2026

Unauthenticated Cross Site Scripting (XSS) in Simple Payment <= 2.5.1 versions.

A vulnerability in MISP's email-based one-time password (OTP) authentication flow allowed an attacker to perform an unre

A cross-site request forgery (CSRF) vulnerability existed in the cullEmptyEvents action of MISP. The endpoint performed

A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of t

A security vulnerability has been detected in SeaCMS up to 13.6. This impacts the function parseIf of the file seacms_lo

ColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacke

A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector naming a different user,

A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for CVE-2026-44946 recor

Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulnerability that allows

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools wit

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (PoC+) consensus algori

vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary

Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints including getQueueE

CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServices.php that returns

Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects in proxy_api.py endp

vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated cal

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to r

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to interna

Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKeyId} endpoint fails t

DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and write arbi

ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717, two REST v2 endpoint

A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on its `field.cattle.io

A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name from the user-settabl

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/form

The administrative operations within the Carbon Console do not adequately validate specific user-supplied input. This ov

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their p

A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the a

A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data to the spreadsheet, i

SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI handler. $fromAI re

n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in the Git node. The node

WWBN AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the set_api_userImages API

AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerability in stopLive.php t

WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php endpoint with APINam

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an

@fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash based dot-segments b

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait of the fi

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when proces

In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55 transmitter electro

In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue

In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver data before use psx

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initialize prev_o in mtk_m

In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaining %pOF after of_nod

In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of bounds memory read

In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteration in data reorder fu

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check for CRAT subtype lengt

In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix VPOS/VNEG voltage selector t

In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read on empty message le

In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_tcp_*