The archive.

CVE-2026-90910 · Apache Software Foundation Apache Answer

Apache Answer: Reaction API authorization bypass for restricted content

CVE-2026-108709 · Apache Software Foundation Apache Kylin

Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network)

CVE-2026-71253 · Apache Software Foundation Apache Johnzon

Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON

CognicellAI1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-109437 · CognicellAI Cognition

Cognition < 0.13.0 Unauthenticated RCE via Local Shell Backend

EPSS 0.8%public exploit CVSS 9.8

mljar2 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-111057 · mljar mercury

Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

EPSS 0.7%public exploit CVSS 10.0

CVE-2026-111058 · mljar mercury

Mercury: Unauthenticated Remote Code Execution via /api/kernels

LangChat1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-111704 · LangChat langchat

LangChat through commit 2a6285a Missing Authentication on REST API Controllers

EPSS 0.7%public exploit CVSS 9.8

vanus-labs1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-111998 · vanus-labs vanus

Vanus 0.8.0 through 0.9.0 Default Admin Credentials via Gateway

EPSS 0.7%public exploit CVSS 9.8

Camunda1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-109432 · Camunda Camunda 7

Camunda Expression Injection via orQueries RCE

EPSS 0.6%public exploit CVSS 9.8

canove1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-111708 · canove whaticket-community

WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup

EPSS 0.6%public exploit CVSS 9.8

databufflabs2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-111692 · databufflabs databuff

DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-111693 · databufflabs databuff

DataBuff ai-apm-web through 0.1.10 Hard-Coded Default Admin Credentials

clidey1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-112005 · clidey whodb

WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

EPSS 0.7%public exploit CVSS 9.2

Google2 vulnerabilities on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2026-103091 · Google SAM

Insecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)

EPSS 0.6%public exploit CVSS 9.3

CVE-2026-102503 · Google SAM

Missing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)

EPSS 0.4%public exploit CVSS 9.3

mitre2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-107081 · mitre

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handle…

CVE-2026-107083 · mitre

SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/…

thorsten1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-111911 · thorsten phpMyFAQ

phpMyFAQ 4.0.0 before 4.1.9 Authentication Bypass via WebAuthn Credential Injection

thimpress1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-104736 · thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses

LearnPress <= 4.4.10 - Unauthenticated PHP Object Injection via 'checkout-email' Parameter

EPSS 3%CVSS 9.8

Brainstorm Force1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-110372 · Brainstorm Force OttoKit

WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

EPSS 1%CVSS 9.8

getgrav1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-112779 · getgrav grav-plugin-api

Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass

EPSS 0.8%CVSS 9.8

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-98548 · Linux Linux

sctp: discard the rest of the packet on a stale-cookie error

EPSS 0.7%CVSS 9.8

CVE-2026-98490 · Linux Linux

net: openvswitch: conntrack: fix helper UAF due to extensions realloc

EPSS 0.6%CVSS 9.8

CVE-2026-98549 · Linux Linux

tcp: prevent collapsing skbs across boundary in rtx queue

EPSS 0.4%CVSS 9.1

CVE-2026-98464 · Linux Linux

RISC-V: KVM: Synchronize hrtimer callback during teardown

EPSS 0.1%CVSS 9.3

RankMath1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-111862 · RankMath Rank Math SEO PRO

Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code

EPSS 0.7%CVSS 9.8

Mage1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-111823 · Mage mage-ai

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

EPSS 0.6%CVSS 9.8

anthropics1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-96620 · anthropics claude-agent-sdk-python

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

EPSS 0.7%CVSS 9.2

Netcore1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-111711 · Netcore NR256CN

Netcore NR256CN through 1.5.140116 Pre-Auth Stack Overflow via Boa user_ok()

sunkaifei1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-112296 · sunkaifei FlyCms

FlyCms through commit edfdf724 Default Super Administrator Credentials

CPANSec5 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-110753 · CPANSec

Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline

CVE-2026-110756 · CPANSec

Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print

CVE-2026-110757 · CPANSec

Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine

CVE-2026-110759 · CPANSec

Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse

CVE-2026-110685 · CPANSec

Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag

EPSS 0.2%CVSS 9.1

craftcms1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-112776 · craftcms cms

Craft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations

GeoVision Inc.1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-108983 · GeoVision Inc. GV-ASManager

GV-ASManager Web Server Command Injection Vulnerability