The archive.

EVoke1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-40702 · EVoke EVoke CSMS

EVoke Systems EVoke CSMS Missing Authentication for Critical Function

EPSS 0.6%CVSS 9.4

paytiumsupport1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-56030 · paytiumsupport Paytium

WordPress Paytium plugin <= 5.0.2 - Privilege Escalation vulnerability

PhysCode1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-56059 · PhysCode Travel Booking

WordPress Travel Booking theme <= 2.2.5 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

Pluggabl1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-56027 · Pluggabl Booster for WooCommerce

WordPress Booster for WooCommerce plugin <= 8.0.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

pydicom1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-56445 · pydicom pynetdicom Library

pydicom pynetdicom Library Path Traversal

EPSS 0.6%CVSS 9.1

ThemeCatcher1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-56058 · ThemeCatcher Quform

WordPress Quform plugin <= 2.23.0 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

themewant1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-56028 · themewant Easy Elements for Elementor – Addons & Website Templates

WordPress Easy Elements for Elementor – Addons & Website Templates plugin <= 1.4.9 - Privilege Escalation vulnerability

wolfSSL2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-7531 · wolfSSL wolfSSL

Use-after-free in PQC hybrid key-share handling

CVE-2026-6094 · wolfSSL wolfSSL

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData

EPSS 0.5%CVSS 9.1

WSO21 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-2053 · WSO2 WSO2 API Manager

Unauthenticated Server-Side Request Forgery via WS-Addressing in WSO2 API Manager

EPSS 0.4%CVSS 10.0

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-55017 · Apache Software Foundation Apache IoTDB

Apache IoTDB: Path Traversal Vulnerability

EPSS 0.5%CVSS 9.1

CVE-2025-64152 · Apache Software Foundation Apache IoTDB

Apache IoTDB: Path Traversal Vulnerability

EPSS 0.5%CVSS 9.1

Dell1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-41120 · Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerabi…

EPSS 0.4%CVSS 9.8

codemstory1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-56036 · codemstory 워드프레스 결제 심플페이

WordPress 워드프레스 결제 심플페이 plugin <= 5.5.6 - SQL Injection vulnerability

contempoinc1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-54827 · contempoinc Real Estate 7

WordPress Real Estate 7 theme <= 3.5.9 - SQL Injection vulnerability

Crocoblock. Jetimpex Inc.1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-54820 · Crocoblock. Jetimpex Inc. JetBooking

WordPress JetBooking plugin <= 4.0.4.1 - SQL Injection vulnerability

JetBrains2 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-53914 · JetBrains Kotlin

In JetBrains Kotlin before 2.4.20 code execution was possible via unsafe deserialization in the build cache metadata

EPSS 0.4%CVSS 9.8

CVE-2026-57926 · JetBrains YouTrack

In JetBrains YouTrack before 2026.2.16593 the websandbox bridge was vulnerable to a prototype pollution attack

Online Web Tutor1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-56034 · Online Web Tutor Library Management System

WordPress Library Management System plugin <= 3.5.7 - SQL Injection vulnerability

Paolo1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-54831 · Paolo GeoDirectory

WordPress GeoDirectory plugin <= 2.8.162 - SQL Injection vulnerability

PluginUs.Net1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-54843 · PluginUs.Net MDTF

WordPress MDTF plugin <= 1.3.7 - SQL Injection vulnerability

Premmerce1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-54849 · Premmerce Premmerce Wishlist for WooCommerce

WordPress Premmerce Wishlist for WooCommerce plugin <= 1.1.11 - SQL Injection vulnerability

Shenzhen i365-Tech Co. Ltd.1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-9222 · Shenzhen i365-Tech Co. Ltd. Setracker2 Parental Control App (Android) package com.tgelec.setracker

Setracker2 Children's Smartwatch Ecosystem Use of password hash instead of password for authentication

EPSS 0.4%CVSS 9.2

wpDataTables1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-54825 · wpDataTables wpDataTables

WordPress wpDataTables plugin <= 7.4 - SQL Injection vulnerability

Linux1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-53260 · Linux Linux

tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req().

nodejs1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-48930 · nodejs node

A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncatio…

socat1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-56123 · socat socat

socat 1.8.0.0 - 1.8.1.1 Heap Buffer Overflow via SOCKS5 Reply Parser