by Kastro CVE-2026-43641 · Softaculous Virtualizor
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,507 matching vulnerabilities · Page 41 of 771
Softaculous
CVE-2026-43642 · Softaculous Virtualizor
Softaculous Virtualizor PHP Object Injection via Billing Module Handler
Dokploy
sooperset
CVE-2026-77254 · sooperset mcp-atlassian
MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials
CVE-2026-77244 · sooperset mcp-atlassian
[mcp-atlassian] Authentication bypass in HTTP transport: AtlassianOpaqueTokenVerifier accepts any non-empty token
home-assistant
LANTRONIX
CVE-2026-80144 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write
CVE-2026-80145 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password
CVE-2026-80151 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download
CVE-2026-80152 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule
CVE-2026-80155 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation
CVE-2026-80146 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read
CVE-2026-80154 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass
CVE-2026-80156 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass
CVE-2026-80147 · LANTRONIX SLC8000
Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write
Adobe
CVE-2026-73369 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-75699 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-75703 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-75721 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-75723 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CVE-2026-75745 · Adobe AEM 6.5 Forms JEE
Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)
CVE-2026-84412 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-89275 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-75682 · Adobe Adobe Connect
Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CVE-2026-81995 · Adobe AEM 6.5 Forms JEE
Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)
CVE-2026-82013 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-82443 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-83660 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-75686 · Adobe Adobe Connect
Adobe Connect | Improper Input Validation (CWE-20)
CVE-2026-75728 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CVE-2026-82000 · Adobe AEM 6.5 Forms JEE
Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-82009 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CVE-2026-75684 · Adobe Adobe Connect
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75689 · Adobe Adobe Connect
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75697 · Adobe Adobe Connect
Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-75698 · Adobe Adobe Connect
Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)
CVE-2026-82008 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Input Validation (CWE-20)
CVE-2026-89276 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CVE-2026-82010 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
CVE-2026-82011 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
vectordotdev
plone
CVE-2026-57149 · plone plone.app.portlets
plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection
SolarWinds
CVE-2026-28324 · SolarWinds Observability Self-Hosted
SolarWinds Observability Self-Hosted Remote Code Execution Vulnerability
Hewlett Packard Enterprise (HPE)
CVE-2026-76708 · Hewlett Packard Enterprise (HPE) ALE
Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)
HKUDS
David-Crty
GitroomHQ
RTI
CVE-2026-7866 · RTI Connext Professional
Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
CVE-2026-18461 · RTI Connext Professional