2026

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 thr

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5

An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an au

odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors t

An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerabi

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerabi

Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run treats an image carr

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by

A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user existence or

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated pa

Leantime is an open source project management system. Prior to 3.10.0, for the provisionally grouped account-creation an

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, the official FrankenPHP Debian and Alpine Docker ima

FrankenPHP is a modern application server for PHP. Prior to 1.12.5, FrankenPHP worker mode can retain PHP session state

Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3

A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific

A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when s

Frappe is a full-stack web application framework. Prior to 15.116.0 and 16.29.0, the OAuth login flow uses an unsanitize

Squid is a caching proxy for the Web. From 3.3.0.1 to before 7.6, due to an improper enforcement of behavioral workflow

Frappe is a full-stack web application framework. Prior to 16.23.0, the get_count() method in reportview composes a coun

Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator

RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the get, getUserClientRoles, and getUserRealm

OpenRemote is an open-source internet-of-things platform. Prior to 1.24.2, the KNXProtocol.startAssetImport method in ag

OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams. Prior t

Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects Uni

The Bluetooth Classic Hands-Free Profile Audio Gateway implementation in subsys/bluetooth/host/classic/hfp_ag.c keeps it

The AVDTP signalling layer arms a 6-second command timeout (AVDTP_TIMEOUT) in avdtp_send_cmd() whenever the local device

ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id}

fuintCatering through commit 122c9e6 contains an insecure direct object reference vulnerability in the ClientRefundContr

fuint through commit 4c4bc8a contains a missing authentication vulnerability that allows unauthenticated attackers to re

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in the mobile CartController that

waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability in AddressController that allows

Waynboot-mall through 2.0.0 contains an insecure direct object reference vulnerability that allows authenticated members

FastBee through 2.1.0 contains an insecure direct object reference vulnerability in DeviceController that allows authent

Makunet maku-boot 4.3.0 through 5.0.0 contains a missing authorization vulnerability that allows authenticated users to

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle

PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated selle

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the after-sales API that allows au

Yshopmall through 2.0.0 contains an insecure direct object reference vulnerability in the member address API that allows

WorkFlow-Engine through 9.6.11 contains a missing authorization vulnerability that allows authenticated users to complet

SmartAdmin through 3.30.0 contains a missing authorization vulnerability in AdminProtectController that allows authentic

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager store

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileCo

FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to dele

PublicCMS through V6.202608.a contains an insecure direct object reference vulnerability in the TradeAddressController t

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces

JetLinks Community through 2.10.0 contains a missing authorization vulnerability that allows users with only query acces