by Kastro CVE-2026-74233 · Zbtlink WE1326
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,711 matching vulnerabilities · Page 75 of 775
Zbtlink
mitre
CVE-2026-35868 · mitre
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3…
CVE-2026-35869 · mitre
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.
CVE-2026-26897 · mitre
An issue in EcoOnline EHS (com.airsweb.v10) application for Android, version 0.2.499 allows a remote attacker to obtain sensitive informa…
CVE-2026-75337 · mitre
The static resource interface /api/static/{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to path traversal.
CVE-2026-30612 · mitre
An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows…
CVE-2026-37065 · mitre
Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.
CVE-2026-37003 · mitre
Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.
CVE-2026-37007 · mitre
A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path trav…
CVE-2026-75357 · mitre
An issue in Bilibili Desktop v.1.17.9 allows a remote attacker to execute arbitrary code via the bili-inject.js and bili-bridge.js compon…
CVE-2026-37004 · mitre
BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute…
CVE-2026-37006 · mitre
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code…
CVE-2026-37071 · mitre
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an auth…
CVE-2026-37072 · mitre
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.
limanmys
Spring
CVE-2026-47864 · Spring Spring Integration
Unsafe Java deserialization in SerializingHttpMessageConverter — remote code execution
CVE-2026-47884 · Spring Spring Framework
Spring Framework Improper Path Limitation in XsltView
CVE-2026-47890 · Spring Spring Framework
Spring Framework Server Sent Event stream corruption while rendering fragments
CVE-2026-47891 · Spring Spring Framework
Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder
CVE-2026-47892 · Spring Spring Framework
Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints
CVE-2026-47875 · Spring Spring Batch
JobParameterDeserializer bypasses the trusted-type allowlist
CVE-2026-59270 · Spring Spring Security
Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces
mims-harvard
hashthemes
INFINITUM FORM
CVE-2026-78286 · INFINITUM FORM Geo Controller
WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability
team-telnyx
ACPT
CVE-2026-32566 · ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - Privilege Escalation vulnerability
joomlaeventmanager.net
CVE-2026-77991 · joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla
Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1
mcp-router
TOOOLS
CVE-2026-81673 · TOOOLS iSquad
Multiple Vulnerabilities in TOOOLS' iSquad
CVE-2026-81672 · TOOOLS iSquad
Multiple Vulnerabilities in TOOOLS' iSquad
CVE-2026-81674 · TOOOLS iSquad
Multiple Vulnerabilities in TOOOLS' iSquad
CVE-2026-81675 · TOOOLS iSquad
Multiple Vulnerabilities in TOOOLS' iSquad
VMware by Broadcom
CVE-2026-59354 · VMware by Broadcom Spring Security (OAuth2 Authorization Server module)
Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadata
Unknown
WP Manage Ninja
CVE-2026-78274 · WP Manage Ninja Fluent Boards Pro
WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability
CODEPRESS IT Solutions LLC
CVE-2026-32479 · CODEPRESS IT Solutions LLC Visitor Traffic Real Time Statistics Pro
WordPress Visitor Traffic Real Time Statistics Pro plugin <= 11.17 - SQL Injection vulnerability
ePayco
jahlives
CVE-2026-81698 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Shell Injection via info command
CVE-2026-81700 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 GPG Signature Verification Bypass
CVE-2026-81685 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata
CVE-2026-81694 · jahlives openssl_encrypt
openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command
CVE-2026-81695 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Terminal Injection via key_id
CVE-2026-81696 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Terminal Injection via info Command
CVE-2026-81680 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal
CVE-2026-81681 · jahlives openssl_encrypt
openssl_encrypt before 1.4.9 False Encryption via Cleartext Storage
Jonathan de Jong
CVE-2026-78288 · Jonathan de Jong Beautiful Taxonomy Filters