CVE-2026-24849 · openemr openemr
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,974 matching vulnerabilities · Page 216 of 780
openemr
Tattile s.r.l.
rollup
caddyserver
CVE-2026-27590 · caddyserver caddy
Caddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport
CVE-2026-27587 · caddyserver caddy
Caddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass
CVE-2026-27588 · caddyserver caddy
Caddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass
CVE-2026-27586 · caddyserver caddy
Caddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed
itsourcecode
CVE-2026-3133 · itsourcecode Document Management System
itsourcecode Document Management System Login loging.php sql injection
CVE-2026-3134 · itsourcecode News Portal Project
itsourcecode News Portal Project edit-category.php sql injection
CVE-2026-3135 · itsourcecode News Portal Project
itsourcecode News Portal Project add-category.php sql injection
actualbudget
InSAT
CVE-2026-22553 · InSAT MasterSCADA BUK-TS
InSAT MasterSCADA BUK-TS OS Command Injection
CVE-2026-21410 · InSAT MasterSCADA BUK-TS
InSAT MasterSCADA BUK-TS SQL Injection
mitre
Beyond Limits Inc.
CVE-2026-26222 · Beyond Limits Inc. Altec DocLink
DocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE
Mozilla
CVE-2026-2773 · Mozilla Firefox
Incorrect boundary conditions in the Web Audio component
CVE-2026-2796 · Mozilla Firefox
JIT miscompilation in the JavaScript: WebAssembly component
CVE-2026-2774 · Mozilla Firefox
Integer overflow in the Audio/Video component
CVE-2026-2775 · Mozilla Firefox
Mitigation bypass in the DOM: HTML Parser component
CVE-2026-2772 · Mozilla Firefox
Use-after-free in the Audio/Video: Playback component
CVE-2026-2779 · Mozilla Firefox
Incorrect boundary conditions in the Networking: JAR component
CVE-2026-2787 · Mozilla Firefox
Use-after-free in the DOM: Window and Location component
CVE-2026-2788 · Mozilla Firefox
Incorrect boundary conditions in the Audio/Video: GMP component
CVE-2026-2805 · Mozilla Firefox
Invalid pointer in the DOM: Core & HTML component
CVE-2026-2776 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software
CVE-2026-2778 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component
CVE-2026-2785 · Mozilla Firefox
Invalid pointer in the JavaScript Engine component
CVE-2026-2791 · Mozilla Firefox
Mitigation bypass in the Networking: Cache component
CVE-2026-2799 · Mozilla Firefox
Use-after-free in the DOM: Core & HTML component
CVE-2026-2784 · Mozilla Firefox
Mitigation bypass in the DOM: Security component
CVE-2026-2786 · Mozilla Firefox
Use-after-free in the JavaScript Engine component
CVE-2026-2789 · Mozilla Firefox
Use-after-free in the Graphics: ImageLib component
CVE-2026-2797 · Mozilla Firefox
Use-after-free in the JavaScript: GC component
CVE-2026-2777 · Mozilla Firefox
Privilege escalation in the Messaging System component
CVE-2026-2781 · Mozilla Firefox
Integer overflow in the Libraries component in NSS
CVE-2026-2780 · Mozilla Firefox
Privilege escalation in the Netmonitor component
CVE-2026-2792 · Mozilla Firefox
Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
CVE-2026-2793 · Mozilla Firefox
Memory safety bugs fixed in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
CVE-2026-2634 · Mozilla Firefox for iOS
Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS
CVE-2026-2782 · Mozilla Firefox
Privilege escalation in the Netmonitor component
CVE-2026-2800 · Mozilla Firefox
Spoofing issue in the WebAuthn component in Firefox for Android
CVE-2026-2806 · Mozilla Firefox
Uninitialized memory in the Graphics: Text component
CVE-2026-2795 · Mozilla Firefox
Use-after-free in the JavaScript: GC component
CVE-2026-2807 · Mozilla Firefox
Memory safety bugs fixed in Firefox 148 and Thunderbird 148
CVE-2026-2790 · Mozilla Firefox
Same-origin policy bypass in the Networking: JAR component
bleon-ethical
CVE-2026-27208 · bleon-ethical api-gateway-deploy
api-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution
Binardat Ltd.
CVE-2026-27507 · Binardat Ltd. 10G08-0800GSM Network Switch
Binardat 10G08-0800GSM Network Switch Hard-coded Credentials
CVE-2026-27515 · Binardat Ltd. 10G08-0800GSM Network Switch