Menu

Star on GitHub · 3.3k

2026

57,547 vulnerabilities published in 2026.

Results

57,547· Page 586/1151
6.4
CVE-2026-3722

The Auto Image Attributes From Filename With Bulk Updater (Add Alt Text, Image Title For Image SEO) plugin for WordPress

6.3
CVE-2026-10568

A vulnerability was detected in itsourcecode Fees Management System 1.0. Affected is an unknown function of the file /ma

3.5
CVE-2026-10567

A security vulnerability has been detected in 1Panel-dev CordysCRM up to 1.4.1. This impacts the function Save of the fi

5.3
CVE-2026-10566

A weakness has been identified in FoundationAgents MetaGPT up to 0.8.2. This affects the function Message.check_instruct

3.1
CVE-2026-10565

A security flaw has been discovered in Open5GS up to 2.7.6. The impacted element is the function gmm_state_security_mode

6.1
CVE-2026-10510

Cross-Site Scripting (XSS) in GeniexWebView component in Transsion AI Assistant Lifestyle application (com.transsion.aia

4.4
CVE-2026-10100

The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fi

6.3
CVE-2026-10559

A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is an unknown function of the

6.3
CVE-2026-10558

A vulnerability was detected in SourceCodester Pizzafy Ecommerce System 1.0. Impacted is an unknown function of the file

6.3
CVE-2026-10550

A weakness has been identified in elunez eladmin up to 2.7. This vulnerability affects unknown code of the file App.java

5.3
CVE-2026-10548

A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.23. This affects the function _sync_anthro

2.4
CVE-2026-10529

A weakness has been identified in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is an unkn

4.3
CVE-2026-9050

The Slider Revolution plugin for WordPress in versions 6.0.0-6.7.55 and 7.0.0-7.0.14 is vulnerable to unauthorized modif

4.3
CVE-2026-9048

The Slider Revolution plugin for WordPress is vulnerable to Sensitive Information Exposure in versions 7.0.0 - 7.0.14, v

3.3
CVE-2026-10528

A security flaw has been discovered in Orthanc DICOM Server up to 1.12.11. This issue affects the function DcmItem::read

2.4
CVE-2026-10514

A vulnerability has been found in 1Panel-dev CordysCRM up to 1.6.2. This affects an unknown function of the file backend

6.3
CVE-2026-10302

A flaw has been found in itsourcecode Fees Management System 1.0. The impacted element is an unknown function of the fil

4.3
CVE-2026-10301

A vulnerability was detected in itsourcecode Fees Management System 1.0. The affected element is an unknown function of

4.3
CVE-2026-28511

eLabFTW is an open source electronic lab notebook. Prior to version 5.4.2, in certain cases, an authenticated user perfo

9.8
CVE-2026-25879

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0, SQLChatAgent ex

8.8
CVE-2026-25277

Memory corruption while using Strongbox due to buffer overflow.

8.8
CVE-2026-25276

Memory corruption while using Strongbox due to missing bounds check.

7.8
CVE-2026-25260

Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications.

7.8
CVE-2026-25259

Memory corruption while processing multiple IOCTL command for escape operations.

7.8
CVE-2026-25258

Memory corruption while processing IOCTL calls for escape operations.

7.6
CVE-2026-24782

Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Sec

3.7
CVE-2026-24761

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerabil

4.3
CVE-2026-24756

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerabil

5.4
CVE-2026-24755

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerabil

5.4
CVE-2026-24754

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data F

6.5
CVE-2026-24753

Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerabil

8.2
CVE-2026-24752

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Dat

7.2
CVE-2026-24092

Memory Corruption when processing fastboot commands to set display mode.

7.2
CVE-2026-24091

Memory corruption while processing fastboot commands with improperly formatted input.

7.1
CVE-2026-24090

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

7.2
CVE-2026-24089

Memory corruption while processing fastboot commands with invalid input.

8.2
CVE-2026-24088

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bo

7.2
CVE-2026-24087

Memory corruption while processing fastboot OEM commands.

7.2
CVE-2026-24085

Memory Corruption when processing display command line information due to improper initialization of a variable.

3.7
CVE-2026-10300

A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sg

3.8
CVE-2026-10299

A weakness has been identified in code-projects Online Hospital Management System 1.0. This issue affects some unknown p

3.3
CVE-2026-10298

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper

6.3
CVE-2026-10297

A vulnerability was identified in itsourcecode Fees Management System 1.0. This affects an unknown part of the file /man

6.3
CVE-2026-10296

A vulnerability was determined in itsourcecode Fees Management System 1.0. Affected by this issue is some unknown functi

3.3
CVE-2026-10295

A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_

6.7
CVE-2025-59614

Memory Corruption when sending random number generator command with insufficient output buffer size.

6.7
CVE-2025-59613

Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.

6.7
CVE-2025-59612

Memory corruption in windows drivers while sending incorrect trusted application request

6.7
CVE-2025-59611

Memory corruption in diagnostic services due to absence of input validation

6.4
CVE-2025-59610

Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-spa

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.