by Kastro CVE-2026-97229 · GitLab GitLab
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
4,832 matching vulnerabilities · Page 21 of 97
GitLab
Wavlink
CVE-2026-109110 · Wavlink WL-WN592AX6
Wavlink WL-WN592AX6 wmapd system os command injection
CVE-2026-109108 · Wavlink WL-WN530BE1-A
Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection
CVE-2026-109109 · Wavlink WL-WN530BE1-A
Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow
mitre
CVE-2026-104584 · mitre
reNgine up to v2.2.0 and current master branch (commit de4199222cca5618f1255930ce78987e47d43a99) is vulnerable to OS Command Injection vi…
CVE-2026-104585 · mitre
Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection in /download_data/, /api/v1/scan, Dynamic Analyzer ADB integr…
CVE-2026-37107 · mitre
An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component
CVE-2026-52394 · mitre
DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.
CVE-2026-78799 · mitre
Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless route…
CVE-2026-78802 · mitre
An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote attacker to execute arbit…
CVE-2024-34323 · mitre
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter.
CVE-2024-34320 · mitre
ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.
CVE-2024-34324 · mitre
An issue in ProPhoenix Law RMS v2022.2403.3.101 allows attackers to execute a session hijacking attack via injecting a crafted 24-charact…
karuppiah7890
CVE-2020-37279 · karuppiah7890 easy-pdf-merge
easy-pdf-merge 0.1.0 through 0.2.6 OS Command Injection via merge function
TRENDnet
RVC-Boss
thorsten
D-Link
IBM
CVE-2026-82110 · IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data Path Traversal
CVE-2026-90920 · IBM Maximo AI Service
Maximo AI Service Code Injection
CVE-2026-96119 · IBM i
IBM i is Affected By An Improper Control of Code Generation Vulnerability in HTTP Server Administration GUI
CVE-2026-82101 · IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data Path Traversal
CVE-2026-19622 · IBM Planning Analytics
IBM Planning Analytics Local is affected by security vulnerabilities
CVE-2026-82103 · IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data Information Disclosure
SAP_SE
CVE-2026-89107 · SAP_SE SAP S/4HANA (Manage Substitution/Validation Rules)
Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)
CVE-2026-89110 · SAP_SE SAP NetWeaver Visual Composer
Broken Access Control in SAP NetWeaver Visual Composer
CVE-2026-89111 · SAP_SE SAP Cloud
OAuth2 SSRF vulnerability in SAP Cloud SDK for Python
CVE-2026-89108 · SAP_SE SAP Manufacturing Integration and Intelligence (Configuration Service)
Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)
Netcore
zofe
Rapid7
CVE-2026-87689 · Rapid7 Metasploit Framework
Metasploit Framework Web Service REST API Missing Authentication on Credential Endpoints
Siemens
CVE-2026-44415 · Siemens Industrial Edge Device Kit - arm64 V1.10
Affected systems do not properly restrict access to internal APIs and paths for authenticated users.
CVE-2026-63350 · Siemens SIMATIC Drive Controller CPU 1504D TF
Affected devices do not properly restrict executable content contained in imported trace files.
CVE-2026-63353 · Siemens SIMATIC Drive Controller CPU 1504D TF
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.
CVE-2026-63354 · Siemens SIMATIC Drive Controller CPU 1504D TF
Affected devices do not properly validate and sanitize visual marker data contained in imported CSV trace files before rendering it on th…
Mozilla
CVE-2026-109740 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component
CVE-2026-109745 · Mozilla Firefox
Sandbox escape due to uninitialized memory in the DOM: Web Serial component
CVE-2026-109750 · Mozilla Firefox
Site isolation issue in the DOM: Web Authentication component
CVE-2026-109705 · Mozilla Firefox
Sandbox escape, site isolation issue due to incorrect boundary conditions, use-after-free in the Networking component
CVE-2026-109707 · Mozilla Firefox
Sandbox escape due to use-after-free in the Networking component
CVE-2026-109708 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the Networking component
NetHerman
CVE-2026-53997 · NetHerman Portal del Hermano (portaldelhermano.es)
Netherman Portal del Hermano Account Takeover via Password Reset Oracle
Perforce
Qexo
Apache Software Foundation
CVE-2026-92119 · Apache Software Foundation Apache Allura
Apache Allura: REST API Mass Assignment
CVE-2026-92116 · Apache Software Foundation Apache Allura
Apache Allura: OAuth1 missing callback validation
CVE-2026-92120 · Apache Software Foundation Apache Allura
Apache Allura: Oauth1 Replay Attack
NetEase
CVE-2026-109423 · NetEase NetEase Cloud Music for Windows