[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109185 | 12 Oct 2026 | CVSS 8.8 | jishenghua jshERPjshERP through 3.6 contains a missing authorization vulnerability in the UserController updateUser handler that allows authenticated users to assign… | |
| CVE-2026-109174 | 12 Oct 2026 | CVSS 6.5 | moxi624 MoguBlogMoguBlog through 6.2 contains an information disclosure vulnerability that allows low-privileged front-end users to read system credentials via the… | |
| CVE-2026-109175 | 12 Oct 2026 | CVSS 4.3 | moxi624 MoguBlogMoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to list other… | |
| CVE-2026-109176 | 12 Oct 2026 | CVSS 5.4 | moxi624 MoguBlogMoguBlog through 6.2 contains an insecure direct object reference vulnerability that allows authenticated administrators to delete other… | |
| CVE-2026-109177 | 12 Oct 2026 | CVSS 4.3 | moxi624 MoguBlogMoguBlog through 6.2 contains a broken access control vulnerability that allows authenticated administrators to move or rename other administrators'… | |
| CVE-2026-109178 | 12 Oct 2026 | CVSS 5.4 | jishenghua jshERPjshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to forge, modify, or delete… | |
| CVE-2026-109179 | 12 Oct 2026 | CVSS 4.3 | jishenghua jshERPjshERP through 3.6 contains a missing authorization vulnerability in LogController that allows any authenticated user to read the tenant's operation… | |
| CVE-2026-109180 | 12 Oct 2026 | CVSS 4.3 | jishenghua jshERPjshERP through 3.6 contains an authorization bypass vulnerability that allows authenticated users to read data from unassigned warehouses by… | |
| CVE-2026-109166 | 12 Oct 2026 | CVSS 6.5 | dromara lamp-cloudlamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to obtain storage URLs for other… | |
| CVE-2026-109167 | 12 Oct 2026 | CVSS 4.3 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 contains an insecure direct object reference vulnerability in the saveFormTheme handler that allows authenticated users… | |
| CVE-2026-109168 | 12 Oct 2026 | CVSS 6.5 | dromara lamp-cloudlamp-cloud through 5.10.1 contains an insecure direct object reference vulnerability that allows authenticated users to list other business objects'… | |
| CVE-2026-109171 | 12 Oct 2026 | CVSS 4.3 | guchengwuyue yshop-crmyshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject contracts… | |
| CVE-2026-109172 | 12 Oct 2026 | CVSS 4.3 | guchengwuyue yshop-crmyshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject… | |
| CVE-2026-109173 | 12 Oct 2026 | CVSS 4.3 | guchengwuyue yshop-crmyshop-crm through 2.1.3 contains a missing authorization vulnerability that allows any authenticated back-office user to approve or reject invoices… | |
| CVE-2026-108952 | 12 Oct 2026 | CVSS 4.6 | rt-threadRT-Thread through 5.3.0 contains a memory corruption vulnerability in the legacy USB CDC virtual COM port driver that aliases rx_ringbuffer as a… | |
| CVE-2026-108953 | 12 Oct 2026 | CVSS 7.8 | cfdude mac-shell-mcpmac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command whitelist by injecting shell… | |
| CVE-2026-109164 | 12 Oct 2026 | CVSS 7.1 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 contains an insecure direct object reference vulnerability that allows authenticated users to delete other users' form… | |
| CVE-2026-109165 | 12 Oct 2026 | CVSS 4.3 | TDuckCloud tduck-survey-formTDuck survey form through 6.0 contains a broken access control vulnerability that allows authenticated users to add fields to other users' forms via… | |
| CVE-2026-108834 | 12 Oct 2026 | CVSS 4.3 | Cairo-dock Glx-DockA vulnerability was detected in Cairo-dock Glx-Dock up to 3.4.0. This issue affects some unknown processing of the file ww_page.php of the component… | |
| CVE-2026-108835 | 12 Oct 2026 | CVSS 4.4 | Yungengxin Yun Jia Security GuardA flaw has been found in Yungengxin Yun Jia Security Guard up to 2.7.1.9. Impacted is the function sub_14000885C in the library kgameprotect.sys… | |
| CVE-2026-108836 | 12 Oct 2026 | CVSS 7.3 | OllamaA vulnerability has been found in Ollama up to 0.34.1. The affected element is the function IsValid of the file types/model/name.go of the component… | |
| CVE-2026-108889 | 12 Oct 2026 | CVSS 4.4 | Yungengxin Cloud BillingA flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub_14000443C in the library… | |
| CVE-2026-108950 | 12 Oct 2026 | CVSS 5.3 | opensource-socialnetworkOpen Source Social Network (OSSN) through 10.1 contains a missing authorization vulnerability in ossn_album_page_handler that allows unauthenticated… | |
| CVE-2026-108951 | 12 Oct 2026 | CVSS 6.5 | lavalite cmsLavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users'… | |
| CVE-2026-108831 | 12 Oct 2026 | CVSS 6.3 | meetecho janus-gatewayA security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file… | |
| CVE-2026-105081 | 12 Oct 2026 | CVSS 3.6 | ImageMagickImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy… | |
| CVE-2026-85499 | 12 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache SkyWalking BanyanDBImproper Authorization vulnerability in Apache SkyWalking BanyanDB. The Canopy includes incomplete proof-of-concept role and monitoring-proxy… | |
| CVE-2026-108827 | 12 Oct 2026 | CVSS 4.1 | Zen CartA vulnerability was determined in Zen Cart up to 2.2.2. Affected is the function zen_call_function of the file admin/includes/functions/general.php… | |
| CVE-2026-108828 | 12 Oct 2026 | CVSS 4.1 | Zen CartA vulnerability was identified in Zen Cart 2.2.2. Affected by this vulnerability is the function eval of the file admin/configuration.php of the… | |
| CVE-2026-108829 | 12 Oct 2026 | CVSS 4.7 | Zen CartA security flaw has been discovered in Zen Cart up to 2.2.2. Affected by this issue is some unknown functionality of the file admin/modules.php of… | |
| CVE-2026-108830 | 12 Oct 2026 | CVSS 4.2 | meetecho janus-gatewayA weakness has been identified in meetecho janus-gateway up to 1.4.2. This affects an unknown part of the file src/plugins/janus_videoroom.c of the… | |
| CVE-2026-105283 | 12 Oct 2026 | CVSS 6.3 | ash-project ash_typescriptGeneration of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allows an unauthenticated attacker to read… | |
| CVE-2026-105410 | 12 Oct 2026 | CVSS 8.7 | Dassault Systèmes Tuleap Enterprise EditionA Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute… | |
| CVE-2026-105411 | 12 Oct 2026 | CVSS 8.1 | Dassault Systèmes Tuleap Enterprise EditionAn Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker… | |
| CVE-2026-105412 | 12 Oct 2026 | CVSS 7.1 | Dassault Systèmes Tuleap Enterprise EditionAn SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database. | |
| CVE-2026-108824 | 12 Oct 2026 | CVSS 6.3 | DataEaseA flaw has been found in DataEase up to 3.0.0. The impacted element is the function Utils.buildCalcField of the file… | |
| CVE-2026-108825 | 12 Oct 2026 | CVSS 5.4 | yangzongzhuan RuoYiA vulnerability has been found in yangzongzhuan RuoYi up to 4.8.3. This affects the function checkRoleAllowed of the file /system/role/authDataScope… | |
| CVE-2026-108826 | 12 Oct 2026 | CVSS 7.3 | Zen CartA vulnerability was found in Zen Cart up to 2.2.2. This impacts the function zen_db_perform in the library includes/modules/payment/paypaldp.php of… | |
| CVE-2026-103903 | 12 Oct 2026 | CVSS 8.8 | MikroTik RouterOSAn incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote authenticated attacker with… | |
| CVE-2026-105407 | 12 Oct 2026 | CVSS 8.8 | Dassault Systèmes Tuleap Enterprise EditionAn OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary… | |
| CVE-2026-105408 | 12 Oct 2026 | CVSS 8.7 | Dassault Systèmes Tuleap Enterprise EditionA Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute… | |
| CVE-2026-105409 | 12 Oct 2026 | CVSS 8.7 | Dassault Systèmes Tuleap Enterprise EditionA Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute… | |
| CVE-2026-103902 | 12 Oct 2026 | CVSS 7.5 | DigiDoc libdigidocppImproper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc… | |
| CVE-2026-108822 | 12 Oct 2026 | CVSS 5.3 | KamailioA vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_calling_party of the file… | |
| CVE-2026-108819 | 12 Oct 2026 | CVSS 7.3 | agno-agi agnoA security flaw has been discovered in agno-agi agno up to 3.0.6/3.1.1. This vulnerability affects the function exec of the component Agent… | |
| CVE-2026-108820 | 12 Oct 2026 | CVSS 6.3 | agno-agi agnoA weakness has been identified in agno-agi agno up to 3.0.6/3.1.1. This issue affects the function member_agent.run in the library… | |
| CVE-2026-108821 | 12 Oct 2026 | CVSS 6.3 | Tencent WeKnoraA security vulnerability has been detected in Tencent WeKnora up to 0.8.1. Impacted is the function validateSubquery of the file… | |
| CVE-2026-108816 | 12 Oct 2026 | CVSS 6.3 | agno-agi agnoA vulnerability was found in agno-agi agno up to 3.0.6. Affected by this vulnerability is the function run_python_code of the file python.py of the… | |
| CVE-2026-108817 | 12 Oct 2026 | CVSS 5.5 | agno-agi agnoA vulnerability was determined in agno-agi agno up to 3.0.9. Affected by this issue is the function agno.CodingTools.run_shell in the library… | |
| CVE-2026-108818 | 12 Oct 2026 | CVSS 7.3 | agno-agi agnoA vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authentication_dependency of the file auth.py. Such… | |
| CVE-2026-1907 | 12 Oct 2026 | CVSS 7.5 | Kong Enterprise GatewayA SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. The issue… | |
| CVE-2026-107863 | 12 Oct 2026 | CVSS 5.3 | Codection Products Restricted Users for WooCommerceMissing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting… | |
| CVE-2026-107864 | 12 Oct 2026 | CVSS 6.5 | Igor Funa Ad InserterImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Igor Funa Ad Inserter ad-inserter allows Stored… | |
| CVE-2026-107865 | 12 Oct 2026 | CVSS 6.5 | Crocoblock JetMenuImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetMenu jet-menu allows Stored… | |
| CVE-2026-107866 | 12 Oct 2026 | CVSS 6.5 | Crocoblock JetElements For ElementorImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetElements For Elementor… | |
| CVE-2026-107869 | 12 Oct 2026 | CVSS 4.3 | WP Desk Flexible SubscriptionsMissing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-108168 | 12 Oct 2026 | CVSS 6.5 | DLX Plugins Custom Query BlocksImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DLX Plugins Custom Query Blocks… | |
| CVE-2026-108815 | 12 Oct 2026 | CVSS 3.5 | idcCMSA vulnerability has been found in idcCMS 1.70. Affected is an unknown function of the file admin/member_deal.php. The manipulation leads to cross… | |
| CVE-2023-25996 | 12 Oct 2026 | CVSS 6.5 | Pluggabl LLC. Booster Elite for WooCommerceInsertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce booster-elite-for-woocommerce allows… | |
| CVE-2026-107423 | 12 Oct 2026 | CVSS 4.3 | WP User ManagerMissing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-108811 | 12 Oct 2026 | CVSS 4.3 | WMCMSA weakness has been identified in WMCMS 4.446.1257. The affected element is an unknown function of the file /index.php. This manipulation of the… | |
| CVE-2026-108812 | 12 Oct 2026 | CVSS 6.5 | SEMCMSA security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file… | |
| CVE-2026-108813 | 12 Oct 2026 | CVSS 6.3 | SEMCMSA vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMS_Download.php. Performing a manipulation results… | |
| CVE-2026-108814 | 12 Oct 2026 | CVSS 6.3 | SEMCMSA flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMS_Banner.php. Executing a manipulation can lead to sql… | |
| CVE-2026-103356 | 12 Oct 2026 | CVSS 5.4 | VillaTheme TMDSMissing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-106605 | 12 Oct 2026 | CVSS 5.3 | WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerceImproper Validation of Specified Quantity in Input vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce… | |
| CVE-2026-107427 | 12 Oct 2026 | CVSS 6.5 | NOUS Ouvert Utile et Simple Event postAuthorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly… | |
| CVE-2026-107429 | 12 Oct 2026 | CVSS 4.3 | VideoWhisper.com Paid Videochat Turnkey SiteImproper Validation of Specified Quantity in Input vulnerability in VideoWhisper.com Paid Videochat Turnkey Site ppv-live-webcams allows Input Data… | |
| CVE-2026-107430 | 12 Oct 2026 | CVSS 5.4 | VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, CodexMissing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows… | |
| CVE-2026-107432 | 12 Oct 2026 | CVSS 5.4 | NOUS Ouvert Utile et Simple Event postMissing Authorization vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control… | |
| CVE-2026-108810 | 12 Oct 2026 | CVSS 5.3 | tsi-coop tsi-dpdp-cmsA security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2. Impacted is an unknown function of the component JSON Schema… | |
| CVE-2026-78357 | 12 Oct 2026 | CVSS 9.1 | OTRS GmbH (former OTRS AG) OTRSPreviously issued authentication tokens are not immediately invalidated when an OTRS agent or customer user account is deactivated or its password is… | |
| CVE-2026-78358 | 12 Oct 2026 | CVSS 4.3 | OTRS GmbH (former OTRS AG) OTRSSeveral administrative actions do not sufficiently validate whether a request was intentionally initiated by the authenticated user. In particular… | |
| CVE-2026-78359 | 12 Oct 2026 | CVSS 5.4 | OTRS GmbH (former OTRS AG) OTRSOTRS does not sufficiently enforce the uniqueness of customer user identities across multiple configured CustomerUser backends. When multiple… | |
| CVE-2026-93581 | 12 Oct 2026 | CVSS 6.1 | OTRS GmbH (former OTRS AG) OTRSUser-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by… | |
| CVE-2026-93582 | 12 Oct 2026 | CVSS 9.4 | OTRS GmbH (former OTRS AG) OTRSThe HTTP Basic Authentication modules in ((OTRS)) Community Edition 6 and prior accept the authenticated username from either the REMOTE_USER or… | |
| CVE-2026-108809 | 12 Oct 2026 | CVSS 3.5 | Eleveo Call Recording SoftwareA vulnerability was identified in Eleveo Call Recording Software up to 10.3.0. This issue affects some unknown processing of the file… | |
| CVE-2026-109082 | 12 Oct 2026 | CVSS 6.8 | Red Hat Build of KeycloakA flaw was found in the Client-Initiated Backchannel Authentication CIBA implementation within the keycloak-services component of Keycloak. This… | |
| CVE-2026-48211 | 12 Oct 2026 | CVSS 5.4 | OTRS GmbH (former OTRS AG) OTRSAn authenticated administrator can be induced to delete administrative Import/Export templates through a Cross-Site Request Forgery (CSRF) attack… | |
| CVE-2026-48212 | 12 Oct 2026 | CVSS 4.8 | OTRS GmbH (former OTRS AG) OTRSAn OTRS administrator can enter arbitrary JavaScript into the content of an OTRS Custom Page, which is stored by the application and subsequently… | |
| CVE-2026-78355 | 12 Oct 2026 | CVSS 8.7 | OTRS GmbH (former OTRS AG) OTRSA path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the… | |
| CVE-2026-78356 | 12 Oct 2026 | CVSS 5.3 | OTRS GmbH (former OTRS AG) OTRSThe OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal… | |
| CVE-2026-108807 | 12 Oct 2026 | CVSS 7.3 | krupalshah EmployeeRecruitmentSystemA vulnerability was found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects the function… | |
| CVE-2026-108808 | 12 Oct 2026 | CVSS 2.6 | Eleveo Call Recording SoftwareA vulnerability was determined in Eleveo Call Recording Software up to 10.3.0. This vulnerability affects unknown code of the file… | |
| CVE-2026-109080 | 12 Oct 2026 | CVSS 6.5 | Flock Night ShiftSQL injection in the bulk license plate search of the Flock Night Shift hosted service allowed an authenticated user to read other customer… | |
| CVE-2026-84166 | 12 Oct 2026 | CVSS 4.3 | Unknown Hotel BookingThe Hotel Booking WordPress plugin through 3.8 does not implement CSRF protection on its administrative booking order management, allowing attackers… | |
| CVE-2026-84167 | 12 Oct 2026 | CVSS 4.3 | Unknown Hotel BookingThe Hotel Booking WordPress plugin through 3.8 does not verify that a booking record belongs to the user requesting it, allowing any authenticated… | |
| CVE-2026-98385 | 12 Oct 2026 | Not scored yet | LinuxIn the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple sched_cache_group from mm to fix UAF Currently the sched… | |
| CVE-2026-108803 | 12 Oct 2026 | CVSS 6.3 | y_project RuoYiA security vulnerability has been detected in y_project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of… | |
| CVE-2026-108804 | 12 Oct 2026 | CVSS 10.0 | TRENDnet TEW-751DRA vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file… | |
| CVE-2026-108805 | 12 Oct 2026 | CVSS 7.3 | krupalshah EmployeeRecruitmentSystemA flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the… | |
| CVE-2026-108806 | 12 Oct 2026 | CVSS 7.3 | krupalshah EmployeeRecruitmentSystemA vulnerability has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the… | |
| CVE-2025-15703 | 12 Oct 2026 | CVSS 3.5 | Unknown HireZootThe HireZoot WordPress plugin before 4.0.0 does not sanitise and escape one of its job specification settings before it is reflected back into an… | |
| CVE-2026-107193 | 12 Oct 2026 | CVSS 6.5 | Red Hat Satellite 6A flaw has been found in **permission filters** in the **foreman** package. The API loads a filter by its identifier and does not apply the search… | |
| CVE-2026-107203 | 12 Oct 2026 | CVSS 5.4 | Red Hat Satellite 6An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package. The domain and subnet interface API… | |
| CVE-2026-107791 | 12 Oct 2026 | CVSS 6.5 | Unknown WP Comment CleanerThe WP Comment Cleaner WordPress plugin before 7.2 does not perform a capability check or validate a nonce on one of its bulk comment-deletion… | |
| CVE-2026-108802 | 12 Oct 2026 | CVSS 3.5 | y_project RuoYiA weakness has been identified in y_project RuoYi up to 4.8.3. This affects the function renderDrawer of the file /system/dict/data/add of the… | |
| CVE-2026-87690 | 12 Oct 2026 | CVSS 8.8 | Rapid7 Metasploit FrameworkThe Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22). The… | |
| CVE-2026-21133 | 12 Oct 2026 | CVSS 5.1 | Samsung Mobile Samsung FlowPath traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data. | |
| CVE-2026-21134 | 12 Oct 2026 | CVSS 6.1 | Samsung Mobile Samsung FlowImproper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information. |
Page 88 of 168