2026

openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code ins

Xiiaozet LK100W is vulnerable to OS command injection through its web-based management interface. An authenticated atta

Ebyte gateway product's vendor configuration utility does not require authentication before allowing certain disruptive

The affected Ebyte device relies on client-managed authentication tokens without sufficient server-side validation. An

The affected Ebyte device does not restrict repeated authentication attempts through rate limiting or account lockout m

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality. The exportFile HT

The Ebyte device does not adequately verify the origin or authenticity of requests submitted to the web management inte

Certain configuration endpoints may lack proper server-side authorization checks, allowing unauthorized users to access

go-wind-cms (GoWind) before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer() function in app/admin/s

A path traversal vulnerability exists in the built-in preview/development web server of Lektor <3.3.14 on Windows. An at

A SQL injection vulnerability was found in YzmCMS 7.5. The issue occurs in the get_arrchildid() function within applicat

The storage endpoint /storage/upload of cjbi admin3 v3.0.0 are missing permission checks. /Any logged-in user can upload

A cleartext transmission of sensitive information vulnerability exists in certain Ebyte gateway products. The web manag

Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. I

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. T

Improper access control to the Synergis Softwire installation folder. This vulnerability affects Streamvault all-in-one

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows atta

An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attacke

An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denia

An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attacke

PayRange API is missing proper authorization on management endpoints, which allows verbose details of every device on th

ASE2000 2.35 through 2.37 is vulnerable to an improper certificate validation vulnerability, which may allow an attacker

Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 thr

Dolibarr 9.0.0 through 23.0.4 saves inbound email attachments under the name supplied in the message's MIME headers with

Dolibarr before 24.0.0 contains a SQL injection in its CSV and XLSX import wizard. The wizard reads its update keys with

Improper neutralization of delimiters in connection-URL construction allows connection-option injection in the MongoDB C

The MongoDB client library for PHP does not sufficiently sanitize special elements in application-supplied namespace ide

A weakness in the MongoDB C++ Driver's handling of caller-supplied namespace identifiers allows special characters embed

Trilium is an open-source hierarchical note-taking application. In versions up to and including 0.103.0, the public shar

Unitree G1 EDU firmware through 1.5.2 contains multiple chained vulnerabilities in the BLE GATT server and WiFi provisio

Unitree G1 EDU firmware through 1.5.2 contains an unauthenticated remote code execution vulnerability that allows networ

Grafana Alloy’s prometheus.operator.servicemonitors component allows a user who can create or modify ServiceMonitor reso

When an IntegrationFlow uses .fluxTransform() with an asynchronous/reordering fluxFunction that emits raw payloads, conc

Spring Authorization Server's default consent page renders user-controlled values without HTML entity encoding. When usi

An operator who calls JdbcMessageStore.addAllowedPatterns(...) to restrict deserialization receives no protection at all

There is no allow list for property keys when Spring Cloud Commons writable /actuator/env is enabled. Spring Cloud Commo

Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a

Silverstripe UserForms provides a visual form builder for the Silverstripe CMS. From 6.0.0 until 6.4.9, 7.0.7, and 7.1.1

Silverstripe Advanced Workflow is a highly configurable step-based workflow module. Prior to 6.4.5, 7.1.3, and 7.2.1, an

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-downlo

An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via suppl

SpeechBrain before 1.1.1 contains an arbitrary code execution vulnerability that allows attackers to execute arbitrary c

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloa

NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by us

nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of serv