The archive.

CVE-2026-51645 · mitre

Incorrect access control in the getPasswordCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain t…

CVE-2026-51663 · mitre

Incorrect access control in the getWiFiApcliScan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigge…

CVE-2026-37236 · mitre

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control.

EPSS 0.4%CVSS 9.8

CVE-2026-51622 · mitre

Incorrect access control in the getWanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WAN co…

CVE-2026-51626 · mitre

Incorrect access control in the getWiFiWpsCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain WP…

CVE-2026-51628 · mitre

Incorrect access control in the getGenerateWiFiWpsPin function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to g…

CVE-2026-51636 · mitre

Incorrect access control in the getWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain…

CVE-2026-51643 · mitre

Incorrect access control in the getNtpCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain NTP co…

CVE-2026-51646 · mitre

Incorrect access control in the getParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain…

CVE-2026-51649 · mitre

Incorrect access control in the getDiagnosisCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain…

CVE-2026-51657 · mitre

Incorrect access control in the getSyslogCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sys…

CVE-2026-51660 · mitre

Incorrect access control in the getIpPortFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to ob…

CVE-2026-51661 · mitre

Incorrect access control in the getPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obt…

Green-Computing1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-82082 · Green-Computing NUMail

Green-Computing｜NUMail - OS Command Injection

EPSS 2%CVSS 9.8

labring1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-68929 · labring FastGPT

FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization

EPSS 0.4%public exploit CVSS 9.3

getpocket1 vulnerability on this pageMax CVSS 9.2Priority 45KEV 0

CVE-2026-82090 · getpocket Pocket

Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.

EPSS 0.4%public exploit CVSS 9.2

Xiiaozet2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-76943 · Xiiaozet Xiiaozet LK100W

Xiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel

EPSS 1%CVSS 9.8

CVE-2026-78239 · Xiiaozet Xiiaozet LK100W

Xiiaozet LK100W Missing Authentication for Critical Function

Ebyte4 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-71187 · Ebyte Ebyte NA111-M Firmware

Ebyte NA111-M Use of Client-Side Authentication

CVE-2026-73125 · Ebyte Ebyte NA111-M Firmware

Ebyte NA111-M Missing Authentication for Critical Function

CVE-2026-76179 · Ebyte Ebyte NA111-M Firmware

Ebyte NA111-M Use of GET Request Method With Sensitive Query Strings

CVE-2026-69658 · Ebyte Ebyte NA111-M Firmware

Ebyte NA111-M Cleartext Transmission of Sensitive Information

EPSS 0.3%CVSS 9.8

TriliumNext2 vulnerabilities on this pageMax CVSS 9.3Priority 41KEV 0

CVE-2026-53578 · TriliumNext Trilium

Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

EPSS 0.3%public exploit CVSS 9.3

CVE-2026-53579 · TriliumNext Trilium

Trilium: Note Import to RCE via Book Note

EPSS 0.3%CVSS 9.3

Linux14 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-80600 · Linux Linux

batman-adv: dat: acquire ARP hw source only after skb realloc

CVE-2026-80609 · Linux Linux

qede: fix out-of-bounds check for cqe->len_list[]

CVE-2026-80617 · Linux Linux

net: airoha: fix foe_check_time allocation size

CVE-2026-80630 · Linux Linux

net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen

CVE-2026-80634 · Linux Linux

netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag

CVE-2026-80612 · Linux Linux

net: lwtunnel: Drop skb metadata before LWT encapsulation

CVE-2026-80668 · Linux Linux

netfilter: nf_conntrack_expect: use conntrack GC to reap expectations

CVE-2026-80673 · Linux Linux

ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find()

CVE-2026-80674 · Linux Linux

ntfs: validate resident attribute lists and harden the validator

CVE-2026-80670 · Linux Linux

perf tools: Use perf_env__get_cpu_topology() in machine__resolve()

EPSS 0.7%CVSS 9.1

CVE-2026-80681 · Linux Linux

vxlan: re-fetch eth header after route_shortcircuit()

EPSS 0.5%CVSS 9.8

CVE-2026-80603 · Linux Linux

netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read

EPSS 0.6%CVSS 9.1

CVE-2026-80684 · Linux Linux

KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

EPSS 0.2%CVSS 9.3

CVE-2026-80671 · Linux Linux

perf sched: Fix register_pid() overflow, strcpy, and BUG_ON

EPSS 0.2%CVSS 9.3

wazuh1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2026-61800 · wazuh wazuh

Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)

EPSS 1.0%CVSS 9.1

Tsuyoshi Saito1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-78032 · Tsuyoshi Saito SOY CMS

SOY CMS contains an issue with deserialization of untrusted data.

WatchGuard5 vulnerabilities on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-19313 · WatchGuard Fireware OS

Fireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution

CVE-2026-19315 · WatchGuard Fireware OS

Fireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution

CVE-2026-19318 · WatchGuard Fireware OS

Fireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution

CVE-2026-13086 · WatchGuard Fireware OS

Fireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint