2026

A vulnerability was identified in AstrBotDevs AstrBot up to 4.22.1. The affected element is the function post_data.get o

A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpressio

A vulnerability was determined in danielmiessler Personal_AI_Infrastructure up to 2.3.0. Affected is an unknown function

A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functio

Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may

Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnera

A vulnerability was found in itsourcecode Construction Management System 1.0. The impacted element is an unknown functio

A vulnerability was determined in itsourcecode Construction Management System 1.0. This affects an unknown function of t

A security flaw has been discovered in code-projects Easy Blog Site 1.0. This affects an unknown function of the file po

A weakness has been identified in DbGate up to 7.1.4. The impacted element is the function apiServerUrl1 of the file pac

MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incomplete sandbox protection mecha

MaxKB is an open-source AI assistant for enterprise. Versions 2.7.1 and below contain a sandbox escape vulnerability in

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Mo

Adobe Framemaker versions 2022.8 and earlier are affected by an Improper Input Validation vulnerability that could lead

UDP Console provided by Arcserve contains an incorrectly specified destination in a communication channel vulnerability.

A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This vulnerability affec

A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This issue affects

A vulnerability was determined in prasathmani TinyFileManager up to 2.6. Affected by this vulnerability is an unknown fu

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary comma

A weakness has been identified in kodcloud KodExplorer up to 4.52. Affected by this vulnerability is the function roleGr

A vulnerability was detected in PHPEMS 11.0. This affects the function temppage of the file /app/exam/controller/exams.m

A vulnerability was determined in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the function CommandHan

A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Impacted is the function get_budget/update_b

A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3. The affected element is the function _try_proces

A vulnerability was detected in langflow-ai langflow up to 1.8.3. The impacted element is the function get_client_ip/ins

A flaw has been found in liangliangyy DjangoBlog up to 2.1.0.0. The affected element is the function form_valid of the f

A vulnerability was determined in TransformerOptimus SuperAGI up to 0.0.14. This impacts the function get_agent_executio

A vulnerability was identified in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function delete_agent/stop_s

A security flaw has been discovered in TransformerOptimus SuperAGI up to 0.0.14. Affected by this vulnerability is the f

A security vulnerability has been detected in TransformerOptimus SuperAGI up to 0.0.14. This affects the function extrac

A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function get_api_tool_provid

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parse_openai_plugin_json_to_tool_

A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the

A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5. Affected by this issue is some unknown functionality of

A flaw has been found in phili67 Ecclesia CRM up to 8.0.0. This affects the function ValidateInput of the file /v2/query

A weakness has been identified in usememos memos up to 0.22.1. This affects the function memos_access_token of the file

A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionality of the file /index/

Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release vers

HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated

Glances is an open-source system cross-platform monitoring tool. Prior to version 4.5.4, the Cassandra export module (`g

Honor E APP is affected by information leak vulnerability, successful exploitation of this vulnerability may affect serv

Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.1

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firef

Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint p

A vulnerability was found in Bagisto up to 2.3.15. Affected is the function copy of the component Downloadable Link Hand

Vulnerability in the Oracle Life Sciences InForm product of Oracle Life Science Applications (component: IDM Authenticat

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is some unknown functionality of

nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated attackers to set or chan

The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during f

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the install utility of uutils coreutils when using the -