by Kastro CVE-2026-83548 · SonicWall SMA1000
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,657 matching vulnerabilities · Page 68 of 774
SonicWall
predis
Proxmox Server Solutions GmbH
CVE-2023-54391 · Proxmox Server Solutions GmbH Proxmox Virtual Environment (VE)
Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter
WWBN
siyuan-note
vercel
bdthemes
CVE-2026-78657 · bdthemes SigmaForms Pro – AI Generated Forms
SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field
Manacle Technologies
CVE-2026-84147 · Manacle Technologies Multi-tenant ERP System
Remote Code Execution Vulnerability in Manacle Technologies ERP System
CVE-2026-84148 · Manacle Technologies Multi-tenant ERP System
Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System
CVE-2026-84149 · Manacle Technologies Multi-tenant ERP System
Information Disclosure Vulnerability in Manacle Technologies ERP System
Hewlett Packard Enterprise (HPE)
CVE-2026-73749 · Hewlett Packard Enterprise (HPE) AOS-CX
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-CX
CVE-2026-76657 · Hewlett Packard Enterprise (HPE) Fabric Composer
Authentication Bypass in HPE Networking Fabric Composer API allows Administrative Access
CVE-2026-76658 · Hewlett Packard Enterprise (HPE) Fabric Composer
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer SSH Daemon
CVE-2026-73778 · Hewlett Packard Enterprise (HPE) AOS-CX
Credential Manager Vulnerability Allows Unauthorized Administrative Access
CVE-2026-73701 · Hewlett Packard Enterprise (HPE) Fabric Composer
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
CVE-2026-19766 · Hewlett Packard Enterprise (HPE) Fabric Composer
Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
CVE-2026-73700 · Hewlett Packard Enterprise (HPE) Fabric Composer
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
Phison Electronics Corporation
CVE-2026-84696 · Phison Electronics Corporation PS3111-S11 Controller Firmware
Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
Pyramid Solutions
CVE-2026-78012 · Pyramid Solutions EtherNet/IP Adapter DLL Kit (EIPA)
Stack-based Buffer Overflow in Pyramid Solutions NetStaX EtherNet/IP Stack
Klemsan Electrical Electronics Inc.
CVE-2026-18808 · Klemsan Electrical Electronics Inc. KIO (Klemsan Internet Objects)
Unauthenticated Remote Code Execution via Code Injection in Klemsan's KIO
Mozilla
CVE-2026-84142 · Mozilla Firefox
Internally found bugs fixed in Thunderbird 155
CVE-2026-84637 · Mozilla Thunderbird
Calendar invitation attachments could launch local executables
CVE-2026-84135 · Mozilla Firefox
Other issue in Firefox Focus for Android
CVE-2026-84143 · Mozilla Firefox
Internally found bugs fixed in Thunderbird 155, Thunderbird ESR 153.2 and Thunderbird ESR 140.15
CVE-2026-84139 · Mozilla Firefox
Clickjacking issue in the DOM: Events component
CVE-2026-84141 · Mozilla Firefox
Integer overflow in the Graphics: ImageLib component
CVE-2026-84136 · Mozilla Firefox
Other issue in the DOM: Navigation component
CVE-2026-84639 · Mozilla Thunderbird
Uninitialized memory in MIME parsing
CVE-2026-84140 · Mozilla Firefox
Site isolation issue in the DOM: Navigation component
CVE-2026-84137 · Mozilla Firefox
Spoofing issue in the DOM: Core & HTML component
craftcms
melograno
CVE-2026-9055 · melograno Booking for Appointments and Events Calendar – Amelia
Booking for Appointments and Events Calendar – Amelia (Premium) 8.0 - 9.6.2 - Unauthenticated Privilege Escalation to Administrator via 'externalId'
OpenAI
Paul Ryan
Team Password Manager
CVE-2026-84699 · Team Password Manager Team Password Manager
Team Password Manager before 14.184.308 Authentication Bypass in Password Reset
Teracity Software Technologies Inc.
CVE-2026-18765 · Teracity Software Technologies Inc. E-OSB
SQL Injection in Teracity Sotware's Teracity E-OSB Platform
TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company
CVE-2026-18210 · TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Products's Store
SQL Injection in TRtek Technological Products's Store
CVE-2026-84333 · Google Chrome
Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside…
CVE-2026-84352 · Google Chrome
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside…
CVE-2026-84353 · Google Chrome
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social eng…
CVE-2026-84354 · Google Chrome
Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to…
CVE-2026-84325 · Google Chrome
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering…
CVE-2026-84324 · Google Chrome
Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox v…
bookstackapp
CVE-2026-84695 · bookstackapp bookstack
BookStack before 26.05.4 Stored XSS via Drawing Upload
Rockwell Automation
CVE-2026-9621 · Rockwell Automation RSLinx Classic®
RSLinx Classic® - Multiple Vulnerabilities
WC Lovers
CVE-2026-81286 · WC Lovers WCFM Marketplace
WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability
Dell
Drupal
TMT Machine Industry and Trade Ltd. Co.
CVE-2026-18931 · TMT Machine Industry and Trade Ltd. Co. Talassoft Industrial Management Software