2026

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior t

A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges loca

A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Softwar

Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint a

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.7.9, macOS

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions throu

Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass.

VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access

A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenti

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent pollin

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privile

An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote at

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in p

IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER toke

An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling function

Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the S

A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A

Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a n

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate p

Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker

Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1 - The Joomla extension B

In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation p

ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Dir

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Den

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object

A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulti

A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vul

A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, r

LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provide

SimpleHelp versions 5.5.15 and prior and 6.0 pre-release versions contain an authentication bypass vulnerability in the

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Updates Environment Mana

In Splunk Enterprise 10.2 versions below 10.2.4 and 10 versions below 10.0.7, an unauthenticated user could create or tr

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet F

An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote

Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra

A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchange allows

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LA

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated us

A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, f

SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication