by Kastro CVE-2026-106037 · kvcache-ai Mooncake
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
4,832 matching vulnerabilities · Page 29 of 97
kvcache-ai
microsoft
smarty-php
Progress Software
CVE-2026-91140 · Progress Software Autonomous REST Connector GenAI Agents
OS command injection in Progress Software Autonomous REST Connector GenAI Agents
Dell
CVE-2026-86360 · Dell System Update
Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…
CVE-2026-63688 · Dell Dell Container Storage Modules (CSM)
Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in…
CVE-2026-63692 · Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability.
CVE-2026-54472 · Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs.
CVE-2026-61421 · Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorizat…
CVE-2026-67269 · Dell Container Storage Modules (CSM)
Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the Co…
CVE-2026-67273 · Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template En…
CVE-2026-63691 · Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for Pow…
payloadcms
CVE-2026-105844 · payloadcms payload
Payload: Prototype pollution in Payload Import Export plugin
CVE-2026-105857 · payloadcms payload
Payload: RCE in Payload Form Builder
CVE-2026-105845 · payloadcms payload
Payload: SQL Injection in SQLite and Postgres
CVE-2026-105859 · payloadcms payload
Payload: Unauthorized update to collection documents
CVE-2026-105863 · payloadcms payload
Payload authentication token field handling issue
CVE-2026-105848 · payloadcms payload
Payload: Insufficient Access Control in Stripe REST Proxy
CVE-2026-105851 · payloadcms payload
Payload: Field access control bypass on auth collections
CVE-2026-106197 · Google Chrome
Use after free in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox…
CVE-2026-106358 · Google Chrome
Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sand…
CVE-2026-102322 · Google Chrome
Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via…
CVE-2026-106239 · Google Chrome
Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrar…
CVE-2026-106382 · Google Chrome
Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sand…
CVE-2026-106419 · Google Chrome
Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside…
CVE-2026-55330 · Google Android
In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the code.
kognetiks
CVE-2026-32579 · kognetiks Kognetiks Chatbot for WordPress
WordPress Kognetiks Chatbot for WordPress plugin <= 2.4.9 - Arbitrary File Upload vulnerability
Linux
AmentoTech
CVE-2026-39753 · AmentoTech Taskbot
WordPress Taskbot plugin <= 6.6 - Privilege Escalation vulnerability
CVE-2026-39757 · AmentoTech Taskbot
WordPress Taskbot plugin <= 6.6 - Arbitrary File Upload vulnerability
CVE-2026-39759 · AmentoTech Workreap Core
WordPress Workreap Core plugin <= 3.4.5 - Arbitrary File Upload vulnerability
CVE-2026-39770 · AmentoTech Doctreat
WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability
CVE-2026-39773 · AmentoTech Doctreat Core
WordPress Doctreat Core plugin <= 1.7.0 - Privilege Escalation vulnerability
eLightUp
revmakx
JetBrains
quasarframework
Booknetic
Data443 Risk Mitigation, Inc.
CVE-2026-39797 · Data443 Risk Mitigation, Inc. GDPR Framework By Data443
WordPress GDPR Framework By Data443 plugin <= 2.5.0 - PHP Object Injection vulnerability
Mozilla
brewlabs
CVE-2026-39795 · brewlabs SendPress Newsletters
WordPress SendPress Newsletters plugin <= 1.26.1.20 - SQL Injection vulnerability
reputeinfosystems
CVE-2026-42417 · reputeinfosystems ARMember Premium
WordPress ARMember Premium plugin <= 7.8 - SQL Injection vulnerability
planka
RadiusTheme
CVE-2026-39764 · RadiusTheme Radius Booking — Booking Calendar for Appointments & Services
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability
p-themes
CVE-2026-42415 · p-themes Porto Theme - Functionality
WordPress Porto Theme - Functionality plugin <= 3.9.3 - SQL Injection vulnerability
Serhii Pasyuk
CVE-2026-39785 · Serhii Pasyuk Gmedia Photo Gallery
WordPress Gmedia Photo Gallery plugin <= 1.25.1 - SQL Injection vulnerability
Weblizar – WordPress Themes & Plugin
CVE-2026-41555 · Weblizar – WordPress Themes & Plugin Newsletter Subscription Form – User Subscriptions Form, Capture Email