by Kastro CVE-2026-86793 · SGLang SGLang
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,641 matching vulnerabilities · Page 59 of 773
SGLang
mitre
CVE-2026-79396 · mitre
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account crede…
CVE-2026-79395 · mitre
An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xion…
CVE-2026-52630 · mitre
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and t…
CVE-2026-71644 · mitre
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe…
rclone
Dell
CVE-2026-81467 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.
CVE-2026-81048 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Inject…
CVE-2026-81468 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.
CVE-2026-81046 · Dell ThinOS 10
Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability.
angular
Progress Software
CVE-2026-80462 · Progress Software Chef Automate
Privilege Escalation in Progress Chef Automate
WebPros
CVE-2026-65638 · WebPros ConfigServer Security & Firewall
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary co…
CVE-2026-65639 · WebPros ConfigServer Security & Firewall
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured a…
CVE-2026-68487 · WebPros Plesk
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
CVE-2026-68488 · WebPros Plesk
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to r…
WWBN
CVE-2026-89243 · WWBN AVideo
WWBN AVideo Stored XSS via UserGroups setGroup_name
CVE-2026-89253 · WWBN AVideo
AVideo Stored XSS via donationLink in watch page button
CVE-2026-89255 · WWBN AVideo
AVideo LoginControl Stored XSS via PGP Public Key
CVE-2026-89256 · WWBN AVideo
AVideo Bookmark Plugin Stored XSS via Chapter Names
CVE-2026-89249 · WWBN AVideo
AVideo YPTWallet Stored XSS via CryptoWallet Configuration
CVE-2026-89254 · WWBN AVideo
AVideo CustomizeUser Stored XSS via field_name Parameter
diegosouzapw
CVE-2026-88062 · diegosouzapw OmniRoute
OmniRoute ACP Custom-Agent Remote Code Execution (RCE)
mulika
CVE-2026-8778 · mulika MIPL Grouped Checkout Fields for WooCommerce. Customize & Organize Checkout Fields.
MIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload
krakenjs
CVE-2026-89043 · krakenjs passport-saml-encrypted
passport-saml-encrypted through 0.1.13 XML Signature Wrapping via Assertion Prepending
CVE-2026-89042 · krakenjs passport-saml-encrypted
passport-saml-encrypted through 0.1.13 Authentication Bypass via Missing Signature Verification
Forgejo
IBM
CVE-2026-81204 · IBM Langflow OSS
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
CVE-2026-79724 · IBM Langflow OSS
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
CVE-2026-78573 · IBM ContextForge MCP Gateway
IBM ContextForge MCP Gateway is affected by use of default credentials
CVE-2026-82100 · IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-85025 · IBM Langflow OSS
Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
CVE-2026-82107 · IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
CVE-2026-19646 · IBM Common Licensing
Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
CVE-2026-80424 · IBM DataStage on Cloud Pak for Data
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
OCaml
Unknown
CVE-2026-14560 · Unknown teddy-bear-customize-addon
Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload
CVE-2026-14559 · Unknown teddy-bear-customize-addon
Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover
CVE-2026-14563 · Unknown advanced-customized-prompts
Advanced Customized Prompts <= 1.0.1 - Unauthenticated Account Takeover
AWS
gohugoio
Fortinet
mistralai
OISF
Amazon
CVE-2026-85228 · Amazon Deep Java Library
Integer overflow in tensor buffer validation in Deep Java Library
Lenovo
Cloud Foundry Foundation
CVE-2026-47839 · Cloud Foundry Foundation UAA