The archive.

CVE-2026-38715 · mitre

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection v…

CVE-2026-38716 · mitre

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection v…

CVE-2026-38717 · mitre

InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection v…

tinyproxy2 vulnerabilities on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-54388 · tinyproxy tinyproxy

Tinyproxy - HTTP Request Smuggling via Duplicate Content-Length Headers

EPSS 0.4%public exploit CVSS 9.3

CVE-2026-54387 · tinyproxy tinyproxy

Tinyproxy - HTTP Request Smuggling via CL/TE Desynchronization

EPSS 0.4%CVSS 9.3

Jovancoding1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-48814 · Jovancoding Network-AI

Network-AI: Empty default secret still authorizes all requests (Incomplete fix for CVE-2026-46701)

EPSS 0.4%public exploit CVSS 9.1

baptisteArno1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2026-48768 · baptisteArno typebot.io

TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName

EPSS 0.3%public exploit CVSS 9.3

nv-tlabs1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-53805 · nv-tlabs GEN3C

NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API

EPSS 0.9%CVSS 9.8

Melapress1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-54806 · Melapress WP Activity Log

WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

EPSS 0.7%CVSS 9.8

Cozy Vision Technologies Pvt. Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-54803 · Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications

WordPress SMS Alert Order Notifications plugin <= 3.9.4 - Privilege Escalation vulnerability

HCL Software1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-59872 · HCL Software ZIE

HCL ZIE for Web is affetced by an Unrestricted File Upload vulnerability,

EPSS 0.5%CVSS 9.8

hermes-webui1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-55196 · hermes-webui hermes-webui

Hermes WebUI < 0.51.409 - Unauthenticated Passkey Registration via Authentication Bypass

EPSS 0.6%CVSS 9.1

Splunk1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-20266 · Splunk Splunk AI Toolkit

OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit

EPSS 0.6%CVSS 9.1

Themeton2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-60229 · Themeton Lagom

WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability

CVE-2025-60230 · Themeton The Barber Shop

WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-49268 · Apache Software Foundation Apache Shiro

Apache Shiro: LDAP DN Injection in DefaultLdapRealm

EPSS 0.5%CVSS 9.1

ThemeREX2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-69111 · ThemeREX Reisen

WordPress Reisen theme <= 1.4.1 - PHP Object Injection vulnerability

CVE-2025-69127 · ThemeREX Plumbing

WordPress Plumbing theme <= 1.6 - PHP Object Injection vulnerability

Advanced Ads GmbH1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2025-59554 · Advanced Ads GmbH Advanced Ads – Tracking

WordPress Advanced Ads – Tracking plugin < 3.0.7 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

ThemeGrill1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-54807 · ThemeGrill Registration Form for WooCommerce

WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability

tinyhumansai1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-55743 · tinyhumansai OpenHuman

OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution

EPSS 0.4%CVSS 9.6

EMV2 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-60231 · EMV The Hospital

WordPress The Hospital theme <= 1.8.1 - PHP Object Injection vulnerability

CVE-2025-60236 · EMV Creatify

WordPress Creatify theme <= 1.5 - PHP Object Injection vulnerability

Nur-Alam391 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-55740 · Nur-Alam39 bus-ticket

SQL Injection in Nur-Alam39 bus-ticket bus_info.php via busid parameter

park_of_ideas1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-49108 · park_of_ideas Moderno

WordPress Moderno theme < 1.43 - PHP Object Injection vulnerability