by Kastro CVE-2026-34234 · Ctrlpanel-gg panel
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,935 matching vulnerabilities · Page 169 of 779
Ctrlpanel-gg
mitre
CVE-2026-37281 · mitre
An OS command injection vulnerability in the /stream-to-vlc Express route in hitarth-gg Zenshin before 2.7.0 allows remote attackers to e…
CVE-2026-36829 · mitre
An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7.
CVE-2026-31071 · mitre
API endpoints in LalanaChami Pharmacy Management System (commit 5c3d028) lack authentication middleware.
hestiacp
Red Hat
CVE-2026-31072 · Red Hat Red Hat Ansible Automation Platform 2
The JSONSerializer and CBORSerializer in APScheduler (all versions including 3.10.x and 4.0.0a5) are vulnerable to Remote Code Execution…
Apache Software Foundation
CVE-2026-45434 · Apache Software Foundation Apache OFBiz
Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE
CVE-2026-47323 · Apache Software Foundation Apache Camel
Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering
CVE-2026-31986 · Apache Software Foundation Apache OFBiz
Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection
CVE-2026-41919 · Apache Software Foundation Apache OFBiz
Apache OFBiz: Authentication Bypass due to Improper Neutralization of LDAP Special Elements in DN Construction
Piotnet
CVE-2026-4883 · Piotnet Piotnet Forms
Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload
CVE-2026-4885 · Piotnet Piotnet Addons For Elementor Pro
Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload
NVIDIA
CVE-2026-24207 · NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.
CVE-2026-24213 · NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an out-of-bounds read.
CVE-2026-24214 · NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker could cause an integer overflow.
CVE-2025-33255 · NVIDIA TensorRT-LLM
NVIDIA TRT-LLM for any platform contains a vulnerability in MPI server, where an attacker could cause an unsafe deserialization.
CVE-2026-24163 · NVIDIA TensorRT-LLM
NVIDIA TRT-LLM for any platform contains a vulnerability in RPC testing, where an attacker could cause an unsafe deserialization.
CVE-2026-24206 · NVIDIA Triton Inference Server
NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass.
CVE-2026-24142 · NVIDIA TensorRT-LLM
NVIDIA TRT-LLM for any platform contains a deserialization vulnerability and unsafe serialized handle.
TYPO3
CVE-2026-46725 · TYPO3 Extension "Content Element Selector"
Remote Code Execution in extension "Content Element Selector" (ceselector)
kovidgoyal
NLnet Labs
ScadaBR
prosolution
CVE-2026-6555 · prosolution ProSolution WP Client
ProSolution WP Client <= 2.0.0 - Unauthenticated Arbitrary File Upload via 'files'
Linux
Sparx Systems
CVE-2026-42097 · Sparx Systems Pro Cloud Server
Authentication Bypass in Sparx Pro Cloud Server
Eclipse Foundation
CVE-2026-2586 · Eclipse Foundation Eclipse Glassfish
An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console.
CVE-2026-2587 · Eclipse Foundation Eclipse Glassfish
A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish…
Mozilla
CVE-2026-8956 · Mozilla Firefox
Integer overflow in the Networking: JAR component
CVE-2026-8953 · Mozilla Firefox
Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-8959 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
CVE-2026-8948 · Mozilla Firefox
Same-origin policy bypass in the DOM: Networking component
CVE-2026-8950 · Mozilla Firefox
Same-origin policy bypass in the Networking: HTTP component
PixelYourSite
themewant
CVE-2026-7284 · themewant Easy Elements for Elementor – Addons & Website Templates
Easy Elements for Elementor <= 1.4.4 - Unauthenticated Privilege Escalation via easyel_handle_register
Tyler Technologies
CVE-2026-44159 · Tyler Technologies TID-L
Tyler Identity Local (TID-L) default administrative credentials
Drupal
tenable
CVE-2026-47357 · tenable Terrascan
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via the remote_url parameter in the remote directory sca…
CVE-2026-47358 · tenable Terrascan
Terrascan v1.18.3 and prior are vulnerable to Server-Side Request Forgery (SSRF) via external URL resolution in uploaded IaC templates wh…
Samsung Open Source
CVE-2026-47310 · Samsung Open Source Escargot
Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.
CVE-2026-47311 · Samsung Open Source Escargot
Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
CVE-2026-47314 · Samsung Open Source Escargot
Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.
HCL
CVE-2025-31973 · HCL BigFix Service Management (SM)