2026

The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to priv

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerabil

The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to priv

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the graf

Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst

The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of

The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of

Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to u

The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.

The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer der

The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated re

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site

On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point ABI" choice, which defaults to

The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetoo

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a mali

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload i

Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated rem

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker co

SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. A

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. D

SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under spec

SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthent

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this

A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data i

SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on cer

SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted applicatio

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL

Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated user

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects usi

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could s

SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a speci

SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This coul

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of th

SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain applicati

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attack

SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privi

SAP Approuter does not sufficiently validate tenant context in inbound requests. An unauthenticated attacker could send

SAP Approuter does not sufficiently handle certain requests under specific conditions. An unauthenticated attacker could

WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality. An attacker with l

SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing securit

SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer

SAP Approuter does not sufficiently validate certain token content under specific configurations. An unauthenticated att

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated

Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated

SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation