by Kastro CVE-2026-86218 · N-able N-central
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,657 matching vulnerabilities · Page 65 of 774
N-able
Mikrotik
CVE-2026-86060 · Mikrotik RouterOS
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
CVE-2026-67276 · Mikrotik RouterOS
SSH user impersonation possible in Mikrotik RouterOS
CVE-2026-67278 · Mikrotik RouterOS
TLS server impersonation possible in Mikrotik RouterOS
getomni-ai
Tenda
CVE-2026-86151 · Tenda CP3
Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection
CVE-2026-86152 · Tenda CP3
Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection
CVE-2026-86148 · Tenda CP3
Tenda CP3 Kylin system.c SystemAsh os command injection
CVE-2026-86149 · Tenda CP3
Tenda CP3 NetCheckPing.cpp os command injection
CVE-2026-86153 · Tenda CP3
Tenda CP3 Redirect.cpp SetRedirectEnable privileges management
Voltronic Power
CVE-2026-44402 · Voltronic Power SNMP Web Pro
Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi
trycua
CVE-2026-86121 · trycua cua-computer-server
Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control
datalab-to
aimhubio
lavague-ai
TeamWiseFlow
sqlchat
TEN-framework
CVE-2026-85688 · TEN-framework ten-framework
TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer
YesWiki
WWBN
wpmudev
CVE-2026-83627 · wpmudev Hummingbird Performance – Cache & Page Speed Optimization for Core Web Vitals | Critical CSS | Minify CSS | Defer CSS Javascript | CDN
Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log
getwpfunnels
CVE-2026-10196 · getwpfunnels Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails
Mail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields
HKUDS
laradashboard
CVE-2026-86184 · laradashboard laradashboard
Lara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route
NangoHQ
SonicWall
CVE-2026-78327 · SonicWall Network Security Manager (NSM)
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Secu…
CVE-2026-81939 · SonicWall Network Security Manager (NSM)
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows…
CVE-2026-78328 · SonicWall Network Security Manager (NSM)
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privile…
IBM
CVE-2026-18658 · IBM Operational Decision Manager
IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
CVE-2026-18221 · IBM i
IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]
CVE-2026-17057 · IBM i
IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]
CVE-2026-17207 · IBM i
IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]
CVE-2026-19274 · IBM Observability with Instana (Agent)
IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
CVE-2026-77822 · IBM ContextForge MCP Gateway
IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint
pickplugins
shabti
CVE-2026-75816 · shabti Frontend Admin by DynamiApps
Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier
haris-musa
CVE-2026-85661 · haris-musa excel-mcp-server
excel-mcp-server 0.1.8 Arbitrary File Read/Write via stdio mode
inspireui
CVE-2026-13447 · inspireui MStore API – Create Native Android & iOS Apps On The Cloud
MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
lm-sys
coollabsio
LearnDash
Unknown
pjsip
webstudio-is
CVE-2026-86119 · webstudio-is webstudio