The archive.

Unstructured-IO1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-71428 · Unstructured-IO unstructured

unstructured: Server-Side Request Forgery in the URL-based partitioning

EPSS 0.4%public exploit CVSS 9.3

Wireshark Foundation1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-76886 · Wireshark Foundation Wireshark

Heap-based Buffer Overflow in Wireshark

EPSS 0.4%public exploit CVSS 9.8

OSNEXUS1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-18265 · OSNEXUS QuantaStor

OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability

EPSS 1%CVSS 9.8

IBM5 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

Jonathan Daggerhart1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-73992 · Jonathan Daggerhart Query Wrangler

WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability

EPSS 0.8%CVSS 9.9

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-63037 · Apache Software Foundation Apache InLong

Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint

CVE-2026-63038 · Apache Software Foundation Apache InLong

Apache InLong: SQL Injection via String Concatenation Vulnerability Report

CVE-2026-63039 · Apache Software Foundation Apache InLong

Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService

Baylan Measuring Instruments Industry and Trade Inc.1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-15706 · Baylan Measuring Instruments Industry and Trade Inc. Baylan Smart Meter Management Application (BMS)

Missing Authentication for Critical Function in Management API in Baylan Water Meters's BMS

Frauscher Sensortechnik1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-14950 · Frauscher Sensortechnik FDS 102

Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Insufficient Session Expiration due to flawed session expiration logic

Monkeysan1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-66672 · Monkeysan Flatastic

WordPress Flatastic theme <= 2.0 - PHP Object Injection vulnerability

n8n-io2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-77071 · n8n-io n8n

n8n before 1.123.69 PostgREST Filter Injection via Supabase

CVE-2026-77070 · n8n-io n8n

n8n before 1.123.69 NoSQL Injection via MongoDB Node

Roxnor1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-73993 · Roxnor FundEngine

WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

WPEverest1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-74001 · WPEverest User Registration & Membership Pro

WordPress User Registration & Membership Pro plugin <= 5.4.5 - Account Takeover vulnerability

WPMU DEV1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-66583 · WPMU DEV Forminator

WordPress Forminator plugin <= 1.57.0 - PHP Object Injection vulnerability

indithemes1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-74014 · indithemes IT Residence

WordPress IT Residence theme <= 3.2.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

Splunk4 vulnerabilities on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-76404 · Splunk Splunk MCP Server app

Remote Code Execution (RCE) through Deserialization of Untrusted Data in Splunk MCP Server app

EPSS 0.7%CVSS 9.1

CVE-2026-76310 · Splunk Splunk Enterprise

Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise

EPSS 0.4%CVSS 9.4

CVE-2026-76311 · Splunk Splunk Enterprise

Improper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise

EPSS 0.4%CVSS 9.4

CVE-2026-76312 · Splunk Splunk Enterprise

Improper Access Control through Embedded Reports in Splunk Enterprise

EPSS 0.4%CVSS 9.4

themagnifico522 vulnerabilities on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-74016 · themagnifico52 Smart Cleaning

WordPress Smart Cleaning theme <= 4.8.6 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

CVE-2026-74018 · themagnifico52 Warehouse Cargo

WordPress Warehouse Cargo theme <= 2.6.9 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

ThemeGoods2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-15689 · ThemeGoods Capella

WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

CVE-2025-15688 · ThemeGoods Capella

WordPress Capella theme <= 2.5.5 - SQL Injection vulnerability

Tyche Softwares.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-66682 · Tyche Softwares. Abandoned Cart Pro for WooCommerce

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-75860 · Unknown JSON Options

JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update

David Lingren1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-66600 · David Lingren Media LIbrary Assistant

WordPress Media LIbrary Assistant plugin <= 3.39 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.1

CleanTalk Inc1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66593 · CleanTalk Inc Security & Malware scan by CleanTalk

WordPress Security & Malware scan by CleanTalk plugin <= 2.184 - SQL Injection vulnerability

CodexThemes1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66609 · CodexThemes TheGem (Elementor)

WordPress TheGem (Elementor) theme <= 5.12.3 - SQL Injection vulnerability

e-plugins1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66649 · e-plugins Directory Pro

WordPress Directory Pro plugin <= 2.5.8 - SQL Injection vulnerability

plainware1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66680 · plainware Locatoraid Store Locator

WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability

Red Hat1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-11861 · Red Hat Red Hat Enterprise Linux 10

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

EPSS 0.4%CVSS 9.6

Repute Infosystems1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-68566 · Repute Infosystems BookingPress Appointment Booking Pro

WordPress BookingPress Appointment Booking Pro plugin <= 6.0.2 - SQL Injection vulnerability

rtCamp Inc.1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-66592 · rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress

WordPress rtMedia for WordPress, BuddyPress and bbPress plugin <= 4.7.11 - SQL Injection vulnerability