by Kastro CVE-2026-19348 · Shenzhen Aitemi M300 Wi-Fi Repeater
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,893 matching vulnerabilities · Page 105 of 778
Shenzhen Aitemi
Unknown
CVE-2026-15038 · Unknown InfiniteWP Client
InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite
CVE-2026-19089 · Unknown Product Input Fields for WooCommerce
Product Input Fields for WooCommerce < 2.0.2 - Unauthenticated Arbitrary File Upload
CVE-2026-18473 · Unknown WP Directory Kit
WP Directory Kit < 1.5.5 - Unauthenticated SQL Injection via 'field_search' Parameter
CVE-2026-19053 · Unknown ProSolution WP Client
ProSolution WP Client < 2.0.6 - Unauthenticated Blind SQLi via 'jobID' Parameter
CVE-2026-16298 · Unknown FoodBoxBooker
FoodBoxBooker < 1.0.7 - Unauthenticated Arbitrary Password Reset
CVE-2026-16299 · Unknown Single Sign On For TNG
Single Sign On For TNG < 2.2.0 - Unauthenticated Arbitrary Password Reset
Apache Software Foundation
CVE-2026-28672 · Apache Software Foundation Apache Ranger
Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder
CVE-2026-42537 · Apache Software Foundation Apache Ranger
Apache Ranger: Remote Code Execution via JDBC URL Injection
CVE-2026-44416 · Apache Software Foundation Apache Ranger
Apache Ranger: Remote Code Execution via Arbitrary Class Instantiation
CVE-2026-55799 · Apache Software Foundation Apache Ranger
Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator
CVE-2026-32227 · Apache Software Foundation Apache Ranger
Apache Ranger: SQL Injection vulnerability in lookup functionality
CVE-2026-40920 · Apache Software Foundation Apache Ranger
Apache Ranger: Privilege Escalation via URL Parameter
alseambusher
MSI
CVE-2026-71987 · MSI Radix AXE6600
MSI Radix AXE6600 v781521 Command Injection via alg function
CVE-2026-71988 · MSI Radix AXE6600
MSI Radix AXE6600 v781521 Command Injection via portFw function
CVE-2026-71989 · MSI Radix AXE6600
MSI Radix AXE6600 v781521 Command Injection via porTrigger function
CVE-2026-71990 · MSI Radix AXE6600
MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
CVE-2026-71991 · MSI Radix AXE6600
MSI Radix AXE6600 v781521 Command Injection via TelnetSSH Function
CVE-2026-71992 · MSI Radix AXE6600
MSI Radix AXE6600 v781521 Command Injection via macfilter
CVE-2026-71993 · MSI Radix AXE6600
MSI Radix AXE6600 v781521 Command Injection via openvpn function
duhow
NASA
fabrikar.com
CVE-2026-66915 · fabrikar.com Fabrik extension for Joomla
Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2
AsyncFuncAI
dulldusk
Linux
CVE-2026-68160 · Linux Linux
ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps()
CVE-2026-68154 · Linux Linux
libceph: reject zero bucket types in crush_decode
CVE-2026-68156 · Linux Linux
libceph: refresh auth->authorizer_buf{,_len} after authorizer update
CVE-2026-68158 · Linux Linux
libceph: Fix multiplication overflow in decode_new_up_state_weight()
CVE-2026-68159 · Linux Linux
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
CVE-2026-68161 · Linux Linux
sctp: close UDP tunnel sockets during netns teardown
CVE-2026-68123 · Linux Linux
openvswitch: fix GSO userspace truncation underflow
CVE-2026-68127 · Linux Linux
ila: reload IPv6 header after pskb_may_pull in checksum adjust
CVE-2026-68136 · Linux Linux
net: gro: fix double aggregation of flush-marked skbs
CVE-2026-68137 · Linux Linux
net/x25: fix use-after-free in x25_kill_by_neigh()
CVE-2026-68144 · Linux Linux
phonet: pep: fix use-after-free in pep_get_sb()
CVE-2026-68300 · Linux Linux
sctp: auth: verify auth requirement when auth_chunk is NULL
CVE-2026-68117 · Linux Linux
tipc: clear sock->sk on the failed-insert path in tipc_sk_create()
CVE-2026-68170 · Linux Linux
mptcp: fix stale skb->sk reference on subflow close
CVE-2026-68302 · Linux Linux
amt: re-read skb header pointers after every pull
CVE-2026-68083 · Linux Linux
ksmbd: fix path resolution in ksmbd_vfs_kern_path_create
CVE-2026-68343 · Linux Linux
smb: client: validate DFS referral PathConsumed
CVE-2026-68124 · Linux Linux