis | 未確認 | CWE-822 | A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to rep |
| CVE-2026-9814 | Deferred | 未確認 | CWE-78 | An OS command injection vulnerability exists in the boa formWizard newPass functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP |
| CVE-2026-98165 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-98166 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/ttm: fix swapped-out resources never leaving their bulk_move range ttm_tt_swapout() returns the number of | |
| CVE-2026-98167 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server->total_read for compound encrypted PDUs In receive_encrypted_standard(), server->total | |
| CVE-2026-98168 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifs_query_reparse_point() In cifs_query_reparse_point(), the start | |
| CVE-2026-98169 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots() If snapshot_array_size is smaller than GMT_TOKEN_ | |
| CVE-2026-9817 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTT |
| CVE-2026-98170 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() In move_smb2_ea_to_cifs(), the while (src_si | |
| CVE-2026-98171 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking a | |
| CVE-2026-98172 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix smbd_connection leak on cifs_get_tcp_session() error When an RDMA connection is successfully | |
| CVE-2026-98173 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of iface in cifs_try_adding_channels() cifs_try_adding_channels() iterates ses | |
| CVE-2026-98174 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization TCP_Server_Info.rlist is allocated via kzalloc which ze | |
| CVE-2026-98175 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in clean_demultiplex_info() clean_demultiplex_info() cancels server->echo d | |
| CVE-2026-98176 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc The low 6 bits of cp_hqd_eop_control store | |
| CVE-2026-98177 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Avoid integer underflow in EOP ring size calculation. The low 6 bits of cp_hqd_eop_control store t | |
| CVE-2026-98178 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Skip KFD mapping clear before initialization amdgpu_amdkfd_clear_kfd_mapping() assumes that a non- | |
| CVE-2026-98179 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix rmmio iounmap skipped on device removal amdgpu_pci_remove() calls drm_dev_unplug() before fini | |
| CVE-2026-98180 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm: RCU-free the scheduler-containing ring and VM objects Both struct msm_ringbuffer and struct msm_gem_v | |
| CVE-2026-98181 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gud_plane_atomic_check() The plane property loop uses req->properties[num_ | |
| CVE-2026-98182 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: refuse to make a monitor active when it has no queue A monitor interface only gets a TXQ if it | |
| CVE-2026-98183 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds read for empty PREQ elements ieee80211_mesh_preq_size_ok() derives the loc | |
| CVE-2026-98184 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: prevent authentication frame length truncation mwifiex_cfg80211_authenticate() derives the auth | |
| CVE-2026-98185 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: validate scan response extents mwifiex_ret_802_11_scan() subtracts the fixed response fields an | |
| CVE-2026-98186 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length mwifiex_search_oui_in_ie() reads a pairwise | |
| CVE-2026-98187 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST The PDR_INTERFACE_LIST loop only checks that the | |
| CVE-2026-98188 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate curve data length in the calibration curve converters p54_convert_rev0() and p54_convert_r | |
| CVE-2026-98189 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() wilc_wlan_handle_isr_ext() takes the RX | |
| CVE-2026-98190 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilc_wfi_p2p_rx() and mgmt_tx() start parsi | |
| CVE-2026-98191 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: release runtime PM ref on regdomain config failure wlcore_regdomain_config() gets a runtime PM r | |
| CVE-2026-98192 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown wcn36xx_dxe_deinit() tears down the TX ac | |
| CVE-2026-98193 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject TKIP frames without a full MIC libipw_michael_mic_verify() assumes that an skb contains a | |
| CVE-2026-98194 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas_tf: fix UAF in lbtf_free_adapter() lbtf_free_adapter() calls lbtf_free_cmd_buffer() to free the | |
| CVE-2026-98195 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: fix broadcast stations deallocation On the error path of __il4965_up(), il_dealloc_bcast_stati | |
| CVE-2026-98196 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmsmac: fix UAF in brcms_free_timer() brcms_free_timer() calls brcms_del_timer() which uses the non-sy | |
| CVE-2026-98197 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove When the fan/pwm 4-5 pins are not used as GPIO, w837 | |
| CVE-2026-98198 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pwm-fan) Stop RPM timer before freeing tach data sample_timer() rearms the RPM timer and accesses the | |
| CVE-2026-98199 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/core) increase number of phases and add new mask Increase the number of phases to 16 as a new up | |
| CVE-2026-98200 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() nsensor->current_state is dynamically replaced a | |
| CVE-2026-98201 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: zero ff_effect before compat copy in input_ff_effect_from_user In the compat path input_ff_effect_from_ | |
| CVE-2026-98202 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Transport drivers (such as rmi_i2c and rmi_ | |
| CVE-2026-98203 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: soc_button_array - check btns_desc->package.count Check that btns_desc->package.count is not 0 before a | |
| CVE-2026-98204 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() When chunking writes into SMBus blocks in r | |
| CVE-2026-98205 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: evdev - zero absinfo before partial copy in EVIOCSABS The EVIOCSABS handler copies at most the user sup | |
| CVE-2026-98206 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: cyttsp5 - clamp the HID report size before memcpy The size field comes from the device and is used as t | |
| CVE-2026-98207 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: spi: reset bytes_xfered before retrying CRC failures mmc_spi_data_do() updates data->bytes_xfered after e | |
| CVE-2026-98208 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdio_uart: fix xmit_fifo leak when the port table is full sdio_uart_add_port() allocates the transmit fif | |
| CVE-2026-98209 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Probe failure and removal leave SDHCI chi | |
| CVE-2026-98210 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: mxcmmc: cancel data work and watchdog on remove mxcmci_remove() frees the host through the devm tail, but | |
| CVE-2026-98211 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: mmci: Fix use-after-free in busy-timeout work ux500_busy_complete() can queue ux500_busy_timeout_work for | |
| CVE-2026-98212 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: hsq: Fix use-after-free in retry work mmc_hsq_pump_requests() queues retry_work when request_atomic() ret | |
| CVE-2026-98213 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: core: Cancel SDIO IRQ work before freeing host A host controller that uses sdio_signal_irq() schedules ho | |
| CVE-2026-98214 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: recheck intermediate backing files on mprotect() mprotect() can be used to bypass the SELinux checks | |
| CVE-2026-98215 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files SELinux saves the user file SID in a backing-file secur | |
| CVE-2026-98216 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix the PIO_CRED credit-return mmap hfi1_file_mmap()'s PIO_CRED case must hand user space the single | |
| CVE-2026-98217 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/mlx4: Fix use-after-free on pkey sysfs registration failure register_pkey_tree() ignores errors from regist | |
| CVE-2026-98218 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: i2c: atr: fix dangling adapter pointer on add failure i2c_atr_add_adapter() stores atr->adapter[chan_id] befor | |
| CVE-2026-98219 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Close the pre-enable ops error claim window scx_alloc_and_add_sched() publishes ops->priv before sc | |
| CVE-2026-98220 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix NULL sched deref in kfunc sub-sched error paths When the root scheduler has sub-scheds attached | |
| CVE-2026-98221 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check tpm2_load_cmd() does boundary checks against the ASN.1 size | |
| CVE-2026-98222 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of datablob_len encrypted_key_alloc() stores datablob_len in a u16. It i | |
| CVE-2026-98223 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm: filemap: retain mapped dropbehind folios Fault-around can map ready dropbehind folios without going throug | |
| CVE-2026-98224 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/vma: correctly unaccount on mmap_prepare() failure __mmap_setup() accounts memory for relevant mappings via | |
| CVE-2026-98225 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem With cgroup.memory=nokmem, shrinker_memcg_ | |
| CVE-2026-98226 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count SWAP_USAGE_OFFLIST_BIT is embedded in the | |
| CVE-2026-98227 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memstick: ms_block: destroy io_queue workqueue on removal msb_init_disk() creates the per-card ordered workque | |
| CVE-2026-98228 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ On I6500 CPU cores, lld and scd give no order | |
| CVE-2026-98229 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: save input state data before secpath resets xfrm_input() stores the current xfrm_state in the skb secpat | |
| CVE-2026-98230 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: use hlist_del_init_rcu for state_cache and state_cache_input Commit 14acf9652e56 ("xfrm: defensively unh | |
| CVE-2026-98231 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: serialize state GC with device state flush The deferred-device pass in xfrm_dev_state_flush() finds stat | |
| CVE-2026-98232 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() scsi_cdl_enable() uses length fields returned by | |
| CVE-2026-98233 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error Commit 61fad6816fc1 ("net/packet: tpacket_rcv: avoid a produce | |
| CVE-2026-98234 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hh_flows_limit at change time hhf_change() stores TCA_HHF_HH_FLOWS_LIMIT with no upper bou | |
| CVE-2026-98235 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure A batched RTM_DELACTION request takes a tempo | |
| CVE-2026-98236 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value mhi_mbim_rx() ignores the return value of skb_cop | |
| CVE-2026-98237 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain The NDP traversal in mhi_mbim_rx() only stops when | |
| CVE-2026-98238 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() The netif index carried in the DPMAIF PIT h | |
| CVE-2026-98239 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix RX checksum use-after-free lan743x_rx_process_buffer() adds each non-first receive buffer to | |
| CVE-2026-98240 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: initialize `options_len` before referencing options The following command triggers a kernel pa | |
| CVE-2026-98241 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm: use full sockets in local error paths xfrm6_local_rxpmtu() and xfrm6_local_error() dereference skb | |
| CVE-2026-98242 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes th | |
| CVE-2026-98243 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 The patch "dma-buf: dma-fence: F | |
| CVE-2026-98244 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: clear free space tree creation state on rebuild failure btrfs_rebuild_free_space_tree() sets BTRFS_FS_C | |
| CVE-2026-98245 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() mark_block_group_to_copy() iter | |
| CVE-2026-98246 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Serialize local codec list cleanup hci_dev_close_sync() clears hdev->local_codecs after r | |
| CVE-2026-98247 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_codec: validate vendor codec count length The Read Local Supported Codecs parsers consume the v | |
| CVE-2026-98248 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types The assembly for __percpu_##name##_case_##sz() and __per | |
| CVE-2026-98249 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc swsusp_arch_suspend_exit() reinstalls the restor | |
| CVE-2026-9825 | Awaiting Analysis | 未確認 | CWE-617 | IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over unencrypted connections, potentially enabling an attacker to in |
| CVE-2026-98250 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of NFSEXP_PNFS in the netlink codepath The rework of how block layouts were checked moved t | |
| CVE-2026-98251 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels ovs_ct_get_conn_labels() adds the labels extension | |
| CVE-2026-98252 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() iwpm_get_nlmsg_request() initializes refcount _after_ | |
| CVE-2026-98253 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copy_to_user failure rdma_join_multicast() queues RoCE work that later | |
| CVE-2026-98254 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: swiotlb: use the adjusted address for the highmem page lookup swiotlb_bounce() reads the page frame number fro | |
| CVE-2026-98255 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACK | |
| CVE-2026-98256 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: signal: Prevent exec() race Hyunwoo debugged the following KASAN UAF splat: BUG: KASAN: slab-use-after-free | |
| CVE-2026-98257 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rds: ib: use rds_conn_drop() on protocol version mismatch rds_ib_cm_connect_complete() runs from the RDMA-CM e | |
| CVE-2026-98258 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Kijo analyzed another race in the | |
| CVE-2026-98259 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling dax_to_folio() with empty entry cause | |
| CVE-2026-98260 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread() A per-thread CPU timer holds a reference to the PID of the | |
| CVE-2026-98261 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server use-after-free in cifs_chan_skip_or_disable() When a secondary channel is no longer supported | |
| CVE-2026-98262 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY A user reported that commit 105c42566a55 ("ata: | |
| CVE-2026-98263 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type stream_config is not initialized before b | |
| CVE-2026-98264 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: virtio: reset device before deleting virtqueues virtsnd_remove() and virtsnd_freeze() delete the virtque | |
| CVE-2026-98265 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity data_ep_set_params() allocates each data | |
| CVE-2026-98266 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: core: Fix potential UAF after asynchronous card release Usually a sound driver releases the resources as | |
| CVE-2026-98267 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Fix v9fs_issue_write() to update i_size and remo | |
| CVE-2026-98268 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix null pointer access in is_include_guest_event() A typical module unload occurring event when there i | |
| CVE-2026-98269 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking If we fail to update the | |
| CVE-2026-9827 | Deferred | 未確認 | CWE-22 | A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP reque |
| CVE-2026-98270 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check ras and obj before dereference nbio_v7_9_handle_ras_controller_intr_no_bifring() dereference | |
| CVE-2026-98271 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb_carve() pskb_carve_inside_header() and pskb_carve_in | |
| CVE-2026-98272 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: prevent buffer overflow in page_pool allocation The per‑processor buffering scheme is supported on | |
| CVE-2026-98273 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/kprobes: Fix crash when probing CS CALL instructions When using eBPF to probe CS CALL instructions within | |
| CVE-2026-98274 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() PSP conflicts with TLS ULP in its usa | |
| CVE-2026-98275 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Ack RX overrun interrupt correctly The RX overrun interrupt is reported in interrupt s | |
| CVE-2026-98276 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sock_gettstamp() sk->sk_flags must only be changed while holding the socket lock, beca | |
| CVE-2026-98277 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: ring the doorbell if a burst ends in a drop fbnic_tx_map() skips the doorbell write, and the compl | |
| CVE-2026-98278 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check ipip_fill_forward_path() and ip6_tnl_fi | |
| CVE-2026-98279 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: handle lack of space when cleaning up verity items When enable_verity() hits the qgroup limit, rollback | |
| CVE-2026-98280 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: Disable IRQ on unbind Currently, struct xe_i2c is freed before SGUnit IRQ is disabled in unbind pa | |
| CVE-2026-98281 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Also allocate private hash on vfork() As Jann demonstrated, it is entirely feasible to access the mm th | |
| CVE-2026-98282 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba The commit b1af23d836f8 ("KVM: PPC: iommu: | |
| CVE-2026-98283 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() kvmhv_emulate_tlbie_all_lpid() itera | |
| CVE-2026-98284 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netlink: do not free nlk->groups while lockless readers can use it netlink_realloc_groups() uses krealloc() un | |
| CVE-2026-98285 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: vlan: fix bugs caused by switchdev deletion errors Allowing switchdev to prevent vlan deletion an | |
| CVE-2026-98286 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown In drop_monitor teardown pat | |
| CVE-2026-98287 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pppoatm: ensure a writable skb header and linear data In pppoatm_send(), LLC encapsulation checks whether ther | |
| CVE-2026-98288 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO header length truncation stmmac_tso_xmit() stores the protocol header length returned by | |
| CVE-2026-98289 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). Commit bfdb01283ee8 ("af_unix: Assign a uni | |
| CVE-2026-98290 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup rfcomm_sock_cleanup_listen() closes unaccep | |
| CVE-2026-98291 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit btintel_pcie_submit_rx() used frbd_index > r | |
| CVE-2026-98292 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access btmtksdio.c and btmtkuart.c ca | |
| CVE-2026-98293 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() iso_get_sock() returns the parent socket with a ref | |
| CVE-2026-98294 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Do not write to the serial port after it is closed hci_uart_close() closes the serdev port | |
| CVE-2026-98295 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: coredump: Quiesce dump work on unregister hci_devcd_handle_pkt_init() arms dump_timeout and coredum | |
| CVE-2026-98296 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validate TX skb length in send_sync btintel_pcie_prepare_tx() copies skb->len bytes i | |
| CVE-2026-98297 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained hci_send_acl(), hci_send_sco() and hci_sen | |
| CVE-2026-98298 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() In mmp_pdma_prep_slave_sg(), for_each_sg( | |
| CVE-2026-98299 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcp_rmem be set below 4096 We can hit a division by zero crash in tcp_rcvbuf_grow() and tcp_rc | |
| CVE-2026-98300 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). tcp_v6_do_rcv() no longer c | |
| CVE-2026-98301 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu This is a follow-up of one of sashiko's pre-existing bug rep | |
| CVE-2026-98302 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: fddi: skfp: fix NULL deref when setting the MAC address while down skfp_ctl_set_mac_address() calls Reset | |
| CVE-2026-98303 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup When the forward output route cannot be u | |
| CVE-2026-98304 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: restore the hardware filters on open bcmgenet_hfb_init() runs INIT_LIST_HEAD() on priv->rxnfc_l | |
| CVE-2026-98305 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mxl862xx: disable the stats poll on teardown mxl862xx_setup() arms the stats poll before mxl862xx_se | |
| CVE-2026-98306 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation When an SRv6 packet arrives on an interface | |
| CVE-2026-98307 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() When mac80211 removes a sta, it calls .sta_state( | |
| CVE-2026-98308 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: trace PCM open only after assigning a stream Stream assignment can fail when hardware streams are e | |
| CVE-2026-98309 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Use managed KMS polling to fix UAF on unbind vc4_kms_load() calls drm_kms_helper_poll_init() but the | |
| CVE-2026-98310 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory __xe_shrinker_walk() walks the SYSTE | |
| CVE-2026-98311 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: don't transfer operstate before register virt_wifi_newlink() calls netif_stacked_transfer_ope | |
| CVE-2026-98312 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: fix OOB write from device-reported iso length usb6fire_pcm_in_urb_handler() sizes each outgoing i | |
| CVE-2026-98313 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSH_IDLE when the link was never enabled msm_dp_display_atomic_enable() returns early when l | |
| CVE-2026-98314 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: set timer->private_data before registering the PCM timer snd_pcm_timer_init() calls snd_device_regi | |
| CVE-2026-98315 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfs_non_resident_attr_shrink() calls runlist helpers that | |
| CVE-2026-98316 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: bcd2000: Fix race between rawmidi and disconnect Although we tried to fix the potential UAF issues at US | |
| CVE-2026-98317 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. NDTPA_INTERVAL_PROBE_TIME_MS sets .type and .min b | |
| CVE-2026-98318 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute tar | |
| CVE-2026-98319 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr When an out_fence_ptr is provided but D | |
| CVE-2026-98320 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released nf_ct_put() releases the ct->ext area inmedi | |
| CVE-2026-98321 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_nat: unregister and release hooks on error If nf_hook_entries_insert_raw() fails, the NAT hooks | |
| CVE-2026-98322 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_nat: fully initialise new_addr in netmap setup nft_nat_setup_netmap() builds the mapped address | |
| CVE-2026-98323 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Bound fragmented header copies by the remaining length siw_get_hdr() can receive an extended DDP/RDM | |
| CVE-2026-98324 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: pxa: fix double counting of the hw descriptors pxad_alloc_desc() was converted from kzallo | |
| CVE-2026-98325 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set up the TX info early to fix failure paths The previous commit 2c51457d930f ("wifi: mac8021 | |
| CVE-2026-98326 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: release the channel if start fails ieee80211_join_mesh() acquires a channel context and | |
| CVE-2026-98327 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: reset the CSA state when leaving ifmsh->csa is allocated in ieee80211_mesh_csa_beacon() | |
| CVE-2026-98328 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: add HE 6 GHz capability in the scan elems len The HE 6 GHz Band Capability element is in the p | |
| CVE-2026-98329 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't allow injecting frames wider than the chanctx Frames injected on a monitor interface can | |
| CVE-2026-98330 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: get the wiphy out of a dying network namespace When a network namespace is destroyed, cfg80211 | |
| CVE-2026-98331 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local->inter | |
| CVE-2026-98332 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: only operate on TDLS peers in the TDLS code ieee80211_tdls_oper() can operate on the AP statio | |
| CVE-2026-98333 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the LED state when ifup fails When the first interface comes up, the radio LED is turned | |
| CVE-2026-98334 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state when starting AP fails ieee80211_start_ap() can set enable_beacon (and beacon_int) | |
| CVE-2026-98335 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: abort chanswitch when leaving a mesh The code in ieee80211_stop_mesh() leaves CSA active, but | |
| CVE-2026-98336 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't offload TC setup on AP_VLAN interfaces AP_VLAN interfaces are purely virtual, so don't t | |
| CVE-2026-98337 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't start a ROC while scanning The ROC work can be pending when a scan starts (which require | |
| CVE-2026-98338 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for joined event When the IBSS is joined, we only record the BSSID/channel | |
| CVE-2026-98339 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a channel th | |
| CVE-2026-98340 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: only group hidden BSSes with beacon entries When a probe response for an unknown BSS comes in, | |
| CVE-2026-98341 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't free driver-owned scan requests When an interface goes down while a scan is running, cfg | |
| CVE-2026-98342 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: wait for RCU readers before releasing dma_device dma_issue_pending_all() walks the dma_device_list | |
| CVE-2026-98343 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() When dma_device_put() drops the last | |
| CVE-2026-98344 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix device kref underflow in dma_chan_put() dma_chan_get() takes chan->device->ref only on the slow | |
| CVE-2026-98345 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check IP header size in cfg80211_classify8021d() A frame that looks like IP can be transmitted | |
| CVE-2026-98346 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't get the radio mask for netdev-less wdevs cfg80211_calculate_bi_data() calls rdev_get_rad | |
| CVE-2026-98347 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/IPoIB: Avoid restoring OPER_UP after multicast flush ipoib_ib_dev_flush_light() temporarily clears IPOIB_FL | |
| CVE-2026-98348 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short association responses libipw_handle_assoc_resp() reads the capability, status a | |
| CVE-2026-98349 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject too-short beacon and probe responses libipw_process_probe_response() and the libipw_netwo | |
| CVE-2026-98350 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: pass PMKID to firmware if present Zero out auth_status on initialization. Otherwise, garb | |
| CVE-2026-98351 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: virt_wifi: free skb when disconnected When the simulated link is disconnected, virt_wifi_start_xmit() re | |
| CVE-2026-98352 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted The client borrows shared CQ credits in the ADDR_R | |
| CVE-2026-98353 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Locked QP and CQ lookups from EQ interrupts can d | |
| CVE-2026-98354 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails ib_mad_complete_recv() initializes mad_recv_wc-> | |
| CVE-2026-98355 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: guard against null kobj name In the client, if `init_path()` errors, the callee tries to clean up w | |
| CVE-2026-98356 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup bnxt_re_init_dcb_wq() ignores a failed alloca | |
| CVE-2026-98357 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/isert: wait for deferred control PDU completions before releasing the connection isert_send_done() hands IS | |
| CVE-2026-98358 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: IB/iser: reject a remote invalidation of an unregistered direction A write command whose data is sent entirely | |
| CVE-2026-98359 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed ib_device_get_netdev() intentionally returns a ref | |
| CVE-2026-98360 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds rxe_get_mcg() publishes a newly allocat | |
| CVE-2026-98361 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Commit 0b261d7c1cd3 ("RDMA/rxe: Break endless pagefau | |
| CVE-2026-98362 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate dvfs_get_idx() may return an out-of-range index if | |
| CVE-2026-98363 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS scpi_dvfs_get_info() already rejected a zero opp | |
| CVE-2026-98364 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU in bundle creation xfrm_bundle_create() and xfrm_create_dummy_bundle | |
| CVE-2026-98365 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access mr_check_range() validates that [iova | |
| CVE-2026-98366 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: validate access flags before swapping the MR's PD rxe_rereg_user_mr() reassigns mr->ibmr.pd first an | |
| CVE-2026-98367 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept We need to clear cep before releas | |
| CVE-2026-98368 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags On the out-of-place output path (esp->inplace | |
| CVE-2026-98369 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() syzbot reported a | |
| CVE-2026-98370 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: fix compat ALLOCSPI request use-after-free xfrm_state_netlink() builds the ALLOCSPI response with dump_o | |
| CVE-2026-98371 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix runt reassembly panic from short inner tot_len When the start of an inner packet is split acr | |
| CVE-2026-98372 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() iptfs_skb_reset_frag_walk() advances to the fra | |
| CVE-2026-98373 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables move_hugetlb_page_tables() optimizes mrema | |
| CVE-2026-98374 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() When tcp_send_synack() replaces the cloned | |
| CVE-2026-98375 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handle_incoming_queue() pulls pull_to bytes into th | |
| CVE-2026-98376 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Use array_map_meta_equal for percpu array inner map replacement percpu_array_map_ops.map_meta_equal point | |
| CVE-2026-98377 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in __vlan_insert_inner_tag() __vlan_insert_inner_tag() only guarant | |
| CVE-2026-98378 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator bpf_link_prime() inserts a link into link_idr before anon_inode_get | |
| CVE-2026-98379 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without inet6_dev ip6_route_lookup() can return an error-free route wh | |
| CVE-2026-98380 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions tcf_action_delete() drops the reference held by its | |
| CVE-2026-98381 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize veth_set_channels() tears down XDP resources for remov | |
| CVE-2026-98382 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices __bpf_offload_dev_match() falls back to comparing offdev | |
| CVE-2026-98383 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL An LWT_SEG6LOCAL program can invalidate its cached SRH wit | |
| CVE-2026-98384 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() sk_protocol lives in struct sock, not in stru | |
| CVE-2026-98385 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched cache grouping is by mm and the | |
| CVE-2026-98386 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot For QLAFX00 the request ring is ioremapped d | |
| CVE-2026-98387 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/crypto: Fix skcipher_walk return code handling in aes_s390 The return codes from skcipher_walk_virt() wer | |
| CVE-2026-98388 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock do_close_on_exec() currently happens while holding the | |
| CVE-2026-98389 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: skip gfx switch_power_profile during GPU reset During resume from GPU reset, the gfx idle work may | |
| CVE-2026-98390 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/amd_node: Avoid divide by zero on virtualized systems On a virtualized system, the number of nodes does no | |
| CVE-2026-98391 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Guard page-fault worker with runtime PM check During VM teardown, the VM's runtime PM reference is dro | |
| CVE-2026-98392 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Valid indices into txq->urbd0s/tfds/bufs are 0..txq-> | |
| CVE-2026-98393 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipv4: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork->base.fragsize to IP | |
| CVE-2026-98394 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Fahad Alharbi reported that re | |
| CVE-2026-98395 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit When __replay_soft_interrupts() replays | |
| CVE-2026-98396 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare() KUAP means kernel cannot touch user memory un | |
| CVE-2026-98397 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown In gpio_secondary_fwnod | |
| CVE-2026-98398 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: locking/lockdep: Invalidate stale class_cache entries for zapped classes syzbot reported a lockdep splat hitti | |
| CVE-2026-98399 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump, which passes the re-IPL paramet | |
| CVE-2026-98400 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC FTP boot or QEMU direct k | |
| CVE-2026-98401 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: fix stale transport header during tunnel decapsulation Syzbot reported a crash in qdisc_pkt_len | |
| CVE-2026-98402 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: icmp: avoid invalid transport header access in icmp_send tracepoint syzbot reported a WARNING triggered b | |
| CVE-2026-98403 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy all but the terminating byte | |
| CVE-2026-98404 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch complains that returnin | |
| CVE-2026-98405 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids() In parse_posix_sids(), sidsbuf_end is calculat | |
| CVE-2026-98406 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver ieee80211_set_bitrate_mask() checks if | |
| CVE-2026-98407 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: fix heap OOB write on key removal When a key is removed (data == NULL), rsi_hal_load_key() runs: | |
| CVE-2026-98408 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: rzv2h: Avoid division by zero clk_get_rate() could return 0. Avoid a division by zero panic. | |
| CVE-2026-98409 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: rtd119x: Avoid division by zero clk_get_rate() could return 0. Avoid a division by zero panic. | |
| CVE-2026-98410 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog da9063_wdt_suspend() and da9063_wdt_resum | |
| CVE-2026-98411 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() If dev_set_name() fails in pwrseq_ | |
| CVE-2026-98412 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() If memory allocation fails in pwrseq_unit | |
| CVE-2026-98413 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avc_has_perm_noaudit() avc_has_perm_noaudit() is documented to return a c | |
| CVE-2026-98414 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memcg: avoid charging the root memcg from obj_cgroup_charge_pages() obj_cgroup_charge_pages() resolves the obj | |
| CVE-2026-98415 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node The setup_cpuhp_and_cpuidle() parses | |
| CVE-2026-98416 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() If devm_kcalloc() for rx_ch | |
| CVE-2026-98417 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: xfrm: reject unrepresentable espintcp transport headers ESP-in-TCP can hand xfrm packets whose transport | |
| CVE-2026-98418 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/core: Avoid false migration warning for proxy donors Proxy execution can move a blocked donor's scheduli | |
| CVE-2026-98419 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix out-of-bounds write in reset_per_cpu_data() In reset_per_cpu_data(), al is computed as: | |
| CVE-2026-98420 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: follow SMB2 session expiration semantics ksmbd_session_register() destroys valid sessions after ten sec | |
| CVE-2026-98421 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: require a peer station for TDLS setup confirm It's nonsense for the setup confirm to go to sta | |
| CVE-2026-98422 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown On ifup, AP_VLAN interfaces get crypto_tx_tailroo | |
| CVE-2026-98423 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping The code checks ->started for frames coming | |
| CVE-2026-98424 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: undo netns switch if renaming the wiphy fails Once all the interfaces have been moved, cfg8021 | |
| CVE-2026-98425 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't warn when an IBSS has no channel to scan ieee80211_request_ibss_scan() warns when regula | |
| CVE-2026-98426 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path mwifiex_pcie_request_irq() registers each MS | |
| CVE-2026-98427 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: codel: bound the dropping loop per dequeue call The CoDel control law schedules the next drop one i | |
| CVE-2026-98428 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb: 6fire: Avoid embedded URBs The USB 6fire driver uses URBs embedded in different structs for PCM, MI | |
| CVE-2026-98429 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and | |
| CVE-2026-98430 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep admin queues alive while IRQ is registered The management IRQ handler accesses both the admin c | |
| CVE-2026-98431 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency Commit 51976c6cd786 ("RDMA/core: Provide rd | |
| CVE-2026-98432 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq- | |
| CVE-2026-98433 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure In kvmppc_svm_page_in(), if uv_page_i | |
| CVE-2026-98434 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sysctl: Check range in proc_dointvec_ms_jiffies_minmax Add the range check to do_proc_int_conv_ms_jiffies_min | |
| CVE-2026-98435 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Use parent device for devres in altr_portb_setup() Anchor the devres group and the devm-managed I | |
| CVE-2026-98436 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Disable device buffer exporting Device buffers are never intended to be exported. Disable expor | |
| CVE-2026-98437 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: fix runtime PM reference leaks Use pm_runtime_resume_and_get() in iris_enable_power_domains | |
| CVE-2026-98438 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mptcp: options: fix uninit-value in mptcp_write_data_fin When sending a DATA_FIN without data, and because the | |
| CVE-2026-98439 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb/server: cancel async requests when closing connection An async request may still be waiting when a connect | |
| CVE-2026-98440 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction We free the shadow S2 structures fr | |
| CVE-2026-98441 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirmed ct entr | |
| CVE-2026-98442 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer to the ex | |
| CVE-2026-98443 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix cursor and pointer handling when recovering iunlink buckets LOLLM pointed out a bug in xlog_recover_i | |
| CVE-2026-98444 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: drop dquot flush lock when we can't find a buffer to flush LOLLM noticed that xfs_qm_flush_one fails to d | |
| CVE-2026-98445 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't let memory failures leak blocks and kill repairs LOLLM complains that a memory allocation failure i | |
| CVE-2026-98446 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: don't let hidden_space go negative in xfs_metafile_resv_init LOLLM points out that if the amount of fdblo | |
| CVE-2026-98447 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that the inode btree r | |
| CVE-2026-98448 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: release orphanage dir inode if chown fails LOLLM points out that we leak the igrab'd reference to the orp | |
| CVE-2026-98449 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: delete compound mids on send failure before unlock When sending a compound request fails, smb_sen | |
| CVE-2026-98450 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: close completed creates on compound wait errors compound_send_recv() waits for responses in order | |
| CVE-2026-98451 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: use finish_no_open() for non-regular inodes An O_CREAT open can find an existing symlink or anoth | |
| CVE-2026-98452 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: clean up failed cached directory opens open_cached_dir() sends CREATE and QUERY_INFO as a compoun | |
| CVE-2026-98453 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: close handle after create-context parsing failure SMB2_open() accounts a successful CREATE respon | |
| CVE-2026-98454 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: fix create context out-of-bounds reads smb2_parse_contexts() validates the complete create-contex | |
| CVE-2026-98455 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO The RFCOMM_CONNINFO getsockopt hand | |
| CVE-2026-98456 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix race in read_unconf_index_list() read_unconf_index_list() counts unconfigured controllers | |
| CVE-2026-98457 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: validate frame length before control and FCS access l2cap_data_rcv() unpacks either a two-by | |
| CVE-2026-98458 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: release unused CIS holds after channel attach hci_bind_cis() and hci_connect_cis() return one | |
| CVE-2026-98459 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: balance the parent hold in hci_bind_bis() hci_conn_link() takes a lifetime reference to its pa | |
| CVE-2026-98460 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: reject out-of-range OCF values The raw HCI socket security filter has 128 OCF bits per su | |
| CVE-2026-98461 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: validate event length before filtering is_filtered_packet() reads the event code from skb | |
| CVE-2026-98462 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: fix CIS hold ownership on reuse Commit 69997d50ec57 ("Bluetooth: ISO: handle bound CIS cl | |
| CVE-2026-98463 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags schedule_deferred_locked() skips scheduling a d | |
| CVE-2026-98464 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchronize hrtimer callback during teardown The non-Sstc hrtimer callback clears next_set before | |
| CVE-2026-98465 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Serialize IMSIC attributes with vCPU migration KVM device ioctls are not serialized against KVM_R | |
| CVE-2026-98466 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Transfer the hyp stack pages out of the host stage-2 fix_host_ownership() walks only the linear-ma | |
| CVE-2026-98467 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race Commit 7270cc9157f4 ("KVM: arm64: nv: Han | |
| CVE-2026-98468 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix spurious warning for benign stage 2 teardown race kvmtool was used to establish an L1 guest wi | |
| CVE-2026-98469 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Fix AArch32 DBGBXVR<n> handling The consolidation of the breakpoint and watchpoint register access | |
| CVE-2026-98470 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode kvm_pkvm_ioctl_allowed() WARNs when kvm_get_ca | |
| CVE-2026-98471 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM during intra-host migration Manually perform cache maintenance | |
| CVE-2026-98472 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV Unconditionally free SEV's "hav | |
| CVE-2026-98473 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Three related problems exist in t | |
| CVE-2026-98474 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix missing device lock in zpci_report_status() When pdev is non-NULL, zpci_report_status() accesses | |
| CVE-2026-98475 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Defi | |
| CVE-2026-98476 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() The channel path registry entry associated | |
| CVE-2026-98477 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() perf_pmu_sched_task() returns early when cpuctx->task_ | |
| CVE-2026-98478 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Keep internal commands dispatchable during error handling Commit 08b12cda6c44 ("scsi: ufs: co | |
| CVE-2026-98479 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU The Data-In branch of iscsi_tcp_hdr_dissect() re | |
| CVE-2026-98480 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970a_startup() powers up the device before applying t | |
| CVE-2026-98481 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: port100: reject frames whose declared length exceeds the received data port100_recv_response() passes the | |
| CVE-2026-98482 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() nfc_llcp_recv_hdlc() reads the sequence byte s | |
| CVE-2026-98483 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: fix use-after-free in nfc_get_local_general_bytes Commit 6709d4b7bc2e ("net: nfc: Fix use-after-free caus | |
| CVE-2026-98484 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: skip expired catchall elements on insert and delete nft_setelem_catchall_insert() looks | |
| CVE-2026-98485 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read rt_mt6_check() permits rules to be co | |
| CVE-2026-98486 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ena: fix MMIO read buffer leak on probe failure ena_device_init() initializes the MMIO read mechanism wit | |
| CVE-2026-98487 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: mdb: restart port group walk after deletion br_mdb_flush_pgs() keeps a pointer-to-pointer cursor | |
| CVE-2026-98488 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Same issue as atl1c (see the first commit in | |
| CVE-2026-98489 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: atl1c: fix soft lockup on out-of-range tpd_cons read The hardware can report an out-of-range tpd_cons (se | |
| CVE-2026-98490 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: fix helper UAF due to extensions realloc While calling the helpers, a raw pointer | |
| CVE-2026-98491 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry In a case where skb with an unconfirm | |
| CVE-2026-98492 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths Fix 3 leaks in macb_alloc() error paths: | |
| CVE-2026-98493 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipconfig: bound DHCP option construction ic_dhcp_init_options() appends the hostname (option 12), vendor- | |
| CVE-2026-98494 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Same issue as atl1c (see the first commi | |
| CVE-2026-98495 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup The ARP ioctl copies a user-provided struct arpreq into a stack | |
| CVE-2026-98496 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: airoha: npu: cancel wdt_work after releasing the WDT IRQ airoha_npu_remove() calls cancel_work_sync() on | |
| CVE-2026-98497 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: fix swapped IPv6 IPsec policy masks IPv6 XFRM policies may use different source and destination pre | |
| CVE-2026-98498 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() When the reverse entry is found but | |
| CVE-2026-98499 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() The 'wacom_wac_pen_serial_enforce()' function may c | |
| CVE-2026-98500 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-oxp: use cancel_delayed_work_sync() in remove oxp_hid_remove() uses cancel_delayed_work() for all thr | |
| CVE-2026-98501 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: alps: fix use-after-free on input2 registration failure alps_input_configured() stores data->input2 befor | |
| CVE-2026-98502 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: alps: unregister DualPoint Stick input device on remove alps_input_configured() allocates a second input | |
| CVE-2026-98503 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: packet: use ubuf_info completion for TX_RING packets tpacket_snd sends skbs with frags pointing into its ring | |
| CVE-2026-98504 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: PCI: of_property: Omit bus properties without a subordinate bus A bridge (a device with a Type 1 header) may n | |
| CVE-2026-98505 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() damon_hugetlb_mkold() reads the page | |
| CVE-2026-98506 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: do not dissolve gigantic pages without runtime support dissolve_free_hugetlb_folio() doesn't check | |
| CVE-2026-98507 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish On arm64 server, we find that a t | |
| CVE-2026-98508 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference on fence allocation failure virtio_gpu_fence_alloc() can fail due to | |
| CVE-2026-98509 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix memory leak of fence event on execbuffer failure virtio_gpu_execbuffer_ioctl() reserves a DRM | |
| CVE-2026-98510 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: nuke PTs only after unlinking contested VMAs In xe_vm_close_and_put(), external-BO VMAs are queued | |
| CVE-2026-98511 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() nouveau_bo_pin_locked() checks w | |
| CVE-2026-98512 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: RCU-free the scheduler-containing nouveau_sched struct nouveau_sched embeds a struct drm_gpu_sche | |
| CVE-2026-98513 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() If nvif_outp_edid_get() fails, nouveau_connecto | |
| CVE-2026-98514 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix gem reference leak in validate_init() On the ttm_bo_reserve() failure and "vma not found" err | |
| CVE-2026-98515 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix double-free in nvif_vmm_dtor On failure, nouveau_cli_init() calls nouveau_cli_fini() to tear | |
| CVE-2026-98516 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: Fix bridge reference leak in nv1a_ram_new() pci_get_domain_bus_and_slot() takes a reference to th | |
| CVE-2026-98517 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM nouveau_uvmm_sm() calls op_map(), whi | |
| CVE-2026-98518 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/dmem: pin VRAM for the whole registered range Commit c32287471077 ("gpu/drm/nouveau: enable THP su | |
| CVE-2026-98519 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() amdgpu_debugfs_test_ib_show() resumes the dev | |
| CVE-2026-98520 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping kfd_dev_mapping caches the address_s | |
| CVE-2026-98521 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix incorrect RCU teardown order i915_gem_busy_ioctl uses dma_resv_for_each_fence_unlocked() to iter | |
| CVE-2026-98522 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() Map failure from pvr_mmu_map_sgl() in | |
| CVE-2026-98523 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/client: fix restore of partially initialized client I got a null-ptr-deref report when closing a DRM file | |
| CVE-2026-98524 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rds: ib: Clear the sg list when mapping an MR fails rds_ib_map_frmr() stores the caller's scatterlist in the M | |
| CVE-2026-98525 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() When a socket transmits a packet with MCTP_ | |
| CVE-2026-98526 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: llc: reserve device headroom for allocated frames llc_alloc_frame() reserves link-layer headroom using the dev | |
| CVE-2026-98527 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: zynq: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter increment | |
| CVE-2026-98528 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: fix kernel stack leak to user-space in error path If we fail to acquire the GPIO chip guard in gpi | |
| CVE-2026-98529 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Switching a persistent GPIO line from input | |
| CVE-2026-98530 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix permanent hang when flushing the kprobe optimizer Writing 0 to /proc/sys/debug/kprobes-optimizati | |
| CVE-2026-98531 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST In seg6_genl_policy, SEG6_ATTR_DST is defined with | |
| CVE-2026-98532 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6_find_hdr() return an offset past the packet end ipv6_find_hdr() walks the extension head | |
| CVE-2026-98533 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipe: protect the dm-verity root hash with RCU ipe_bdev_setintegrity() frees the old root hash when dm-verity p | |
| CVE-2026-98534 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipe: fix use-after-free when auditing a newly loaded policy new_policy() audits the policy after ipe_new_polic | |
| CVE-2026-98535 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fsl/fman: Fix clk reference leak in read_dts_node() of_clk_get() returns a clock with its reference count incr | |
| CVE-2026-98536 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: writeback: report a Tasks-RCU quiescent state per cgwb drain pass cleanup_offline_cgwbs_workfn() drains a dyin | |
| CVE-2026-98537 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current_pwq deref in flush dependency check check_flush_dependency() uses current_wq_worke | |
| CVE-2026-98538 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes cleanup_offline_cgwb() prepares at | |
| CVE-2026-98539 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga nt | |
| CVE-2026-98540 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fprobe: Terminate the fgraph_data list when the reservation is not filled fprobe_fgraph_entry() reserves shado | |
| CVE-2026-98541 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Commit 7a9bc9e3f423 ("fou: Don't allow 0 for FOU_ATTR | |
| CVE-2026-98542 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict When a remote pa | |
| CVE-2026-98543 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir bpf_lsm_has_d_inode_locked() makes t | |
| CVE-2026-98544 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bna: prevent IOC timer rearm during teardown bna: prevent IOC timer rearm during teardown bnad_pci_remove() a | |
| CVE-2026-98545 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ata: libata-scsi: bound the ATA passthru sense descriptor writes When an ATA PASS-THROUGH command to an ATAPI | |
| CVE-2026-98546 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 __init_el2_fgt2() writes one mask to both HDFGRTR2_EL2 | |
| CVE-2026-98547 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: af_packet: fix integer overflow in prb_calc_retire_blk_tmo() prb_calc_retire_blk_tmo() computes in 32-bit int | |
| CVE-2026-98548 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: discard the rest of the packet on a stale-cookie error When an association is in COOKIE-ECHOED state and | |
| CVE-2026-98549 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: prevent collapsing skbs across boundary in rtx queue tcp_write_collapse_fence() sets TCP_SKB_CB(skb)->eor | |
| CVE-2026-98550 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Commit 48a5fe38772b ("tipc: fix | |
| CVE-2026-98551 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fill branch entries with a single assignment perf_clear_branch_entry_bitfields() clears the bitfiel | |
| CVE-2026-98552 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix a refcount leak in attach_perf_ctx_data() The attach_perf_ctx_data() can race on global and !gl | |
| CVE-2026-98553 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi->pipe file reference leak in autofs_kill_sb() When autofs_fill_super() fails before clearing A | |
| CVE-2026-98554 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vlan: ensure sufficient headroom in vlan_dev_hard_header() Callers that only reserve ETH_HLEN or less (such as | |
| CVE-2026-98555 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: llc: fix skb UAF and leaks on llc_mac_hdr_init() failure In llc_conn_ac_resend_i_xxx_x_set_0_or_send_rr(), if | |
| CVE-2026-98556 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: DQO: reject TSO packets with an out of range MSS gve_prep_tso() notes that the device requires the MSS to | |
| CVE-2026-98557 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO gve_can_send_tso() computes how many buffer | |
| CVE-2026-98558 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: flush skb_defer_nodes in dev_cpu_dead() When a CPU goes offline, dev_cpu_dead() drains its softnet queues | |
| CVE-2026-98559 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on lgr list traversal in smcr_port_err() smcr_port_err() traverses smc_lgr_list.list without | |
| CVE-2026-98560 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/rds: size a connection's path set by the transport it ends up with __rds_conn_create() computes npaths fro | |
| CVE-2026-98561 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfp: hold IPsec RX state under the XArray lock nfp_net_ipsec_rx() drops the XArray lock before taking a refere | |
| CVE-2026-98562 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix races in Tx timestamp handling wx->ptp_tx_skb is shared between the Tx path, the PTP auxiliary | |
| CVE-2026-98563 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: phylink: record the PHY only once bringup cannot fail phylink_bringup_phy() stores the PHY in pl->phydev | |
| CVE-2026-98564 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq mt7530_remove_common() disposes the per-PHY interr | |
| CVE-2026-98565 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 The core and io supplies are only reques | |
| CVE-2026-98566 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: clamp freelist reconstruction requests The firmware reconstruction count controls accesses to | |
| CVE-2026-98567 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: xps: reject an out of range traffic class Only the entries below dev->num_tc are valid in dev->tc_to_txq[ | |
| CVE-2026-98568 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vxlan: use one headroom snapshot for neighbour replies vxlan_na_create() samples LL_RESERVED_SPACE() to size t | |
| CVE-2026-98569 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip_gre: Reject enabling collect metadata through changelink ipgre_netlink_parms() can enable collect_md on an | |
| CVE-2026-98570 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dst_dev_overhead() The seg6, ioam6 and rpl lwtunnels size their skb | |
| CVE-2026-98571 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: clear stale buf->page after recycling on skb build failure In stmmac_rx(), when napi_build_skb() | |
| CVE-2026-98572 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix immediate JMP JEQ/JNE on MIPS32 An addu instruction was emitted instead of addiu, causing the immedia | |
| CVE-2026-98573 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() skb_maybe_pull_tail() subtracts skb_headlen | |
| CVE-2026-98574 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: stop Tx NAPI before disabling the queues bcmgenet_netif_stop() and the Wake-on-LAN branch of bc | |
| CVE-2026-98575 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() frame->ccid.datalen is read directly from the USB | |
| CVE-2026-98576 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix slab-out-of-bounds reads when logging service names nfc_llcp_wks_sap() and nfc_llcp_build_sdreq | |
| CVE-2026-98577 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() nfc_llcp_wks_sap() compares only servi | |
| CVE-2026-98578 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate ISO15693 inventory length The ISO15693 inventory helper removes a two-byte prefix with | |
| CVE-2026-98579 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure nfc_genl_llc_sdreq() builds a list of TLV nodes | |
| CVE-2026-98580 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix race condition in accept_queue lifecycle In nfc_llcp_socket_release(), sockets and listener acc | |
| CVE-2026-98581 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() nfc_llcp_recv_dm() handles DM(NOBOUND)/ | |
| CVE-2026-98582 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: st21nfca: validate received frame size st21nfca_hci_i2c_repack() trims a received frame at its EOF marker | |
| CVE-2026-98583 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nfc: nfcmrvl: validate helper command length before pull The firmware download receive path removes the NCI da | |
| CVE-2026-98584 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: fix potential stack infoleak in em_text_dump() em_text_dump() allocates struct tcf_em_text on the s | |
| CVE-2026-98585 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Avoid rounding zero ring sizes roundup_pow_of_two() is undefined for zero. ethtool permits a zero | |
| CVE-2026-98586 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: hold asoc or transport before mod_timer() in timer handlers Take the association or transport reference | |
| CVE-2026-98587 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transition for iso_resource_auto client resource The todo member of iso_resource_auto | |
| CVE-2026-98588 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc sock_map_alloc() only rejects max_entries == 0 an | |
| CVE-2026-98589 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject pkt arguments in mutating subprogs The verifier tracks changes in how PTR_TO_PACKET registers' bou | |
| CVE-2026-98590 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sock context code generation Currently, the ctx access code reads the rx_queue_mapping field with | |
| CVE-2026-98591 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bounds check for skb-backed dynptrs The skb_pointer_if_linear() function checks whether a memory regi | |
| CVE-2026-98592 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: spacemit: clear TX descriptor on fragment mapping failure emac_tx_mem_map() writes TX_DESC_0_OWN into the | |
| CVE-2026-98593 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/debug: Fix NULL pointer dereference in debug_info_copy() When debug_register_static() fails, it clears ar | |
| CVE-2026-98594 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tg3: clean up PHYLIB resources on probe failure tg3_get_invariants() can register an MDIO bus and connect a PH | |
| CVE-2026-98595 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: udp: remove a disconnected socket from the 4-tuple hash table A UDP socket bound to a specific address and por | |
| CVE-2026-98596 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix dst leak for uncached routes. ip6_route_output_flags(), ip6_rt_put_flags(), and ip6_dst_check() dete | |
| CVE-2026-98597 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: sr9700: include receive overhead in the length check The receive fixup subtracts the Ethernet CRC fr | |
| CVE-2026-98598 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: Prevent rt6_insert_exception() for dying fib6_info. Before the cited commit, fib6_nh_flush_exceptions() | |
| CVE-2026-98599 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-negative offsets in stack_slot_obj_get_spi() bpf_get_spi() computes (-off - 1) / BPF_REG_SIZE | |
| CVE-2026-98600 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() While rfcomm_recv_frame() verifies that skb | |
| CVE-2026-98601 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: validate device-supplied DMA indices In btintel_pcie_msix_rx_handle(), the driver pro | |
| CVE-2026-98602 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Fix multiple out-of-bou | |
| CVE-2026-98603 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when clearing stale local source The UDP output fallback clears bind->local in place when t | |
| CVE-2026-98604 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovpn: replace bind when learning local endpoint struct ovpn_bind is published through peer->bind with RCU, but | |
| CVE-2026-98605 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach When the Exynos DSI driver was generalized into | |
| CVE-2026-98606 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: release the GEM object on virtio_gpu_vram_create() errors virtio_gpu_vram_create() frees the objec | |
| CVE-2026-98607 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() virtio_gpu_resource_create_blob_ioctl( | |
| CVE-2026-98608 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() virtio_gpu_resource_create_ioctl() calls drm | |
| CVE-2026-98609 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix object leak when drm_gem_handle_create() fails virtio_gpu_gem_create() owns the reference take | |
| CVE-2026-98610 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget hfsc_classify() applies the "fil | |
| CVE-2026-98611 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Check params size before reading reserved fields bpf_crypto_ctx_create() is a kfunc whose second argument | |
| CVE-2026-98612 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: usb: catc: bound the RX packet length in catc_rx_done() catc_rx_done() walks a multi-packet URB, reading | |
| CVE-2026-98613 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Bound ownership depth through local kptrs and graph roots Program-allocated objects can own other local o | |
| CVE-2026-98614 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: avoid livelock while updating retransmit path sctp_assoc_update_retran_path() can loop forever when ever | |
| CVE-2026-98615 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox When tearing down the FW mailbox Rx | |
| CVE-2026-98616 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: reset num_napi when the napi vectors are freed fbn->num_napi is the count of live napi vectors, ea | |
| CVE-2026-98617 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: use the Rx queue napi pointer to find the napi vector The queue management ndos pick the napi vect | |
| CVE-2026-98618 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Handle maximum standalone channels Standalone channels use one NAPI vector for each Tx and Rx queu | |
| CVE-2026-98619 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethtool: keep rtnl_lock for the ioctl self test An offline self test that brings the interface down and b | |
| CVE-2026-98620 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure If register_netdev() fails for one | |
| CVE-2026-98621 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets The REMCSUM option carries an absolute checksum start and checksum fi | |
| CVE-2026-98622 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure flow_offload_alloc() returns NULL when th | |
| CVE-2026-98623 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update If list_for_each_entry() exits witho | |
| CVE-2026-98624 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: hold nfnl mutex in event notifier We must serialize the release notifier and the c | |
| CVE-2026-98625 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish HW_DEAD after worker is done flow_offload_work_del() sets NF_FLOW_HW_DEAD before | |
| CVE-2026-98626 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Restrict CO-RE poisoning to relocatable instructions CO-RE relocation records can name any instruction of | |
| CVE-2026-98627 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve packet pointer class displacement in regsafe() regsafe() maps packet pointer IDs between states | |
| CVE-2026-98628 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Make post-verification instruction rewrites killable After do_check() returns, the verifier runs several | |
| CVE-2026-98629 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix manual hash table handle IDR aliasing A u32 hash table created with an explicit handle | |
| CVE-2026-98630 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: Fix payload page pool error cleanup The payload page pool pointer contains an error pointer when i | |
| CVE-2026-98631 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xsk: Use a 32-bit compare in xsk_map_gen_lookup xsk_map_gen_lookup() loads a u32 key and compares it with max_ | |
| CVE-2026-98632 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel In send_cancel(), pending mesh_tx objects ar | |
| CVE-2026-98633 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() When CONFIG_DEV_COREDUMP=n, hci_devcd_append() ret | |
| CVE-2026-98634 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: sd_zbc: Reject disks with too many zones sd_zbc_read_zones() computes the number of zones with 64-bit ar | |
| CVE-2026-98635 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: block: Fix zones_cond out-of-bounds write on zone report blk_revalidate_disk_zones() sizes the zones_con | |
| CVE-2026-98636 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds When an abnormal SquashFS image (COMP | |
| CVE-2026-98637 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure pkvm_vcpu_init_sve() clears KVM_ARM_VCPU_SVE | |
| CVE-2026-98638 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() pkvm_vcpu_init_sve() clamps only the upper | |
| CVE-2026-98639 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: riscv: Fix NACL hfence entry update order The SBI v3.0 specification (section 15.1.2) requires a nested H | |
| CVE-2026-9864 | Awaiting Analysis | 未確認 | CWE-338 | Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or passwor |
| CVE-2026-98640 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: Validate PCI BAR size before mapping The amd_sfh driver maps PCI BAR 2 using pcim_iomap_regions( | |
| CVE-2026-98641 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, arm64: set up the frame pointer for the exception callback A program acting as exception boundary saves a | |
| CVE-2026-98642 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk Syzkaller repeatedly triggered UAF sp | |
| CVE-2026-98643 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of rtt_min in sock_ops A sockops prog reading skops->rtt_min never checks the sk t | |
| CVE-2026-98644 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() __htab_map_lookup_and_delete_batch() has no res | |
| CVE-2026-98645 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: winwing: fix use-after-free in force feedback teardown winwing_init_ff() passes the driver's private data | |
| CVE-2026-98646 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context bpf_sock_destroy() runs from the tcp iter | |
| CVE-2026-98647 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btf_struct_walk() When an access goes past the struct and the last member is a flex | |
| CVE-2026-98648 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: s390/uv: Prevent potential out-of-bounds read When the system has more than 85 secrets, the uv_secret_list str | |
| CVE-2026-98649 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix race in _destroy_pages_crste() Use READ_ONCE() in _destroy_pages_crste() to read the crste, avo | |
| CVE-2026-98650 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix potential races in dat skey functions When dat_cond_set_storage_key() finds a large page, it wi | |
| CVE-2026-98651 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() Some callers pass NULL as oldkey. Callin | |
| CVE-2026-98652 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Add missing srcu in kvm_s390_set_irq_state() Like kvm_s390_inject_vcpu(), kvm_s390_set_irq_state() | |
| CVE-2026-98653 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix _gaccess_shadow_fault() In some circumstances, it is possible that the page of nested guest mem | |
| CVE-2026-98654 | Rejected | 未確認 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | |
| CVE-2026-98655 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: Require kernel access for text poke events Perf events with exclude_kernel=1 can be opened without kerne | |
| CVE-2026-98656 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: trigger: cancel reenable_work before freeing trigger iio_trigger_notify_done_atomic() defers ->reenable() | |
| CVE-2026-98657 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure pm_runtime_set_active() failin | |
| CVE-2026-98658 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: proximity: aw96103: validate firmware data length The firmware parser reads a length from the binary head | |
| CVE-2026-98659 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: rohm-bm1390: Return error when read fails The data reading function ignores the cached error va | |
| CVE-2026-98660 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup The sampling frequency tables sto | |
| CVE-2026-98661 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: light: rohm-bu27034: Fix infinite delay on error When reading an integration-time fails, the code will us | |
| CVE-2026-98662 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: light: gp2ap020a00f: drain irq_work after free_irq The threaded IRQ handler queues data->work through irq | |
| CVE-2026-98663 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16480: fix unprotected debugfs reads The firmware_revision and firmware_date file operations are | |
| CVE-2026-98664 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: imu: adis16400: fix unprotected debugfs reads adis16400_serial_number_fops is open coded and never calls | |
| CVE-2026-98665 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: health: max30102: fix NULL dereference in interrupt handler The interrupt is requested in max30102_probe( | |
| CVE-2026-98666 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: gyro: adis16136: fix unprotected debugfs reads The serial_number file operations are open coded and never | |
| CVE-2026-98667 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data The clk_init_data structure contai | |
| CVE-2026-98668 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. iio_push_to_buffers_with_ts_unaligned() l | |
| CVE-2026-98669 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: buffer: serialize buffer teardown with mode claims Buffer-mode claims hold mlock to guarantee that the de | |
| CVE-2026-98670 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind The ZYNQ XADC alarm IRQ handler | |
| CVE-2026-98671 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure If devm_thermal_of_zone_register() fa | |
| CVE-2026-98672 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or r | |
| CVE-2026-98673 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating- | |
| CVE-2026-98674 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Initialize state mutex The AXI ADC register access paths serialize transactions with st | |
| CVE-2026-98675 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: handle Phase C dip events in IRQ1 handler ADE9000_ST1_CROSSING_DEPTH is the exclusive upper | |
| CVE-2026-98676 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ade9000: fix NULL pointer dereference in clkout registration ade9000_setup_clkout() passes NULL as t | |
| CVE-2026-98677 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad_sigma_delta: fix use-after-free on unbind ad_sd_buffer_postenable() allocates sigma_delta->sample | |
| CVE-2026-98678 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4030: fix invalid oversampling_ratio validation In ad4030_set_avg_frame_len(), the logarithm is ca | |
| CVE-2026-98679 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: kxcjk-1013: reject duplicate event disable The IIO core does not filter duplicate writes to the ev | |
| CVE-2026-98680 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Prevent memory leak and fix state The driver allocates memory for samples at buffer | |
| CVE-2026-98681 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races The invalidHandle, swapfile, oplock_b | |
| CVE-2026-98682 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifs_file_copychunk_range() and the clone (FIC | |
| CVE-2026-98683 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: flush dirty data before zeroing a range smb3_zero_range() emulates FALLOC_FL_ZERO_RANGE by invali | |
| CVE-2026-98684 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: flush and commit data before querying allocated ranges The mode 0 / FALLOC_FL_KEEP_SIZE fallocate | |
| CVE-2026-98685 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via clone range cifs_remap_file_range() discarde | |
| CVE-2026-98686 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3_zero_range() removed the pag | |
| CVE-2026-98687 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Reject oversized XDomain properties responses tb_xdp_properties_request() allocates room for 45 d | |
| CVE-2026-98688 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix NULL dereference in tb_remove_work() There is a slight race between tb_remove_work() and tb_d | |
| CVE-2026-98689 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Don't access a DP tunnel after its DPRX read was canceled tb_dp_dprx_work() checks ->dprx_cancele | |
| CVE-2026-9869 | Deferred | 未確認 | CWE-121 | A stack-based buffer overflow vulnerability exists in the boa formTR069Config functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HT |
| CVE-2026-98690 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tb_tunnel_one_dp() takes a domain reference | |
| CVE-2026-98691 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Tear down inactive DP tunnels when the domain is stopped tb_stop() only tears down DMA tunnels so | |
| CVE-2026-98692 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Make the DP tunnel activation callback mandatory tb_tunnel_alloc_dp() takes an optional callback | |
| CVE-2026-98693 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Hold a router reference for each allocated HopID tb_stop() drops the reference to all DP tunnels | |
| CVE-2026-98694 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix KASAN reported use-after-free when request is canceled Alan reported that when doing stress t | |
| CVE-2026-98695 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix ioctl hangup race The tty ioctls can race with hangup and end up calling into a tty driver fo | |
| CVE-2026-98696 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix driver deregistration order USB serial driver modules register one driver for the USB bus and | |
| CVE-2026-98697 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix dynamic id driver deregistration race Only free the dynamic ids after having deregistered the | |
| CVE-2026-98698 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: handle empty FILS association request payload fils_encrypt_assoc_req() accepts a (Re)Associati | |
| CVE-2026-98699 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix mesh fast xmit path deletion UAF mesh_fast_tx_cache() stores raw mesh_path pointers. Path | |
| CVE-2026-98700 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: set info->band for 802.3 encap offload frames Unlike the 802.11 TX paths, ieee80211_8023_xmit( | |
| CVE-2026-98701 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: release mesh path quota on failed additions Repeated failed or duplicate mesh path additions c | |
| CVE-2026-98702 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reject invalid 320 MHz CSA bandwidth The HT/VHT channel definition validator can receive a 320 | |
| CVE-2026-98703 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: minstrel_ht: validate fixed rate index The fixed_rate_idx debugfs file is a plain u32 attribut | |
| CVE-2026-98704 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep fallback association elements alive Associating to a non-transmitted MBSSID profile reads | |
| CVE-2026-98705 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: account proxy paths against the mesh path limit Proxy-path churn can drive the interface path | |
| CVE-2026-98706 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drain PS delivery work during station teardown Removing an AP or mesh station can notify the d | |
| CVE-2026-98707 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: shut down RX BA session timer on teardown Tearing down an RX BA session can leave the session | |
| CVE-2026-98708 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: keep paired old chanctx alive An in-place replacement keeps reciprocal replace_ctx pointers be | |
| CVE-2026-98709 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: count only matching reservations in reserved switch ieee80211_vif_use_reserved_switch() valida | |
| CVE-2026-98710 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: 3945: free EEPROM data on remove il3945_pci_probe() calls il_eeprom_init(), which allocates me | |
| CVE-2026-98711 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: fix TX padding OOB read leaking heap data to device The TX path rounds the transfer size up to t | |
| CVE-2026-98712 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq Referencing the last interrupt inserted in | |
| CVE-2026-98713 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT FGUs don't actually require hardware support, so do | |
| CVE-2026-98714 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Leave control.erap_ctl and control.c | |
| CVE-2026-98715 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Don't reset the VMCB's TLB control bac | |
| CVE-2026-98716 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Use the MSR permission bitmap o | |
| CVE-2026-98717 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy When walking shadow page tables, immedi | |
| CVE-2026-98718 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state Explicitly flush caches after intr | |
| CVE-2026-98719 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it Nullify have_run_cpus when freeing the mask, pa | |
| CVE-2026-98720 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Force a refresh of the vmcs02 MSR b | |
| CVE-2026-98721 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ The Cadence NAND interrupt handler uses both | |
| CVE-2026-98722 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erase_size is zero The erase size is parsed from the "block2mtd" module | |
| CVE-2026-98723 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: copy the hostid into the ctrl before creating PR pc_refs Commit 6202783184bf ("nvmet: Improve nvmet_all | |
| CVE-2026-98724 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: pci-epf: reject too-short SGL segments The host controls an SGL segment's length. A nonzero length smal | |
| CVE-2026-98725 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() nvmet_auth_challenge() receives its output buffe | |
| CVE-2026-98726 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix underflow in ANA log bounds checks The number of ANA groups advertised through Identify Co | |
| CVE-2026-98727 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known The namespace head is marked zoned at all | |
| CVE-2026-98728 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: fix off-by-four bounds check in tpm2_get_random() When the response carries the TPM2_ST_SESSIONS tag, tpm | |
| CVE-2026-98729 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h get_align_mask() returns huge_page_mask_align() f | |
| CVE-2026-98730 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() btintel_pcie_send_frame() eventually copi | |
| CVE-2026-98731 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() plen is u16 and computed as HDR_SIZE + | |
| CVE-2026-98732 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: fix buffer over-read in btintel_hw_error() The "Exception info %s" print uses skb->data + | |
| CVE-2026-98733 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize fragmented ISO packet queueing The fragmented path in hci_queue_iso() calls __s | |
| CVE-2026-98734 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown hci_low_sent() selects a connection under | |
| CVE-2026-98735 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Serialize ACL scheduling with channel deletion hci_chan_sent() selects a channel under RC | |
| CVE-2026-98736 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Bluetooth: hci_conn: Lock parent access duri | |
| CVE-2026-98737 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix inquiry cache use-after-free The sync command worker holds hdev->req_lock, but inquir | |
| CVE-2026-98738 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: Serialize SMP remote OOB data access build_pairing_cmd() looks up remote OOB data and copies its co | |
| CVE-2026-98739 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix initial port reference race For RFCOMM_RELEASE_ONHUP devices, rfcomm_tty_install() and | |
| CVE-2026-98740 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Drop __init from ECC setup paths for re-probe safety Sashiko reports: "Does suppressing sysfs un | |
| CVE-2026-98741 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detect_usb_format() cross-checks bSubframeSize, b | |
| CVE-2026-98742 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize compat port-info ioctls The native sequencer ioctl path serializes handler calls with cli | |
| CVE-2026-98743 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type stream_config is not initialized before b | |
| CVE-2026-98744 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: max98363: fix uninitialized stream_config->type stream_config is not initialized before being pa | |
| CVE-2026-98745 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems When system_supports_sme() is true | |
| CVE-2026-98746 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() of_clk_get() returns a clock with a reference | |
| CVE-2026-98747 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: core: fix NULL pointer dereference in serial_core_unregister_port() port->port_dev is NULL when no por | |
| CVE-2026-98748 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() brcmuart_handle_irq() starts priv->hrt to work a | |
| CVE-2026-98749 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: serial: max3100: shut down timer before freeing port max3100_shutdown() stops the polling timer but retur | |
| CVE-2026-98750 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: fix saved termios reset race Resetting saved termios state on device registration is needed where a minor | |
| CVE-2026-98751 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: abort break signalling on hangup The break ioctls can race with hangup and end up calling into a tty driv | |
| CVE-2026-98752 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: port: fix tty_port_tty_vhangup() race Drivers rely on tty_port_tty_vhangup() to synchronously hang up the | |
| CVE-2026-98753 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: tty_port: restore TTY_IO_ERROR on activation failure Make sure to restore the TTY_IO_ERROR flag if activa | |
| CVE-2026-98754 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup vcc_cleanup() sets port->tty to NULL without | |
| CVE-2026-98755 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tty: vcc: zero-initialize control packet in vcc_send_ctl() The stack-allocated struct vio_vcc pkt was partiall | |
| CVE-2026-98756 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe The Cadence USBSS controller is a two-function PCI | |
| CVE-2026-98757 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fix use-after-free in cdns3_gadget_exit() cdns3_gadget_start() arms two works on system_freezable_ | |
| CVE-2026-98758 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: glink: fix use-after-free of ucsi on remove The pmic_glink client is released by the devres | |
| CVE-2026-98759 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() cd321x_update_work() passes a s | |
| CVE-2026-98760 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() tps6598x_connect() passes a stack | |
| CVE-2026-98761 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: recover after failure to start the frs ams Reset the port if the tcpm fails to start the FAS | |
| CVE-2026-98762 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: dwc2: shut down wakeup timer before freeing HCD state dwc2_wakeup_detected() accesses the DWC2 host state | |
| CVE-2026-98763 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: core: clear both ep_in and ep_out for non-ep0 control endpoints In usb_enable_endpoint(), non-zero contro | |
| CVE-2026-98764 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC When user space sets up FunctionFS | |
| CVE-2026-98765 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: gadget: dummy-hcd: Fix wait for outstanding request completions The dummy-hcd driver emulates synchronize | |
| CVE-2026-98766 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeed-vhub: cancel wake work on device removal wake_work is armed from the gadget .wakeup callba | |
| CVE-2026-98767 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: gadget: fix IRQ storm on invalid event buffer count When dwc3_check_event_buf() reads a GEVNTCOUNT | |
| CVE-2026-98768 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: typec: anx7411 - stop the IRQ before destroying the workqueue The IRQ is devm-managed, so it can still qu | |
| CVE-2026-98769 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd generic_set_cmd() and generic_get | |
| CVE-2026-98770 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix the jack descriptor array sizes The jack in/out descriptor arrays in struct f_midi2_us | |
| CVE-2026-98771 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: storage: sierra_ms: reject short SWoC info transfers sierra_get_swoc_info() requests sizeof(struct swoc_i | |
| CVE-2026-98772 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: serial: fix port tear down use-after-free Some drivers for multiport devices access port driver data from | |
| CVE-2026-98773 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: USB: cdc-acm: skip URB restart in port_shutdown if disconnected acm_port_shutdown() is called from the tty-por | |
| CVE-2026-98774 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: cancel deferred work items in thread exit If there are deferred work items on the thread todo lis | |
| CVE-2026-98775 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure When ne_create_vm_ioctl() fails the SLOT_ALLOC reques | |
| CVE-2026-98776 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binderfs: fix UAF write in binder_add_device binderfs_binder_device_create() publishes the new dentry with d_m | |
| CVE-2026-98777 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binder: fix leaked fd fixups on TF_UPDATE_TXN supersede When a TF_UPDATE_TXN transaction supersedes a pending | |
| CVE-2026-98778 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: binder: fix is_failure flag for superseded transaction cleanup When a TF_UPDATE_TXN transaction supersedes a p | |
| CVE-2026-98779 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ACP MFD device leak on init failure acp_hw_init() registers ACP child devices with mfd_add_dev | |
| CVE-2026-98780 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix IP instance memory leak on kobject add failure amdgpu_discovery_sysfs_ips() allocates ip_hw_in | |
| CVE-2026-98781 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix pdev reference leak in mtk_drm_bind() When the device is not the mmsys master, mtk_drm_bind( | |
| CVE-2026-98782 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix ovl adaptor platform device leak mtk_drm_probe() creates an OVL adaptor platform device with | |
| CVE-2026-98783 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device platform_device_register_data() can fai | |
| CVE-2026-98784 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: fix firmware leak on teardown The firmware requested in gfx_v6_0_init_microcode() is not rele | |
| CVE-2026-98785 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend dc_state_create_copy() can return NULL on | |
| CVE-2026-98786 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: guard dc_sink dereferences in MST mode validation dm_dp_mst_is_port_support_mode() reads acon | |
| CVE-2026-98787 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() bpf_mem_cache_free_rcu() uses t | |
| CVE-2026-98788 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: futex: Fix private hash use-after-free on resize poll_state_synchronize_rcu(mm->futex.phash.batches) is used b | |
| CVE-2026-98789 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix objects stuck in free_by_rcu_ttrace do_call_rcu_ttrace() returns early when call_rcu_ttrace_in_progre | |
| CVE-2026-98790 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf: Fix race between perf_event_exit_task() and perf_pending_task() A race condition exists between perf_eve | |
| CVE-2026-98791 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference During XSK TX queue teardown, outstanding descrip | |
| CVE-2026-98792 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: generalize pending status bit Rename NF_FLOW_HW_PENDING to NF_FLOW_PENDING and use it to | |
| CVE-2026-98793 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: bpf: reject invalid NAT manipulation types As bpf_ct_set_nat_info() is not validating the NAT manip | |
| CVE-2026-98794 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: filter some flags received in the backup server While the IPVS SYNC protocol is not secure by design we | |
| CVE-2026-98795 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: skip ptp deinit if init was skipped sparx5_ptp_init() returns early on the base lan969x variants | |
| CVE-2026-98796 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: allocate dummy netdev sooner The RX rings and the shared NAPI are carried by an in | |
| CVE-2026-98797 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: cap skb->queue_mapping when the tx queue is picked skbedit can set skb->queue_mapping and raise the per-C | |
| CVE-2026-98798 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: fix NULL dereference in set_coalesce before first open The Rx ring priv and index are only set | |
| CVE-2026-98799 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Skip detached progs in trampoline images that are still in use bpf_tramp_image_put() makes sure a trampol | |
| CVE-2026-98800 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Wait for an RCU tasks grace period before freeing trampoline progs When a prog is detached from a trampol | |
| CVE-2026-98801 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Commit 2bb2f5fb21b0 ("net: add new socket option | |
| CVE-2026-98802 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: seg6: ensure packet data is writable before modifying SRH and IPv6 DA advance_nextseg() modifies the SRH Segme | |
| CVE-2026-98803 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix rx Scatter-Gather support When a received frame is larger than dma_buf_sz, the DMA scatters i | |
| CVE-2026-98804 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() With CONFIG_PAGE_POOL_STATS=y, page_pool_r | |
| CVE-2026-98805 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: prevent GCM nonce reuse on peer key changes TIPC can encrypt traffic between nodes using a different tra | |
| CVE-2026-98806 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Previously, BPID assignment under CONFIG_DCB | |
| CVE-2026-98807 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix slab-out-of-bounds when handling team device events The mlx5_handle_changeupper_event() and mlx5 | |
| CVE-2026-98808 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: systemport: Fix buffer overflow in bcm_sysport_get_stats() When running on SYSTEMPORT Lite, certain stati | |
| CVE-2026-98809 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister hci_unregister_dev() disables cmd_work and cmd | |
| CVE-2026-98810 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() ieee80211_monitor_select_queue | |
| CVE-2026-98811 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: reclaim an empty proto on the error path Two racing tc filter add requests on the same cha | |
| CVE-2026-98812 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mctp: publish the mctp_dev only after it is initialised mctp_add_dev() links the new mctp_dev into dev->mc | |
| CVE-2026-98813 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Hold map BTF for the memory allocator destructor record bpf_ma_set_dtor() duplicates map->record so that | |
| CVE-2026-98814 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix command effects log lifetime for multipath heads KASAN reported a use-after-free when an I/O passthr | |
| CVE-2026-98815 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvme: fix cdev lifetime Sashiko bot reported a potential problem for the cdev lifetime in [0] - the code there | |
| CVE-2026-98816 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overflow of jump offset in constant blinding bpf_jit_blind_insn() rewrites 'if rX op imm goto off' in | |
| CVE-2026-98817 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: Add better pm_runtime error handling in func probe Add a common error path in probe that balances | |
| CVE-2026-98818 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() Since kfree_rcu() can be called under pi_lock (a raw spi | |
| CVE-2026-98819 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: validate DDC record lengths Parse DDC record lengths in unsigned storage so 0xFF does not | |
| CVE-2026-98820 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-mq: set RQF_USE_SCHED when the operation is known The cached requests are allocated for one operation but | |
| CVE-2026-98821 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: block: reject polled dio with user integrity metadata IOCB_HAS_METADATA leaves iocb->private as a uio_meta, wh | |
| CVE-2026-98822 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: prevent AP VLAN tx from other interfaces Since the station lookup was factored out of ieee8021 | |
| CVE-2026-98823 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: preserve hidden-group beacon IE ownership A hidden-group probe-response entry borrows its beac | |
| CVE-2026-98824 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate TX status rate metadata minstrel_ht_tx_status() converts the HT/VHT rate reported in | |
| CVE-2026-98825 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() devm_clk_get(&pdev->dev, "rtcref")'s return v | |
| CVE-2026-98826 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Fix clock provider use-after-free on probe failure ac100_rtc_register_clks() registers the RTC-32k | |
| CVE-2026-98827 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE __hif_usb_tx() dequeues up to MAX_TX_AGGR_NUM (20) fr | |
| CVE-2026-98828 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: reject short WMI command responses ath9k_wmi_rsp_callback() removes the validated WMI header and | |
| CVE-2026-98829 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: drop oversized fragments to avoid extra_len overflow In ieee80211_rx_h_defragment(), fragment | |
| CVE-2026-98830 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: validate MIB read length before copying to caller wfx_hif_read_mib() copies reply->length bytes fro | |
| CVE-2026-98831 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: of/overlay: don't leak fragment references when changeset init fails init_overlay_changeset() stores the numbe | |
| CVE-2026-98832 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: save IRQ state in blkg_tryget_closest() bio_set_dev() associates the bio with a blkg through bio_a | |
| CVE-2026-98833 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: core: call _get_device() with the master MTD __get_mtd_device() calls the master's _get_device() callback | |
| CVE-2026-98834 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: core: avoid double-free of OTP NVMEM device If factory OTP setup fails after the user OTP NVMEM device ha | |
| CVE-2026-98835 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: iio: accel: kionix-kx022a: Fix array boundary check The driver performs a sanity check for an array size, when | |
| CVE-2026-98836 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: reject oversized playback packets Each playback URB is handed a slice of out.buffer that is exact | |
| CVE-2026-98837 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: unregister the input device when probe fails setup_card() registers the input device, whose name | |
| CVE-2026-98838 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vt: skip screen update for DEC alignment test on backgroup consoles [BUG] Recently, we encountered a KASAN war | |
| CVE-2026-98839 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() In paste_selection(), t | |
| CVE-2026-98840 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF The reload of 'vc' added by commit 8f | |
| CVE-2026-98841 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: virt: vmgenid: set driver_data before registering notification handlers Both probe paths register their notifi | |
| CVE-2026-98842 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: module: fix lost error code from codetag_load_module() If codetag_load_module() fails, err is not set to refle | |
| CVE-2026-98843 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: zero gaps in read-gaps folio to avoid writing back stale data netfs_read_gaps() leaves gaps around a st | |
| CVE-2026-98844 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: clear post-EOF pagecache when extending a file via write Fix netfs to erase the contents of a hole crea | |
| CVE-2026-98845 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tpm: Disable TPM on null key name mismatch The null key name check exists to protect against TPM reset attacks | |
| CVE-2026-98846 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sctp: check RCV_SHUTDOWN after the sendmsg connect wait sctp_wait_for_connect() drops the socket lock while it | |
| CVE-2026-98847 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtc: spear: initialize IRQ state before requesting alarm IRQ devm_request_irq() enables the interrupt before i | |
| CVE-2026-98848 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtc: ac100: Assign .num before accessing .hws Commit f316cdff8d67 ("clk: Annotate struct clk_hw_onecell_data w | |
| CVE-2026-98849 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pfcp: fix socket lifetime on netdevice registration failure pfcp_newlink() creates the UDP socket before regis | |
| CVE-2026-98850 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/packet: prevent TX_RING byte count overflow tpacket_snd() drains every SEND_REQUEST frame in a TX ring and | |
| CVE-2026-98851 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_flow_offload: drop flowtable reference on init error path nft_flow_offload_init() bumps the flo | |
| CVE-2026-98852 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: extend IPv6 exthdr detection of tunneled packets Commit c4336a07eb6b ("net: correctly handle tunneled tra | |
| CVE-2026-98853 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: gso: limit recursive IP-in-IP segmentation IP-in-IP GSO can re-enter inet_gso_segment() or ipv6_gso_segme | |
| CVE-2026-98854 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: of/overlay: only treat a positive changeset id as registered of_overlay_fdt_apply() stores the idr_alloc() ret | |
| CVE-2026-98855 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: of/overlay: put property on deadprops only after changeset add succeeds add_changeset_property() links a new p | |
| CVE-2026-98856 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: kprobes: Skip disarmed probes when checking optkprobe overlap On x86, an optkprobe at A replaces five bytes wi | |
| CVE-2026-98857 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipvs: bound LBLCR and LBLC cache growth ip_vs_lblcr_new() and ip_vs_lblc_new() create cache entries for every | |
| CVE-2026-98858 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring: fix task_work add use-after-free with SQPOLL For SQPOLL, the sqpoll thread runs task_work off its ow | |
| CVE-2026-98859 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: multitouch: stop the release timer from being rearmed on remove mt_remove() quiesces the sticky-finger ti | |
| CVE-2026-98860 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request As reported by Sashiko: If a transport driver | |
| CVE-2026-98861 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() unregister_fprobe() and unregister_fprobe_asy | |
| CVE-2026-98862 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_rules() kill_rules() removes mixed AUDIT_DIR and AUDIT_EXE rules when an audit | |
| CVE-2026-98863 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Re-pend GET_NESTED_STATE_PAGES before exi | |
| CVE-2026-98864 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task ebf1ccff79c4 ("sched_ext: Fix ops.dequeue( | |
| CVE-2026-98865 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue() with a DSQ lock held ops.dequeue() is invoked with the source user DSQ's lo | |
| CVE-2026-98866 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Add a sched_cache_grp pointer to task_struct so | |
| CVE-2026-98867 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from persistent memory cache_key_decode() takes a key's logical off fr | |
| CVE-2026-98868 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment cache_replay(), the writeback worker and the GC worker read | |
| CVE-2026-98869 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static register liveness analysis As reported in the thread [1], the verifier's 3 | |
| CVE-2026-98870 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on teardown ksmbd_sessions_deregister() removes a connection's | |
| CVE-2026-98871 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init failure path __sev_platform_init_handle_init_ex_path() calls r | |
| CVE-2026-98872 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG() on unknown typed-extent type vxfs_bmap_typed() handles four typed-extent types and calls | |
| CVE-2026-98873 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_expect: zero at allocation time There are occasional LLM hints wrt. leaking uninitiali | |
| CVE-2026-98874 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect Clearly, from a user perspective, it must be va | |
| CVE-2026-98875 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falco | |
| CVE-2026-98876 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1x_device_init(), the error teardown paths do | |
| CVE-2026-98877 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed When accidentally setting “kvm-arm.vgic_v4_enable=1” | |
| CVE-2026-98878 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v5: Immediately exec priority drop following activate With GICv5 an interrupt of equal or lower pr | |
| CVE-2026-98879 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: isofs: handle set_blocksize failures isofs uses buffer_heads, which don't handle block size > PAGE_SIZE well. | |
| CVE-2026-98880 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: handle set_blocksize failures ntfs3 uses buffer_heads, which don't handle block size > PAGE_SIZE well. | |
| CVE-2026-98881 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() This rcu_barrier() came from a time call_rcu | |
| CVE-2026-98882 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Add range checks for dec_output_info If the driver's dec_output_info contains inval | |
| CVE-2026-98883 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: serial: 8250_port: recognize UPIO_AU My MIPS Alchemy systems generate the following warning during probe of th | |
| CVE-2026-98884 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: core: Add validation for host-provided max_segs The max_segs field is of type unsigned short, and if a ho | |
| CVE-2026-98885 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ima: return error early if file xattr cannot be changed During early boot, the filesystem is read-only and any | |
| CVE-2026-98886 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/gma500: return errors from Oaktrail HDMI I2C reads xfer_read() waits for the HDMI I2C transaction to reach | |
| CVE-2026-98887 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO hwsim_tx_info_frame_received_nl() casts the HWSIM_A | |
| CVE-2026-98888 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: kprobes: Allow reentering kprobes while single-stepping A kprobe can be hit while another kprobe is in | |
| CVE-2026-98889 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE sizing Scheduled scan built the probe request before iwl_mvm_scan_fits() | |
| CVE-2026-98890 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX frames In monitor mode, lbs_hard_start_xmit() casts skb->data to a rad | |
| CVE-2026-98891 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame length before reason access ieee80211_rx_mgmt_deauth() reads the deauth | |
| CVE-2026-98892 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size BASE_ERROR_EVENT carries a variable number of messa | |
| CVE-2026-98893 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Validate SENSOR_UPDATE payload size SENSOR_UPDATE carries one or more sensor readings afte | |
| CVE-2026-98894 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/ras: reset CPER ring on corrupt entry size When CPER ring overflow handling advances the read pointer, | |
| CVE-2026-98895 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, Handle destroying table that has a miss table If a table has a miss table that was created by ' | |
| CVE-2026-98896 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while processing hotplug We process hotplug events in a workqueue that | |
| CVE-2026-98897 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci->m_lock while waiting for a lease break ack When a cifs.ko client caches a read-handle (R | |
| CVE-2026-98898 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized When DPM is turned off with the amdgpu | |
| CVE-2026-98899 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas properly When we bump the uref counter, there's no need to keep th | |
| CVE-2026-98900 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before allocation gntalloc_ioctl_alloc() allocates the grant-id array befor | |
| CVE-2026-98901 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do not skip valid lease states containing WRITE_CACHING when bre | |
| CVE-2026-98902 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison wrap-safe Once the 32-bit seq wraps, a newer bm_seq can look smal | |
| CVE-2026-98903 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Add a channel shutdown field sashiko complained about possible teardown problem. The scenario | |
| CVE-2026-98904 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devm_pm_runtime_enable() sashiko complained about early usage of the device while probe isn' | |
| CVE-2026-98905 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU restore When kfd_queue_acquire_buffers() was split off from | |
| CVE-2026-98906 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure lan966x_fdma_reload() backs up rx->page_pool and rx->fdma bef | |
| CVE-2026-98907 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate lock sb_write_pointer() reads the super block from the block | |
| CVE-2026-98908 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on flower setup failure sparx5_tc_flower_psfp_setup() allocate | |
| CVE-2026-98909 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port registration failure cpsw_probe() registers devlink before registeri | |
| CVE-2026-98910 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on copy_to_user failure If kfd_dbg_trap_enable() fails while copying runt | |
| CVE-2026-98911 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in dpaa2_switch_rx() In case of an error in dpaa2_switch_rx(), the dpaa2_swit | |
| CVE-2026-98912 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the next event snd_seq_oss_read() checks whether the next queued | |
| CVE-2026-98913 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() cavium_ptp_get() acquires a reference to the PTP PCI d | |
| CVE-2026-98914 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth Cap nesting at 32 levels with execute_depth and return -ELOOP | |
| CVE-2026-98915 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device on driver removal The driver uses vb2_fop_release() as its f | |
| CVE-2026-98916 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color change When trying to do a color change, validate that the li | |
| CVE-2026-98917 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For 64-bit Linux kernels, increase the default kernel stack size (T | |
| CVE-2026-98918 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() __damon_va_prepare_access_check() picks | |
| CVE-2026-98919 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: harden adjust_idledly() against divide-by-zero and overflow adjust_idledly() has several corner-case i | |
| CVE-2026-98920 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing alloc tagging of direct mempool allocations Commit 1d78d56c43ef ("netfs: Fix folio_queue EN | |
| CVE-2026-98921 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ovl: fix UAF in ovl_do_mkdir() debug print ovl_do_mkdir() prints the input dentry with %pd after vfs_mkdir(). | |
| CVE-2026-98922 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: emac: move setting of netops to fix crash fixes the following crash on driver initialization: |BUG: Kern | |
| CVE-2026-98923 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: arm64: io: Reject non-user protection in ioremap_prot() Mapping a stack-top page via /dev/mem with PROT_NONE a | |
| CVE-2026-98924 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: avoid repeated scans in evict_inodes() We observed hung tasks when users attempted to unmount a filesystem | |
| CVE-2026-98925 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix self-redirect copied_seq double-counting When a BPF stream_verdict program redirects an skb | |
| CVE-2026-98926 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why] stream->sink is optional and can be null, so should always | |
| CVE-2026-98927 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix life cycle of the nested_mmus array The nested_mmus array holds the shadow page tables tha | |
| CVE-2026-98928 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 pkvm_init_features_from_host() takes KVM_ARCH | |
| CVE-2026-98929 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: macsec: initialize SecY before registering the netdevice Creating a MACsec device with MAC offload over an LRO | |
| CVE-2026-98930 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix IRQ injection with SIGP Stop and Store Status When __inject_sigp_stop() is called for a Stop an | |
| CVE-2026-98931 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix NULL pointer dereference with no ECC engine When "nand-no-ecc-engine" is set in DT, nanddev_ | |
| CVE-2026-98932 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: EDAC/altera: Fix use-after-free in error paths In both altr_edac_a10_device_add() and altr_portb_setup(), the | |
| CVE-2026-98933 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: usb: hub: use shorter 120ms post resume hold for SS root hubs Holding a USB3 hub PM runtime reference for 200m | |
| CVE-2026-98934 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Since commit d58e468b1112 ("flow_dissector: implemen | |
| CVE-2026-98935 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak The struct rtc_wkalrm has padding hole | |
| CVE-2026-98936 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: reset ar->num_stations on hardware start When (multiple) hw restart occurs, we end up in a situa | |
| CVE-2026-98937 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel callchains are requested perf_event_open() currently gates perf_all | |
| CVE-2026-98938 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust: irq: pass RegistrationInner as cookie to request_irq With commit ba268514ea14 ("rust: devres: fix race c | |
| CVE-2026-98939 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: x86/mm: Drop unnecessary PMD page copy when freeing On a box with a discrete GPU, lockdep reports a possible d | |
| CVE-2026-98940 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: qcom: lpass-cpu: use DAI table index for playback constraints The DAI ID is a hardware port ID and is no | |
| CVE-2026-98941 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 ("ext4: add checks for large folio inc | |
| CVE-2026-98942 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Build the cid tables privately and publish them with RCU The cid tables are visible to the cid kfun | |
| CVE-2026-98943 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Clean up locking This cleans up several issues with locking behavior, including RCU accesses not b | |
| CVE-2026-98944 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors and simplifies the registration/unregistration flow. Since we | |
| CVE-2026-98945 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes a narrow window during the teardown sequence where callback | |
| CVE-2026-98946 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Disable the V3D interrupt across runtime suspend vc4_irq_disable() masks the V3D interrupt sources an | |
| CVE-2026-98947 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock: Fix memory leak in vmci_transport_recv_dgram_cb() During the closure of a datagram socket, the vmci_tra | |
| CVE-2026-98948 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() mlxsw_sp_flower_tmplt_create() parses a | |
| CVE-2026-98949 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix reference and vm_bo handling in remap() When a map overlaps part of an existing mapping, | |
| CVE-2026-98950 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() bpf_flow_dissect() sanitizes the offsets re | |
| CVE-2026-98951 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: ptrace: Zero-initialize regset buffers before copyin user_regset_copyin() only copies `count` bytes, so | |
| CVE-2026-98952 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before reading it pfcp_encap_recv() only makes sure that the UDP header and | |
| CVE-2026-98953 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: devlink: fix devlink_rel reference leak when notify work is pending devlink_rel_nested_in_notify_work_schedule | |
| CVE-2026-98954 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: always dissect GSO packets in __virtio_net_hdr_to_skb() Commit 9e8db5913264 ("net: avoid false positives | |
| CVE-2026-98955 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: flow_dissector: avoid u16 truncation of skb->len when computing thoff __skb_flow_dissect() computes key_contro | |
| CVE-2026-98956 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ASoC: adau1372: allow sleepy powerdown GPIOs gpiod_set_value() emits a WARN when the GPIO provider indicates t | |
| CVE-2026-98957 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: disable rx napi when removing device Unloading the mt7915e module with a MT7916 triggers m | |
| CVE-2026-98958 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per peer rather than per link The driver increments wcid->non_aql_packets w | |
| CVE-2026-98959 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr replace when multiple xattrs are packed in the same item If we have a btrfs_dir_item item tha | |
| CVE-2026-98960 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't stash io_uring encoded data across -EAGAIN Returning -EAGAIN while leaving btrfs_uring_encoded_da | |
| CVE-2026-98961 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: unlock inode and extent in caller when io_uring read extent fails btrfs_uring_read_extent() runs only a | |
| CVE-2026-98962 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: free iov when btrfs_uring_read_extent() fails After btrfs_uring_read_extent(), the caller always jumped | |
| CVE-2026-98963 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio If all bios finish before btrfs_encoded_ | |
| CVE-2026-98964 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: nvmet: use the local P2P device on metadata allocation failure nvmet_req_alloc_p2pmem_sgls() assigns req->p2p_ | |
| CVE-2026-98965 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: Restore Ordered MMIO Writes for Tx Doorbells The DQL accounting state which tracks the number of bytes qu | |
| CVE-2026-98966 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bonding: fix the program leak when XDP is replaced We need to release the reference on the old BPF prog, wheth | |
| CVE-2026-98967 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cxgb4/ch_ktls: disable softirqs around tid_list erases chcr_ktls_cpl_act_open_rpl() inserts into tid_list from | |
| CVE-2026-98968 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: amt: send the relay's General Query directly from the receive path An skb queued in a qdisc can outlive the tu | |
| CVE-2026-98969 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/sched: em_text: reject unterminated algo before autoload This is a follow-up to commit 9c572a83037a ("net/ | |
| CVE-2026-98970 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Free the BO cache size list on teardown vc4_bo_cache_destroy() purges the cached BOs but never frees | |
| CVE-2026-98971 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: exar: initialize the ID before registering its cleanup devm_add_action_or_reset() invokes the cleanup ac | |
| CVE-2026-98972 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() After seeing the patch [1] to guard is_ | |
| CVE-2026-98973 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: Fix unlocked list_del in drm_bridge_add() When re-adding a bridge that was previously removed, drm | |
| CVE-2026-98974 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete descr | |
| CVE-2026-98975 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when exchanging mappings When an exchange covers both files from offset 0 t | |
| CVE-2026-98976 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: keep the lock on a mount that a propagated copy is moved beneath attach_recursive_mnt() transfers M | |
| CVE-2026-98977 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: handle mount locking for automounts correctly If mounts are propagated across user namespaces, atta | |
| CVE-2026-98978 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: never expire a locked mount Locked mounts are special. They protect the underlying files and direct | |
| CVE-2026-98979 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: refuse an automount below a mount that is in no namespace It's possible to add autmounts even when | |
| CVE-2026-98980 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namei: don't reveal overmounted entries in refwalk In rcuwalk the dentry is validated before it is accepted. s | |
| CVE-2026-98981 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: unhash a dentry before detaching the mounts on it unlink(), rmdir() and rename() remove the entry f | |
| CVE-2026-98982 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: don't let a pseudo dentry become the root of a mount d_alloc_pseudo() hands out dentries for pipes, | |
| CVE-2026-98983 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: unshare: don't drop active namespace references that were never taken Active references on the namespaces of a | |
| CVE-2026-98984 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dcache: don't put a mountpoint on a dentry that's being removed rmdir(), unlink() and rename() call dont_mount | |
| CVE-2026-98985 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: check the mounts before reading their parents in pivot_root() path_pivot_root() reads the parents o | |
| CVE-2026-98986 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: remove the fsnotify marks of a mount namespace in process context mnt_ns_release() drops the last p | |
| CVE-2026-98987 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: look at the topmost mount for a mount namespace file attach_recursive_mnt() preallocates a mountpoi | |
| CVE-2026-98988 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE open_tree(OPEN_TREE_NAMESPACE) creates a new mou | |
| CVE-2026-98989 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: check a recursive bind mount for mount namespace loops do_loopback() refuses to bind mount the file | |
| CVE-2026-98990 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: check a submount for references right before unmounting it shrink_submounts() and mark_mounts_for_e | |
| CVE-2026-98991 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: queue a mount only once for mount notifications mnt_notify_add() puts a mount on notify_list. It do | |
| CVE-2026-98992 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: don't copy an unmounted mount tree may_copy_tree() accepts a mount whose root is an nsfs or pidfs f | |
| CVE-2026-98993 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: don't inherit MNT_UMOUNT in clone_mnt() MNT_UMOUNT gets raised on a mount that umount_tree() or umo | |
| CVE-2026-98994 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: statmount: read the parent of an unmounted mount under mount_lock statmount_mnt_basic() reads the ids of the p | |
| CVE-2026-98995 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: namespace: reset the old parent's ->overmount in mnt_change_mountpoint() __umount_mnt() resets ->overmount of | |
| CVE-2026-98996 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: don't silently unmount busy mounts The propagate_mount_busy() helper exists to decide whether a synchronou | |
| CVE-2026-98997 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: only accept doorbell BOs as queue doorbell amdgpu_userq_get_doorbell_index() pins any BO pas | |
| CVE-2026-98998 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: th1520-dw-hdmi: Fix remove() callback This driver stores struct th1520_hdmi * in platform drvdata, | |
| CVE-2026-98999 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin xe_bo_pin_external() and xe_bo_unpin_ | |
| CVE-2026-99000 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix shrinker accounting double-subtraction on nested external pins xe_bo_pin_external() and xe_bo_unpi | |
| CVE-2026-99001 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/xe/i2c: cancel the client work on remove xe_i2c_notifier() stores the DesignWare adapter in i2c->adapter a | |
| CVE-2026-99002 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate pitch coming from userspace Validate the pitch, alongside the box dimensions before tryin | |
| CVE-2026-99003 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate userspace queue count against initialized firmware slot count In panthor_drv.c:panthor_i | |
| CVE-2026-99004 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Size page table preallocation by device address Commit 0a8224058a58 ("drm/imagination: Fix pa | |
| CVE-2026-99005 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Unmask interrupts only when ACTIVE is true There is a small race window between intel_rps_boost() | |
| CVE-2026-99006 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Prevent overstepping exec array boundary It is possible for eb_relocate_parse_slow() to call kvf | |
| CVE-2026-99007 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN __drm_fb_helper_initial_config_and_un | |
| CVE-2026-99008 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown syzbot hit a NULL pointer dereference i | |
| CVE-2026-99009 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex An RFCOMM connect() issued while a BR/EDR l | |
| CVE-2026-99010 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: free the skb when the DLC has no owner rfcomm_recv_data() hands the skb to d->data_ready() | |
| CVE-2026-99011 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() sco_recv_scodata() upgrades the weak hc | |
| CVE-2026-99012 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Serialize concurrent connect calls iso_sock_connect() checks the socket state before taking th | |
| CVE-2026-99013 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Reject concurrent BIS listener setup iso_sock_listen() drops the socket lock before calling is | |
| CVE-2026-99014 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Fix command skb lifetime during scan setup During PA sync scan setup, hci_le_set_ext_scan | |
| CVE-2026-99015 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Serialize dead-device detachment Rebinding an HCI socket after its controller is unregist | |
| CVE-2026-99016 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer before the atomic access access_ok() checks untagged_addr(uaddr), but arc | |
| CVE-2026-99017 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE errata_probe_ghostwrite() only marks the CP | |
| CVE-2026-99018 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Under CONFIG_SHADOW_CALL_STACK, handle_exce | |
| CVE-2026-99019 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer element devices ch_readconfig() looks up the scsi_device of | |
| CVE-2026-99020 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 The TPS65224 BUCK2, BUCK3 and BUCK4 des | |
| CVE-2026-99021 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: of: fill in supply names in of_regulator_bulk_get_all() of_regulator_bulk_get_all() returns an arra | |
| CVE-2026-99022 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: regulator: ltc3676: don't read the write-only HRST and CLIRQ registers HRST (0x1e) and CLIRQ (0x1f) are write- | |
| CVE-2026-99023 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() of_regulator_bulk_get_all() all | |
| CVE-2026-99024 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: optee: register TEE devices only once fully initialized optee_probe() called tee_device_register() on both the | |
| CVE-2026-99025 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix soft lockup in the netlink flow dump A production compute node carrying a few thousand datapa | |
| CVE-2026-99026 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: team: free skb when broadcast has no txable port bc_transmit() sends the original skb through the last tx | |
| CVE-2026-99027 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: team: stop reusing skb after queue override A nonzero dev_queue_xmit() result does not return ownership o | |
| CVE-2026-99028 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop In the dmaengine path the driver pre-subm | |
| CVE-2026-99029 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: sparx5: free the matchall entry on destroy sparx5_tc_matchall_replace() allocates a struct sparx5_mall_en | |
| CVE-2026-99030 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() When skb_copy_and_csum_bits() reaches unreada | |
| CVE-2026-99031 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net: bridge: avoid recursive multicast port cleanup br_multicast_sg_del_exclude_ports() removes automatically | |
| CVE-2026-99032 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lifetime in smc_getname smc_getname() dereferences smc->clcsock without holding clcso | |
| CVE-2026-99033 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/packet: guard the ll header push in packet_rcv_spkt() packet_rcv_spkt() restores the link layer header wit | |
| CVE-2026-99034 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: sdhci-sprd: disable runtime PM on remove sdhci_sprd_probe() enables runtime PM, while sdhci_sprd_remove() | |
| CVE-2026-99035 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: mmc: mtk-sd: Cancel request timeout work on remove The driver queues req_timeout while a request is active. ms | |
| CVE-2026-99036 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm: fix reading free memory in do_resume When do_resume calls dm_table_get_mode(new_map), the call is done wit | |
| CVE-2026-99037 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-crypt: reject the lmk IV mode with AEAD ciphers A "capi:" table line that pairs an AEAD cipher with the lmk | |
| CVE-2026-99038 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memstick: rtsx_usb_ms: complete requests after eject instead of dropping them memstick_check() can pass its ho | |
| CVE-2026-99039 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: memstick: core: wait for request completion before freeing card In memstick_alloc_card() and memstick_set_rw_a | |
| CVE-2026-99040 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix add_key() race with keyring restriction __key_create_or_update() snapshots keyring->restrict_link be | |
| CVE-2026-99041 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ip6_gre: remove obsolete ERSPAN PMTU update A tc tunnel_key action can attach a METADATA_IP_TUNNEL dst to an s | |
| CVE-2026-99042 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6 io_connect_bpf_populate() fills connect. | |
| CVE-2026-99043 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: fix metadata_dst refcount handling on representor teardown ice_eswitch_release_repr() uses metadata_dst_f | |
| CVE-2026-99044 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port cleanup ice_dealloc_dynamic_port() uses dyn_port->vsi->idx to erase th | |
| CVE-2026-99045 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ibmveth: h_free logical LAN on open-fail after register ibmveth_open() registers the logical LAN, then allocat | |
| CVE-2026-99046 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When the error bit is set in the RX completion descriptor, the bu | |
| CVE-2026-99047 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak when rings are stopped GVE does not free XSK buffers when resetting ring state as a p | |
| CVE-2026-99048 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gve: fix napi_disable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the un | |
| CVE-2026-99049 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: xilinx: fix runtime PM leak on request error path pm_runtime_get_sync() leaves the usage counter increme | |
| CVE-2026-99050 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll worker gpio_mpsse_irq_enable() arms the poll worker before publ | |
| CVE-2026-99051 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct fsverity_info __fsverity_get_info() calls rhashtable_lookup_fast(), | |
| CVE-2026-99052 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts When an NFSv4 filesystem exported wi | |
| CVE-2026-99053 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by link name tipc_node_find_by_name() returns a node after dropping its | |
| CVE-2026-99054 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tipc: destroy topsrv workqueues before closing connections tipc_topsrv_stop() closed subscriber connections wh | |
| CVE-2026-99055 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: tcp: reject net_iov in zerocopy receive mapping hints After copying a readable prefix, receive_fallback_to_cop | |
| CVE-2026-99056 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: strparser: make sure __strp_recv isn't running before tearing down the parser The comment above strp_done() cl | |
| CVE-2026-99057 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: xen/netfront: don't leak the skb when xennet_fill_frags() fails When a response chain has more slots than fit | |
| CVE-2026-99058 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current_pwq deref in chained work check current_wq_worker() only tells us that %current is | |
| CVE-2026-99059 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after intermediate initiation Two threads begin processing the i | |
| CVE-2026-99060 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7603: initialize global station WCID mt7603 uses a driver-private global station WCID for frames | |
| CVE-2026-99061 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P device removal race in brcmf_detach() When the driver is removed while the user space | |
| CVE-2026-99062 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: account only unread bytes in read_skb() After a partial stream receive, rx_bytes tracks the unre | |
| CVE-2026-99063 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm ioctl: don't let data_start run past the buffer struct dm_ioctl has seven bytes of trailing padding, so the | |
| CVE-2026-99064 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipso_v4_skbuff_delattr() removes the CIPSO bytes but | |
| CVE-2026-99065 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() With commit 2125c0034c5d ("cgroup/cpuset: Ma | |
| CVE-2026-99066 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: can: dev: init_can_skb(): restore skb header initialization Commit 9f10374bb024 ("can: remove private CAN skb | |
| CVE-2026-99067 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() When paths_from_inode() fails, scru | |
| CVE-2026-99068 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Commit e576e7843c0d ("ALSA: ctxfi: Simplify da | |
| CVE-2026-99069 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: Input: ati_remote2 - fix type confusion in device attribute handlers Previously, the channel_mask and mode_mas | |
| CVE-2026-99070 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: do not warn on route notification size race fib6_info_hw_flags_set() sizes the skb with rt6_nlmsg_size() | |
| CVE-2026-99071 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: do not warn on route notification size race Commit 680aea08e78c ("net: ipv4: Emit notification when fib | |
| CVE-2026-99072 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: stop route notification sizing when nexthop group shrinks Commit 680aea08e78c ("net: ipv4: Emit notifica | |
| CVE-2026-99073 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: stop exception dump when nexthop group shrinks Commit 4ce5dc9316de ("inet: switch inet_dump_fib() to RCU | |
| CVE-2026-99074 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: stop PMTU walk when nexthop group shrinks Commit 7d3f3b4367f3 ("net: ipv4: Cache pmtu for all packet pat | |
| CVE-2026-99075 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: rust_binder: reschedule node refcount update on thread exit When a thread exits via BINDER_THREAD_EXIT, its pe | |
| CVE-2026-99076 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching Currently, when ICMPv6 Packet Too Big and Redirect Message | |
| CVE-2026-99077 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching Currently, when ICMP Fragmentation Needed and Redirect Mes | |
| CVE-2026-99078 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry With AF_XDP on a striding RQ, mlx5e defers r | |
| CVE-2026-99079 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on refill retry When an XDP redirect to an AF_XDP socket fails bec | |
| CVE-2026-99080 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode() For many years we've had a hard to hit leak of xarray nodes. | |
| CVE-2026-99081 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faul | |
| CVE-2026-99082 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO cache KVM tags the per-vCPU MMIO cache with a memslot gene | |
| CVE-2026-99083 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in krb5_authenticate() In krb5_authenticate(), out_len is calculated to de | |
| CVE-2026-99084 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable directory iterate_dir() takes the directory's i_rwsem shared and h | |
| CVE-2026-99085 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler A CPU going down has to empt | |
| CVE-2026-99086 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume dm_integrity_resume() re-reads the superblock from the device | |
| CVE-2026-99087 | Received | 未確認 | In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SB_FLA | |
| CVE-2026-99999 | Received | 未確認 | CWE-20 | In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the |