[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-95314 | 29 Sep 2026 | CVSS 8.1 | Google ChromeIncorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass… | |
| CVE-2026-95315 | 29 Sep 2026 | CVSS 7.8 | Google ChromeUse after free in Aura in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via… | |
| CVE-2026-95316 | 29 Sep 2026 | CVSS 2.9 | Google ChromeUnchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local… | |
| CVE-2026-95317 | 29 Sep 2026 | CVSS 3.1 | Google ChromeIncorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-95301 | 29 Sep 2026 | CVSS 8.1 | Google ChromeMissing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95302 | 29 Sep 2026 | CVSS 2.9 | Google ChromeIncorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a… | |
| CVE-2026-95303 | 29 Sep 2026 | CVSS 6.5 | Google ChromeIncomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system… | |
| CVE-2026-95304 | 29 Sep 2026 | CVSS 8.8 | Google ChromeOut of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95305 | 29 Sep 2026 | CVSS 4.8 | Google ChromeUI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-95306 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-95307 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI… | |
| CVE-2026-95308 | 29 Sep 2026 | CVSS 3.4 | Google ChromeInteger overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially… | |
| CVE-2026-95293 | 29 Sep 2026 | CVSS 4.7 | Google ChromeUninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML… | |
| CVE-2026-95294 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements… | |
| CVE-2026-95295 | 29 Sep 2026 | CVSS 4.6 | Google ChromeInformation leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a local attacker to leak sensitive information via physical… | |
| CVE-2026-95296 | 29 Sep 2026 | CVSS 4.3 | Google ChromeMissing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-95297 | 29 Sep 2026 | CVSS 6.5 | Google ChromeMissing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted… | |
| CVE-2026-95298 | 29 Sep 2026 | CVSS 7.8 | Google ChromeUse after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-95299 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted… | |
| CVE-2026-95300 | 29 Sep 2026 | CVSS 4.8 | Google ChromeMissing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system… | |
| CVE-2026-95284 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the… | |
| CVE-2026-95285 | 29 Sep 2026 | CVSS 8.4 | Google ChromeMissing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer… | |
| CVE-2026-95286 | 29 Sep 2026 | CVSS 8.8 | Google ChromeType confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95287 | 29 Sep 2026 | CVSS 5.4 | Google ChromeMissing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95288 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof UI elements via a crafted HTML… | |
| CVE-2026-95289 | 29 Sep 2026 | CVSS 4.3 | Google ChromeIncorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain… | |
| CVE-2026-95290 | 29 Sep 2026 | CVSS 5.4 | Google ChromeMissing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass… | |
| CVE-2026-95291 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a… | |
| CVE-2026-95292 | 29 Sep 2026 | CVSS 4.8 | Google ChromeIncorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via… | |
| CVE-2026-95277 | 29 Sep 2026 | CVSS 9.6 | Google ChromeUse after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox… | |
| CVE-2026-95278 | 29 Sep 2026 | CVSS 8.4 | Google ChromeMissing authorization in WakeLock in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95279 | 29 Sep 2026 | CVSS 5.4 | Google ChromeUI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to spoof address bar via a crafted… | |
| CVE-2026-95280 | 29 Sep 2026 | CVSS 7.5 | Google ChromeRace condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted… | |
| CVE-2026-95281 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the… | |
| CVE-2026-95282 | 29 Sep 2026 | CVSS 8.8 | Google ChromeUse after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a… | |
| CVE-2026-95283 | 29 Sep 2026 | CVSS 9.6 | Google ChromeBuffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside… | |
| CVE-2026-84842 | 29 Sep 2026 | CVSS 8.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary file deletion in the Datasource REST component. An authenticated… | Fix |
| CVE-2026-94954 | 29 Sep 2026 | CVSS 8.8 | VulnerabilityA stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030. It is… | |
| CVE-2026-95274 | 29 Sep 2026 | CVSS 8.3 | Google ChromeImproper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-95275 | 29 Sep 2026 | CVSS 6.5 | Google ChromeIncorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a… | |
| CVE-2026-95276 | 29 Sep 2026 | CVSS 8.3 | Google ChromeImproper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to… | |
| CVE-2026-84414 | 29 Sep 2026 | CVSS 7.8 | IBM iIBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an… | |
| CVE-2026-84421 | 29 Sep 2026 | CVSS 8.8 | IBM DataStage on Cloud Pak for DataIBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of paths… | Fix |
| CVE-2026-84422 | 29 Sep 2026 | CVSS 7.2 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an… | Fix |
| CVE-2026-84436 | 29 Sep 2026 | CVSS 9.1 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated… | Fix |
| CVE-2026-84440 | 29 Sep 2026 | CVSS 8.8 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can… | Fix |
| CVE-2026-102808 | 29 Sep 2026 | CVSS 6.5 | PX4-AutopilotPX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed… | |
| CVE-2026-102809 | 29 Sep 2026 | CVSS 6.5 | PX4-AutopilotPX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk… | |
| CVE-2026-102810 | 29 Sep 2026 | CVSS 7.5 | rochacbruno marmiteMarmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to… | |
| CVE-2026-102811 | 29 Sep 2026 | CVSS 7.5 | rochacbruno marmiteMarmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and… | |
| CVE-2026-12345 | 29 Sep 2026 | CVSS 5.9 | Python Software Foundation CPythonThe cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a… | Fix |
| CVE-2026-102758 | 29 Sep 2026 | CVSS 7.5 | Eclipse Foundation NetX DuoThe `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive… | |
| CVE-2026-102759 | 29 Sep 2026 | CVSS 6.3 | Eclipse Foundation NetX DuoNetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In `_nx_secure_verify_mac`, a decrypted… | |
| CVE-2026-102760 | 29 Sep 2026 | CVSS 8.3 | Eclipse Foundation NetX DuoWhen NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then… | |
| CVE-2026-102761 | 29 Sep 2026 | CVSS 9.3 | Eclipse Foundation NetX DuoNetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's… | |
| CVE-2026-102762 | 29 Sep 2026 | CVSS 8.2 | Eclipse Foundation NetX DuoThe NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets… | |
| CVE-2026-102806 | 29 Sep 2026 | CVSS 6.3 | OpenClawOpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem… | |
| CVE-2026-102807 | 29 Sep 2026 | CVSS 5.3 | OpenClawOpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in the mcp.app.view method that allows read-scoped operators to execute… | |
| CVE-2026-102725 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoOut-of-bounds Read from Unvalidated MSRP Attribute List Length | |
| CVE-2026-102726 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoUnbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read | |
| CVE-2026-102727 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoFTP Passive Data Connection Not Bound to the Authenticated Control Peer | |
| CVE-2026-102728 | 29 Sep 2026 | CVSS 7.5 | Eclipse Foundation NetX DuoTwo client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long… | |
| CVE-2026-102729 | 29 Sep 2026 | CVSS 5.9 | Eclipse Foundation GUIX`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id… | |
| CVE-2026-102730 | 29 Sep 2026 | CVSS 8.6 | Eclipse Foundation eclipse-threadx/levelx(NAND driver)Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAND… | |
| CVE-2026-102757 | 29 Sep 2026 | CVSS 8.5 | Eclipse Foundation ThreadXAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can… | |
| CVE-2026-102718 | 29 Sep 2026 | CVSS 8.7 | Eclipse Foundation NetX Duohey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when… | |
| CVE-2026-102719 | 29 Sep 2026 | CVSS 6.3 | Eclipse Foundation netxduoPredictable DTLS HelloVerifyRequest Cookie in NetX Secure | |
| CVE-2026-102720 | 29 Sep 2026 | CVSS 5.3 | Eclipse Foundation eclipse-threadx/netxduoA DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The… | |
| CVE-2026-102721 | 29 Sep 2026 | CVSS 6.9 | Eclipse Foundation NetX DuoA TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only… | |
| CVE-2026-102722 | 29 Sep 2026 | CVSS 6.9 | Eclipse Foundation NetX DuoIn the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and the… | |
| CVE-2026-102723 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoNULL Pointer Dereference on MSRP Attribute Table Exhaustion | |
| CVE-2026-102724 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoNULL Pointer Dereference When Evicting the Sole MSRP Attribute | |
| CVE-2026-102710 | 29 Sep 2026 | CVSS 9.3 | Eclipse Foundation eclipse-threadx/threadxAttacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with… | |
| CVE-2026-102711 | 29 Sep 2026 | CVSS 5.7 | Eclipse Foundation `eclipse-threadx/threadx` (module manager / loadable-module loader)Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via… | |
| CVE-2026-102712 | 29 Sep 2026 | CVSS 8.8 | Eclipse Foundation NetX DuoOn the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against the total… | |
| CVE-2026-102713 | 29 Sep 2026 | CVSS 8.8 | Eclipse Foundation NetX DuoThe TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes (nxd_tftp_server.c:1037) and nothing… | |
| CVE-2026-102714 | 29 Sep 2026 | CVSS 7.1 | Eclipse Foundation NetX Duo`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`). An area whose size… | |
| CVE-2026-102715 | 29 Sep 2026 | CVSS 7.1 | Eclipse Foundation eclipse-threadx/netxduoAny host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in… | |
| CVE-2026-102716 | 29 Sep 2026 | CVSS 8.7 | Eclipse Foundation eclipse-threadx/netxduoAn unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot… | |
| CVE-2026-102639 | 29 Sep 2026 | CVSS 6.5 | MobilityDBMobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerability in the MEOS binary and library WKB deserialization logic that… | |
| CVE-2026-102677 | 29 Sep 2026 | CVSS 8.8 | Electron: Sandboxed preload code cache can be poisoned by a compromised rendererElectron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From 42.3.3 until 42.10.0, 43.5.0, and… | Fix |
| CVE-2026-102709 | 29 Sep 2026 | CVSS 8.4 | Eclipse Foundation ThreadXImproper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the… | |
| CVE-2026-102558 | 29 Sep 2026 | CVSS 8.6 | Red Hat Enterprise Linux 10A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an… | |
| CVE-2026-102559 | 29 Sep 2026 | CVSS 8.6 | Red Hat Enterprise Linux 10A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray… | Fix |
| CVE-2026-102560 | 29 Sep 2026 | CVSS 9.8 | Red Hat Enterprise Linux 10A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations… | Fix |
| CVE-2026-102555 | 29 Sep 2026 | CVSS 8.2 | Red Hat Enterprise Linux 10A flaw was found in libsoup. The soup_uri_decode_data_uri() function incorrectly treated base64 data-URI payloads as NUL-terminated strings when… | |
| CVE-2026-102242 | 29 Sep 2026 | CVSS 8.6 | Google MCP Toolbox for DatabasesImproper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0… | |
| CVE-2026-92232 | 29 Sep 2026 | CVSS 6.5 | Joomla! Project Joomla! CMSJoomla! Core - [20260916] - Core - XSS filter bypass in InputFilter via whitespace characters in HTML data URIs in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 -… | Fix |
| CVE-2026-92222 | 29 Sep 2026 | CVSS 8.0 | Joomla! Project Joomla! CMSJoomla! Core - [20260909] - Core - SSRF vectors in various core extensions in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - URLs used for serverside requests… | Fix |
| CVE-2026-92223 | 29 Sep 2026 | CVSS 3.8 | Joomla! Project Joomla! CMSJoomla! Core - [20260910] - Core - Improper ACL checks for workflow stage changes in Joomla 5.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check… | Fix |
| CVE-2026-92224 | 29 Sep 2026 | CVSS 6.7 | Joomla! Project Joomla! CMSJoomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape… | Fix |
| CVE-2026-92225 | 29 Sep 2026 | CVSS 6.7 | Joomla! Project Joomla! CMSJoomla! Core - [20260912] - Core - XSS in module list in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The module list layout did not properly escape user… | Fix |
| CVE-2026-92226 | 29 Sep 2026 | CVSS 6.0 | Joomla! Project Joomla! CMSJoomla! Core - [20260913] - Core - Improper ACL checks for varous webservice edit tasks in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check… | Fix |
| CVE-2026-92227 | 29 Sep 2026 | CVSS 7.5 | Joomla! Project Joomla! CMSJoomla! Core - [20260914] - Core - MFA Authentication Bypass through rememberme cookies in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The premature issuance… | Fix |
| CVE-2026-92231 | 29 Sep 2026 | CVSS 6.7 | Joomla! Project Joomla! CMSJoomla! Core - [20260915] - Core - XSS filter bypass in InputFilter via HTML5 entity decode mismatch in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The… | Fix |
| CVE-2026-90907 | 29 Sep 2026 | CVSS 5.3 | Joomla! Project Joomla! CMSJoomla! Core - [20260902] - Core - Unauthorized user account creation via profile.save controller in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - The… | Fix |
| CVE-2026-90913 | 29 Sep 2026 | CVSS 5.5 | Joomla! Project Joomla! CMSJoomla! Core - [20260903] - Core - Improper ACL checks for access level webservice endpoints in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access… | Fix |
| CVE-2026-90914 | 29 Sep 2026 | CVSS 6.4 | Joomla! Project Joomla! CMSJoomla! Core - [20260904] - Core - XSS in the generic media output layouts in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to an XSS… | Fix |
| CVE-2026-90915 | 29 Sep 2026 | CVSS 6.5 | Joomla! Project Joomla! CMSJoomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 -An improper validation of… | Fix |
| CVE-2026-90916 | 29 Sep 2026 | CVSS 2.7 | Joomla! Project Joomla! CMSJoomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access… | Fix |
Page 140 of 168