boxscore/security
Thursday, August 13, 2026 · all times UTC← 2026-08-12 · archive · 2026-08-14 →

Edition of August 13, 2026, continued — page 2 of 2. Back to page 1

Results (continued, ranked) — ranks 401–606 of 606
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-736089.215.5siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Authorization Bypass via getAttributeViewSearchTarget
CVE-2026-176495.315.4IBMiCWE-125IBM i is Affected By Multiple Vulnerabilities in NetServer
CVE-2026-281489.815.2miniOrangeHeadless Single Sign OnCWE-347WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulner…
CVE-2026-597634.315.1GiteaGitea Open Source Git ServerCWE-284Unbounded Arch package file metadata can cause resource amplification in Gite…
CVE-2026-666977.114.9ColissimoColissimo Officiel : Méthodes de livraison pour WooCommerceCWE-79WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin …
CVE-2026-585075.314.9GiteaGitea Open Source Git ServerCWE-284Private Repository Existence Disclosure via go-get Meta Endpoint
CVE-2026-738405.314.9openchoreoopenchoreoCWE-287OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion…
CVE-2026-142986.514.6MattermostMattermostCWE-409Denial of service via resource exhaustion in Mattermost
CVE-2026-726327.114.5ElasticKibanaCWE-203Observable Discrepancy in Kibana Fleet Leading to Disclosure of Elastic Agent…
CVE-2026-559865.414.5GiteaGitea Open Source Git ServerCWE-284Email Management API Bypasses ManageCredentials Feature Restrictions
CVE-2026-736515.714.4typeormtypeormCWE-94TypeORM: migration:generate template-literal code injection
CVE-2026-181647.213.9Flow NeuroscienceFL-100CWE-798Flow Neuroscience FL-100 Use of Hard-coded Credentials
CVE-2026-236033.113.9GiteaGitea Open Source Git ServerCWE-918Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim
CVE-2026-554006.013.8Absolute SecuritySecure AccessCWE-190CVE-2026-55400 is an integer underflow in Secure Access servers prior to vers…
CVE-2026-733535.313.7revolutbusinessRevolut Gateway for WooCommerceCWE-862WordPress Revolut Gateway for WooCommerce plugin < 4.22.10 - Broken Access Co…
CVE-2026-192928.813.6silabs.comWiseConnectCWE-305Bluetooth re-pairing with legitimate device can use lower security level
CVE-2026-736197.113.7gitpython-developersGitPythonCWE-73GitPython before 3.1.57 Arbitrary File Read via Repo.archive()
CVE-2026-281737.113.5ArrayticsWP Event SOlutionCWE-862WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vul…
CVE-2026-585112.713.5GiteaGitea Open Source Git ServerCWE-200Webhook Authorization Header Returned in Plaintext via API
CVE-2026-730395.313.1streamaserverstreamaCWE-639streama Insecure Direct Object Reference via ViewingStatusController
CVE-2026-736715.113.2SaurusSaurus CMS Community EditionCWE-601Saurus CMS Unauthenticated Open Redirect via logout url parameter
CVE-2026-170743.113.1IBMiCWE-269IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
CVE-2026-726697.613.1ElasticKibanaCWE-862Missing Authorization in Kibana Leading to Cross-User Information Disclosure …
CVE-2026-584444.313.0GiteaGitea Open Source Git ServerCWE-863Personal access token scope enforcement bypass on the repository home page (`…
CVE-2026-281887.312.6themeficHydra BookingCWE-862WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-726554.312.5ElasticKibanaCWE-915Improperly Controlled Modification of Dynamically-Determined Object Attribute…
CVE-2026-726757.112.1ElasticKibanaCWE-862Missing Authorization in Kibana Machine Learning Leading to Cross-Space Infor…
CVE-2026-180684.312.1IBMiCWE-200IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2026-218324.312.1HCL SoftwareAIONCWE-1427HCL AION is affected by multiple security vulnerabilities.
CVE-2026-733495.312.0NexcessGiveWPCWE-862WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
CVE-2026-734015.312.0InstaWPInstaWP ConnectCWE-862WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerabi…
CVE-2026-734035.312.0wpeverestUser RegistrationCWE-862WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerabi…
CVE-2026-584452.712.0GiteaGitea Open Source Git ServerCWE-203Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API
CVE-2026-726316.511.8ElasticKibanaCWE-269Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic …
CVE-2026-726806.511.8ElasticKibanaCWE-639Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Lead…
CVE-2026-161018.811.6silabs.comWiseConnectCWE-290forced re-pairing with already bonded device
CVE-2026-192918.811.7silabs.comWiseConnectCWE-290Bluetooth re-pairing can use a lower security level than previous
CVE-2026-726307.111.6ElasticKibanaCWE-863Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation
CVE-2026-281826.511.7AcyMailing Newsletter TeamAcyMailing SMTP NewsletterCWE-79WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting…
CVE-2026-664566.511.7bestwebsoftProfile Extra Fields by BestWebSoftCWE-79WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Sc…
CVE-2026-664606.511.7AfterShip & AutomizelyAfterShip TrackingCWE-79WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vu…
CVE-2026-664676.511.7WPManageNinjaFluentCommunityCWE-79WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulner…
CVE-2026-664716.511.7ThemepointsAccordionCWE-79WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-186715.311.7IBMiCWE-190IBM i is Affected By Multiple Vulnerabilities in NetServer
CVE-2026-544817.511.3GiteaGitea Open Source Git ServerCWE-295Internal API HTTP client hardcodes InsecureSkipVerify:true with no config ove…
CVE-2026-726735.411.4ElasticKibanaCWE-863Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthet…
CVE-2026-498564.311.3vmoranvjshookmcpCWE-918@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authoriz…
CVE-2026-736527.111.1vantage6vantage6CWE-863vantage6: Algorithm developer can edit another developer's algorithm that is …
CVE-2026-736696.910.9SignifyPhilips Hue Bridge ProCWE-306Signify Philips Hue Bridge Pro MQTT broker missing authentication
CVE-2026-735315.310.8django-helpdeskdjango-helpdeskCWE-79django-helpdesk < 2.3.3 Stored XSS via HTML Attachments
CVE-2026-146664.210.8n/aPostgreSQLCWE-1250PostgreSQL row security caching disregards role modifications
CVE-2026-736177.110.5budibaseserverCWE-943Budibase before 3.40.0 NoSQL Injection via MongoDB datasource
CVE-2026-736106.910.3siyuan-notesiyuanCWE-639SiYuan before v3.7.4 Information Disclosure via Local Storage
CVE-2026-735634.710.4backstagebackstageCWE-601Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlis…
CVE-2026-735743.110.4ZimbraCollaborationCWE-669In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerab…
CVE-2026-133285.310.0UnknownFood MenuCWE-284TLP Food Menu < 6.0.2 - Unauthenticated Reservation Status Modification
CVE-2026-736215.310.1gitpython-developersGitPythonCWE-88GitPython before 3.1.56 Arbitrary File Truncation via Commit.count
CVE-2026-281859.810.0rtCampLog in with GoogleCWE-345WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerab…
CVE-2026-187286.510.0Red HatRed Hat Enterprise Linux 10CWE-191Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing
CVE-2026-664556.09.7rockigerReactPressCWE-862WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability
CVE-2026-666546.09.7TangibleWPVehica CoreCWE-918WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) …
CVE-2026-164556.99.7Teltonika NetworksRUTOSCWE-93Local privilege escalation via improper input sanitization in execl() call
CVE-2026-667047.29.4JegstudioGutenverse CompanionCWE-918WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery …
CVE-2026-736056.99.5siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Path Traversal via getUniqueFilename
CVE-2026-736066.99.5siyuan-notesiyuanCWE-639SiYuan before v3.7.4 Information Disclosure via getRefIDs
CVE-2026-736076.99.5siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Information Disclosure via getOutlineStorage
CVE-2026-736096.99.5siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Information Disclosure via getBookmarkLabels
CVE-2026-664646.59.4Toast PluginsInternal Link OptimiserCWE-862WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vul…
CVE-2026-730385.39.4NodeBBNodeBBCWE-79NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name
CVE-2026-189458.29.3UnknownWP Helper PremiumCWE-639WP Helper Premium < 4.7.6 - Unauthenticated Order Data Disclosure and Order M…
CVE-2026-584377.19.3GiteaGitea Open Source Git ServerCWE-284Repository Visibility Manipulation via Git Push Options
CVE-2026-02995.99.3Palo Alto NetworksGlobalProtect AppCWE-426GlobalProtect App: Local Privilege Escalation Vulnerabilities
CVE-2026-584314.39.3GiteaGitea Open Source Git ServerCWE-863Public-only API token restriction is not enforced on team API routes
CVE-2026-585104.39.3GiteaGitea Open Source Git ServerCWE-200GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — s…
CVE-2026-679868.49.2n/an/aCWE-94amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c523…
CVE-2026-704547.68.9RsyncProjectrsyncCWE-295rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode
CVE-2026-727418.68.8goodrainrainbondCWE-639Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
CVE-2026-736298.48.8s9ySerendipityCWE-918Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses
CVE-2026-666896.38.9AcyMailing Newsletter TeamAnti Spam and list cleaner &#8211; AcyCheckerCWE-862WordPress Anti Spam and list cleaner – AcyChecker plugin <= 2.0.0 - Broken Ac…
CVE-2026-735766.38.8ZimbraCollaborationCWE-1241In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generati…
CVE-2026-02985.28.7Palo Alto NetworksGlobalProtect AppCWE-94GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access P…
CVE-2026-281547.18.6snsthemeSamex - Clean, Minimal Shop WooCommerce WordPress ThemeCWE-79WordPress Samex and M.Anh WordPress themes affected by Cross Site Scripting (…
CVE-2026-726714.38.4ElasticKibanaCWE-862Missing Authorization in Kibana Leading to Unauthorized Modification of Machi…
CVE-2026-736167.18.0openremoteopenremoteCWE-639OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference
CVE-2026-736260.08.0jupyterlabjupyterlabCWE-284JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager
CVE-2026-738429.07.8openchoreoopenchoreoCWE-269OpenChoreo: cluster-gateway internal proxy performs no caller authentication …
CVE-2026-275367.17.8PluginOpsMailChimp Subscribe FormsCWE-79WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (X…
CVE-2026-275397.17.8WelcartWelcart e-CommerceCWE-79WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) v…
CVE-2026-280037.17.8yonifreMaspik – Spam blacklistCWE-79WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS…
CVE-2026-280047.17.8Strategy11 TeamBusiness DirectoryCWE-79WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vu…
CVE-2026-281587.17.8Lasso Analytics, Inc.Do LassoCWE-79WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
CVE-2026-281707.17.81merilBlog Floating ButtonCWE-79WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) …
CVE-2026-281757.17.8wp-buyVisitors Traffic Real Time StatisticsCWE-79WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site S…
CVE-2026-281877.17.8echopluginsKnowledge Base for Documentation, FAQs with AI AssistanceCWE-79WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <=…
CVE-2026-619607.17.8ThemeisleWP Full Stripe FreeCWE-79WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vu…
CVE-2026-619657.17.8ahmadgbGeekyBotCWE-79WordPress GeekyBot plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-619747.17.8Kitae ParkMang Board WPCWE-79WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerab…
CVE-2026-655807.17.8bracketwebAgrionCWE-79WordPress Agrion theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulner…
CVE-2026-664267.17.8Lester ChanWP-StatsCWE-79WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability
CVE-2026-664297.17.8CODEPRESSVisitor Traffic Real Time Statistics ProCWE-79WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Si…
CVE-2026-664497.17.8Dylan KuhnGeo MashupCWE-79WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerabi…
CVE-2026-664687.17.8powerfulwpLocal Delivery Drivers for WooCommerceCWE-79WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site…
CVE-2026-666557.17.8multiparcelsMultiParcels Shipping For WooCommerceCWE-79WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected…
CVE-2026-666987.17.8Brainstorm ForceSureDashCWE-79WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-667007.17.8ZAYTECHSmart Online Order for CloverCWE-79WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scriptin…
CVE-2026-659357.67.8silabs.comWiseConnectCWE-305Bypassing passkey entry in legacy pairing
CVE-2026-659325.37.7silabs.comBT122CWE-440BT122 stops advertising
CVE-2026-659335.37.7silabs.comBT122CWE-126BT122 malformed packet with increased length field causes memory leak
CVE-2026-659365.37.7silabs.comWiseConnectCWE-126RS9116W/SiWx917 malformed packet with increased length field causes memory leak
CVE-2026-725065.17.5National Institute of Information and Communications Technology"VoiceTra(Voice Translator)" for AndroidCWE-941VoiceTra provided by National Institute of Information and Communications Tec…
CVE-2026-537848.47.3RsyncProjectrsyncCWE-59rsync < 3.5.0 Path Traversal via Symlink Module Root
CVE-2026-185117.87.2IBMiCWE-787IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2026-183686.07.2Teltonika NetworksRUTOSCWE-122Heap buffer overflow in Modbusgwd
CVE-2026-191355.47.0The OpenNMS GroupMeridianCWE-470OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load…
CVE-2026-733445.96.9Passionate Programmer PeterWP Data AccessCWE-79WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulner…
CVE-2026-584355.46.9GiteaGitea Open Source Git ServerCWE-266Gitea LFS Deploy-Key Privilege Escalation
CVE-2026-734284.66.9basecamptrixCWE-79Trix: Stored XSS via HTMLParser attribute injection on paste
CVE-2026-143325.46.7UnknownEcwid by Lightspeed Ecommerce Shopping CartCWE-862Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disco…
CVE-2026-735713.16.3ZimbraCollaborationCWE-863An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) be…
CVE-2026-566576.26.2GiteaGitea Open Source Git ServerCWE-284Gitea SSH Key Parser Denial of Service
CVE-2026-185097.16.1IBMiCWE-285IBM i is Affected By A Prvilege Escalation Vulnerability []
CVE-2026-02975.26.1Palo Alto NetworksGlobalProtect AppCWE-787GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
CVE-2026-170697.36.0IBMiCWE-352IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
CVE-2026-142133.75.9UnknownBooking for Appointments and Events CalendarCWE-639Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR
CVE-2026-275376.55.8supsysticPopup by SupsysticCWE-79WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vu…
CVE-2026-666876.55.7magepeopleteamWpBookinglyCWE-79WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-733406.55.7fifu.appFeatured Image from URLCWE-79WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS…
CVE-2026-733576.55.7NexcessGiveWPCWE-79WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-732667.15.7Red HatMulticluster Engine for KubernetesCWE-441Clusterclaims-controller: clusterclaims-controller: tenant-controlled cluster…
CVE-2026-120366.95.7LenovoVantageCWE-59An improper link following vulnerability was reported in the VantageCoreAddin…
CVE-2026-736574.25.7triggerdotdevtrigger.devCWE-22Trigger.dev: Cross-tenant payload poisoning via packet write + replay
CVE-2026-02890.55.5Palo Alto NetworksPrisma BrowserCWE-522Prisma Browser: Inappropriate Implementation in Account Protection
CVE-2026-159947.35.3LenovoCommercial VantageCWE-59During an internal security assessment, an improper link following vulnerabil…
CVE-2026-735726.15.1ZimbraCollaborationCWE-79In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (…
CVE-2026-736285.35.1s9ySerendipityCWE-79Serendipity 2.3.5 Reflected XSS via search clean-URL route
CVE-2026-730375.15.1DayuanJiangnext-ai-draw-ioCWE-79Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter
CVE-2026-735057.85.0JanDeDobbeleeroh-my-poshCWE-94Oh My Posh: Arbitrary command execution via template injection in the path se…
CVE-2026-191824.34.9The OpenNMS GroupMeridianCWE-863OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users a…
CVE-2026-634238.54.7LenovoAccessories and Display ManagerCWE-321During an internal security assessment, a potential vulnerability was discove…
CVE-2026-734815.34.7phplistphplist3CWE-352phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules
CVE-2026-187414.64.5FroidenWorksuite SaaSCWE-79Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Locati…
CVE-2026-02922.14.2Palo Alto NetworksPrisma Access AgentCWE-290Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
CVE-2025-623153.44.1HCL SoftwareAIONCWE-116HCL AION is affected by multiple security vulnerabilities.
CVE-2026-02900.54.0Palo Alto NetworksPrisma BrowserCWE-522Prisma Browser: Sensitive Information Disclosure Vulnerability
CVE-2026-679905.43.8n/an/aCWE-352basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables …
CVE-2026-538028.43.6RsyncProjectrsyncCWE-61rsync < 3.5.0 Arbitrary File Read via Symlink Following
CVE-2026-537856.93.6RsyncProjectrsyncCWE-59rsync < 3.5.0 Path Traversal Write Escape via --relative Mode
CVE-2026-192938.83.4silabs.comWiseConnectCWE-521SMP security request
CVE-2026-538038.53.3RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
CVE-2026-63877.33.3LenovoSystem UpdateCWE-290A potential authentication bypass vulnerability was reported in Lenovo System…
CVE-2026-726587.33.3ElasticKibanaCWE-352Cross-Site Request Forgery in Kibana Leading to Privilege Escalation
CVE-2026-684517.83.2LinuxLinux—s390/zcrypt: Validate length for CCA ECC private key requests
CVE-2026-634266.93.0LenovoDock ManagerCWE-59During an internal security assessment, a potential vulnerability was discove…
CVE-2026-567556.23.1GiteaGitea Open Source Git ServerCWE-284Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation i…
CVE-2026-684548.83.0LinuxLinux—KVM: s390: pci: Fix handling of AIF enable without AISB
CVE-2026-684527.82.9LinuxLinux—s390/zcrypt: Validate length for CCA AES cipher key requests
CVE-2026-735066.13.0JanDeDobbeleeroh-my-poshCWE-150Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment…
CVE-2026-684537.12.8LinuxLinux—s390/zcrypt: Fix buffer over-read in cca_cipher2protkey
CVE-2026-728498.72.6budibaseserverCWE-352Budibase before 3.40.0 Identity Confusion via Chat-Link Handoff CSRF
CVE-2026-170298.82.3IBMiCWE-787IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2026-186224.72.4Foxit Software Inc.Foxit PDF EditorCWE-451Foxit PDF Editor/Reader's signature-validation pop-up reports modified certif…
CVE-2026-02946.02.3Palo Alto NetworksPrisma Access AgentCWE-427Prisma Access Agent: Local Privilege Escalation
CVE-2026-02911.12.2Palo Alto NetworksPrisma Access AgentCWE-59Prisma Access Agent: Authenticated Limited File Deletion on Linux
CVE-2026-119704.82.1ForcepointF1E macCWE-754This vulnerability allows a normal (non-admin) user to disable the Forcepoint…
CVE-2026-734804.82.1dundeegduCWE-116gdu Terminal Injection via Unstripped Escape Sequences
CVE-2026-734794.82.0Byrondua-cliCWE-116dua-cli Terminal Escape Sequence Injection via Marked Paths
CVE-2026-584416.31.9GiteaGitea Open Source Git ServerCWE-918SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL
CVE-2026-148757.81.8IBMi Access Client SolutionsCWE-426IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
CVE-2026-146636.51.7n/aPostgreSQLCWE-313PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and d…
CVE-2026-02935.61.6Palo Alto NetworksPrisma Access AgentCWE-693Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
CVE-2026-168987.81.6IBMiCWE-73IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service
CVE-2026-169877.81.6IBMiCWE-73IBM i is Affected By An Improper Validation Vulnerability in PASE []
CVE-2026-133656.51.6IBMPlanning AnalyticsCWE-352IBM Planning Analytics Local is affected by security vulnerabilities
CVE-2026-735753.11.6ZimbraCollaborationCWE-352In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (C…
CVE-2026-634258.51.4LenovoDock ManagerCWE-276During an internal security assessment, a potential improper permissions vuln…
CVE-2026-194835.51.4IBMStorage ScaleCWE-532The following vulnerabilities that can affect IBM Storage Scale and the Manag…
CVE-2026-568658.41.3Go toolchaincmd/goCWE-347Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
CVE-2026-196966.61.3Wireshark FoundationWiresharkCWE-787Out-of-bounds Write in Wireshark
CVE-2026-197304.21.3Red HatRed Hat Ansible Automation Platform 2CWE-459Podman: podman: quadlet install --replace non-truncating write retains remove…
CVE-2026-659347.11.2silabs.comBT122CWE-440BT122 plaintext pause encryption request causes DOS
CVE-2026-735856.31.1Red HatRed Hat Enterprise Linux 10CWE-377Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider…
CVE-2025-623145.61.1HCL SoftwareAIONCWE-307HCL AION is affected by multiple security vulnerabilities.
CVE-2026-122366.51.1zephyrprojectzephyrCWE-835Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type response…
CVE-2026-181018.81.0IBMiCWE-269IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server…
CVE-2026-190885.40.9UnknownShopEngine Elementor WooCommerce Builder AddonCWE-352ShopEngine < 4.9.3 - Customer PII Disclosure via Forced Authentication
CVE-2026-196944.70.9Wireshark FoundationWiresharkCWE-122Heap-based Buffer Overflow in Wireshark
CVE-2026-196954.70.9Wireshark FoundationWiresharkCWE-121Stack-based Buffer Overflow in Wireshark
CVE-2026-634247.00.8LenovoDock ManagerCWE-261During an internal security assessment, an improperly protected key was disco…
CVE-2026-735836.60.8Red HatRed Hat Enterprise Linux 10CWE-125Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows …
CVE-2026-537965.80.7RsyncProjectrsyncCWE-59rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling
CVE-2026-180717.80.7IBMiCWE-269IBM i is Affected By An Improper Management Vulnerability in HTTP Server []
CVE-2026-02964.50.6Palo Alto NetworksGlobalProtect AppCWE-295GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
CVE-2026-537975.70.6RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Race Condition Information Disclosure
CVE-2026-538005.70.6RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Race Condition via --remove-source-files
CVE-2026-537997.20.6RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application
CVE-2026-735846.30.6Red HatRed Hat Enterprise Linux 10CWE-377Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via …
CVE-2026-174384.40.6IBMiCWE-269IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []
CVE-2026-142565.70.5LenovoE16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPadCWE-125ELAN reported a potential out-of-bounds write vulnerability in the ELAN Track…
CVE-2026-180864.50.4IBMiCWE-787IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2025-526404.70.4HCL SoftwareAIONCWE-276HCL AION is affected by multiple security vulnerabilities.
CVE-2025-623183.70.3HCL SoftwareAIONCWE-352HCL AION is affected by multiple security vulnerabilities.
CVE-2026-02954.10.3Palo Alto NetworksGlobalProtect AppCWE-362GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
CVE-2026-146814.20.2n/aPostgreSQLCWE-924PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL
CVE-2026-168964.70.1IBMiCWE-367IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service
CVE-2026-164585.90.0Oberon microsystems AGocryptoCWE-208Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto
CVE-2026-164595.90.0Oberon microsystems AGOberon PSA CryptoCWE-208Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto