[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111625 | 16 Oct 2026 | CVSS 5.0 | 10up Distributor10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows Contributor-level multisite users to publish… | |
| CVE-2026-111626 | 16 Oct 2026 | CVSS 9.8 | Webreaper DamselflyWebreaper Damselfly through 4.5.3 contains an authentication bypass vulnerability that allows unauthenticated attackers to access all /api/* routes… | |
| CVE-2026-111627 | 16 Oct 2026 | CVSS 7.2 | hestiacpHestiaCP before 1.10.5 contains an authorization bypass vulnerability that allows non-ROOT_USER administrators to perform write actions while… | |
| CVE-2026-111628 | 16 Oct 2026 | CVSS 5.0 | 10up Distributor10up Distributor before 2.3.2 contains a PHP object injection vulnerability that allows Contributor-level users to instantiate PHP objects by double… | |
| CVE-2026-111616 | 16 Oct 2026 | CVSS 4.9 | Oqtane FrameworkOqtane Framework through 10.2.6 contains an authorization bypass vulnerability in SettingController that allows a site administrator to read another… | |
| CVE-2026-111617 | 16 Oct 2026 | CVSS 6.5 | MGdaasLab WHartTestWHartTest through 2.8.1 contains a missing authentication vulnerability that allows unauthenticated attackers to connect to the /ws/ui/web/ and… | |
| CVE-2026-111618 | 16 Oct 2026 | CVSS 5.3 | coaidev CoAICoAI (Chat Nio) through 4.0.0 contains an unauthenticated path traversal vulnerability in the generation and article archive download endpoints via… | |
| CVE-2026-111619 | 16 Oct 2026 | CVSS 6.5 | zyx0814 FilePressFilePress through 3.0.1 contains an sql injection vulnerability that allows authenticated low-privilege users to inject SQL into ORDER BY clauses via… | |
| CVE-2026-111620 | 16 Oct 2026 | CVSS 5.3 | O2OAO2OA through 10.0.2-ce contains an authorization bypass vulnerability in x_processplatform_assemble_surface that allows authenticated users to… | |
| CVE-2026-111621 | 16 Oct 2026 | CVSS 4.3 | TDuckCloud tduck-survey-formTDuck Survey Form through 5.3 contains a missing authorization vulnerability that allows any authenticated user to read other owners' raw form… | |
| CVE-2026-111622 | 16 Oct 2026 | CVSS 6.8 | a466350665 smart-ssosmart-sso through 2.1.1 contains an open redirect vulnerability in the /login handler that allows unauthenticated attackers to steal OAuth2… | |
| CVE-2026-111609 | 16 Oct 2026 | CVSS 3.8 | PKP Open Journal SystemsPKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to… | |
| CVE-2026-111610 | 16 Oct 2026 | CVSS 5.4 | b3log SoloB3log Solo through 4.4.0 contains a missing authorization vulnerability in ArticleConsole that allows authenticated authors to access other authors'… | |
| CVE-2026-111611 | 16 Oct 2026 | CVSS 5.4 | roncoo-educationroncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or… | |
| CVE-2026-111612 | 16 Oct 2026 | CVSS 7.5 | qaiu netdisk-fast-downloadnetdisk-fast-download through 0.4.8 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve donated… | |
| CVE-2026-111613 | 16 Oct 2026 | CVSS 7.5 | alldatacenter alldataAllData through 0.7.1 contains an unauthenticated JDBC injection vulnerability that allows remote attackers to open arbitrary database connections by… | |
| CVE-2026-111614 | 16 Oct 2026 | CVSS 6.5 | devlive-community DataCapDataCap through 2025.1.1 contains an insecure direct object reference vulnerability in BaseController.getInfoForPath that allows authenticated users… | |
| CVE-2026-111615 | 16 Oct 2026 | CVSS 6.5 | gz-yami mall4cloudMall4cloud through 4.0 contains an insecure direct object reference vulnerability that allows authenticated merchants to read other shops' buyer… | |
| CVE-2026-111603 | 16 Oct 2026 | CVSS 4.3 | PlayEduPlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access… | |
| CVE-2026-111604 | 16 Oct 2026 | CVSS 3.8 | elunez eladmineladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped user managers to modify or delete accounts outside… | |
| CVE-2026-111605 | 16 Oct 2026 | CVSS 8.1 | dromara JpomJpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH… | |
| CVE-2026-111606 | 16 Oct 2026 | CVSS 8.1 | hcengineering Huly PlatformHuly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to merge arbitrary persons by calling… | |
| CVE-2026-111607 | 16 Oct 2026 | CVSS 7.1 | jeequan jeepayJeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to overwrite another… | |
| CVE-2026-111608 | 16 Oct 2026 | CVSS 4.2 | jeequan jeepayJeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant users to delete other merchants'… | |
| CVE-2026-111392 | 16 Oct 2026 | CVSS 4.8 | sgl-project sglangSGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV… | |
| CVE-2026-109461 | 16 Oct 2026 | CVSS 5.9 | Microsoft Identity Client for NodeJSOrigin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to disclose information over a network. | Fix |
| CVE-2026-109587 | 16 Oct 2026 | CVSS 8.8 | FreeRTOS-KernelIncorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might allow an unprivileged task on… | |
| CVE-2026-109588 | 16 Oct 2026 | CVSS 8.8 | FreeRTOS-KernelNumeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on the Arm Cortex-R82 (Armv8-R… | |
| CVE-2026-109838 | 16 Oct 2026 | CVSS 5.1 | IBM Db2 Genius HubIBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of cryptographic signature. | |
| CVE-2026-109839 | 16 Oct 2026 | CVSS 3.1 | IBM Db2 Genius HubIBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing initialization vector in the… | |
| CVE-2026-102551 | 16 Oct 2026 | CVSS 7.7 | FreeRTOS-Plus-TCPImproper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2… | |
| CVE-2026-102552 | 16 Oct 2026 | CVSS 5.9 | FreeRTOS-Plus-TCPImproper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote… | |
| CVE-2026-97380 | 16 Oct 2026 | CVSS 8.8 | MariaDB serverMariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT… | Fix |
| CVE-2026-86047 | 16 Oct 2026 | CVSS 7.7 | MariaDB serverMariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, SHOW CREATE… | Fix |
| CVE-2026-92262 | 16 Oct 2026 | CVSS 9.9 | MariaDB serverMariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the #mysql50#… | Fix |
| CVE-2026-85745 | 16 Oct 2026 | CVSS 4.3 | MariaDB serverMariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_Area reads… | Fix |
| CVE-2026-85746 | 16 Oct 2026 | CVSS 9.9 | MariaDB serverMariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, ST_AsText can… | Fix |
| CVE-2026-85748 | 16 Oct 2026 | CVSS 9.9 | MariaDB serverMariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYS_REFCURSOR handling is affected because… | Fix |
| CVE-2026-85985 | 16 Oct 2026 | CVSS 5.4 | MariaDB serverMariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT… | Fix |
| CVE-2026-86008 | 16 Oct 2026 | CVSS 7.2 | MailuMailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd793556, a domain manager targeting an… | |
| CVE-2026-86009 | 16 Oct 2026 | CVSS 8.2 | MailuMailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d96, domain managers can enable spoofing… | |
| CVE-2026-77474 | 16 Oct 2026 | CVSS 7.1 | Dicklesworthstone destructive_command_guarddestructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding agents run them. Prior to… | |
| CVE-2026-57169 | 16 Oct 2026 | CVSS 9.6 | Finsys dockhandDockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce… | |
| CVE-2026-59962 | 16 Oct 2026 | CVSS 6.5 | TandoorRecipes recipesTandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, passes unvalidated sort_order… | |
| CVE-2026-59967 | 16 Oct 2026 | CVSS 5.4 | TandoorRecipes recipesTandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.10, looks up BookmarkletImport by… | |
| CVE-2026-62362 | 16 Oct 2026 | CVSS 4.9 | PBH-BTN PeerBanHelperPeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules. From 5.0.0 until 9.3.15, the… | |
| CVE-2026-49868 | 16 Oct 2026 | CVSS 9.8 | RIOT-OS RIOTRIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07… | |
| CVE-2026-102693 | 16 Oct 2026 | CVSS 9.6 | RIOT-OS RIOTRIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the… | |
| CVE-2026-102692 | 16 Oct 2026 | CVSS 9.1 | RIOT-OS RIOTRIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.07… | |
| CVE-2026-96424 | 16 Oct 2026 | CVSS 7.8 | UBports lomiri-download-managerIncorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read arbitrary file as root over DBus | |
| CVE-2026-96425 | 16 Oct 2026 | CVSS 5.5 | UBports lomiri-download-managerIncorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus | |
| CVE-2026-95859 | 16 Oct 2026 | CVSS 8.7 | libp2p rust-libp2plibp2p-rust is the official Rust language implementation of the libp2p networking stack. Prior to 0.49.5, Gossipsub GRAFT control-message handling… | |
| CVE-2026-92263 | 16 Oct 2026 | CVSS 7.2 | CodeWithCJ SparkyFitnessSparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint… | |
| CVE-2026-77630 | 16 Oct 2026 | CVSS 7.5 | pupnppupnp is an SDK for development of UPnP device and control point applications. Prior to 22.0.4, parse_hostport in upnp/src/genlib/net/uri/uri.c… | Fix |
| CVE-2026-68908 | 16 Oct 2026 | CVSS 5.3 | mz-automation libiec61850libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to… | |
| CVE-2026-68906 | 16 Oct 2026 | CVSS 8.7 | mz-automation libiec61850libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to… | |
| CVE-2026-68907 | 16 Oct 2026 | CVSS 8.2 | mz-automation libiec61850libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to… | |
| CVE-2026-55862 | 16 Oct 2026 | CVSS 6.5 | pupnppupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.0, multiple ixml DOM traversal functions process deeply… | |
| CVE-2026-57446 | 16 Oct 2026 | CVSS 5.3 | mz-automation libiec61850libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1… | |
| CVE-2026-57447 | 16 Oct 2026 | CVSS 4.3 | discourse-doc-categoriesDiscourse Doc Categories is a plugin for organizing Discourse topics as documentation. Prior to the verified source fix, the doc category index… | |
| CVE-2026-57486 | 16 Oct 2026 | CVSS 7.5 | pupnppupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compare in ixml/src/node.c passes the… | |
| CVE-2026-57487 | 16 Oct 2026 | CVSS 7.5 | pupnppupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, Transfer-Encoding: chunked causes the HTTP parser in… | |
| CVE-2026-57488 | 16 Oct 2026 | CVSS 7.1 | pupnppupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, raw_to_int in upnp/src/genlib/net/http/httpparser.c… | Fix |
| CVE-2026-54657 | 16 Oct 2026 | CVSS 6.5 | open-zaakOpen Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.0.0 until 1.27.2, 1.28.2, and 1.29.0, the POST search… | |
| CVE-2026-55543 | 16 Oct 2026 | CVSS 8.5 | helge17 tuxguitarTuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soundbank.path to reference an on-disk… | |
| CVE-2026-55836 | 16 Oct 2026 | CVSS 6.8 | open-zaakOpen Zaak is an open-source data and services layer for Dutch case-oriented working. From 1.13.0 until 1.27.2, 1.28.2, and 1.29.0… | |
| CVE-2026-46471 | 16 Oct 2026 | CVSS 5.5 | VulnerabilityAn issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_uuid function may… | |
| CVE-2026-46472 | 16 Oct 2026 | CVSS 7.5 | VulnerabilityAn issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemux_parse_chnl function may… | |
| CVE-2026-48503 | 16 Oct 2026 | CVSS 7.5 | mz-automation libiec61850libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to… | |
| CVE-2026-48741 | 16 Oct 2026 | CVSS 7.5 | mz-automation libiec61850libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to… | |
| CVE-2026-44977 | 16 Oct 2026 | CVSS 9.0 | countly-servercountly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, plugins/star-rating/api/api.js… | |
| CVE-2026-41582 | 16 Oct 2026 | CVSS 7.5 | countly-servercountly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, public image and screenshot routes… | |
| CVE-2026-42269 | 16 Oct 2026 | CVSS 8.1 | countly-servercountly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration… | |
| CVE-2026-42270 | 16 Oct 2026 | CVSS 7.5 | countly-servercountly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, star-rating/images/ and… | |
| CVE-2026-26846 | 16 Oct 2026 | CVSS 9.8 | VulnerabilityBuffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the… | |
| CVE-2026-111581 | 16 Oct 2026 | CVSS 3.3 | Red Hat Enterprise Linux 10A flaw was found in libblockdev. The bd_fs_ntfs_set_label() and bd_fs_vfat_set_label() functions pass caller-supplied label values as bare positional… | |
| CVE-2026-102923 | 16 Oct 2026 | CVSS 5.4 | CodeWithCJ SparkyFitnessSparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and… | |
| CVE-2026-102941 | 16 Oct 2026 | CVSS 7.5 | gomarkdown/markdown IsSafeURL panics on short URLsThe package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to… | Fix |
| CVE-2026-97851 | 16 Oct 2026 | CVSS 9.1 | J4Care dcm4chee-arc-lightThe storage status-change REST service allows location records still associated with DICOM instances to be changed to deletion-related states… | |
| CVE-2026-95183 | 16 Oct 2026 | CVSS 8.8 | VulnerabilityAn issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack via… | |
| CVE-2026-95182 | 16 Oct 2026 | CVSS 10.0 | VulnerabilityAn untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted… | |
| CVE-2026-88755 | 16 Oct 2026 | CVSS 7.8 | VulnerabilityZ.ai ZCode v3.11.2.6792 was discovered to automatically establish connections with MCP servers declared inside a repository's workspace… | |
| CVE-2026-111728 | 16 Oct 2026 | CVSS 5.4 | 5rahim SeanimeSeanime v3.7.0 to v3.10.3 contains an argument injection vulnerability reachable through improper authorization, allowing unauthenticated LAN or… | |
| CVE-2026-107621 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightJPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream. | |
| CVE-2026-107777 | 16 Oct 2026 | CVSS 6.5 | Thermo Fisher Torrent Suite SoftwareThermo Fisher Torrent Suite Software is vulnerable to a path traversal, which could allow an authenticated attacker to read arbitrary files on the… | |
| CVE-2026-105279 | 16 Oct 2026 | CVSS 9.1 | J4Care dcm4chee-arc-lightIn the default configuration, the archive accepts DICOM associations from an unregistered calling AE. A remote peer can use C-FIND and C-GET to… | |
| CVE-2026-105667 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightIn the default configuration, the HL7 listener accepts ADT^A40 patient-merge messages without authenticating the sending application. A remote sender… | |
| CVE-2026-106705 | 16 Oct 2026 | CVSS 8.8 | VulnerabilityELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module. The endpoint PUT /api/roles/menu… | |
| CVE-2026-105273 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightMP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward progress and repeatedly process the same… | |
| CVE-2026-101021 | 16 Oct 2026 | CVSS 7.5 | J4Care dcm4chee-arc-lightMultipartInputStream performs inefficient boundary matching and unnecessary buffer copying. Crafted multipart input can force excessive boundary… | |
| CVE-2025-52097 | 16 Oct 2026 | Not scored yet | VulnerabilityCross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting… | |
| CVE-2026-97858 | 16 Oct 2026 | CVSS 5.3 | Guangzhou Juan IoT Technology Co., Ltd. EseeCloud AppAn attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether… | |
| CVE-2026-97470 | 16 Oct 2026 | CVSS 6.4 | themefic Tourfic – AI Powered Travel Booking, Hotel Booking & Car RentalThe Tourfic – AI Powered Travel Booking, Hotel Booking & Car Rental plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment… | |
| CVE-2026-90821 | 16 Oct 2026 | CVSS 5.4 | Arcadia Technology, LLC Crafty ControllerAn input neutralization vulnerability in the Webhook URL form field component of Crafty Controller allows a remote, authenticated attacker to perform… | |
| CVE-2026-18516 | 16 Oct 2026 | CVSS 9.6 | Arcadia Technology, LLC Crafty ControllerAn output escaping vulnerability in the Audit Logs component of Crafty Controller allows a remote, unauthenticated attacker to perform stored… | |
| CVE-2026-111413 | 16 Oct 2026 | CVSS 8.8 | aThemeArt Theme HelperCross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This… | |
| CVE-2026-110287 | 16 Oct 2026 | CVSS 4.3 | Devolutions ServerImproper access control in asset contact password in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with general Edit but… | |
| CVE-2026-110804 | 16 Oct 2026 | CVSS 4.3 | Devolutions ServerImproperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 and earlier allows an authenticated… | |
| CVE-2026-110805 | 16 Oct 2026 | CVSS 2.6 | Devolutions ServerServer-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and earlier allows an authenticated low-privileged user to… | |
| CVE-2026-110806 | 16 Oct 2026 | CVSS 6.5 | Devolutions ServerIncorrect authorization in add-on properties in Devolutions Server 2026.3.8.0 and earlier allows an authenticated user with only View permission to… |
Page 43 of 168