2026

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and below, within the Alarms

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_b

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support c

Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Con

libjpeg-turbo 3.2.0 contains an integer division-by-zero vulnerability in the PNG loader. When processing a valid indexe

DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' param

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, au

An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.c

Fleet is an open-source device management platform built on osquery. In versions prior to 4.87.0, the target search endp

Fleet is an open-source device management platform built on osquery. In versions prior to 4.85.0, the global policy read

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration.

A Predictable Resource Name vulnerability in BigQuery Import Staging in Google Cloud Vertex AI Search for Commerce versi

An arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North AI v1.1.5 allows attac

Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.

Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This

Incorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user info via a crafted req

Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communicatio

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote atta

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, th

An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distr

Missing Authentication for Critical Function vulnerability in Spring Spring Cloud Config allows Webhook requests to Spri

The base directory (spring.cloud.config.server.svn.basedir) used by the Spring Cloud Config Server to clone SVN reposito

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, th

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, th

Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows

CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.

Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, pass

Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend d

Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. From 1.2.10 through 1.

Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Prior to 1.2.13, custo

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the inf

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can extract all the inf

An issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges can execute arbitrary s

Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configu

Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises th

Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp

Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller

NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service d

IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The

Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in ma

OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLogin

ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not

one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a spe

ILIAS deserialises stored session data for an unauthenticated caller. The Shibboleth back-channel endpoint at components

bestzip builds the argument list for the system zip utility without separating options from operands. The destination ar

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/s

DebugKit provides a debugging toolbar for CakePHP applications. Prior to 4.10.3 and 5.2.4, the DebugKit MailPreview feat

SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 3.1.4, the S