boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Thursday, August 13, 2026 · all times UTC← 2026-08-12 · archive · 2026-08-14 →

Security Box Score — August 13, 2026 — page 2

Edition of August 13, 2026, continued — page 2 of 2. Back to page 1

Results (continued, ranked) — ranks 401–606 of 606
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-597634.314.6GiteaGitea Open Source Git ServerCWE-284Unbounded Arch package file metadata can cause resource amplification in Gite…
CVE-2026-738405.314.5openchoreoopenchoreoCWE-287OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion…
CVE-2026-281556.514.2Lasso Analytics, Inc.Do LassoCWE-639WordPress Do Lasso plugin <= 358 - Insecure Direct Object References (IDOR) v…
CVE-2026-619786.514.2webhosting4ugrSecure Card Gateway for ePay Paycenter (Piraeus Bank)CWE-862WordPress Secure Card Gateway for ePay Paycenter (Piraeus Bank) plugin <= 1.0…
CVE-2026-664546.514.2Maruti MohantyWP Social AvatarCWE-862WordPress WP Social Avatar plugin <= 1.5 - Broken Access Control vulnerability
CVE-2026-664596.514.2Space CodesAI for SEOCWE-862WordPress AI for SEO plugin <= 2.4.2 - Broken Access Control vulnerability
CVE-2026-666606.514.2Scott PatersonContact Form 7 – PayPal & Stripe Add-onCWE-862WordPress Contact Form 7 – PayPal & Stripe Add-on plugin <= 2.5.1 - Broken Ac…
CVE-2026-726316.514.1ElasticKibanaCWE-269Improper Privilege Management in Kibana Fleet Leading to Over-Scoped Elastic …
CVE-2026-736515.713.9typeormtypeormCWE-94TypeORM: migration:generate template-literal code injection
CVE-2026-566576.213.9GiteaGitea Open Source Git ServerCWE-284Gitea SSH Key Parser Denial of Service
CVE-2026-584452.713.8GiteaGitea Open Source Git ServerCWE-203Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API
CVE-2026-666977.113.6ColissimoColissimo Officiel : Méthodes de livraison pour WooCommerceCWE-79WordPress Colissimo Officiel : Méthodes de livraison pour WooCommerce plugin …
CVE-2026-181647.213.4Flow NeuroscienceFL-100CWE-798Flow Neuroscience FL-100 Use of Hard-coded Credentials
CVE-2026-736197.113.3gitpython-developersGitPythonCWE-73GitPython before 3.1.57 Arbitrary File Read via Repo.archive()
CVE-2026-554006.013.4Absolute SecuritySecure AccessCWE-190CVE-2026-55400 is an integer underflow in Secure Access servers prior to vers…
CVE-2026-192928.813.2silabs.comWiseConnectCWE-305Bluetooth re-pairing with legitimate device can use lower security level
CVE-2026-726757.113.2ElasticKibanaCWE-862Missing Authorization in Kibana Machine Learning Leading to Cross-Space Infor…
CVE-2026-281737.113.1ArrayticsWP Event SOlutionCWE-862WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vul…
CVE-2026-726697.612.6ElasticKibanaCWE-862Missing Authorization in Kibana Leading to Cross-User Information Disclosure …
CVE-2026-726307.112.7ElasticKibanaCWE-863Incorrect Authorization in Kibana Fleet Leading to Privilege Escalation
CVE-2026-730395.312.7streamaserverstreamaCWE-639streama Insecure Direct Object Reference via ViewingStatusController
CVE-2026-736715.112.7SaurusSaurus CMS Community EditionCWE-601Saurus CMS Unauthenticated Open Redirect via logout url parameter
CVE-2026-733535.312.4revolutbusinessRevolut Gateway for WooCommerceCWE-862WordPress Revolut Gateway for WooCommerce plugin < 4.22.10 - Broken Access Co…
CVE-2026-180684.312.2IBMiCWE-200IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2026-726554.312.1ElasticKibanaCWE-915Improperly Controlled Modification of Dynamically-Determined Object Attribute…
CVE-2026-218324.311.6HCL SoftwareAIONCWE-1427HCL AION is affected by multiple security vulnerabilities.
CVE-2026-281887.311.4themeficHydra BookingCWE-862WordPress Hydra Booking plugin <= 1.2.2 - Broken Access Control vulnerability
CVE-2026-726806.511.4ElasticKibanaCWE-639Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Lead…
CVE-2026-161018.811.2silabs.comWiseConnectCWE-290forced re-pairing with already bonded device
CVE-2026-192918.811.3silabs.comWiseConnectCWE-290Bluetooth re-pairing can use a lower security level than previous
CVE-2026-186715.311.2IBMiCWE-190IBM i is Affected By Multiple Vulnerabilities in NetServer
CVE-2026-584377.110.9GiteaGitea Open Source Git ServerCWE-284Repository Visibility Manipulation via Git Push Options
CVE-2026-726735.411.0ElasticKibanaCWE-863Incorrect Authorization in Kibana Leading to Unauthorized Deletion of Synthet…
CVE-2026-498564.310.9vmoranvjshookmcpCWE-918@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authoriz…
CVE-2026-584314.310.9GiteaGitea Open Source Git ServerCWE-863Public-only API token restriction is not enforced on team API routes
CVE-2026-585104.310.9GiteaGitea Open Source Git ServerCWE-200GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — s…
CVE-2026-733495.310.8NexcessGiveWPCWE-862WordPress GiveWP plugin < 4.16.6 - Broken Access Control vulnerability
CVE-2026-734015.310.8InstaWPInstaWP ConnectCWE-862WordPress InstaWP Connect plugin <= 0.1.3.7 - Broken Access Control vulnerabi…
CVE-2026-734035.310.8wpeverestUser RegistrationCWE-862WordPress User Registration plugin <= 5.2.6 - Broken Access Control vulnerabi…
CVE-2026-170744.310.8IBMiCWE-269IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
CVE-2026-736527.110.7vantage6vantage6CWE-863vantage6: Algorithm developer can edit another developer's algorithm that is …
CVE-2026-281826.510.4AcyMailing Newsletter TeamAcyMailing SMTP NewsletterCWE-79WordPress AcyMailing SMTP Newsletter plugin <= 10.11.1 - Cross Site Scripting…
CVE-2026-664566.510.4bestwebsoftProfile Extra Fields by BestWebSoftCWE-79WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Sc…
CVE-2026-664606.510.4AfterShip & AutomizelyAfterShip TrackingCWE-79WordPress AfterShip Tracking plugin <= 1.18.1 - Cross Site Scripting (XSS) vu…
CVE-2026-664676.510.4WPManageNinjaFluentCommunityCWE-79WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulner…
CVE-2026-664716.510.4ThemepointsAccordionCWE-79WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-730385.310.3NodeBBNodeBBCWE-79NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name
CVE-2026-735315.310.4django-helpdeskdjango-helpdeskCWE-79django-helpdesk < 2.3.3 Stored XSS via HTML Attachments
CVE-2026-736177.110.0budibaseserverCWE-943Budibase before 3.40.0 NoSQL Injection via MongoDB datasource
CVE-2026-736106.99.9siyuan-notesiyuanCWE-639SiYuan before v3.7.4 Information Disclosure via Local Storage
CVE-2026-735634.710.0backstagebackstageCWE-601Backstage: Unauthenticated OAuth account takeover via `redirect_uri` allowlis…
CVE-2026-735743.19.9ZimbraCollaborationCWE-669In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerab…
CVE-2026-187286.59.6Red HatRed Hat Enterprise Linux 10CWE-191Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing
CVE-2026-133285.39.6UnknownFood MenuCWE-284TLP Food Menu < 6.0.2 - Unauthenticated Reservation Status Modification
CVE-2026-736215.39.7gitpython-developersGitPythonCWE-88GitPython before 3.1.56 Arbitrary File Truncation via Commit.count
CVE-2026-162413.89.6n/aPostgreSQLCWE-191PostgreSQL ECPG integer underflow can crash the client
CVE-2026-281859.89.4rtCampLog in with GoogleCWE-345WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerab…
CVE-2026-664556.09.4rockigerReactPressCWE-862WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability
CVE-2026-164556.99.3Teltonika NetworksRUTOSCWE-93Local privilege escalation via improper input sanitization in execl() call
CVE-2026-64704.39.2n/aPostgreSQLCWE-862PostgreSQL fails to check type USAGE privilege
CVE-2026-146784.39.2n/aPostgreSQLCWE-126PostgreSQL pg_trgm picksplit reads past end of buffer
CVE-2026-180244.39.2n/aPostgreSQLCWE-126PostgreSQL ascii() function reads past end of buffer
CVE-2026-736056.99.1siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Path Traversal via getUniqueFilename
CVE-2026-736066.99.1siyuan-notesiyuanCWE-639SiYuan before v3.7.4 Information Disclosure via getRefIDs
CVE-2026-736076.99.1siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Information Disclosure via getOutlineStorage
CVE-2026-736096.99.1siyuan-notesiyuanCWE-862SiYuan before v3.7.4 Information Disclosure via getBookmarkLabels
CVE-2026-189458.29.0UnknownWP Helper PremiumCWE-639WP Helper Premium < 4.7.6 - Unauthenticated Order Data Disclosure and Order M…
CVE-2026-02995.98.9Palo Alto NetworksGlobalProtect AppCWE-426GlobalProtect App: Local Privilege Escalation Vulnerabilities
CVE-2026-666546.08.8TangibleWPVehica CoreCWE-918WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) …
CVE-2026-679868.48.6n/an/aCWE-94amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c523…
CVE-2026-704547.68.6RsyncProjectrsyncCWE-295rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode
CVE-2026-727418.68.5goodrainrainbondCWE-639Rainbond 6.9.7 Region API Cross-Enterprise IDOR via Tenant Access
CVE-2026-736298.48.5s9ySerendipityCWE-918Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses
CVE-2026-667047.28.4JegstudioGutenverse CompanionCWE-918WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery …
CVE-2026-664646.58.4Toast PluginsInternal Link OptimiserCWE-862WordPress Internal Link Optimiser plugin <= 5.2.7 - Broken Access Control vul…
CVE-2026-735766.38.4ZimbraCollaborationCWE-1241In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generati…
CVE-2026-02985.28.4Palo Alto NetworksGlobalProtect AppCWE-94GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access P…
CVE-2026-64693.88.4n/aPostgreSQLCWE-708PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
CVE-2026-584355.48.2GiteaGitea Open Source Git ServerCWE-266Gitea LFS Deploy-Key Privilege Escalation
CVE-2026-726714.38.1ElasticKibanaCWE-862Missing Authorization in Kibana Leading to Unauthorized Modification of Machi…
CVE-2026-666896.38.0AcyMailing Newsletter TeamAnti Spam and list cleaner &#8211; AcyCheckerCWE-862WordPress Anti Spam and list cleaner – AcyChecker plugin <= 2.0.0 - Broken Ac…
CVE-2026-567556.27.9GiteaGitea Open Source Git ServerCWE-284Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation i…
CVE-2026-281547.17.8snsthemeSamex - Clean, Minimal Shop WooCommerce WordPress ThemeCWE-79WordPress Samex and M.Anh WordPress themes affected by Cross Site Scripting (…
CVE-2026-736167.17.7openremoteopenremoteCWE-639OpenRemote Notification Delete Cross-Realm Insecure Direct Object Reference
CVE-2026-736260.07.7jupyterlabjupyterlabCWE-284JupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager
CVE-2026-738429.07.5openchoreoopenchoreoCWE-269OpenChoreo: cluster-gateway internal proxy performs no caller authentication …
CVE-2026-659357.67.5silabs.comWiseConnectCWE-305Bypassing passkey entry in legacy pairing
CVE-2026-659325.37.4silabs.comBT122CWE-440BT122 stops advertising
CVE-2026-659335.37.4silabs.comBT122CWE-126BT122 malformed packet with increased length field causes memory leak
CVE-2026-659365.37.4silabs.comWiseConnectCWE-126RS9116W/SiWx917 malformed packet with increased length field causes memory leak
CVE-2026-725065.17.2National Institute of Information and Communications Technology"VoiceTra(Voice Translator)" for AndroidCWE-941VoiceTra provided by National Institute of Information and Communications Tec…
CVE-2026-494788.77.0sigstorefulcioCWE-918Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitutio…
CVE-2026-275367.17.0PluginOpsMailChimp Subscribe FormsCWE-79WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (X…
CVE-2026-275397.17.0WelcartWelcart e-CommerceCWE-79WordPress Welcart e-Commerce plugin <= 2.11.31 - Cross Site Scripting (XSS) v…
CVE-2026-280037.17.0yonifreMaspik – Spam blacklistCWE-79WordPress Maspik – Spam blacklist plugin <= 2.9.1 - Cross Site Scripting (XSS…
CVE-2026-280047.17.0Strategy11 TeamBusiness DirectoryCWE-79WordPress Business Directory plugin <= 6.4.25 - Cross Site Scripting (XSS) vu…
CVE-2026-281587.17.0Lasso Analytics, Inc.Do LassoCWE-79WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
CVE-2026-281707.17.01merilBlog Floating ButtonCWE-79WordPress Blog Floating Button plugin <= 1.4.20 - Cross Site Scripting (XSS) …
CVE-2026-281757.17.0wp-buyVisitors Traffic Real Time StatisticsCWE-79WordPress Visitors Traffic Real Time Statistics plugin <= 8.11 - Cross Site S…
CVE-2026-281877.17.0echopluginsKnowledge Base for Documentation, FAQs with AI AssistanceCWE-79WordPress Knowledge Base for Documentation, FAQs with AI Assistance plugin <=…
CVE-2026-619607.17.0ThemeisleWP Full Stripe FreeCWE-79WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vu…
CVE-2026-619657.17.0ahmadgbGeekyBotCWE-79WordPress GeekyBot plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-619747.17.0Kitae ParkMang Board WPCWE-79WordPress Mang Board WP plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerab…
CVE-2026-655807.17.0bracketwebAgrionCWE-79WordPress Agrion theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulner…
CVE-2026-664267.17.0Lester ChanWP-StatsCWE-79WordPress WP-Stats plugin <= 2.56 - Cross Site Scripting (XSS) vulnerability
CVE-2026-664297.17.0CODEPRESSVisitor Traffic Real Time Statistics ProCWE-79WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.10 - Cross Si…
CVE-2026-664497.17.0Dylan KuhnGeo MashupCWE-79WordPress Geo Mashup plugin <= 1.13.18 - Cross Site Scripting (XSS) vulnerabi…
CVE-2026-664687.17.0powerfulwpLocal Delivery Drivers for WooCommerceCWE-79WordPress Local Delivery Drivers for WooCommerce plugin <= 3.0.0 - Cross Site…
CVE-2026-666557.17.0multiparcelsMultiParcels Shipping For WooCommerceCWE-79WordPress MultiParcels Shipping For WooCommerce plugin <= 1.30.36 - Reflected…
CVE-2026-666987.17.0Brainstorm ForceSureDashCWE-79WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-667007.17.0ZAYTECHSmart Online Order for CloverCWE-79WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scriptin…
CVE-2026-146664.27.0n/aPostgreSQLCWE-1250PostgreSQL row security caching disregards role modifications
CVE-2026-185117.86.9IBMiCWE-787IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2026-183686.06.9Teltonika NetworksRUTOSCWE-122Heap buffer overflow in Modbusgwd
CVE-2026-146733.86.9n/aPostgreSQLCWE-426PostgreSQL amcheck does not clear untrusted search path
CVE-2026-191355.46.7The OpenNMS GroupMeridianCWE-470OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load…
CVE-2026-734284.66.6basecamptrixCWE-79Trix: Stored XSS via HTMLParser attribute injection on paste
CVE-2026-143325.46.4UnknownEcwid by Lightspeed Ecommerce Shopping CartCWE-862Ecwid by Lightspeed Ecommerce Shopping Cart < 7.0.9 - Subscriber+ Store Disco…
CVE-2026-170697.36.1IBMiCWE-352IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
CVE-2026-733445.96.1Passionate Programmer PeterWP Data AccessCWE-79WordPress WP Data Access plugin <= 5.5.79 - Cross Site Scripting (XSS) vulner…
CVE-2026-735713.16.0ZimbraCollaborationCWE-863An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) be…
CVE-2026-185097.15.8IBMiCWE-285IBM i is Affected By A Prvilege Escalation Vulnerability []
CVE-2026-584416.35.8GiteaGitea Open Source Git ServerCWE-918SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL
CVE-2026-02975.25.8Palo Alto NetworksGlobalProtect AppCWE-787GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
CVE-2026-142133.75.6UnknownBooking for Appointments and Events CalendarCWE-639Amelia < 2.4.6 - Provider+ Cross-Customer Appointment Data Disclosure via IDOR
CVE-2026-732667.15.3Red HatMulticluster Engine for KubernetesCWE-441Clusterclaims-controller: clusterclaims-controller: tenant-controlled cluster…
CVE-2026-736574.25.3triggerdotdevtrigger.devCWE-22Trigger.dev: Cross-tenant payload poisoning via packet write + replay
CVE-2026-02890.55.1Palo Alto NetworksPrisma BrowserCWE-522Prisma Browser: Inappropriate Implementation in Account Protection
CVE-2026-275376.55.0supsysticPopup by SupsysticCWE-79WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vu…
CVE-2026-666876.55.0magepeopleteamWpBookinglyCWE-79WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-733406.55.0fifu.appFeatured Image from URLCWE-79WordPress Featured Image from URL plugin <= 5.3.3 - Cross Site Scripting (XSS…
CVE-2026-733576.55.0NexcessGiveWPCWE-79WordPress GiveWP plugin < 4.16.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-735726.14.8ZimbraCollaborationCWE-79In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (…
CVE-2026-736285.34.8s9ySerendipityCWE-79Serendipity 2.3.5 Reflected XSS via search clean-URL route
CVE-2026-730375.14.8DayuanJiangnext-ai-draw-ioCWE-79Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter
CVE-2026-735057.84.7JanDeDobbeleeroh-my-poshCWE-94Oh My Posh: Arbitrary command execution via template injection in the path se…
CVE-2026-191824.34.6The OpenNMS GroupMeridianCWE-863OpenNMS v2 Alarm REST API inverted authorization check lets ROLE_REST users a…
CVE-2026-734815.34.4phplistphplist3CWE-352phpList < 3.7.0-RC5 Cross-Site Request Forgery via Bounce Rules
CVE-2026-187414.64.2FroidenWorksuite SaaSCWE-79Worksuite SaaS version prior to 6.0.14 Stored XSS via Asset Management Locati…
CVE-2026-02922.13.9Palo Alto NetworksPrisma Access AgentCWE-290Prisma Access Agent: Local Security Inspection Bypass Vulnerability on Windows
CVE-2025-623153.43.8HCL SoftwareAIONCWE-116HCL AION is affected by multiple security vulnerabilities.
CVE-2026-02900.53.7Palo Alto NetworksPrisma BrowserCWE-522Prisma Browser: Sensitive Information Disclosure Vulnerability
CVE-2026-537848.43.4RsyncProjectrsyncCWE-59rsync < 3.5.0 Path Traversal via Symlink Module Root
CVE-2026-538028.43.4RsyncProjectrsyncCWE-61rsync < 3.5.0 Arbitrary File Read via Symlink Following
CVE-2026-537856.93.3RsyncProjectrsyncCWE-59rsync < 3.5.0 Path Traversal Write Escape via --relative Mode
CVE-2026-679905.43.3n/an/aCWE-352basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables …
CVE-2026-192938.83.1silabs.comWiseConnectCWE-521SMP security request
CVE-2026-538038.53.0RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
CVE-2026-63877.33.0LenovoSystem UpdateCWE-290A potential authentication bypass vulnerability was reported in Lenovo System…
CVE-2026-726587.33.1ElasticKibanaCWE-352Cross-Site Request Forgery in Kibana Leading to Privilege Escalation
CVE-2026-684517.83.0LinuxLinux—s390/zcrypt: Validate length for CCA ECC private key requests
CVE-2026-634266.92.8LenovoDock ManagerCWE-59During an internal security assessment, a potential vulnerability was discove…
CVE-2026-684548.82.8LinuxLinux—KVM: s390: pci: Fix handling of AIF enable without AISB
CVE-2026-684527.82.8LinuxLinux—s390/zcrypt: Validate length for CCA AES cipher key requests
CVE-2026-735066.12.8JanDeDobbeleeroh-my-poshCWE-150Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment…
CVE-2026-684537.12.6LinuxLinux—s390/zcrypt: Fix buffer over-read in cca_cipher2protkey
CVE-2026-170298.82.4IBMiCWE-787IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2026-728498.72.4budibaseserverCWE-352Budibase before 3.40.0 Identity Confusion via Chat-Link Handoff CSRF
CVE-2026-186224.72.2Foxit Software Inc.Foxit PDF EditorCWE-451Foxit PDF Editor/Reader's signature-validation pop-up reports modified certif…
CVE-2026-02946.02.1Palo Alto NetworksPrisma Access AgentCWE-427Prisma Access Agent: Local Privilege Escalation
CVE-2026-02911.12.0Palo Alto NetworksPrisma Access AgentCWE-59Prisma Access Agent: Authenticated Limited File Deletion on Linux
CVE-2026-120366.91.9LenovoVantageCWE-59An improper link following vulnerability was reported in the VantageCoreAddin…
CVE-2026-119704.82.0ForcepointF1E macCWE-754This vulnerability allows a normal (non-admin) user to disable the Forcepoint…
CVE-2026-734794.81.9Byrondua-cliCWE-116dua-cli Terminal Escape Sequence Injection via Marked Paths
CVE-2026-734804.81.9dundeegduCWE-116gdu Terminal Injection via Unstripped Escape Sequences
CVE-2026-159947.31.8LenovoCommercial VantageCWE-59During an internal security assessment, an improper link following vulnerabil…
CVE-2026-148757.81.7IBMi Access Client SolutionsCWE-426IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
CVE-2026-02935.61.5Palo Alto NetworksPrisma Access AgentCWE-693Prisma Access Agent: Anti-Tamper Protection Bypass on Windows
CVE-2026-168987.81.5IBMiCWE-73IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service
CVE-2026-169877.81.5IBMiCWE-73IBM i is Affected By An Improper Validation Vulnerability in PASE []
CVE-2026-133656.51.5IBMPlanning AnalyticsCWE-352IBM Planning Analytics Local is affected by security vulnerabilities
CVE-2026-735753.11.5ZimbraCollaborationCWE-352In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (C…
CVE-2026-634238.51.4LenovoAccessories and Display ManagerCWE-321During an internal security assessment, a potential vulnerability was discove…
CVE-2026-634258.51.4LenovoDock ManagerCWE-276During an internal security assessment, a potential improper permissions vuln…
CVE-2026-194835.51.3IBMStorage ScaleCWE-532The following vulnerabilities that can affect IBM Storage Scale and the Manag…
CVE-2026-568658.41.2Go toolchaincmd/goCWE-347Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog
CVE-2026-196966.61.2Wireshark FoundationWiresharkCWE-787Out-of-bounds Write in Wireshark
CVE-2026-197304.21.2Red HatRed Hat Ansible Automation Platform 2CWE-459Podman: podman: quadlet install --replace non-truncating write retains remove…
CVE-2026-659347.11.1silabs.comBT122CWE-440BT122 plaintext pause encryption request causes DOS
CVE-2026-735856.31.1Red HatRed Hat Enterprise Linux 10CWE-377Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider…
CVE-2025-623145.61.1HCL SoftwareAIONCWE-307HCL AION is affected by multiple security vulnerabilities.
CVE-2026-122366.51.0zephyrprojectzephyrCWE-835Infinite loop (DoS) in Bluetooth GATT client parsing of Read-By-Type response…
CVE-2026-181018.80.9IBMiCWE-269IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server…
CVE-2026-190885.40.9UnknownShopEngine Elementor WooCommerce Builder AddonCWE-352ShopEngine < 4.9.3 - Customer PII Disclosure via Forced Authentication
CVE-2026-196944.70.8Wireshark FoundationWiresharkCWE-122Heap-based Buffer Overflow in Wireshark
CVE-2026-196954.70.8Wireshark FoundationWiresharkCWE-121Stack-based Buffer Overflow in Wireshark
CVE-2026-634247.00.8LenovoDock ManagerCWE-261During an internal security assessment, an improperly protected key was disco…
CVE-2026-735836.60.8Red HatRed Hat Enterprise Linux 10CWE-125Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows …
CVE-2026-146636.50.8n/aPostgreSQLCWE-313PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and d…
CVE-2026-537965.80.7RsyncProjectrsyncCWE-59rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling
CVE-2026-180717.80.6IBMiCWE-269IBM i is Affected By An Improper Management Vulnerability in HTTP Server []
CVE-2026-02964.50.6Palo Alto NetworksGlobalProtect AppCWE-295GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
CVE-2026-537975.70.6RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Race Condition Information Disclosure
CVE-2026-538005.70.6RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Race Condition via --remove-source-files
CVE-2026-537997.20.5RsyncProjectrsyncCWE-59rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application
CVE-2026-735846.30.5Red HatRed Hat Enterprise Linux 10CWE-377Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via …
CVE-2026-174384.40.6IBMiCWE-269IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []
CVE-2026-142565.70.4LenovoE16 Gen 2 (Type 21M5, 21M6) Laptops (ThinkPad) ELAN TrackPoint Device Driver for Windows 11 (Version 23H2 or later) - ThinkPadCWE-125ELAN reported a potential out-of-bounds write vulnerability in the ELAN Track…
CVE-2026-180865.30.4IBMiCWE-787IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
CVE-2025-526404.70.4HCL SoftwareAIONCWE-276HCL AION is affected by multiple security vulnerabilities.
CVE-2025-623183.70.3HCL SoftwareAIONCWE-352HCL AION is affected by multiple security vulnerabilities.
CVE-2026-02954.10.3Palo Alto NetworksGlobalProtect AppCWE-362GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
CVE-2026-168964.70.1IBMiCWE-367IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service
CVE-2026-164585.90.0Oberon microsystems AGocryptoCWE-208Timing side-channel in RSA PKCS#1 v1.5 decryption in ocrypto
CVE-2026-164595.90.0Oberon microsystems AGOberon PSA CryptoCWE-208Timing side-channel in RSA PKCS#1 v1.5 decryption in Oberon PSA Crypto
CVE-2026-146814.20.0n/aPostgreSQLCWE-924PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL