The archive.

tugcantopaloglu2 vulnerabilities on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2026-66418 · tugcantopaloglu openclaw-dashboard

OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field

EPSS 0.6%public exploit CVSS 9.3

CVE-2026-66421 · tugcantopaloglu openclaw-dashboard

OpenClaw Dashboard Stored XSS via lastMessage Session Field

EPSS 0.6%public exploit CVSS 9.3

malach-it1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-53431 · malach-it boruta

Boruta accepts expired JWT client assertions due to missing exp claim validation

EPSS 0.5%public exploit CVSS 9.1

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-52680 · Apache Software Foundation Apache Kyuubi

Apache Kyuubi: REST batch multipart upload path traversal allows controlled file write

CVE-2026-28812 · Apache Software Foundation Apache JSPWiki

Apache JSPWiki: UserManager does not sanity-check user database at startup

CVE-2026-66756 · Apache Software Foundation Apache Tika

Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false

IBM8 vulnerabilities on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2026-12940 · IBM Langflow OSS

Langflow is affected by remote code execution due to multiple unauthenticated and insufficiently authorized API endpoints

EPSS 0.9%CVSS 9.8

CVE-2026-14522 · IBM App Connect Enterprise

IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings

CVE-2026-12118 · IBM webMethods Integration (on prem)

IBM webMethods Integration could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data

CVE-2026-12943 · IBM HMC V10.3.1050.0

This Power Hardware Management Console update is being released to address

CVE-2026-12946 · IBM Langflow OSS

Remote Code Execution in CUGA Component CodeAgent

EPSS 0.6%CVSS 9.9

CVE-2026-15435 · IBM App Connect Enterprise

IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability

CVE-2026-13435 · IBM Langflow OSS

Python Interpreter Sandbox Bypass Leading to Sensitive Data Exposure

EPSS 0.5%CVSS 9.9

CVE-2026-11707 · IBM Tivoli System Automation Application Manager

Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager

EPSS 0.4%CVSS 9.3

Microsoft1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-66803 · Microsoft Azure Cosmos DB

Azure Cosmos DB Remote Code Execution Vulnerability

EPSS 0.9%CVSS 10.0

SolarWinds1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-28323 · SolarWinds Web Help Desk

SolarWinds Web Help Desk SAML Authentication Bypass Vulnerability

Phoenix Contact5 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-44108 · Phoenix Contact CHARX SEC-3150

Firewall bypass during shutdown

CVE-2026-7849 · Phoenix Contact CHARX SEC-3150

Command Injection in SCM (idledisconnect parameter)

CVE-2026-44101 · Phoenix Contact CHARX SEC-3150

OCPP reconfiguration vulnerability

CVE-2026-44100 · Phoenix Contact CHARX SEC-3150

JupiCore charging point reconfiguration without auth

EPSS 0.5%CVSS 9.4

CVE-2026-44104 · Phoenix Contact CHARX SEC-3150

ControllerAgent does not perform validation of firmware

EPSS 0.4%CVSS 9.8

yolanmees1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-67594 · yolanmees Spikster

Spikster Missing Authentication via API Route Group