Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

34,765 of 90,429· Page 103/696
8.8
CVE-2026-85487

A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenti

8.0
CVE-2026-85486

Brocade ASCG before 3.5.0 improperly processes user input by evaluating form data prior to validation. When an authentic

8.8
CVE-2026-85423

A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoin

7.8
CVE-2026-85422

A vulnerability in Brocade ASCG version before 3.5.0 could allow an attacker to obtain a static cryptographic key hardco

8.8
CVE-2026-85421

A critical security vulnerability has been identified in Brocade ASCG versions before 3.5.0. The HTTPS service fails to

8.0
CVE-2026-5048

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability

7.5
CVE-2026-103309

The GPTranslate WordPress plugin before 2.34.14 does not properly restrict who can store translations, and does not esc

8.8
CVE-2026-94585

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2

8.0
CVE-2026-94579

An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines durin

7.8
CVE-2026-94577

A privilege escalation vulnerability exists in the internal Command-Line Interface (CLI) authorization handling mechanis

8.0
CVE-2026-94576

An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fab

7.8
CVE-2026-87664

A session context forgery vulnerability exists in the web management daemon of Brocade Fabric OS versions 9.2.2d and 10.

8.8
CVE-2026-17196

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all ve

7.3
CVE-2026-87687

An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 throug

7.8
CVE-2026-87674

A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.

7.2
CVE-2026-87673

An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versi

8.0
CVE-2026-87666

An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions bef

7.1
CVE-2026-87660

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of

7.8
CVE-2026-94582

A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabri

8.8
CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Author

7.5
CVE-2026-87671

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0

7.5
CVE-2026-87665

A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabr

8.8
CVE-2026-87683

Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS ver

8.8
CVE-2026-87682

Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Broca

7.5
CVE-2026-82627

The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for Wor

8.8
CVE-2026-87680

A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allow

7.2
CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supp

7.2
CVE-2026-89322

Vault and Vault Enterprise did not consistently evaluate ACL policies against the canonical form of resource and policy

7.5
CVE-2026-107232

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

7.4
CVE-2026-107230

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

8.0
CVE-2026-105816

Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the

7.6
CVE-2026-76283

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

8.8
CVE-2026-76282

As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive int

7.7
CVE-2026-76266

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as t

7.7
CVE-2026-107352

Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user

7.5
CVE-2026-107227

The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HT

7.5
CVE-2026-107161

A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin comp

7.5
CVE-2026-107223

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols e

7.5
CVE-2026-107219

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decr

7.5
CVE-2026-107217

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.c

7.3
CVE-2026-106164

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vuln

7.5
CVE-2026-103371

Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geode: fro

7.5
CVE-2026-96335

Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Secur

7.5
CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destinatio

7.5
CVE-2026-107216

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRA

7.5
CVE-2026-107215

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPar

7.5
CVE-2026-107214

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryp

7.5
CVE-2026-107212

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Colum

7.1
CVE-2026-95595

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disabl

8.8
CVE-2026-95534

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Ad

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →