2026

GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page a

Memos versions 0.26.0 through 0.30.0 fail to revoke refresh tokens when a user changes their password, allowing attacker

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution throug

appium-mcp-server through 0.1.61 fails to validate or normalize file paths in the write_file and write_files_batch tools

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of th

Dell PowerStore SDNAS contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker

Dell PowerStore contains a Command Injection vulnerability. An authenticated user with limited privileges could potentia

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A suc

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could pote

Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticat

Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthentica

Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated a

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated at

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Lan

Use of Hard-coded Credentials vulnerability in TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management S

The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in versions up to and including 8.0.1. This is

A flaw was found in rpm. A local attacker could supply a specially crafted `.gem` filename containing RPM macro syntax.

A vulnerability was found in Cleo Harmony up to 5.8.1.10. The affected element is an unknown function of the file /api/c

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAss

A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxf_dump_tab

A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the