2026

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.

A command injection vulnerability in the execute_command function of terminal-controller-mcp 0.1.7 allows attackers to e

Knowage is an open source analytics and business intelligence suite. Prior to version 8.1.37, there is a blind server-si

Insufficient Session Expiration vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.Thi

An attacker with a network connection could detect credentials in clear text.

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is n

The lack of hardening of the system allows the user used to manage and maintain the charger to consult different files c

The absence of permissions control for the user XXX allows the current configuration in the sudoers file to escalate pri

An attacker with the ability to interact through the network and with access credentials, could, thanks to the unsecured

A vulnerability in the licensing features of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Co

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an unauth

Multiple Cisco products are affected by a vulnerability in the processing of DCE/RPC requests that could allow an u

Cross-site Scripting vulnerability in Devolutions PowerShell Universal.This issue affects Powershell Universal: before 4

@sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of fil

fast-filesystem-mcp version 3.4.0 contains a critical path traversal vulnerability in its file operation tools including

A file upload vulnerability in ARIS 10.0.23.0.3587512 allows attackers to execute arbitrary code via uploading a crafted

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote att

A stored Cross-Site Scripting (XSS) vulnerability exists in Perch CMS version 3.2. An authenticated attacker with admini

OpenAirInterface CN5G AMF<=v2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote at

A command injection vulnerability in the shell_exec function of sonirico mcp-shell v0.3.1 allows attackers to execute ar

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP C

Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP C

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The

An attacker with access to the system's internal network can cause a denial of service on the system by making two concu

The massive sending of ICMP requests causes a denial of service on one of the boards from the EVCharger that allows cont

In Aris v10.0.23.0.3587512 and before, the file upload functionality does not enforce any rate limiting or throttling, a

In HCL DevOps Deploy 8.1.2.0 through 8.1.2.3, a user with LLM configuration privileges may be able to recover a credenti

The massive sending of ARP requests causes a denial of service on one board of the charger that allows control of the EV

Server-Side Request Forgery (SSRF) vulnerability in minnur External Media external-media allows Server Side Request Forg

Kieback&Peter Neutrino-GLT product is used for building management. It's web component "SM70 PHWEB" is vulnerable to she

Stored cross-site scripting (XSS, CWE-79) in the survey content and administration functionality in Data Illusion Zumbru

Deserialization of Untrusted Data vulnerability in Digital zoom studio DZS Video Gallery allows Object Injection.This is

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove Widget

Missing Authorization vulnerability in POSIMYTH Innovation The Plus Addons for Elementor Pro theplus_elementor_addon all

Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mojoomla WPCHURCH

Origin validation error issue exists in Fujitsu Security Solution AuthConductor Client Basic V2 2.0.25.0 and earlier. If

The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions

OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerability in the HTTP middleware.

A security vulnerability has been detected in invoiceninja up to 5.12.38. The affected element is the function copy of t

A flaw has been found in projectworlds House Rental and Property Listing 1.0. Impacted is an unknown function of the fil

A vulnerability was detected in projectworlds House Rental and Property Listing 1.0. This issue affects some unknown pro

Insufficient policy enforcement in WebView tag in Google Chrome prior to 143.0.7499.192 allowed an attacker who convince

Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. Th

Missing Authorization vulnerability in themehunk Oneline Lite oneline-lite allows Exploiting Incorrectly Configured Acce

Missing Authorization vulnerability in Crocoblock JetEngine jet-engine allows Exploiting Incorrectly Configured Access C

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Frenify Arlo arlo

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default. This