by Kastro CVE-2026-79657 · nltk nltk
The archive.
Browse all tracked critical vulnerabilities, including records outside today's brief.
38,711 matching vulnerabilities · Page 79 of 775
nltk
mitre
vrana
QWED-AI
Adobe
CVE-2026-76195 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
CVE-2026-76197 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
CVE-2026-76193 · Adobe Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
Alluxio
DrayTek Corporation
CVE-2026-71921 · DrayTek Corporation VigorSwitch G2540xs
DrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi
CVE-2026-71914 · DrayTek Corporation VigorAP 918R
DrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm
CVE-2026-71933 · DrayTek Corporation VigorSwitch G2540xs
DrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions
MervinPraison
oauth2-proxy
lin-snow
OpenSSL
Weidmueller Interface
CVE-2026-63586 · Weidmueller Interface IE-SR-2TX-WL
Unauthenticated Remote Code Execution via Shell Injection in Web Management Interface
Apache Software Foundation
CVE-2026-49845 · Apache Software Foundation Apache Hive
Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths
CVE-2026-55976 · Apache Software Foundation Apache Hive
Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url
CVE-2026-78329 · Apache Software Foundation Apache Camel
Apache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes
getgrav
CVE-2026-72699 · getgrav grav-plugin-login
Grav Login Plugin before 3.9.1 Email Enumeration via Registration
CVE-2026-72702 · getgrav grav
Grav CMS before 2.0.16 Origin Validation Bypass via Referer
CVE-2026-56710 · getgrav grav
Grav Login Plugin before 1.0.16 Privilege Escalation via Unlock
TYPO3
CVE-2026-77136 · TYPO3 Extension "powermail"
Server-Side Template Injection in extension "powermail" (powermail)
CVE-2026-77138 · TYPO3 Extension "HTML5 Video Player vs. Powermail"
Remote Code Execution in extension "HTML5 Video Player vs. Powermail" (html5videoplayer_powermail)
zephyrproject
CVE-2026-13214 · zephyrproject zephyr
Stack buffer overflow in OCPP GetConfiguration key parsing
miniorange.com
CVE-2026-77998 · miniorange.com SAML SSO Free for Joomla extension for Joomla
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4
A CPT
CVE-2026-32563 · A CPT ACPT (Pro) - Custom Post Types Plugin for WordPress
WordPress ACPT (Pro) - Custom Post Types Plugin for WordPress plugin <= 2.0.63 - PHP Object Injection vulnerability
gitpython-developers
CVE-2026-78676 · gitpython-developers GitPython
GitPython before 3.1.59 Remote Code Execution via Config Injection
Nexcess
CVE-2026-78265 · Nexcess The Events Calendar
WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability
TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company
CVE-2026-16286 · TRtek Technological Products Computer Software Hardware Industry and Trade Limited Company Software Repository Management
File Upload in TRTEK Software's Software Repository Management
weDevs
CVE-2026-78262 · weDevs WP Project Manager
WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability
wintercms
cakephp
cbcoutinho
Combodo
Cozmoslabs
CVE-2026-78267 · Cozmoslabs TranslatePress
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability
tophive
FURUNO ELECTRIC CO., LTD.
CVE-2026-59769 · FURUNO ELECTRIC CO., LTD. FA-50
FA-50 all versions contain hard-coded credentials.
ransomlook
CVE-2026-78555 · ransomlook ransomlook
RansomLook API Key Disclosure Through /admin/apikeys HTML Source
PixelYourSite Professional
CVE-2026-32555 · PixelYourSite Professional Boost
WordPress Boost plugin <= 2.0.4 - SQL Injection vulnerability
WatchGuard
CVE-2026-57909 · WatchGuard WatchGuard Agent
WatchGuard Agent path traversal allows unauthenticated remote code execution
CVE-2026-57910 · WatchGuard WatchGuard Agent
WatchGuard Agent improper authentication allows unauthenticated remote code execution
WBW
CVE-2026-32554 · WBW WooBeWoo Product Filter Pro