2026

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.

Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a s

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network.

SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally

Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib/server/au

Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authe

Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/l

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an

Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficien

Lancet through 2.3.9 contains an SSRF protection bypass vulnerability in netutil.IsInternalIP that misclassifies IPv6 pr

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component t

Rapyd Admin from 9.0.0 before 9.20.0 contains an authorization bypass vulnerability that allows authenticated company me

Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownersh

KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute comm

MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extrac

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user'

Rovr through 0.10.3 on Windows contains an OS command injection vulnerability that allows attackers to execute commands

Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write fil

muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outs

XBackBone through 3.8.2 contains a missing authorization vulnerability that allows authenticated users to change other u

QloApps through 1.7.0 contains an improper access control vulnerability in AdminSlipController that allows hotel-restric

wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to h

QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees

Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in AdminSearchConfController::processSave(

Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to byp

Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redi

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability in the AdminHotelFeaturePricesSettings for

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users

QloApps through 1.7.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject scr

Aureus ERP through 1.6.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to read un

Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to

youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows any authenticated user to enable o

youlai-boot through 2.21.1 contains a missing authorization vulnerability that allows authenticated users to assign arbi

Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatu

Stonewuu ai-fusion-video through 1.2.0 contains an insecure direct object reference vulnerability that allows authentica

Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write

iFlytek SkillHub through 0.2.22 contains a missing authorization vulnerability that allows any authenticated user to per

Phase Console through 2.77.3 contains a missing authorization vulnerability that allows organisation members without Sec

Stonewuu ai-fusion-video through 1.2.0 contains a missing authorization vulnerability that allows authenticated non-admi

Wukong AICRM through 20260610 contains a missing authorization vulnerability in the /systemConfig controller that allows

Wukong AICRM through 20260610 contains a missing authorization vulnerability that allows any authenticated user to call

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that allows attackers to

Roo Code through 3.54.0 contains a command approval bypass vulnerability in parseCommandLine() that discards command sub

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to run denied shell comma

Roo Code through 3.54.0 contains a command approval bypass vulnerability that allows attackers to auto-approve denied sh

Roo Code through 3.54.0 contains a command approval bypass vulnerability in getCommandDecision() that allows attackers t

Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin