[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-77423 | 23 Sep 2026 | CVSS 7.5 | jline3JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search… | |
| CVE-2026-76648 | 23 Sep 2026 | CVSS 8.5 | Red Hat Ansible Automation Platform 2.7CopyAPIView (awx/awx/api/generics.py:873) sets permission_classes = (IsAuthenticated,), so DRF's get_object() performs no object-level RBAC. The… | |
| CVE-2026-77285 | 23 Sep 2026 | CVSS 2.4 | OpenBao Agent Writes Secrets to StdoutOpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rendering mode could write secrets from… | Fix |
| CVE-2026-77394 | 23 Sep 2026 | CVSS 7.6 | OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widgetOpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems. From 5.0.6 until 7.3.0, an… | Fix |
| CVE-2026-77420 | 23 Sep 2026 | CVSS 5.5 | JLine: ReDoS via `HISTORY_IGNORE` Configuration VariableJLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, DefaultHistory.matchPatterns(String patterns, String line) in… | Fix |
| CVE-2026-77421 | 23 Sep 2026 | CVSS 6.5 | JLine: ReDoS in Nano Editor Regex Search ModeJLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in nano editor's regex search mode passes a… | Fix |
| CVE-2026-77422 | 23 Sep 2026 | CVSS 7.5 | JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` WrappingJLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in grep command in… | Fix |
| CVE-2026-75131 | 23 Sep 2026 | CVSS 7.8 | nm-l2tp NetworkManager-l2tpNetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create… | |
| CVE-2026-76086 | 23 Sep 2026 | CVSS 8.5 | Formie: Integration form-settings action allows SSRF and exfiltration of stored integration credentialsFormie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form-settings control panel action in… | Fix |
| CVE-2026-76087 | 23 Sep 2026 | CVSS 8.2 | Formie: Unauthenticated users can overwrite incomplete submissions via submit actionFormie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's anonymous formie/submissions/submit action in… | Fix |
| CVE-2026-76089 | 23 Sep 2026 | CVSS 7.7 | Formie: Missing authorization on sent notification resend modal exposes submission PIIFormie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/sent-notifications/get-resend-modal-content control… | Fix |
| CVE-2026-71462 | 23 Sep 2026 | CVSS 4.1 | Red Hat Ansible Automation Platform 2.5 for RHEL 8StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary… | |
| CVE-2026-71463 | 23 Sep 2026 | CVSS 2.7 | Red Hat Ansible Automation Platform 2.5 for RHEL 8Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_env']) and {% if job.id > 100 %}… | |
| CVE-2026-71464 | 23 Sep 2026 | CVSS 3.1 | Red Hat Ansible Automation Platform 2.5 for RHEL 8LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers… | |
| CVE-2026-71465 | 23 Sep 2026 | CVSS 3.1 | Red Hat Ansible Automation Platform 2.5 for RHEL 8RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit… | |
| CVE-2026-71459 | 23 Sep 2026 | CVSS 5.0 | Red Hat Ansible Automation Platform 2.5 for RHEL 8JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_permissions() falls through (returns True) for any… | |
| CVE-2026-71460 | 23 Sep 2026 | CVSS 4.3 | Red Hat Ansible Automation Platform 2.5 for RHEL 8/api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts)… | |
| CVE-2026-71461 | 23 Sep 2026 | CVSS 4.3 | Red Hat Ansible Automation Platform 2.7HostList.list() catches bare Exception and returns str(e) verbatim. Via host_filter, any authenticated user triggers Django FieldError (leaking… | |
| CVE-2026-71458 | 23 Sep 2026 | CVSS 5.0 | Red Hat Ansible Automation Platform 2.5 for RHEL 8URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses… | |
| CVE-2026-63131 | 23 Sep 2026 | CVSS 6.0 | OpenBao Skips Stricter Deny Policy for LIST operationsOpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's vault/policy/acl.go could evaluate a broader wildcard… | Fix |
| CVE-2026-63132 | 23 Sep 2026 | CVSS 9.2 | OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing AttackOpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao's handleLogicalRecovery path in http/logical.go compared… | Fix |
| CVE-2026-59990 | 23 Sep 2026 | CVSS 7.5 | Jawn: Uncontrolled nesting depth in JSON parserJawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit… | Fix |
| CVE-2026-61695 | 23 Sep 2026 | CVSS 7.5 | Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding serviceWire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime… | Fix |
| CVE-2026-61814 | 23 Sep 2026 | CVSS 7.5 | Jawn: Quadratic parsing effort in AsyncParserJawn is an open source JSON parser. Prior to 1.7.0, Jawn's AsyncParser can perform quadratic work when a single JSON token is delivered across many… | Fix |
| CVE-2026-55632 | 23 Sep 2026 | CVSS 4.3 | gocdGoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline… | |
| CVE-2026-52744 | 23 Sep 2026 | CVSS 5.3 | gocdGoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at… | |
| CVE-2026-91775 | 23 Sep 2026 | CVSS 7.4 | LimeSurveyLimeSurvey Community Edition 7.0.14 fails to safely encode attacker-controlled content from a crafted .lss survey file when displaying import… | |
| CVE-2026-88831 | 23 Sep 2026 | CVSS 5.3 | Red Hat Hardened ImagesBusyBox httpd IP deny rules with invalid CIDR prefix lengths fail open, leaving a parsed IP with a zeroed mask so the rule matches no clients. | |
| CVE-2026-88835 | 23 Sep 2026 | CVSS 6.1 | Red Hat Hardened ImagesBusyBox dpkg read_package_field() steps past a NUL terminator on malformed .deb packages, causing an out-of-bounds heap read. | |
| CVE-2026-88837 | 23 Sep 2026 | CVSS 6.5 | Red Hat Hardened ImagesBusyBox httpd treats yescrypt ($y$) password hashes as plaintext during Basic Authentication, inverting the authentication check. | |
| CVE-2026-88839 | 23 Sep 2026 | CVSS 6.7 | Red Hat Hardened ImagesBusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers. | |
| CVE-2026-88840 | 23 Sep 2026 | CVSS 5.3 | Red Hat Hardened ImagesBusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message. | |
| CVE-2026-86867 | 23 Sep 2026 | CVSS 6.5 | Cinnamon AI KotaemonCinnamon's Kotaemon (all versions up to and including v0.12.0) multi-user chat interface contains multiple vulnerabilities due to incorrect… | |
| CVE-2026-86926 | 23 Sep 2026 | CVSS 7.8 | Claris FileMaker ServerA heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file… | |
| CVE-2026-86930 | 23 Sep 2026 | CVSS 9.1 | Claris FileMaker ServerAn out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field… | |
| CVE-2026-86934 | 23 Sep 2026 | CVSS 9.1 | Claris FileMaker ServerAn authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to… | |
| CVE-2026-86938 | 23 Sep 2026 | CVSS 7.3 | Claris FileMaker ProA DLL hijacking vulnerability in the FileMaker Pro installer for Windows allowed a local user to execute arbitrary code with elevated administrator… | |
| CVE-2026-96758 | 23 Sep 2026 | CVSS 9.8 | orval-labs orvalorval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data serializer that fails to escape multipart property names in… | |
| CVE-2026-96759 | 23 Sep 2026 | CVSS 9.8 | orval-labs orvalorval before 8.29.0 fails to escape the operationId parameter when emitting it into generated TanStack Query mutator options metadata objects… | |
| CVE-2026-96775 | 23 Sep 2026 | CVSS 8.8 | MLflowMLflow's dspy flavor, versions >= 2.0, applies the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control only when the model_path ends in .pkl… | |
| CVE-2026-96804 | 23 Sep 2026 | CVSS 8.8 | MLflowMLflow's statsmodel flavor, versions 2.1.0 to 3.14.0, omits the MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False security control entirely in _load_model()… | |
| CVE-2026-96807 | 23 Sep 2026 | CVSS 4.0 | FlatpakIn Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causing regenerate_ld_cache to write files… | |
| CVE-2026-96808 | 23 Sep 2026 | CVSS 7.4 | FlatpakIn Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data from unprivileged callers, validated file… | |
| CVE-2026-96754 | 23 Sep 2026 | CVSS 9.8 | orval-labs orvalorval versions before 8.29.0 contain a code injection vulnerability in the @orval/hono generator that fails to escape OpenAPI path values in… | |
| CVE-2026-96755 | 23 Sep 2026 | CVSS 9.8 | orval-labs orvalorval versions 8.14.0 through 8.28.1 contain a code injection vulnerability in the @orval/effect generator that converts OpenAPI schema defaults into… | |
| CVE-2026-96756 | 23 Sep 2026 | CVSS 8.1 | orval-labs orvalorval versions before 8.30.0 contain a code injection vulnerability in the @orval/core factory generator that fails to escape date default values in… | |
| CVE-2026-96757 | 23 Sep 2026 | CVSS 9.8 | orval-labs orvalorval before 8.29.0 fails to escape OpenAPI media-type keys when emitting them into single-quoted Content-Type string literals in generated code… | |
| CVE-2026-96651 | 23 Sep 2026 | CVSS 6.5 | Plex Media ServerPlex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path traversal via… | |
| CVE-2026-96652 | 23 Sep 2026 | CVSS 4.3 | Server-side request forgery in Plex Media Server timeline endpointPlex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the… | Exploited |
| CVE-2026-96654 | 23 Sep 2026 | CVSS 6.5 | URL handling flaw exposes Plex Media Server plugin functionsPlex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins'… | Exploited |
| CVE-2026-96655 | 23 Sep 2026 | CVSS 4.3 | Server-side request forgery in Plex Media Server transcoderPlex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the… | Exploited |
| CVE-2026-96656 | 23 Sep 2026 | CVSS 7.2 | Plex Media Server admin setting allows code executionPlex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference… | Exploited |
| CVE-2026-96513 | 23 Sep 2026 | CVSS 7.3 | Neethuharii CafeManagementA security flaw has been discovered in Neethuharii CafeManagement. This issue affects some unknown processing of the file AddProductCode.php. The… | |
| CVE-2026-96514 | 23 Sep 2026 | CVSS 7.3 | Neethuharii CafeManagementA weakness has been identified in Neethuharii CafeManagement. Impacted is an unknown function of the file CafePortalLogin.php of the component Login… | |
| CVE-2026-95843 | 23 Sep 2026 | CVSS 7.5 | moquette-io moquetteMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.subscribe parses a shared-subscription filter through… | Fix |
| CVE-2026-95844 | 23 Sep 2026 | CVSS 7.5 | moquette-io moquetteMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing… | Fix |
| CVE-2026-95845 | 23 Sep 2026 | CVSS 7.5 | moquette-io moquetteMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, the broker does not enforce a maximum length for pending per-session message queues… | Fix |
| CVE-2026-95846 | 23 Sep 2026 | CVSS 7.5 | moquette-io moquetteMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, PostOffice.publishWill publishes a client's Last-Will message without applying the… | Fix |
| CVE-2026-95847 | 23 Sep 2026 | CVSS 7.5 | moquette-io moquetteMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, H2PersistentQueue derives a session's message-map name as queue_ plus the client ID and… | Fix |
| CVE-2026-95848 | 23 Sep 2026 | CVSS 9.1 | moquette-io moquetteMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, when a configured authenticator or authorizator class cannot be loaded… | Fix |
| CVE-2026-95842 | 23 Sep 2026 | CVSS 7.5 | moquette-io moquetteMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, SessionEventLoop.run catches only InterruptedException, and SessionEventLoopGroup does… | Fix |
| CVE-2026-93349 | 23 Sep 2026 | CVSS 8.8 | frictionlessdata frictionless-pyFrictionless before 5.19.1 contains an OS command injection vulnerability in the explore console command that allows an attacker who supplies a… | |
| CVE-2026-88830 | 23 Sep 2026 | CVSS 7.5 | Red Hat Hardened ImagesA unit confusion in BusyBox TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted… | |
| CVE-2026-88832 | 23 Sep 2026 | CVSS 7.3 | Red Hat Hardened ImagesBusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow when processing crafted… | |
| CVE-2026-85724 | 23 Sep 2026 | CVSS 9.6 | Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bugMoquette is a lightweight Java MQTT broker. Prior to 0.18.1, when pattern-based ACL rules are configured, AuthorizationsCollector.canDoOperation… | Fix |
| CVE-2026-6668 | 23 Sep 2026 | CVSS 7.5 | PgBouncerInteger overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to cause a denial of… | |
| CVE-2026-6669 | 23 Sep 2026 | CVSS 5.9 | PgBouncerMissing upper bound on the key derivation iteration count accepted during SCRAM authentication to a backend server in PgBouncer through 1.25.2 allows… | |
| CVE-2025-63564 | 23 Sep 2026 | CVSS 9.8 | VulnerabilitySQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP requests | |
| CVE-2026-19888 | 23 Sep 2026 | CVSS 7.5 | PgBouncerMissing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote… | |
| CVE-2026-96673 | 23 Sep 2026 | CVSS 7.5 | PhotoviewPhotoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by… | |
| CVE-2026-96674 | 23 Sep 2026 | CVSS 4.4 | ALSA Project alsa-libalsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that… | |
| CVE-2026-96675 | 23 Sep 2026 | CVSS 3.3 | ALSA Project alsa-libalsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before… | |
| CVE-2026-96672 | 23 Sep 2026 | CVSS 6.4 | Frappe ERPNextFrappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula values reference whitelisted methods… | |
| CVE-2026-93769 | 23 Sep 2026 | CVSS 7.2 | HumhubHumHub 1.18.5 is affected by a stored cross-site scripting (XSS) vulnerability that allows any user holding the delegated, non-system-administrator… | |
| CVE-2026-79304 | 23 Sep 2026 | CVSS 6.5 | VulnerabilityCyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents method of the /filemanager/controller endpoint. An authenticated… | |
| CVE-2026-79306 | 23 Sep 2026 | CVSS 6.5 | VulnerabilityCyberPanel v1.9.1 contains a path traversal vulnerability in the compress method exposed through the /filemanager/controller endpoint. An… | |
| CVE-2026-79310 | 23 Sep 2026 | CVSS 8.5 | Vulnerabilitywebpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can be tricked into executing attacker-controlled… | |
| CVE-2026-3626 | 23 Sep 2026 | CVSS 5.3 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in… | Fix |
| CVE-2026-4921 | 23 Sep 2026 | CVSS 2.7 | IBM Guardium Data ProtectionIBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is… | |
| CVE-2026-6327 | 23 Sep 2026 | CVSS 4.3 | IBM ConcertIBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements… | Fix |
| CVE-2026-19179 | 23 Sep 2026 | CVSS 8.2 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to manipulate database queries due to improper… | |
| CVE-2026-19267 | 23 Sep 2026 | CVSS 6.2 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to missing authentication on the Business Rules Manager commands REST… | |
| CVE-2026-18181 | 23 Sep 2026 | CVSS 8.1 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information… | |
| CVE-2026-18184 | 23 Sep 2026 | CVSS 7.4 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external… | |
| CVE-2026-18185 | 23 Sep 2026 | CVSS 7.3 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to access sensitive information and modify system… | |
| CVE-2026-18490 | 23 Sep 2026 | CVSS 8.8 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to unauthenticated remote code execution via Java native deserialization… | |
| CVE-2026-18505 | 23 Sep 2026 | CVSS 5.4 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to open redirect in the PMP `HostHeaderFilter`… | |
| CVE-2026-18872 | 23 Sep 2026 | CVSS 9.3 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to stored cross-site scripting (CWE-79) in the FTM UI… | |
| CVE-2026-18875 | 23 Sep 2026 | CVSS 7.3 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to RAG poisoning via unauthenticated runbook upsert (CWE-74) in the FTM AI… | |
| CVE-2026-19087 | 23 Sep 2026 | CVSS 4.4 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a local attacker to achieve privilege escalation within the container due to… | |
| CVE-2026-18180 | 23 Sep 2026 | CVSS 6.5 | IBM Financial Transaction Manager (FTM) for RedHat OpenShiftIBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote authenticated attacker to obtain sensitive information due to SQL… | |
| CVE-2026-96611 | 23 Sep 2026 | CVSS 7.8 | FFmpegFFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In mov_read_ispe(), uint32_t width/height values from a crafted HEIF ispe box… | Fix |
| CVE-2026-96599 | 23 Sep 2026 | CVSS 5.9 | isotope-coreIsotope eCommerce through 2.9.10 derives order identifiers from uniqid() instead of a cryptographically secure source, allowing unauthenticated… | |
| CVE-2026-96600 | 23 Sep 2026 | CVSS 5.5 | isotope-coreIsotope eCommerce through 2.9.10 contains a blind SQL injection vulnerability in backend callbacks that interpolate request-controlled identifiers… | |
| CVE-2026-96609 | 23 Sep 2026 | CVSS 7.1 | Robur AlbatrossRobur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized… | |
| CVE-2026-96275 | 23 Sep 2026 | CVSS 8.8 | Red Hat Enterprise Linux 10A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via… | |
| CVE-2026-96276 | 23 Sep 2026 | CVSS 6.5 | Red Hat Enterprise Linux 10If a malicious SDK container declares an extension point with a crafted `directory` path, and a developer runs `flatpak build-init --writable-sdk… | |
| CVE-2026-92164 | 23 Sep 2026 | CVSS 6.5 | Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local filesStreamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for… | Fix |
| CVE-2026-92419 | 23 Sep 2026 | CVSS 5.3 | WEBCON BPSWEBCON BPS is vulnerable to Insecure Direct Object Reference (IDOR) in the /api/vacations/{path} endpoint. The selectedPeople parameter in the Gantt… | |
| CVE-2026-88974 | 23 Sep 2026 | CVSS 5.4 | WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePostWPGraphQL provides a GraphQL API for WordPress sites. Prior to 2.22.2, the updatePost mutation in src/Mutation/PostObjectUpdate.php checks only the… |
Page 165 of 168