The archive.

CVE-2026-6026 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setPortalConfWeChat os command injection

CVE-2026-6028 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setPptpServerCfg os command injection

CVE-2026-6029 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setVpnAccountCfg os command injection

CVE-2026-6027 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setUrlFilterRules os command injection

CVE-2026-5993 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setWiFiGuestCfg os command injection

CVE-2026-5994 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setTelnetCfg os command injection

CVE-2026-5995 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection

CVE-2026-5996 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setAdvancedInfoShow os command injection

CVE-2026-5997 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setLoginPasswordCfg os command injection

CVE-2026-6112 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setRadvdCfg os command injection

CVE-2026-6113 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setTtyServiceCfg os command injection

CVE-2026-6114 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setNetworkCfg os command injection

CVE-2026-6115 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setAppCfg os command injection

CVE-2026-6116 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setDiagnosisCfg os command injection

CVE-2026-6131 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection

parisneo1 vulnerability on this pageMax CVSS 9.6Priority 53KEV 0

CVE-2026-1115 · parisneo parisneo/lollms

Stored XSS in parisneo/lollms

EPSS 1%public exploit CVSS 9.6

patrickhener1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-40189 · patrickhener goshs

goshs has a file-based ACL authorization bypass in goshs state-changing routes

EPSS 0.7%public exploit CVSS 9.8

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-6024 · Tenda i6

Tenda i6 HTTP R7WebsSecurityHandlerfunction path traversal

EPSS 0.7%public exploit CVSS 9.8

FoundationAgents1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-6110 · FoundationAgents MetaGPT

FoundationAgents MetaGPT Tree-of-Thought Solver tot.py generate_thoughts code injection

EPSS 0.4%public exploit CVSS 9.8

NASM1 vulnerability on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-6068 · NASM NASM

CVE-2026-6068

EPSS 0.4%public exploit CVSS 9.6

Rukovoditel1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-31845 · Rukovoditel Rukovoditel CRM

Rukovoditel CRM Reflected XSS via zd_echo Parameter in Zadarma Telephony API Endpoint

EPSS 0.4%public exploit CVSS 9.3

aws-mcp-server2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-5058 · aws-mcp-server aws-mcp-server

aws-mcp-server Command Injection Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2026-5059 · aws-mcp-server aws-mcp-server

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

langchain-ai1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-40190 · langchain-ai langsmith-sdk

LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `proto` Guard in Internal lodash `set()`

MervinPraison1 vulnerability on this pageMax CVSS 9.4Priority 45KEV 0

CVE-2026-40157 · MervinPraison PraisonAI

PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`

EPSS 0.4%public exploit CVSS 9.4

mitre8 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-29861 · mitre

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php.

CVE-2026-36232 · mitre

A SQL injection vulnerability was found in the instructorClasses.php file of itsourcecode Online Student Enrollment System v1.0.

CVE-2026-36233 · mitre

A SQL injection vulnerability was found in the assignInstructorSubjects.php file of itsourcecode Online Student Enrollment System v1.0.

CVE-2026-36234 · mitre

itsourcecode Online Student Enrollment System v1.0 is vulnerable to SQL Injection in newCourse.php via the 'coursename' parameter.

CVE-2026-36235 · mitre

A SQL injection vulnerability was found in the scheduleSubList.php file of itsourcecode Online Student Enrollment System v1.0.

CVE-2026-36236 · mitre

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.