by Kastro CVE-2026-102240 · Netcore NAP930
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,502 matching vulnerabilities · Page 36 of 771
Netcore
Ziroom
CVE-2026-101261 · Ziroom ZHOME A0101
Ziroom ZHOME A0101 firstSetup_wifi command injection
CVE-2026-101262 · Ziroom ZHOME A0101
Ziroom ZHOME A0101 set_online_client command injection
CVE-2026-101263 · Ziroom ZHOME A0101
Ziroom ZHOME A0101 set_online_client command injection
CVE-2026-101264 · Ziroom ZHOME A0101
Ziroom ZHOME A0101 set_passwd command injection
mitre
CVE-2024-31026 · mitre
An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the cha…
CVE-2026-39117 · mitre
An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitr…
CVE-2026-77177 · mitre
Open GenAI Stack (aka ogx-ai) 2026-06-11, as used in the Meta AI backend for WhatsApp and other products, allows code execution because p…
CVE-2026-94952 · mitre
A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT (NTR150) firmware V3.4.0-B20201030.
CVE-2026-79538 · mitre
metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-prox…
CVE-2026-79537 · mitre
metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference (IDOR) in the MCP transport session dispatch.
CVE-2026-79536 · mitre
bytebase dbhub v1.2.0 was discovered to contain a SQL injection vulnerability in the /utils/sql-parser.ts component.
FAST
gz-yami
MyPresta
CVE-2026-85520 · MyPresta Google Merchant Center Feed
Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
Apache Software Foundation
CVE-2026-91012 · Apache Software Foundation Apache Karaf
Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation
CVE-2026-91048 · Apache Software Foundation Apache Karaf
Apache Karaf: Missing authorization on the jdbc:* shell command scope allows privilege escalation to remote code execution via jdbc:ds-create
Hitachi Energy
CVE-2026-8066 · Hitachi Energy RTU500 series CMU firmware
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthentica…
CVE-2026-8065 · Hitachi Energy RTU500 series CMU firmware
An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenti…
Mozilla
CVE-2026-100788 · Mozilla Thunderbird
Invalid pointer in the JavaScript: WebAssembly component
CVE-2026-100810 · Mozilla Thunderbird
Other issue in the DevTools component
CVE-2026-100762 · Mozilla Firefox
Sandbox escape due to use-after-free in the DOM: Content Processes component
CVE-2026-100763 · Mozilla Thunderbird
Incorrect boundary conditions in the Graphics: WebGPU component
CVE-2026-100770 · Mozilla Firefox
Sandbox escape due to use-after-free in the DOM: Content Processes component
CVE-2026-100775 · Mozilla Firefox
Sandbox escape in the Graphics component
CVE-2026-100778 · Mozilla Firefox
Sandbox escape due to use-after-free in the DOM: Core & HTML component
CVE-2026-100781 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component
CVE-2026-100786 · Mozilla Firefox
Sandbox escape due to use-after-free in the Graphics component
CVE-2026-100794 · Mozilla Thunderbird
Sandbox escape due to incorrect boundary conditions in the Internationalization component
CVE-2026-100758 · Mozilla Firefox
Sandbox escape in the DOM: Navigation component
CVE-2026-100760 · Mozilla Firefox
Sandbox escape in the Security: Process Sandboxing component
CVE-2026-100787 · Mozilla Firefox
Sandbox escape in the XUL component
CVE-2026-100800 · Mozilla Firefox
Sandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-100804 · Mozilla Thunderbird
Sandbox escape due to use-after-free in the Preferences: Backend component
CVE-2026-100811 · Mozilla Thunderbird
Sandbox escape due to use-after-free in the DOM: Core & HTML component
CVE-2026-100818 · Mozilla Thunderbird
Sandbox escape due to use-after-free in the Widget: Gtk component
CVE-2026-100819 · Mozilla Firefox
Sandbox escape due to incorrect boundary conditions in the XPCOM component
CVE-2026-100828 · Mozilla Firefox
Mitigation bypass in the Bookmarks & History component
CVE-2026-100829 · Mozilla Firefox
Mitigation bypass in the DOM: Security component
Dassault Systèmes
CVE-2026-84154 · Dassault Systèmes GEOVIA Geospatial Data Manager
Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x
psyb0t
harborist
Flowring Technology Corp
CVE-2026-96428 · Flowring Technology Corp Agentflow 4.0
Flowring Agentflow 4.0 - SQL Injection
CVE-2026-96431 · Flowring Technology Corp Agentflow 4.0
Flowring Agentflow 4.0 - Unrestricted Upload of File with Dangerous Type
CVE-2026-96429 · Flowring Technology Corp Agentflow 4.0
Flowring Agentflow 4.0 - SQL Injection
webmin
Shenzhen Dbit Network Equipment
CVE-2026-7192 · Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router
Multiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment
Dell
CVE-2026-73595 · Dell Secure Connect Gateway (SCG) Policy Manager
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Witho…
DENX Software Engineering
CVE-2026-15390 · DENX Software Engineering Das U-Boot