2026

OpenRemote before 1.25.0 contains an insecure direct object reference (IDOR) vulnerability in the bulk alarm deletion en

NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication bypass vulnerability that allows

n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, the OAuth1 and OAuth2 credent

Caddy is an extensible server platform that uses TLS by default. From 2.7.0 until 2.11.3, the FastCGI transport's splitP

Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.7.10, Deno's node:child_process implementation pro

Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the

An issue in Pivotal CRM v.6.6.04.08 allows a remote attacker to execute arbitrary code via the Pivotal.Core.Common.dll a

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From

picklescan before 0.0.29 fails to detect malicious pickle files that exploit idlelib.debugobj.ObjectTreeItem.SetText fun

picklescan before 0.0.29 fails to detect malicious idlelib.calltip.Calltip.fetch_tip calls in pickle files, allowing rem

ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix possible infinite loop and oob read

Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp a

Gogs is an open source self-hosted Git service. Prior to 0.14.3, the Gogs Mirror Settings functionality provide an alter

Rocket.Chat is an open-source, secure, fully customizable communications platform. Prior to 8.5.1, 8.4.4, 8.3.6, 8.2.6,

NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the ad

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Validate XDomain request packet size b

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: rtw_mlme: add bounds checks bef

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: validate skb length in MCC handl

Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control S

Unauthenticated Local File Inclusion in MDTF <= 1.3.8 versions.

HTMLy CMS through 3.1.1 contains a path traversal vulnerability that allows low-privileged authenticated attackers to re

socat versions 1.8.0.0 through 1.8.1.1 contain a heap-based buffer overflow vulnerability that allows a malicious SOCKS5

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorizati

Flowise before 3.0.10 (affected versions 3.0.7 and earlier) fails to invalidate existing sessions and session tokens aft

picklescan through 0.0.26 fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode

A flaw was found in Keycloak. This JWT algorithm confusion vulnerability in the JWT Authorization Grant flow allows an a

vtk vtk-dicom vtkDICOMItem::NewDataElement heap-based buffer overflow vulnerability

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authe

Unauthenticated PHP Object Injection in Uncanny Automator <= 7.3.1.2 versions.

newsletters_subscribers Broken Access Control in Newsletters <= 4.13 versions.

extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file contain

The DMP-5000 devices are shipped with a default administrative web account with weak authentication controls, which are

The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content WordPress pl

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the Audit Trail report handler that allows authe

FrontAccounting before 2.4.20 contains a SQL injection vulnerability in the get_gl_transactions() function where the fil

ruoyi-vue-pro through 2026.05, fixed in commit 5d1fd70 contains a broken access control vulnerability in ErpSaleOrderCon

The issue was addressed with improved checks. This issue is fixed in Safari 26.5.2, iOS 18.7.10 and iPadOS 18.7.10, iOS

The IPv6 Neighbor Discovery handlers in subsys/net/ip/ipv6_nbr.c (handle_ra_input, handle_ns_input, handle_na_input) use

Improper Authorization vulnerability in Apache ActiveMQ. An authenticated low-privilege Web Console user by default can

Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Author. For the GitLab forge driv

SeaweedFS before 4.34 contains a path traversal vulnerability in the S3 gateway DeleteMultipleObjectsHandler that allows

JeecgBoot through 3.9.2 contains a broken access control vulnerability that allows authenticated low-privilege users to

IBM DevOps Automation 1.0.1 and IBM DevOps Loop 1.0.2 does not invalidate session IDs after expiration which could allow

picklescan before 0.0.29 fails to detect the built-in trace.Trace.run function when analyzing pickle files, allowing att

picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collect_env.run function in reduce met

picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce

picklescan before 0.0.30 fails to detect cProfile.run function calls in pickle reduce methods, allowing attackers to exe