2026

Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap t

Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first

Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report ex

A flaw was found in claircore's RPM package scanner. Crafted RPM header data in a container layer can cause an unchecked

The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v13.0, wher

Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipu

Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerabilit

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Tr

The Signed Video Framework contained a  buffer overflow issue which could lead the application using this framework to

The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to priv

The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after

An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation. This vulnerabil

The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to priv

A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the graf

Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst

The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of

The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of

Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to u

The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.

The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer der

The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated re

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site

On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point ABI" choice, which defaults to

The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetoo

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a mali

A flaw was found in wildfly-core. A remote user authenticated as an administrative user can inject a malformed payload i

Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated rem

Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker co

SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. A

SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations. D

SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under spec

SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthent

SAP Approuter does not consistently handle certain error conditions. An attacker with low privileges could exploit this

A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data i

SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on cer

SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted applicatio

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL

Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated user

SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects usi

SAP Approuter does not enforce sufficient flow control in certain functionality. An attacker with low privileges could s

SAP Approuter does not correctly validate client certificates in certain callback flows. An attacker with low privileges

SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a speci

SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component. This coul

SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of th

SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain applicati

SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attack