boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Tuesday, July 14, 2026 · all times UTC← 2026-07-13 · archive · 2026-07-15 →

Security Box Score — July 14, 2026 — page 2

Edition of July 14, 2026, continued — page 2 of 3. Back to page 1 · page 3

Results (continued, ranked) — ranks 401–1000 of 1007
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-541247.838.3MicrosoftWindows 10 Version 21H2CWE-190Windows Terminal Remote Code Execution Vulnerability
CVE-2026-541317.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-549937.838.3MicrosoftWindows 10 Version 1809CWE-122Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2026-550177.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550187.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550227.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-843Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550247.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-843Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550257.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-843Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550297.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550317.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550367.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-126Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550377.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550397.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-191Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550417.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550437.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-550447.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550487.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550497.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550537.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-550567.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-550587.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551207.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-551237.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-551297.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-551317.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551337.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft OneNote Remote Code Execution Vulnerability
CVE-2026-551367.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551377.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-551407.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-551417.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-558997.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-559477.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-559487.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-559497.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-561567.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-586097.838.3MicrosoftWindows 10 Version 1607CWE-125Windows Graphics Component Remote Code Execution Vulnerability
CVE-2026-586107.838.3MicrosoftWindows 10 Version 1607CWE-122Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2026-586187.838.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-549886.138.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-157002.038.0n/aDedeCMSCWE-22DedeCMS Album Publishing Feature zip.class.php ExtractFile path traversal
CVE-2026-450736.337.7symfonysymfonyCWE-89Symfony: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix
CVE-2026-504163.337.7MicrosoftWindows 11 Version 24H2CWE-200Win32k Information Disclosure Vulnerability
CVE-2026-504193.337.7MicrosoftWindows 10 Version 1607CWE-200Windows Kernel Information Disclosure Vulnerability
CVE-2026-504627.837.7MicrosoftWindows 10 Version 1607CWE-73Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab…
CVE-2026-156982.137.7kofrasamingoCWE-94kofrasa mingo Update API updateMany prototype pollution
CVE-2026-157022.137.7n/atamaguiCWE-94tamagui config.ts updateConfig prototype pollution
CVE-2026-480006.137.7AdobeAdobe CommerceCWE-601Adobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)
CVE-2026-623934.337.5Apache Software FoundationApache KylinCWE-280Apache Kylin: Improper authorization in job information retrieval
CVE-2026-157768.837.3GoogleChromeCWE-843Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 a…
CVE-2026-550265.537.1MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Office Information Disclosure Vulnerability
CVE-2026-145048.237.0SonatypeNexus Repository 3CWE-862Nexus Repository 3 - Authorization Bypass in Component Upload API
CVE-2026-157532.137.0zhinianbokexianyu-auto-replyCWE-650zhinianboke xianyu-auto-reply review approve trusting http permission methods…
CVE-2026-550458.436.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Remote Code Execution Vulnerability
CVE-2026-156972.137.0svgdotjssvg.jsCWE-94svgdotjs svg.js npm Package API EventTarget.on prototype pollution
CVE-2026-156992.137.0spencermountaincompromiseCWE-94spencermountain compromise Public Root API extend.js nlp.extend prototype pol…
CVE-2026-591978.236.9python-pillowPillowCWE-190Pillow: Heap out-of-bounds write in Pillow `ImageFilter.RankFilter` via integ…
CVE-2026-457546.936.8symfonysymfonyCWE-287Symfony: Mailjet Mailer Webhook Parser Never Verifies the Configured Secret —…
CVE-2026-481255.336.8faisalmanua-parser-jsCWE-400UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withCl…
CVE-2026-491805.536.7MicrosoftWindows 10 Version 1607CWE-59Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
CVE-2026-491775.536.7MicrosoftWindows 10 Version 1607CWE-125Windows TCP/IP Information Disclosure Vulnerability
CVE-2026-154168.936.6argoprojargo-helmCWE-306Argo-cd: argo cd unauthenticated remote code execution in repo-server via gen…
CVE-2026-153898.736.5Sesame TimeSesame TimeCWE-639Inadequate access control in Sesame Time session management
CVE-2026-6264310.036.5RoundcubeWebmailCWE-918In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Casca…
CVE-2024-77087.536.5Eclipse FoundationEclipse JettyCWE-400For requests that have a body, but reading the body may end up in reading 0 b…
CVE-2026-491686.836.3MicrosoftWindows 10 Version 1607CWE-190Storage Spaces Direct Elevation of Privilege Vulnerability
CVE-2026-502986.836.3MicrosoftWindows 10 Version 1607CWE-190Windows Spaceport.sys Elevation of Privilege Vulnerability
CVE-2026-502996.836.3MicrosoftWindows 10 Version 1607CWE-190Windows Storage Spaces Direct Remote Code Execution Vulnerability
CVE-2026-504926.836.3MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-506686.836.3MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-541326.836.3MicrosoftWindows 10 Version 1607CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-113906.436.3blazethemesNews Kit Addons For ElementorCWE-79News Kit Addons For Elementor <= 1.4.6 - Authenticated (Contributor+) Stored …
CVE-2026-156901.336.3n/aopen62541CWE-404open62541 Shared Client ua_client_connect.c responseReadNamespacesArray null …
CVE-2026-474816.536.2NVIDIATriton Inference ServerCWE-288NVIDIA Triton Inference Server for Linux contains a vulnerability where an at…
CVE-2026-615206.336.2SimpleMachinesSMFCWE-918Simple Machines Forum SSRF via image proxy
CVE-2026-447619.136.0SAP_SESAP Commerce CloudCWE-1392Insecure Sample Credentials in SAP Commerce Cloud
CVE-2026-157117.535.6Red HatRed Hat Enterprise Linux 10CWE-770Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service…
CVE-2026-156755.535.7code-projectsOnline Job PortalCWE-74code-projects Online Job Portal EditUser.php sql injection
CVE-2026-156765.535.7code-projectsOnline Job PortalCWE-74code-projects Online Job Portal DeleteUser.php sql injection
CVE-2026-157035.535.7SourceCodesterSimple and Nice Shopping Cart ScriptCWE-74SourceCodester Simple and Nice Shopping Cart Script userproductdeletequery.ph…
CVE-2026-156192.135.7mosaxivclawletCWE-918mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery
CVE-2026-450758.335.5symfonysymfonyCWE-863Symfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[Is…
CVE-2026-100516.935.5Eclipse FoundationEclipse JettyCWE-200In Eclipse Jetty, a first HTTP/1.1 request with trailers causes the server to…
CVE-2026-149026.135.5ivantiXtractionCWE-601An open redirect in Ivanti Xtraction before version 2026.2.1 allows a remote …
CVE-2025-116989.235.4Rockwell AutomationCompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery ImageCWE-120CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer …
CVE-2025-120119.235.4Rockwell AutomationCompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570CWE-120CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer …
CVE-2025-120129.235.4Rockwell AutomationCompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570CWE-120CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer …
CVE-2026-85908.735.4SpotfireSpotfire Enterprise—Spotfire OAuth2 PKCE Bypass for public clients
CVE-2026-91408.735.4Rockwell Automation1718-AENTR/1719-AENTRCWE-7701718-AENTR/1719-AENTR - Denial of Service
CVE-2026-105738.735.4Rockwell Automation1734 POINT I/OCWE-7701734 POINT I/OTM - Denial of Service via Malformed Inputs on CIP Object
CVE-2026-126598.735.4Rockwell AutomationThe FLEX 5000® EtherNet/IP AdapterCWE-415Rockwell Automation Flex 5000® Adapter - Denial of Service
CVE-2026-156262.135.2nextlevelbuilderGoClawCWE-22nextlevelbuilder GoClaw ACP ToolBridge Workspace tool_bridge.go writeFile pat…
CVE-2026-156292.135.2louisho5picobotCWE-59louisho5 picobot Workspace filesystem.go GetSkill link following
CVE-2026-156272.134.7nextlevelbuilderGoClawCWE-200nextlevelbuilder GoClaw tool.go handleNavigate information disclosure
CVE-2026-157678.834.6GoogleChromeCWE-122Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.787…
CVE-2026-488067.134.6twigphpTwigCWE-693Twig: Sandbox `__toString()` policy bypass via dynamic mapping keys
CVE-2026-504285.534.0MicrosoftWindows 11 version 26H1CWE-125Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclo…
CVE-2026-549998.833.8MicrosoftWindows 10 Version 1607CWE-362Windows TCP/IP Remote Code Execution Vulnerability
CVE-2026-474238.233.8cure53DOMPurifyCWE-79DOMPurify XSS via `selectedcontent` re-clone
CVE-2026-503777.833.7MicrosoftWindows 10 Version 1607CWE-125Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-479994.833.7AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-483279.033.7AdobeColdFusion 2025CWE-863ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-504205.533.6MicrosoftWindows 11 Version 24H2CWE-125HTTP.sys Information Disclosure Vulnerability
CVE-2026-585477.833.5MicrosoftWindows 10 Version 1809CWE-122Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vul…
CVE-2026-488086.033.6twigphpTwigCWE-693Twig: Sandbox property allowlist bypass via the `column` filter under `Source…
CVE-2026-1057710.033.4Rockwell Auotmation1715 EtherNet/IP Communications ModuleCWE-306Rockwell Automation 1715 Redundant IO – Access Control Vulnerability
CVE-2026-106729.133.4zephyrprojectzephyrCWE-125Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Pac…
CVE-2026-494586.133.3cure53DOMPurifyCWE-79DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact …
CVE-2026-404225.533.3MicrosoftWindows 10 Version 1607CWE-908Windows File Explorer Information Disclosure Vulnerability
CVE-2026-498015.533.3MicrosoftWindows 10 Version 1607CWE-908Windows SMB Information Disclosure Vulnerability
CVE-2026-503005.533.3MicrosoftWindows 10 Version 1607CWE-191Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-503415.533.3MicrosoftWindows 10 Version 1607CWE-126Windows NTFS Information Disclosure Vulnerability
CVE-2026-503815.533.3MicrosoftWindows 10 Version 21H2CWE-843Composite Image File System driver (cimfs.sys) Information Disclosure Vulnera…
CVE-2026-503835.533.3MicrosoftWindows 10 Version 1809CWE-126Windows Print Spooler Information Disclosure Vulnerability
CVE-2026-504015.533.3MicrosoftWindows 10 Version 1809CWE-125Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVE-2026-504375.533.3MicrosoftWindows 10 Version 1607CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-504555.533.3MicrosoftWindows 10 Version 1607CWE-908Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability
CVE-2026-506905.533.3MicrosoftWindows 10 Version 1607CWE-908Windows SMB Information Disclosure Vulnerability
CVE-2026-549975.533.3MicrosoftWindows 10 Version 1607CWE-908Windows SMB Information Disclosure Vulnerability
CVE-2026-586145.533.3MicrosoftWindows 10 Version 1607CWE-125Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-601186.933.1HiEventsDevHi.EventsCWE-862Hi.Events < 1.11.0 Hidden Ticket Enumeration via Order Creation Endpoint
CVE-2026-477327.133.0twigphpTwigCWE-863Twig Sandbox: multiple `__toString()` policy bypasses via unguarded string co…
CVE-2026-124784.832.9Red HatRed Hat Enterprise Linux 10CWE-125Libsoup: incomplete fix for cve-2026-0716: out-of-bounds read in libsoup webs…
CVE-2026-483349.332.9AdobeIllustrator Desktop 2026CWE-20Illustrator | Improper Input Validation (CWE-20)
CVE-2026-506575.532.9MicrosoftMicrosoft Defender for Endpoint for MacCWE-359Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
CVE-2026-156202.132.6mosaxivclawletCWE-918mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery
CVE-2026-156682.132.6louisho5picobotCWE-918louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery
CVE-2026-479958.132.5AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-157502.132.5mastergo-designmastergo-magic-mcpCWE-918mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.t…
CVE-2026-598358.632.4FortinetFortiSandboxCWE-668A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox…
CVE-2026-506977.832.3MicrosoftWindows 10 Version 1607CWE-200Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-506844.832.4MicrosoftWindows 10 Version 1607CWE-79Active Directory Federation Server Spoofing Vulnerability
CVE-2026-466397.132.3twigphpTwigCWE-693Twig: Sandbox property and method bypass via object-destructuring assignment
CVE-2026-592048.732.2python-pillowPillowCWE-770Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used…
CVE-2026-561898.432.1MicrosoftWindows 10 Version 1607CWE-122Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVE-2026-136996.532.1Eclipse FoundationEclipse KUKSA - DatabrokerCWE-20Databroker 0.6.1 PublishValue missing data_point panic
CVE-2026-156439.231.8AWSawslabs.healthlake-mcp-serverCWE-918AWS HealthLake MCP Server SSRF via Pagination URL
CVE-2026-242338.431.8NVIDIATensorRT-LLMCWE-502NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpi…
CVE-2026-450706.331.8symfonysymfonyCWE-93Symfony: Email Header Injection via Non-Token Characters in Mime Parameter Names
CVE-2026-482635.431.8AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-483555.431.8AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-483715.431.8AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-150439.831.5HMBRANDDBI::SQL::NanoCWE-480DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and …
CVE-2026-600829.131.5HMBRANDDBICWE-125DBI versions before 1.651 for Perl do not enforce statement handle consistenc…
CVE-2026-591997.531.3python-pillowPillowCWE-787Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed …
CVE-2026-592007.531.3python-pillowPillowCWE-400Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
CVE-2026-592057.531.3python-pillowPillowCWE-787Pillow: Controlled heap out-of-bounds write in `ImageCmsTransform.apply()` vi…
CVE-2026-235736.131.2FortinetFortiOSCWE-79An Improper Neutralization of Input During Web Page Generation ('Cross-site S…
CVE-2025-438924.330.9FortinetFortiOSCWE-126A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, For…
CVE-2026-157184.330.8MozillaFirefoxCWE-763Invalid pointer in the JavaScript: WebAssembly component
CVE-2026-497917.830.7MicrosoftWindows 10 Version 1607CWE-59Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulne…
CVE-2026-157368.330.5SnowflakeSnowflake SQLAlchemyCWE-73Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowfla…
CVE-2026-586137.830.4MicrosoftWindows 10 Version 1809CWE-416Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-584786.330.3Dan-in-CASIPCWE-918Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL
CVE-2026-504755.530.3MicrosoftWindows 10 Version 1607CWE-126Windows Kernel Information Disclosure Vulnerability
CVE-2026-550117.830.1MicrosoftMicrosoft Malware Protection EngineCWE-191Microsoft Defender Remote Code Execution Vulnerability
CVE-2026-550127.830.1MicrosoftMicrosoft Malware Protection EngineCWE-190Microsoft Defender Remote Code Execution Vulnerability
CVE-2026-156282.130.2zhayujiechatgpt-on-wechat CowAgentCWE-918zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to…
CVE-2025-628264.329.9FortinetFortiPAMCWE-113An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response …
CVE-2026-590839.129.7Apache Software FoundationApache TomcatCWE-177Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security cont…
CVE-2026-504388.829.7MicrosoftMicrosoft PC ManagerCWE-59Microsoft PC Manager Elevation of Privilege Vulnerability
CVE-2026-504547.829.7MicrosoftWindows 11 Version 24H2CWE-23Windows User Interface Core Elevation of Privilege Vulnerability
CVE-2026-504697.829.7MicrosoftWindows 10 Version 1809CWE-59Windows Projected File System Elevation of Privilege Vulnerability
CVE-2026-586367.829.7MicrosoftMicrosoft PC ManagerCWE-59Microsoft PC Manager Elevation of Privilege Vulnerability
CVE-2026-570853.329.7MicrosoftWindows 10 Version 1607CWE-125Windows Print Spooler Information Disclosure Vulnerability
CVE-2026-450639.129.3symfonysymfonyCWE-290Symfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator
CVE-2026-488077.129.4twigphpTwigCWE-693Twig: Sandbox `__toString()` policy bypass via `Traversable` in `join` and `r…
CVE-2026-488018.729.3markdown-itlinkify-itCWE-1333linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop
CVE-2026-156242.129.3nextlevelbuilderGoClawCWE-918nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDown…
CVE-2026-545728.829.1rclonercloneCWE-59rclone: Unvalidated symlink target in local `--links` — arbitrary file write …
CVE-2026-498537.729.2tornadowebtornadoCWE-200Tornado: Authorization header forwarded across cross-origin redirects in Simp…
CVE-2026-600817.529.2HMBRANDDBI::ProfileDataCWE-770DBI::ProfileData versions before 1.651 for Perl do not limit the path index
CVE-2026-494596.129.2cure53DOMPurifyCWE-79DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, al…
CVE-2026-497989.329.1MicrosoftWindows 10 Version 1607CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-541228.429.1MicrosoftWindows 10 Version 1607CWE-122Windows GDI+ Remote Code Execution Vulnerability
CVE-2026-541288.429.1MicrosoftWindows 10 Version 1607CWE-416Windows DHCP Client Remote Code Execution Vulnerability
CVE-2026-146464.929.1SonatypeNexus Repository 3CWE-918Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect
CVE-2026-504987.829.0MicrosoftWindows 10 Version 1607CWE-125Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg…
CVE-2026-505017.829.0MicrosoftWindows 11 Version 24H2CWE-121Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-585307.829.0MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-585427.829.0MicrosoftWindows 11 Version 24H2CWE-122Windows Media Remote Code Execution Vulnerability
CVE-2026-499816.028.8twigphpTwigCWE-693Twig: Sandbox filter, tag and function allow-list bypass when sandbox state c…
CVE-2026-447528.228.7SAP_SESAP NetWeaver Application Server Java(Configuration Wizard)CWE-79Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server …
CVE-2026-503488.128.7MicrosoftWindows 10 Version 1809CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504528.128.7MicrosoftWindows 10 Version 1809CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-497897.828.6MicrosoftWindows 10 Version 1607CWE-121Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-497907.828.6MicrosoftWindows 10 Version 1607CWE-191Windows Universal Disk Format File System Driver (UDFS) Elevation of Privileg…
CVE-2026-504827.828.6MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-505107.828.6MicrosoftGitHub Copilot Plugin for JetBrains IDEsCWE-641GitHub Copilot Remote Code Execution Vulnerability
CVE-2026-586407.828.6MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-482535.428.6AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482545.428.6AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482555.428.6AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482575.428.6AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482605.428.6AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482615.428.6AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-482625.428.6AdobeAdobe Experience Manager as a Cloud ServiceCWE-79Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
CVE-2026-93414.328.0kodezenAcademy LMSCWE-639Academy LMS <= 3.8.0 - Authenticated (Subscriber+) Insecure Direct Object Ref…
CVE-2026-505208.427.8MicrosoftVisual Studio CodeCWE-77Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-491677.827.6MicrosoftWindows 10 Version 1809CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-503127.827.6MicrosoftWindows 10 Version 1607CWE-416Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab…
CVE-2026-585455.527.6MicrosoftWindows 10 Version 1607CWE-284Windows Kernel Security Feature Bypass Vulnerability
CVE-2026-598847.527.5pyasn1pyasn1CWE-400pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
CVE-2026-474727.827.4NVIDIATensorRT-LLMCWE-502NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communicati…
CVE-2026-586475.427.4MicrosoftPower BI Report ServerCWE-79Microsoft PowerBI Report Server Spoofing Vulnerability
CVE-2026-487845.127.4symfonysymfonyCWE-172Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or…
CVE-2026-450652.327.4symfonysymfonyCWE-185Symfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternati…
CVE-2026-156782.027.4code-projectsOnline Job PortalCWE-79code-projects Online Job Portal DetailJob.php cross site scripting
CVE-2026-503746.827.3MicrosoftWindows 10 Version 1809CWE-416Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-157666.527.2GoogleChromeCWE-457Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a …
CVE-2026-157706.527.2GoogleChromeCWE-457Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.125 allowed a re…
CVE-2026-598896.527.1FasterXMLjackson-databindCWE-863jackson-databind: @JsonView ypassed for @JsonUnwrapped container properties o…
CVE-2026-447533.727.2SAP_SESAP HANA Extended Application Services classic model (User Self Service)CWE-204Information Disclosure vulnerability in SAP HANA Extended Application Service…
CVE-2026-157739.627.1GoogleChromeCWE-416Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 al…
CVE-2026-487615.327.0symfonysymfonyCWE-79Symfony: HtmlSanitizer UrlAttributeSanitizer Misses URL Attributes on <object…
CVE-2026-550006.426.4MicrosoftWindows 11 Version 24H2CWE-416Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-157195.426.3MozillaFirefox—Site isolation issue in the DOM: Navigation component
CVE-2026-506807.826.3MicrosoftWindows 10 Version 1809CWE-122Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-491657.126.2MicrosoftWindows 10 Version 1607CWE-908Microsoft Windows App Store Information Disclosure Vulnerability
CVE-2026-487605.326.2symfonysymfonyCWE-451Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded …
CVE-2026-498545.326.2tornadowebtornadoCWE-126Tornado: Out-of-bounds memory access in C extension
CVE-2026-450642.326.2symfonysymfonyCWE-451Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters →…
CVE-2026-450662.326.2symfonysymfonyCWE-184Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URL-Pa…
CVE-2026-457532.126.2symfonysymfonyCWE-79Symfony: HtmlSanitizer UrlAttributeSanitizer Omits action/formaction/poster/c…
CVE-2026-479717.826.2AdobeAdobe Media EncoderCWE-121Media Encoder | Stack-based Buffer Overflow (CWE-121)
CVE-2026-482697.826.2AdobePremiereCWE-122Premiere Pro | Heap-based Buffer Overflow (CWE-122)
CVE-2026-483397.826.2AdobeAdobe BridgeCWE-122Bridge | Heap-based Buffer Overflow (CWE-122)
CVE-2026-491847.826.1MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-549927.826.1MicrosoftWindows 10 Version 1607CWE-122Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
CVE-2026-453639.125.9jwtruby-jwtCWE-287`jwt` (Ruby gem) - empty-key HMAC bypass
CVE-2026-598857.525.9pyasn1pyasn1CWE-400pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing…
CVE-2026-598867.525.9pyasn1pyasn1CWE-400pyasn1: Uncontrolled resource consumption when converting decoded REAL values
CVE-2026-119177.225.9Rockwell AutomationFactoryTalk ThinManagerCWE-22ThinManager® - Path Traversal via API
CVE-2026-503026.525.8MicrosoftWindows 10 Version 21H2CWE-295Windows Cryptographic Services Security Feature Bypass Vulnerability
CVE-2026-499786.325.8cure53DOMPurifyCWE-79DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <templ…
CVE-2026-497958.825.7MicrosoftWindows 10 Version 1809CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-503828.825.7MicrosoftWindows 10 Version 1809CWE-822DirectX Graphics Kernel Remote Code Execution Vulnerability
CVE-2026-506928.825.7MicrosoftWindows 10 Version 1607CWE-122Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-429827.825.7MicrosoftWindows 10 Version 1607CWE-1288Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-491667.825.7MicrosoftWindows 11 Version 24H2CWE-416Windows Print Configuration Elevation of Privilege Vulnerability
CVE-2026-491737.825.7MicrosoftWindows 11 version 26H1CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-491757.825.7MicrosoftWindows 10 Version 21H2CWE-122Windows DNS Client Elevation of Privilege Vulnerability
CVE-2026-497837.825.7MicrosoftWindows 10 Version 1607CWE-358Secure Boot Security Feature Bypass Vulnerability
CVE-2026-497927.825.7MicrosoftWindows 10 Version 1607CWE-197Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-497937.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-498007.825.7MicrosoftWindows 10 Version 1809CWE-190Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulne…
CVE-2026-502937.825.7MicrosoftWindows 10 Version 21H2CWE-416Windows Internal Task Bar Elevation of Privilege Vulnerability
CVE-2026-503067.825.7MicrosoftWindows 10 Version 1607CWE-416Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-503097.825.7MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-503157.825.7MicrosoftWindows 11 Version 24H2CWE-476Windows Image Acquisition Elevation of Privilege Vulnerability
CVE-2026-503187.825.7MicrosoftWindows 10 Version 1607CWE-121Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-503267.825.7MicrosoftWindows 10 Version 21H2CWE-416Windows Unified Consent System Elevation of Privilege Vulnerability
CVE-2026-503277.825.7MicrosoftWindows 11 Version 24H2CWE-122Windows Media Remote Code Execution Vulnerability
CVE-2026-503297.825.7MicrosoftWindows 10 Version 1809CWE-416Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-503317.825.7MicrosoftWindows 10 Version 1607CWE-416Windows Application Model Core API Elevation of Privilege Vulnerability
CVE-2026-503327.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-503367.825.7MicrosoftWindows 11 Version 24H2CWE-122Windows Media Elevation of Privilege Vulnerability
CVE-2026-503377.825.7MicrosoftWindows 10 Version 1607CWE-704Windows Notification Elevation of Privilege Vulnerability
CVE-2026-503537.825.7MicrosoftWindows 11 Version 24H2CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-503577.825.7MicrosoftWindows 10 Version 1607CWE-197Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-503637.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-503677.825.7MicrosoftWindows 10 Version 1809CWE-118Windows Sensor Data Service Elevation of Privilege Vulnerability
CVE-2026-503877.825.7MicrosoftMicrosoft Office 365 for MacCWE-121Windows GDI Elevation of Privilege Vulnerability
CVE-2026-503997.825.7MicrosoftWindows 10 Version 21H2CWE-125Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504007.825.7MicrosoftWindows 10 Version 1607CWE-121Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2026-504027.825.7MicrosoftWindows 10 Version 1607CWE-681NTFS Elevation of Privilege Vulnerability
CVE-2026-504077.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-504127.825.7MicrosoftWindows 10 Version 1607CWE-121Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-504137.825.7MicrosoftWindows 11 Version 24H2CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504177.825.7MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-504217.825.7MicrosoftWindows 10 Version 1607CWE-843Windows Connected User Experiences and Telemetry Elevation of Privilege Vulne…
CVE-2026-504227.825.7MicrosoftWindows 10 Version 1607CWE-125Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-504257.825.7MicrosoftWindows 10 Version 21H2CWE-416Windows Internal System User Profile Elevation of Privilege Vulnerability
CVE-2026-504337.825.7MicrosoftWindows 10 Version 1607CWE-416Windows Media Elevation of Privilege Vulnerability
CVE-2026-504357.825.7MicrosoftWindows 10 Version 1607CWE-126Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2026-504367.825.7MicrosoftWindows 11 Version 24H2CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504417.825.7MicrosoftWindows 10 Version 1607CWE-822Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVE-2026-504667.825.7MicrosoftWindows 11 Version 24H2CWE-416Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-504777.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504787.825.7MicrosoftWindows 10 Version 1809CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504797.825.7MicrosoftWindows 10 Version 1809CWE-822Windows USB Hub Driver Elevation of Privilege Vulnerability
CVE-2026-504807.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulne…
CVE-2026-504847.825.7MicrosoftWindows 10 Version 1809CWE-122Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504867.825.7MicrosoftWindows 10 Version 21H2CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504897.825.7MicrosoftWindows 10 Version 1607CWE-122Win32k Elevation of Privilege Vulnerability
CVE-2026-504937.825.7MicrosoftWindows 10 Version 1809CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-504947.825.7MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Remote Code Execution Vulnerability
CVE-2026-504997.825.7MicrosoftWindows 10 Version 1809CWE-122Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2026-506707.825.7MicrosoftWindows 10 Version 1809CWE-125Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-506797.825.7MicrosoftWindows 11 Version 24H2CWE-122Windows Search Service Elevation of Privilege Vulnerability
CVE-2026-506877.825.7MicrosoftWindows 11 Version 24H2CWE-416Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-541097.825.7MicrosoftWindows 10 Version 1607CWE-190Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVE-2026-541147.825.7MicrosoftWindows 10 Version 1809CWE-416Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-541157.825.7MicrosoftWindows 10 Version 1607CWE-190Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2026-549867.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-549877.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Overlay Filter Elevation of Privilege Vulnerability
CVE-2026-550047.825.7MicrosoftWindows 10 Version 1607CWE-415Windows Print Configuration Elevation of Privilege Vulnerability
CVE-2026-561757.825.7MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-561767.825.7MicrosoftWindows 10 Version 1607CWE-125Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-561827.825.7MicrosoftWindows 10 Version 1607CWE-190Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-566437.825.7MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-566447.825.7MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-566507.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Network File System Elevation of Privilege Vulnerability
CVE-2026-570917.825.7MicrosoftWindows 10 Version 1607CWE-121Windows File History Service Elevation of Privilege Vulnerability
CVE-2026-570967.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulne…
CVE-2026-579687.825.7MicrosoftWindows Subsystem for Linux (WSL2)CWE-126Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
CVE-2026-585327.825.7MicrosoftWindows 10 Version 1607CWE-190Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-585347.825.7MicrosoftWindows 10 Version 1607CWE-122Windows Input Method Editor (IME) Elevation of Privilege Vulnerability
CVE-2026-585367.825.7MicrosoftWindows 10 Version 1809CWE-416Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVE-2026-585377.825.7MicrosoftWindows 11 Version 24H2CWE-416Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnera…
CVE-2026-585387.825.7MicrosoftWindows 10 Version 1809CWE-122Windows Bluetooth Service Elevation of Privilege Vulnerability
CVE-2026-585417.825.7MicrosoftWindows 10 Version 1607CWE-843Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-586017.825.7MicrosoftWindows 10 Version 1607CWE-122Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
CVE-2026-586027.825.7MicrosoftWindows 11 Version 24H2CWE-416Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-586327.825.7MicrosoftWindows 10 Version 1607CWE-416Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
CVE-2026-586337.825.7MicrosoftWindows 11 version 26H1CWE-416Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-586347.825.7MicrosoftWindows 11 version 26H1CWE-416Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-503547.125.7MicrosoftWindows 10 Version 1607CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-156722.125.7itsourcecodeElectronic Judging SystemCWE-74itsourcecode Electronic Judging System add_judges.php sql injection
CVE-2026-125886.025.5TrellixTrellix HX ConsoleCWE-409An attacker with access to an HX 10.0.0 and previous versions, may send speci…
CVE-2026-76406.425.5aguilatechnologiesWP Customer AreaCWE-79WP Customer Area <= 8.3.5 - Authenticated (Contributor+) Stored Cross-Site Sc…
CVE-2026-466355.325.4twigphpTwigCWE-863Twig: Sandbox property allowlist bypass via the `column` filter (array_column…
CVE-2026-362146.425.3osTicketosTicketCWE-79osTicket versions from 1.10 up to 1.17.7 and from 1.18.0 up to 1.18.3 are vul…
CVE-2026-83845.325.4Eclipse FoundationEclipse JettyCWE-647In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt resu…
CVE-2026-624229.825.2JetBrainsYouTrackCWE-306In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025…
CVE-2026-483508.625.1AdobeAdobe Animate 2023CWE-22Animate | Improper Limitation of a Pathname to a Restricted Directory ('Path …
CVE-2026-591987.524.7python-pillowPillowCWE-125Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into …
CVE-2026-626555.724.7NETGEARRBR860CWE-121A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models
CVE-2026-157698.324.7GoogleChromeCWE-20Insufficient validation of untrusted input in Linux Toolkit Theming in Google…
CVE-2026-242206.424.5NVIDIATensorRT-LLMCWE-502NVIDIA TensorRT-LLM for any platform contains a vulnerability in visual gen s…
CVE-2026-504887.824.5MicrosoftWindows 11 Version 24H2CWE-77Clipboard User Service Elevation of Privilege Vulnerability
CVE-2026-586357.824.5MicrosoftWindows 10 Version 1809CWE-77Windows Narrator Braille Elevation of Privilege Vulnerability
CVE-2026-556517.123.9alextselegidiseasyappointmentsCWE-200Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Expo…
CVE-2026-151839.223.5SnowflakeSnowflake Spark ConnectorCWE-89Input Validation Vulnerabilities in Snowflake Spark Connector
CVE-2026-483427.823.6AdobeAdobe BridgeCWE-190Bridge | Integer Overflow or Wraparound (CWE-190)
CVE-2026-474717.523.6NVIDIATensorRT-LLMCWE-122NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deser…
CVE-2026-598404.323.5FortinetFortiOSCWE-126A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, For…
CVE-2026-5443310.023.3RoundcubeWebmailCWE-79In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cr…
CVE-2026-584755.323.2Dan-in-CASIPCWE-79Sustainable Irrigation Platform 5.2.16 Stored XSS via Program Name
CVE-2026-503104.723.2MicrosoftWindows 10 Version 1809CWE-190Windows Human Interface Device Information Disclosure Vulnerability
CVE-2026-528402.723.2alextselegidiseasyappointmentsCWE-918Easy!Appointments has server-side request forgery in CalDAV connection test t…
CVE-2026-67905.323.2Eclipse FoundationEclipse JettyCWE-20In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict …
CVE-2026-598886.523.0FasterXMLjackson-databindCWE-915jackson-databind: @JsonIgnore on a Record property is bypassed with a Propert…
CVE-2026-447695.522.9SAP_SESAP S/4HANA Project Management (PPM-PRO)CWE-89SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO)
CVE-2026-504517.822.8MicrosoftWindows 10 Version 1607CWE-306Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulne…
CVE-2026-521007.522.8n/an/aCWE-352Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 th…
CVE-2026-541278.422.5MicrosoftWindows 11 Version 24H2CWE-416Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-466375.122.6twigphpTwigCWE-79Twig: HTML-output filters in twig/* extras incorrectly declared `is_safe => […
CVE-2026-450722.022.6symfonysymfonyCWE-79Symfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped N…
CVE-2026-157728.322.4GoogleChromeCWE-416Use after free in GPU in Google Chrome on Android prior to 150.0.7871.125 all…
CVE-2026-157748.322.4GoogleChromeCWE-416Use after free in Skia in Google Chrome prior to 150.0.7871.125 allowed a rem…
CVE-2026-157647.522.4GoogleChromeCWE-416Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 all…
CVE-2026-157657.522.4GoogleChromeCWE-416Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a re…
CVE-2026-157777.522.4GoogleChromeCWE-416Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowe…
CVE-2026-504597.822.4MicrosoftWindows 10 Version 21H2CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-502955.522.2MicrosoftWindows 11 Version 24H2CWE-269Windows Zero Trust DNS Security Feature Bypass Vulnerability
CVE-2026-504955.522.2MicrosoftWindows 10 Version 1809CWE-284DNS Client Tampering Vulnerability
CVE-2026-157715.322.2GoogleChromeCWE-20Insufficient validation of untrusted input in Media in Google Chrome on Windo…
CVE-2026-626584.722.3NETGEARRAX43CWE-20Post-authentication Command Injection Vulnerability in certain Nighthawk RAX …
CVE-2026-491717.822.0MicrosoftWindows 10 Version 1607CWE-416Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2026-503428.821.8MicrosoftWindows 11 Version 24H2CWE-284Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-485817.821.8MicrosoftMicrosoft Surface GoCWE-1220Surface Broker SDMA Elevation of Privilege Vulnerability
CVE-2026-491707.821.8MicrosoftWindows 10 Version 1809CWE-1220Windows StateRepository API Server file Elevation of Privilege Vulnerability
CVE-2026-503117.821.8MicrosoftWindows 10 Version 1607CWE-284Windows Server Elevation of Privilege Vulnerability
CVE-2026-503337.821.8MicrosoftWindows 10 Version 1607CWE-306Windows Spaceport.sys Elevation of Privilege Vulnerability
CVE-2026-503357.821.8MicrosoftWindows 10 Version 1809CWE-284Windows Operating Systems Elevation of Privilege Vulnerability
CVE-2026-503437.821.8MicrosoftWindows 10 Version 1809CWE-269Microsoft Install Service Elevation of Privilege Vulnerability
CVE-2026-503447.821.8MicrosoftWindows 10 Version 1607CWE-285Windows OLE Elevation of Privilege Vulnerability
CVE-2026-503467.821.8MicrosoftWindows 10 Version 1607CWE-285Netlogon RPC Elevation of Privilege Vulnerability
CVE-2026-503517.821.8MicrosoftWindows 10 Version 1607CWE-284Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability
CVE-2026-503737.821.8MicrosoftWindows 10 Version 1809CWE-284Windows Search Service Elevation of Privilege Vulnerability
CVE-2026-503917.821.8MicrosoftWindows 10 Version 1607CWE-269Windows Group Policy Elevation of Privilege Vulnerability
CVE-2026-504057.821.8MicrosoftWindows 10 Version 1607CWE-1220Windows Filtering Platform Elevation of Privilege Vulnerability
CVE-2026-504237.821.8MicrosoftWindows 10 Version 21H2CWE-284Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-550017.821.8MicrosoftWindows 10 Version 1607CWE-295Active Directory Domain Services Elevation of Privilege Vulnerability
CVE-2026-550067.821.8MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-1220Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-550147.821.8MicrosoftWindows Remote HelpCWE-284Windows Remote Help Defense Elevation of Privilege Vulnerability
CVE-2026-570887.821.8MicrosoftWindows 10 Version 1809CWE-284Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
CVE-2026-571077.821.8MicrosoftWindows Admin CenterCWE-287Windows Admin Center Elevation of Privilege Vulnerability
CVE-2026-585407.821.8MicrosoftWindows 10 Version 1607CWE-285Windows Installer Elevation of Privilege Vulnerability
CVE-2026-586317.821.8MicrosoftWindows Admin CenterCWE-285Windows Admin Center (WAC) Remote Code Execution Vulnerability
CVE-2026-504657.121.8MicrosoftWindows 11 Version 24H2CWE-284Windows DNS Client Tampering Vulnerability
CVE-2026-601195.121.8HiEventsDevHi.EventsCWE-862Hi.Events < 1.11.0 XSS via Event Title JSON.stringify Injection
CVE-2026-157786.521.7GoogleChromeCWE-20Insufficient validation of untrusted input in Navigation in Google Chrome pri…
CVE-2026-126066.321.7Eclipse FoundationEclipse GlassFishCWE-444Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer s…
CVE-2026-506507.821.6Microsoft.NET 8.0CWE-94.NET Framework Elevation of Privilege Vulnerability
CVE-2026-482908.221.5AdobeContent Credentials Rust SDKCWE-918CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-125118.121.5UnknownAI Engine—AI Engine < 3.5.5 - Editor+ Arbitrary File Write via Path Traversal
CVE-2026-503757.821.4MicrosoftWindows 10 Version 1809CWE-122DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-466285.121.5twigphpTwigCWE-116Twig: The `spaceless` filter implicitly marks its output as safe
CVE-2026-477305.121.5twigphpTwigCWE-79Twig: XSS in profiler HtmlDumper via unescaped template and profile names
CVE-2026-482758.621.3AdobeIllustrator Desktop 2026CWE-426Illustrator | Untrusted Search Path (CWE-426)
CVE-2026-483407.821.3AdobeAdobe BridgeCWE-822Bridge | Untrusted Pointer Dereference (CWE-822)
CVE-2026-115675.921.3UnknownSureForms—SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass
CVE-2026-156417.121.2DevolutionsServerCWE-863Improper authorization in the access request status endpoint in Devolutions S…
CVE-2026-483546.220.8AdobeContent Credentials Rust SDKCWE-190CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
CVE-2026-447596.120.5SAP_SESAP NetWeaver Enterprise PortalCWE-79Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
CVE-2026-447676.120.5SAP_SE@ui5/webcomponents-baseCWE-79Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection
CVE-2026-483126.820.1AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-447704.320.0SAP_SESAP S/4 HANA (Create Single Payment)CWE-862Missing Authorization check in SAP S/4 HANA (Create Single Payment)
CVE-2026-447714.320.0SAP_SESAP S/4HANA (Draft operation)CWE-862Missing Authorization check in SAP S/4HANA (Draft operation)
CVE-2026-129886.419.9UnknownWP 2FACWE-862WP 2FA < 3.1.1.2 - Account Takeover via 2FA Setup Email Binding
CVE-2026-503077.819.8MicrosoftWindows 10 Version 1809CWE-416Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-503587.819.8MicrosoftWindows 10 Version 1607CWE-416Windows Media Elevation of Privilege Vulnerability
CVE-2026-503597.819.8MicrosoftWindows 10 Version 1607CWE-416Microsoft XML Core Services Elevation of Privilege Vulnerability
CVE-2026-503907.819.8MicrosoftWindows 10 Version 1607CWE-843Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-503937.819.8MicrosoftWindows 11 Version 24H2CWE-416Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-503967.819.8MicrosoftWindows 11 Version 24H2CWE-416Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2026-504067.819.8MicrosoftWindows 10 Version 21H2CWE-416Windows Backup Engine Elevation of Privilege Vulnerability
CVE-2026-504767.819.8MicrosoftWindows 10 Version 1607CWE-416Windows Network Connections Service Elevation of Privilege Vulnerability
CVE-2026-504907.819.8MicrosoftWindows 10 Version 1607CWE-416Windows Installer Elevation of Privilege Vulnerability
CVE-2026-504917.819.8MicrosoftWindows 10 Version 1607CWE-125Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability
CVE-2026-506747.819.8MicrosoftWindows 11 Version 24H2CWE-416Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-506887.819.8MicrosoftWindows 10 Version 1607CWE-416Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-541297.819.8MicrosoftWindows 10 Version 1809CWE-416Windows Hyper-V Elevation of Privilege Vulnerability
CVE-2026-549897.819.8MicrosoftWindows 10 Version 1607CWE-416Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnera…
CVE-2026-561877.819.8MicrosoftWindows 11 Version 24H2CWE-416Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-570937.819.8MicrosoftWindows 10 Version 1607CWE-416Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab…
CVE-2026-561818.319.5MicrosoftWindows 11 Version 24H2CWE-346Windows Network Address Translation (NAT) Spoofing Vulnerability
CVE-2026-584767.018.8Dan-in-CASIPCWE-352Sustainable Irrigation Platform 5.2.16 CSRF via Administrative GET Requests
CVE-2025-626754.318.8FortinetFortiOSCWE-113An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response …
CVE-2026-491746.118.6MicrosoftWindows 10 Version 1809CWE-306DNS Client Tampering Vulnerability
CVE-2026-343465.518.6MicrosoftWindows 10 Version 1607CWE-319Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerab…
CVE-2026-503035.518.6MicrosoftWindows 10 Version 1809CWE-1240Windows Key Guard Security Feature Bypass Vulnerability
CVE-2026-457556.918.4symfonysymfonyCWE-306Symfony: Mailtrap Mailer Webhook Parser Never Verifies the X-Mt-Signature HMA…
CVE-2026-472126.918.4symfonysymfonyCWE-306Symfony: Twilio Notifier Webhook Parser Never Verifies the X-Twilio-Signature…
CVE-2026-483026.218.3AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-477377.518.0pumapumaCWE-290Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connec…
CVE-2026-504186.118.0MicrosoftWindows 11 Version 24H2CWE-284Windows System Secure Feature Bypass Vulnerability
CVE-2026-544296.018.0SiemensSIMATIC S7-PLCSIM AdvancedCWE-770A vulnerability has been identified in SIMATIC S7-PLCSIM Advanced (All versio…
CVE-2026-485717.017.8MicrosoftWindows 11 version 23H2CWE-416Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2026-491627.017.8MicrosoftWindows 11 Version 24H2CWE-416Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-502967.017.8MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-503237.017.8MicrosoftWindows 11 Version 24H2CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-503727.017.8MicrosoftWindows 10 Version 1607CWE-126Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVE-2026-503927.017.8MicrosoftWindows 11 Version 24H2CWE-416Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVE-2026-503977.017.8MicrosoftWindows 10 Version 1607CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-504107.017.8MicrosoftWindows 10 Version 1809CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504497.017.8MicrosoftWindows 10 Version 1809CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-561737.017.8MicrosoftWindows 10 Version 1809CWE-416Windows WebView Elevation of Privilege Vulnerability
CVE-2026-561837.017.8MicrosoftWindows 11 Version 24H2CWE-416Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-585447.017.8MicrosoftWindows 11 Version 24H2CWE-416Windows Management Services Elevation of Privilege Vulnerability
CVE-2026-586197.017.8MicrosoftWindows 10 Version 1607CWE-416Windows Sensor Data Service Elevation of Privilege Vulnerability
CVE-2026-586297.017.8MicrosoftWindows 10 Version 1607CWE-416DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2026-586377.017.8MicrosoftWindows 10 Version 1607CWE-416Windows Client-Side Caching Elevation of Privilege Vulnerability
CVE-2026-487585.417.9sigstoresigstore-jsCWE-347sigstore-js: DSSE payloadType type-binding failure
CVE-2026-483535.517.7AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-483467.917.6AdobeAdobe Animate 2023CWE-426Animate | Untrusted Search Path (CWE-426)
CVE-2026-479695.517.4AdobeAuditionCWE-125Audition | Out-of-bounds Read (CWE-125)
CVE-2026-479795.517.4AdobeAdobe Media EncoderCWE-125Media Encoder | Out-of-bounds Read (CWE-125)
CVE-2026-597325.017.3rclonercloneCWE-22rclone archive extract allows S3 destination prefix escape via crafted archiv…
CVE-2026-482966.217.2AdobeContent Credentials Rust SDKCWE-191CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVE-2026-482986.217.2AdobeContent Credentials Rust SDKCWE-191CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
CVE-2026-483576.217.2AdobeContent Credentials Rust SDKCWE-400CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-447684.117.2SAP_SESAP CRM (WebClient UI)CWE-15Security misconfiguration in SAP CRM (WebClient UI)
CVE-2026-450698.817.1symfonysymfonyCWE-345Symfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims
CVE-2026-503858.816.8MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-479677.816.9AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-479687.816.9AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-479767.816.9AdobeAdobe Media EncoderCWE-787Media Encoder | Out-of-bounds Write (CWE-787)
CVE-2026-482707.816.9AdobePremiereCWE-787Premiere Pro | Out-of-bounds Write (CWE-787)
CVE-2026-482747.816.9AdobeAfter EffectsCWE-787After Effects | Out-of-bounds Write (CWE-787)
CVE-2026-483097.816.9AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-483117.816.9AdobeAdobe BridgeCWE-787Bridge | Out-of-bounds Write (CWE-787)
CVE-2026-483357.816.9AdobeIllustrator Desktop 2026CWE-787Illustrator | Out-of-bounds Write (CWE-787)
CVE-2026-483367.816.9AdobeIllustrator Desktop 2026CWE-787Illustrator | Out-of-bounds Write (CWE-787)
CVE-2026-483377.816.9AdobeIllustrator Desktop 2026CWE-787Illustrator | Out-of-bounds Write (CWE-787)
CVE-2026-483417.816.9AdobeAdobe BridgeCWE-787Bridge | Out-of-bounds Write (CWE-787)
CVE-2026-483437.816.9AdobeAdobe BridgeCWE-787Bridge | Out-of-bounds Write (CWE-787)
CVE-2026-483657.816.9AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-483667.816.9AdobeAdobe Media EncoderCWE-787Media Encoder | Out-of-bounds Write (CWE-787)
CVE-2026-483677.816.9AdobeAfter EffectsCWE-787After Effects | Out-of-bounds Write (CWE-787)
CVE-2026-483687.816.9AdobeAuditionCWE-787Audition | Out-of-bounds Write (CWE-787)
CVE-2026-483697.816.9AdobePremiereCWE-787Premiere Pro | Out-of-bounds Write (CWE-787)
CVE-2026-483707.816.9AdobeAdobe Media EncoderCWE-787Media Encoder | Out-of-bounds Write (CWE-787)
CVE-2026-503057.816.8MicrosoftWindows 11 Version 24H2CWE-416Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-503617.816.8MicrosoftWindows 11 Version 24H2CWE-415Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-504277.816.8MicrosoftWindows 10 Version 1809CWE-416Content Delivery Manager Elevation of Privilege Vulnerability
CVE-2026-504577.816.8MicrosoftWindows 10 Version 1809CWE-416Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504587.816.8MicrosoftWindows 11 Version 24H2CWE-416Microsoft Brokering File System Elevation of Privilege Vulnerability
CVE-2026-506777.816.8MicrosoftWindows 11 Version 24H2CWE-416Windows Media Elevation of Privilege Vulnerability
CVE-2026-506897.816.8MicrosoftWindows 10 Version 1809CWE-416Windows Clipboard Server Elevation of Privilege Vulnerability
CVE-2026-541257.816.8MicrosoftWindows 10 Version 1809CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-626565.416.8NETGEARRAXE450CWE-20Post-authenticated command injection vulnerability found in certain NETGEAR R…
CVE-2026-157479.116.7SRIMojoliciousCWE-204Mojolicious versions from 4.59 before 9.48 for Perl expose a stable represent…
CVE-2026-153056.316.6TYPO3TYPO3 CMSCWE-351TYPO3 CMS - Unrestricted File Upload in Form Framework
CVE-2026-156377.516.5DevolutionsServerCWE-639Improper authorization in the PAM SSH key and certificate retrieval endpoints…
CVE-2026-501308.816.4pi-holepi-holeCWE-282Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/piho…
CVE-2026-157576.316.2NETGEARDGND3700v1CWE-20Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router
CVE-2026-598395.516.2FortinetFortiProxyCWE-22A improper limitation of a pathname to a restricted directory ('path traversa…
CVE-2026-115639.616.0UnknownWord Count and Social Shares—Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via…
CVE-2026-487476.315.7symfonysymfonyCWE-347Symfony: Mailomat Mailer Webhook Parser Reads the HMAC Algorithm from the Req…
CVE-2026-585436.315.3MicrosoftWindows 11 Version 24H2CWE-362Universal Print Management Service Elevation of Privilege Vulnerability
CVE-2026-80857.015.2Rockwell AutomationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-528382.615.2alextselegidiseasyappointmentsCWE-79Easy!Appointments disable_booking_message rendered as raw HTML on public book…
CVE-2026-483085.915.1AdobePremiereCWE-20Premiere Pro | Improper Input Validation (CWE-20)
CVE-2026-626594.314.8NETGEARWAX333CWE-20Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Po…
CVE-2026-218403.114.9HCLSoftwareHCL BigFix PlatformCWE-208HCL BigFix Platform is affected by a user enumeration vulnerability
CVE-2026-124826.514.6keras-teamkeras-team/kerasCWE-22Path Traversal via Symlink Name Validation Bypass in keras-team/keras
CVE-2026-157686.514.6GoogleChromeCWE-346Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 1…
CVE-2026-157756.514.6GoogleChromeCWE-346Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 a…
CVE-2026-74945.314.4SonatypeNexus RepositoryCWE-918Nexus Repository - SSRF in SSL Certificate Retrieval
CVE-2026-498057.014.3MicrosoftWindows 10 Version 1607CWE-284Win32k Elevation of Privilege Vulnerability
CVE-2026-502977.014.3MicrosoftWindows 10 Version 1607CWE-284Win32k Elevation of Privilege Vulnerability
CVE-2026-503257.014.3MicrosoftWindows 10 Version 1607CWE-284Win32k Elevation of Privilege Vulnerability
CVE-2026-483498.114.2AdobeAdobe Animate 2023CWE-863Animate | Incorrect Authorization (CWE-863)
CVE-2026-598417.514.2FortinetFortiSIEMWindowsAgentCWE-923A improper restriction of communication channel to intended endpoints vulnera…
CVE-2026-586385.514.2MicrosoftWindows 10 Version 1809CWE-325Windows Boot Loader Security Feature Bypass Vulnerability
CVE-2026-561787.014.0MicrosoftMicrosoft Defender for Endpoint for MacCWE-367Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
CVE-2026-96538.713.8Rockwell Automation1756-EN2, 1756-EN3CWE-3541756-EN2, 1756-EN3, and 1756-ENBT - Denial of Service via CIP Connection ID
CVE-2026-83127.013.5Rockwell AuotmationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-83137.013.5Rockwell AutomationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-83147.013.5Rockwell AutomationArena® SimulationCWE-787Rockwell Automation Arena® - Memory Corruption Vulnerability
CVE-2026-528393.313.5alextselegidiseasyappointmentsCWE-639Easy!Appointments appointments/store and appointments/update allow cross-prov…
CVE-2026-505265.513.3Microsoft.NET 10.0CWE-59.NET Tampering Vulnerability
CVE-2026-482727.813.2AdobeCreative Cloud DesktopCWE-427Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
CVE-2026-447604.713.3SAP_SESAP NetWeaver Application Server ABAP (applications based on Business Server Pages)CWE-79Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server …
CVE-2025-156655.413.1UnknownUltimate Before After Image Slider & Gallery—BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
CVE-2026-242687.813.0NVIDIATensorRTCWE-122NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap…
CVE-2026-482877.412.9AdobeContent Credentials Rust SDKCWE-426CAI Content Credentials | Untrusted Search Path (CWE-426)
CVE-2026-551447.113.0MicrosoftWindows 11 Version 24H2CWE-325Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability
CVE-2026-598369.812.4FortinetFortiClientEMSCWE-295A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.…
CVE-2026-483487.712.1AdobeAdobe Animate 2023CWE-863Animate | Incorrect Authorization (CWE-863)
CVE-2026-579734.711.9MicrosoftWindows Subsystem for Linux (WSL2)CWE-367Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability
CVE-2026-473049.811.8Microsoft.NET 10.0CWE-347.NET Security Feature Bypass Vulnerability
CVE-2026-96368.211.9Rockwell AutomationControlLogix® 5580, CompactLogix® 5380, GuardLogix® 5580, Compact GuardLogix® 5380, 1756-EN4TRCWE-299Rockwell Automation CompactLogix® 5380 ControlLogix® 5580 / 1756-EN4 Communic…
CVE-2026-506737.811.5MicrosoftWindows 10 Version 1607CWE-476Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-585267.811.5MicrosoftWindows 10 Version 1809CWE-416Windows Storage Elevation of Privilege Vulnerability
CVE-2026-503177.011.5MicrosoftWindows 11 Version 24H2CWE-362Windows Operating Systems Elevation of Privilege Vulnerability
CVE-2026-503217.011.5MicrosoftWindows 10 Version 1607CWE-362Windows USB Driver Elevation of Privilege Vulnerability
CVE-2026-503787.011.5MicrosoftWindows 10 Version 1809CWE-362Windows Key Guard Elevation of Privilege Vulnerability
CVE-2026-504407.011.5MicrosoftWindows 11 Version 24H2CWE-362Windows Audio Service Elevation of Privilege Vulnerability
CVE-2026-506677.011.5MicrosoftWindows 10 Version 1607CWE-362Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2026-506767.011.5MicrosoftWindows 11 Version 24H2CWE-362Windows Media Elevation of Privilege Vulnerability
CVE-2026-541077.011.5MicrosoftWindows 10 Version 1607CWE-362Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-549917.011.5MicrosoftWindows 11 Version 24H2CWE-362Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-585277.011.5MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-04878.411.0SAP_SESAProuter on Microsoft WindowsCWE-427DLL Hijacking vulnerability in SAProuter on Microsoft Windows
CVE-2026-150583.111.0DevolutionsServerCWE-639Improper authorization in the secure messages deletion endpoint in Devolution…
CVE-2026-242387.810.8NVIDIATensorRTCWE-129NVIDIA TensorRT for contains a vulnerability where an attacker might cause an…
CVE-2026-242727.810.8NVIDIATensorRTCWE-122NVIDIA TensorRT contains a vulnerability where an attacker might cause an ove…
CVE-2026-544324.710.6RoundcubeWebmailCWE-79Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Si…
CVE-2026-528413.110.6alextselegidiseasyappointmentsCWE-639Easy!Appointments: Authorization bypass in Google OAuth provider binding lets…
CVE-2026-448007.810.0MicrosoftWindows 11 version 23H2CWE-362Windows Push Notifications Elevation of Privilege Vulnerability
CVE-2026-498087.810.1MicrosoftWindows 11 Version 24H2CWE-362Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-586287.810.0MicrosoftWindows 10 Version 1809CWE-362Windows Wireless Network Manager Elevation of Privilege Vulnerability
CVE-2026-485727.010.0MicrosoftWindows 11 version 23H2CWE-362Windows App Package Installer Elevation of Privilege Vulnerability
CVE-2026-491837.010.0MicrosoftWindows 10 Version 1809CWE-362Windows Clipboard Server Elevation of Privilege Vulnerability
CVE-2026-497847.010.0MicrosoftWindows 10 Version 1607CWE-362Microsoft Windows App Store Elevation of Privilege Vulnerability
CVE-2026-498027.010.0MicrosoftWindows 11 Version 24H2CWE-362Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-498037.010.0MicrosoftWindows 10 Version 1607CWE-362Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
CVE-2026-498067.010.0MicrosoftWindows 11 Version 24H2CWE-362Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-503227.010.0MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-503457.010.1MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-503567.010.0MicrosoftWindows 10 Version 1607CWE-362Microsoft Windows App Store Elevation of Privilege Vulnerability
CVE-2026-503717.010.0MicrosoftWindows 10 Version 1607CWE-362Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerab…
CVE-2026-503847.010.1MicrosoftWindows 10 Version 1809CWE-362Windows Clip Service Elevation of Privilege Vulnerability
CVE-2026-504037.010.0MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-504047.010.0MicrosoftWindows 11 Version 24H2CWE-362Windows Media Elevation of Privilege Vulnerability
CVE-2026-504507.010.0MicrosoftWindows 10 Version 1809CWE-362Windows Network Connections Service Elevation of Privilege Vulnerability
CVE-2026-505037.010.0MicrosoftWindows 11 Version 24H2CWE-362Windows Runtime Elevation of Privilege Vulnerability
CVE-2026-506587.010.0MicrosoftMicrosoft Defender for Endpoint for MacCWE-367Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability
CVE-2026-506697.010.0MicrosoftWindows 10 Version 1607CWE-362Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2026-506727.010.1MicrosoftWindows 10 Version 1809CWE-416Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-541117.010.0MicrosoftWindows 11 Version 24H2CWE-362Universal Print Management Service Elevation of Privilege Vulnerability
CVE-2026-541127.010.0MicrosoftWindows 10 Version 1809CWE-362Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-549967.010.0MicrosoftWindows 11 Version 24H2CWE-362Windows USB Print Driver Elevation of Privilege Vulnerability
CVE-2026-424475.09.6skylotjadxCWE-79jadx: HTML Injection in Summary panel
CVE-2026-420498.49.5skylotjadxCWE-94jadx: RCE Via Groovy Code Injection in Gradle Export
CVE-2026-150758.29.4Eclipse FoundationEclipse Vert.xCWE-200In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 …
CVE-2026-150768.29.4Eclipse FoundationEclipse Vert.xCWE-346In versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), t…
CVE-2026-95618.88.9Eclipse FoundationEclipse KuraCWE-345Eclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-Fo…
CVE-2026-488157.58.6sigstoresigstore-jsCWE-347sigstore-js: `certificateOIDs` verification constraints are silently dropped …
CVE-2026-242596.47.7NVIDIATensorRT-LLMCWE-306NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker coul…
CVE-2026-148525.27.5Checkmk GmbHCheckmkCWE-78mk_sap_hana: Privilege escalation via crafted sapstartsrv process name
CVE-2026-106697.87.2zephyrprojectzephyrCWE-190Xtensa MPU `arch_buffer_validate()` integer-overflow lets a user thread bypas…
CVE-2026-156214.86.7mosaxivclawletCWE-59mosaxiv clawlet File Tools fs_ops.go edit_file link following
CVE-2026-157491.96.7mastergo-designmastergo-magic-mcpCWE-22mastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversal
CVE-2026-157511.96.7mastergo-designmastergo-magic-mcpCWE-22mastergo-design mastergo-magic-mcp mcp__getComponentGenerator component-workf…
CVE-2026-483447.86.6AdobeCreative Cloud DesktopCWE-367GoCart | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)
CVE-2026-596747.16.4SUSEopenSUSE TumbleweedCWE-61LPE from suricata user to root due to chown in %post in suricata packaging
CVE-2026-535666.86.1CitrixCitrix Secure Access Client for WindowsCWE-125Out-of-bounds memory read
CVE-2025-409458.55.8SiemensCOMOS V10.4.5CWE-426A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.…
CVE-2026-153927.75.6HMBRANDDBD::FileCWE-22DBD::File versions before 1.651 for Perl do not ensure the table file is not …
CVE-2026-242297.35.6NVIDIATensorRT-LLMCWE-306NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated o…
CVE-2026-546847.05.6skylotjadxCWE-22jadx: XAPK archive entries with absolute paths can plant drop-in plugins and …
CVE-2026-242716.25.4NVIDIATensorRT-LLMCWE-770NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inferen…
CVE-2026-474706.25.4NVIDIATensorRT-LLMCWE-20NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC ser…
CVE-2026-474756.25.4NVIDIATensorRT-LLMCWE-617NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inferen…
CVE-2026-106717.15.3zephyrprojectzephyrCWE-1188User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queu…
CVE-2026-488166.55.1sigstoresigstore-jsCWE-345sigstore-js: Insufficient Verification of Data Authenticity
CVE-2026-474737.45.0NVIDIATensorRT-LLMCWE-123NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a …
CVE-2026-242266.34.9NVIDIATensorRT-LLMCWE-829NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker coul…
CVE-2026-156423.34.7DevolutionsServerCWE-200Insertion of sensitive information into a file in the Recovery Kit response f…
CVE-2026-535658.54.6CitrixSecure Access Client for WindowsCWE-269Local Privilege escalation allows a low-privileged user to gain SYSTEM privil…
CVE-2026-242346.84.5NVIDIATensorRT-LLMCWE-918NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal medi…
CVE-2026-106705.54.5zephyrprojectzephyrCWE-476User-triggerable kernel NULL-pointer dereference (DoS) in `k_thread_name_copy…
CVE-2026-91277.34.4Rockwell AutomationStudio 5000 Logix DesignerCWE-863Studio 5000 Logix Designer® – Multiple Vulnerabilities
CVE-2026-626574.94.4NETGEARMR70CWE-599Certificate validation vulnerability in NETGEAR Gaming Router and certain Nig…
CVE-2026-68517.04.3BitdefenderTotal SecurityCWE-59Improper link resolution before file access in Bitdefender Total Security via…
CVE-2026-05156.24.4BlackBerry LtdQNX Software Development PlatformCWE-233Insufficient parameter validation in the QNX Neutrino kernel impacts versions…