2026

The WishList Member plugin for WordPress is vulnerable to Missing Authorization leading to Sensitive Information Disclos

The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up

Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a net

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Origin validation error in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unauthoriz

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5

Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts. Versions 10.9.5

Deserialization of untrusted data in Microsoft Planetary Computer Pro allows an unauthorized attacker to disclose inform

Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unaut

Unrestricted upload of file with dangerous type in Azure Orbital Spatio allows an unauthorized attacker to execute code

Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.

Authorization bypass through user-controlled key in Azure Privileged Identity Management (PIM) allows an authorized atta

Authentication bypass using an alternate path or channel in Microsoft Azure Active Directory B2C allows an unauthorized

Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.

Improper privilege management in Azure Entra ID allows an unauthorized attacker to elevate privileges over a network.

Improper neutralization of special elements used in a command ('command injection') in Microsoft Power Pages allows an u

NukeViet CMS is a multi Content Management System. Versions 4.5.07 and prior contain a Stored Cross-Site Scripting (XSS)

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 t

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Si

RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a crafted HEIF sequence file w

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, a malformed HEIF sequence file

JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through

An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjac

The MLX inference backend in Docker Model Runner on macOS uses the MLX-LM library, which unconditionally imports and exe

The vllm-metal inference backend in Docker Model Runner on macOS unconditionally sets trust_remote_code=True when loadin

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.11.0 through 2.28.1, a Stored XSS vulnerabi

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, improper escaping of the re

Mantis Bug Tracker (MantisBT) is an open source issue tracker. In versions 2.28.1 and below, given any pre-existing XSS

Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions 2.11.0 through 2.28.1 allow any authenticated us

Devise is an authentication solution for Rails based on Warden. In versions 5.0.3 and below, when the Timeoutable module

NewNTUnicodeString does not check for string length overflow. When provided with a string that overflows the maximum siz

Insecure deserialization in the job results processing component in Amazon Braket SDK before 1.117.0 might allow a remot

The Docker CLI --use-api-socket flag bypasses Enhanced Container Isolation (ECI) restrictions in Docker Desktop. When EC

An issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's path is passed as a URI

authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, the PAT

authentik is an open-source identity provider. In versions prior to 2025.12.5 and 2026.2.0-rc1 through 2026.2.2, authent

TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain a critical stored XSS vulnerability in the app.type

TypeBot is a chatbot builder tool. In versions 3.16.0 and prior, the WhatsApp Cloud API webhook endpoint (POST /v1/works

TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the fix for GHSA-4xc5-wfwc-jw47 ("Credential Theft via

TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter r

TypeBot is a chatbot builder tool. In versions 3.15.2, the getLinkedTypebots API endpoint returns full bot definitions t

An issue was discovered in Ruby 4 before 4.0.5. A race condition leading to a use-after-free in the pthread-based getadd

In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a craft

TypeBot is a chatbot builder tool. Versions 3.15.2 and prior contain an SSRF via Open Redirect Bypass as the HTTP Reques

TypeBot is a chatbot builder tool. In versions prior to 3.16.0, the Typebot viewer (packages/embeds/js) renders anchor t

Missing input source validation in the tool authorization prompt in Kiro CLI before 1.28.0 allows a local attacker to ex