The archive.

CVE-2026-24111 · mitre

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVE-2026-24113 · mitre

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVE-2026-24114 · mitre

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

CVE-2026-24112 · mitre

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-26695 · mitre

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordstudent_edit.php.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-24110 · mitre

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-24115 · mitre

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

EPSS 0.8%CVSS 9.8

CVE-2026-24108 · mitre

An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.

EPSS 0.7%CVSS 9.8

CVE-2026-26694 · mitre

code-projects Simple Student Alumni System v1.0 is vulnerale to SQL Injection in /TracerStudy/modal_view.php.

CVE-2026-26696 · mitre

code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_edit.php.

CVE-2026-26702 · mitre

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/myitem_reuse.php.

CVE-2026-26703 · mitre

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/advance_search.php.

CVE-2026-26701 · mitre

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_tecnical_user.php.

CVE-2026-26706 · mitre

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_receipt.php.

CVE-2026-26707 · mitre

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_supplier.php.

CVE-2026-26700 · mitre

sourcecodester Personnel Property Equipment System v1.0 is vulnerable to SQL Injection in /ppes/admin/edit_employee.php.

CVE-2026-26704 · mitre

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_category.php.

CVE-2026-26705 · mitre

sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/view_product.php.

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-3400 · Tenda AC15

Tenda AC15 TextEditingConversion stack-based overflow

EPSS 1.0%public exploit CVSS 9.8

nest.js1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-2293 · nest.js nest.js

NestJS 11.1.13 - Lack of data validation allowing authentication/authorization bypass

EPSS 0.8%public exploit CVSS 9.8

bigcat881 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2026-28231 · bigcat88 pillow_heif

pillow_heif Has Integer Overflow in Encode Path Buffer Validation that Leads to Heap Out-of-Bounds Read

EPSS 0.7%public exploit CVSS 9.1

Johnson Controls2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-21659 · Johnson Controls Frick Controls Quantum HD

Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion

EPSS 1%CVSS 9.8

CVE-2026-21660 · Johnson Controls Frick Controls Quantum HD

Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware

EPSS 0.3%CVSS 9.8

Centreon3 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-2749 · Centreon Centreon Open Tickets on Central Server

Path traversal in Centreon Open Tickets

EPSS 0.6%CVSS 9.9

CVE-2026-2750 · Centreon Centreon Open Tickets on Central Server

Command Injection via CLAPI generatetraps

EPSS 0.3%CVSS 9.8

CVE-2026-2751 · Centreon Centreon Web on Central Server

Blind SQL Injection

EPSS 0.3%CVSS 9.8

go-vikunja1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-28268 · go-vikunja vikunja

Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse

EPSS 0.7%CVSS 9.8

Intermesh1 vulnerability on this pageMax CVSS 9.4Priority 40KEV 0

CVE-2026-27947 · Intermesh groupoffice

Group-Office Vulnerable to Remote Code Execution (RCE)

EPSS 0.8%CVSS 9.4

seerr-team1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-27707 · seerr-team seerr

Plex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint

gVectors Team1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-28562 · gVectors Team wpForo Forum

wpForo Forum 2.4.14 SQL Injection via Topics ORDER BY Parameter

Pro3W1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-15498 · Pro3W Pro3W CMS

SQL Injection in Pro3W CMS

EPSS 0.6%CVSS 9.3

Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks)2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-27751 · Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS

SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials

CVE-2026-27755 · Shenzhen Hongyavision Technology Co., Ltd. (Sodola Networks) SODOLA SL902-SWTGW124AS

SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID

Dayneks Software Industry and Trade Inc.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-11251 · Dayneks Software Industry and Trade Inc. E-Commerce Platform

SQLi in Dayneks Software's E-Commerce Platform

Signum Technology Promotion and Training Inc.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-11252 · Signum Technology Promotion and Training Inc. windesk.fm

SQLi in Signum Technologies' windesk.fm

PluXml1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-24352 · PluXml PluXml CMS

Session Fixation in PluXml CMS