📊 2026-08-03 漏洞情报日报 · 200 条 · 高危 200
每日漏洞情报汇总 · 2026-08-03
📊 2026-08-03 漏洞情报日报
📋 共 200 条
🔥 高危/严重 200 条
🛡️ NVD-Latest 200 条 🔥200
🤖 今日安全态势分析
🎯 今日重点关注
- CVE-2026-18452（CVSS 10.0）：Rich Source DMS+ 非移动版存在硬编码 API 密钥，未认证远程攻击者可完全控制所有设备，风险极高。
- CVE-2026-66803（CVSS 10.0）：Azure Cosmos DB 访问控制不当，未授权攻击者可远程执行代码，云上数据面临泄露与篡改风险。
- CVE-2026-52855（CVSS 9.9）：Pterodactyl Wings 控制面板存在模板注入漏洞，低权限用户可读取敏感配置并可能实现权限提升。
- CVE-2026-17566（CVSS 9.9）：pgAdmin 4 导入/导出工具存在命令注入漏洞，用户构造的 SQL 查询可被拼接执行系统命令。
- CVE-2026-67289 / CVE-2026-66402（CVSS 9.8）：FreeRDP 存在目标地址校验缺失和 TLS 证书验证缺陷，可导致客户端被重定向或遭受中间人攻击。
📈 威胁趋势
- 远程代码执行（RCE）：Azure Cosmos DB、Langflow、pgAdmin 等产品存在高危 RCE，攻击面覆盖云服务与开发工具。
- 权限提升：Wings 模板注入可导致低权限用户读取密钥，进而控制服务器。
- 信息泄露/硬编码凭据：DMS+ 硬编码密钥、FreeRDP 证书验证缺陷均可能造成敏感信息暴露。
- 访问控制失效：Cosmos DB 的访问控制缺陷属于典型越权漏洞，影响范围广泛。
🛡️ 缓解建议
- 立即升级受影响产品至最新版本：FreeRDP ≥3.29.0，Wings ≥1.12.3，并关注云服务商安全公告。
- 对 DMS+ 设备检查并轮换所有硬编码 API 密钥，启用网络层访问控制，限制管理端口暴露。
- 严格限制 pgAdmin 和 Langflow 的访问权限，避免将管理界面暴露在公网，并启用最小权限账户。
- 加强证书与主机名校验机制，警惕 RDP 重定向攻击，部署 TLS 流量监控。
🛡️ NVD-Latest（200 条）
Critical (61 条)
- CVE-2026-18452 DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials v
CVE-2026-18452Critical 10.0
CVE-2026-18452 CVSS:10.0 DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can… - CVE-2026-66803 Improper access control in Azure Cosmos DB allows an unauthorized attacker to ex
CVE-2026-66803Critical 10.0
CVE-2026-66803 CVSS:10.0 Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code over a network. 产品: - CVE-2026-52855 Wings is the server control plane for Pterodactyl, a free, open-source game serv
CVE-2026-52855Critical 9.9
CVE-2026-52855 CVSS:9.9 Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.12.3, {{config.}}…
+GitHub-Advis - CVE-2026-17566 pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by in
CVE-2026-17566Critical 9.9
CVE-2026-17566 CVSS:9.9 pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja… - CVE-2026-12946 IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject ar
CVE-2026-12946Critical 9.9
CVE-2026-12946 CVSS:9.9 IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary code on the system, due to the improper control… - CVE-2026-13435 IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vuln
CVE-2026-13435Critical 9.9
CVE-2026-13435 CVSS:9.9 IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability in the PythonREPL sandbox implementation. 产品: - CVE-2026-67289 FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and c
CVE-2026-67289Critical 9.8
CVE-2026-67289 CVSS:9.8 FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP… - CVE-2026-66402 FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certif
CVE-2026-66402Critical 9.8
CVE-2026-66402 CVSS:9.8 FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains multiple TLS certificate identity validation weaknesses in… - CVE-2026-15964 The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication
CVE-2026-15964Critical 9.8
CVE-2026-15964 CVSS:9.8 The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all…
+PoC-in-GitHu - CVE-2026-68771 ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrai
CVE-2026-68771Critical 9.8
CVE-2026-68771 CVSS:9.8 ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote… - CVE-2026-68770 sentence-transformers contains a security control bypass vulnerability that allo
CVE-2026-68770Critical 9.8
CVE-2026-68770 CVSS:9.8 sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by… - CVE-2026-67822 Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in
CVE-2026-67822Critical 9.8
CVE-2026-67822 CVSS:9.8 Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wifiSSIDset endpoint. The function… - CVE-2026-17561 Improper Control of Generation of Code ('Code Injection') vulnerability in Innot
CVE-2026-17561Critical 9.8
CVE-2026-17561 CVSS:9.8 Improper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consulting Trade… - CVE-2026-14919 The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its
CVE-2026-14919Critical 9.8
CVE-2026-14919 CVSS:9.8 The ShopMonitor.io WordPress plugin before 1.2.0 does not properly restrict its email-rerouting test mode, gating it behind a… - CVE-2026-14483 The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulner
CVE-2026-14483Critical 9.8
CVE-2026-14483 CVSS:9.8 The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to,…
+PoC-in-GitHu - CVE-2026-63223 CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and
CVE-2026-63223Critical 9.8
CVE-2026-63223 CVSS:9.8 CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not independently… - CVE-2026-43830 Full details and mitigation steps are currently restricted and will be published
CVE-2026-43830Critical 9.8
CVE-2026-43830 CVSS:9.8 Full details and mitigation steps are currently restricted and will be published at a later date. 产品: - CVE-2026-38709 TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, W
CVE-2026-38709Critical 9.8
CVE-2026-38709 CVSS:9.8 TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and… - CVE-2026-68503 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framew
CVE-2026-68503Critical 9.8
CVE-2026-68503 CVSS:9.8 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn ships default C2… - CVE-2026-68502 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framew
CVE-2026-68502Critical 9.8
CVE-2026-68502 CVSS:9.8 LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior to 0.2.154, LazyOwn's lazyc2.py registers an… - CVE-2026-35847 An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrar
CVE-2026-35847Critical 9.8
CVE-2026-35847 CVSS:9.8 An issue in dnsmgr v.2.15 and before allows a local attacker to execute arbitrary code via the ping function of the CheckUils.php file… - CVE-2025-69947 SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in cu
CVE-2025-69947Critical 9.8
CVE-2025-69947 CVSS:9.8 SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1. 产品: - CVE-2025-69941 SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in ad
CVE-2025-69941Critical 9.8
CVE-2025-69941 CVSS:9.8 SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1. 产品: - CVE-2025-69938 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in ren
CVE-2025-69938Critical 9.8
CVE-2025-69938 CVSS:9.8 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in renew.php via the parameter membershipType. 产品: - CVE-2025-69937 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the
CVE-2025-69937Critical 9.8
CVE-2025-69937 CVSS:9.8 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edit_type.php endpoint via the Parameter id. 产品: - CVE-2025-69936 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /ed
CVE-2025-69936Critical 9.8
CVE-2025-69936 CVSS:9.8 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /edit_member.php?id=1. 产品: - CVE-2025-69935 CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the
CVE-2025-69935Critical 9.8
CVE-2025-69935 CVSS:9.8 CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenue_report.php via the fromDate… - CVE-2025-69934 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /de
CVE-2025-69934Critical 9.8
CVE-2025-69934 CVSS:9.8 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /delete_members.php?id=1. 产品: - CVE-2025-69933 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /me
CVE-2025-69933Critical 9.8
CVE-2025-69933 CVSS:9.8 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /memberProfile.php?id=1. 产品: - CVE-2025-69930 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /pr
CVE-2025-69930Critical 9.8
CVE-2025-69930 CVSS:9.8 CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /print_membership_card.php?id=1. 产品: - CVE-2025-65336 Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Inje
CVE-2025-65336Critical 9.8
CVE-2025-65336 CVSS:9.8 Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php. 产品: - CVE-2026-67594 Spikster through commit e1cdf8c contains a missing authentication vulnerability
CVE-2026-67594Critical 9.8
CVE-2026-67594 CVSS:9.8 Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access… - CVE-2026-67208 Juggle through 1.6.0 contains a remote code execution vulnerability that allows
CVE-2026-67208Critical 9.8
CVE-2026-67208 CVSS:9.8 Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary… - CVE-2026-15976 SGLang contains a RCE vulnerability when attempting to load model weights from a
CVE-2026-15976Critical 9.8
CVE-2026-15976 CVSS:9.8 SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the… - CVE-2026-15971 SGLang contains an RCE vulnerability when the optional dumper subsystem is enabl
CVE-2026-15971Critical 9.8
CVE-2026-15971 CVSS:9.8 SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when… - CVE-2026-15969 SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via by
CVE-2026-15969Critical 9.8
CVE-2026-15969 CVSS:9.8 SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing… - CVE-2026-12943 IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1
CVE-2026-12943Critical 9.8
CVE-2026-12943 CVSS:9.8 IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC… - CVE-2026-12118 IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated
CVE-2026-12118Critical 9.8
CVE-2026-12118 CVSS:9.8 IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the… - CVE-2026-12940 IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote
CVE-2026-12940Critical 9.8
CVE-2026-12940 CVSS:9.8 IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in… - CVE-2026-52680 Apache Kyuubi REST batch multipart upload handling uses the client-supplied mult
CVE-2026-52680Critical 9.8
CVE-2026-52680 CVSS:9.8 Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded… - CVE-2026-4978 Improper neutralization of special elements used in an SQL command ('SQL injecti
CVE-2026-4978Critical 9.8
CVE-2026-4978 CVSS:9.8 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis… - CVE-2026-28812 UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 w
CVE-2026-28812Critical 9.8
CVE-2026-28812 CVSS:9.8 UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users… - CVE-2026-28323 SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass
CVE-2026-28323Critical 9.8
CVE-2026-28323 CVSS:9.8 SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0… - CVE-2026-15435 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.
CVE-2026-15435Critical 9.8
CVE-2026-15435 CVSS:9.8 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse… - CVE-2026-59310 VMware vCenter contains a directory traversal vulnerability in the Syslog server
CVE-2026-59310Critical 9.8
CVE-2026-59310 CVSS:9.8 VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may… - CVE-2026-59309 VMware vCenter contains an authentication bypass vulnerability in the VMware Dir
CVE-2026-59309Critical 9.8
CVE-2026-59309 CVSS:9.8 VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access… - CVE-2026-7849 Due to improper neutralization of special elements, an unauthenticated remote at
CVE-2026-7849Critical 9.8
CVE-2026-7849 CVSS:9.8 Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system… - CVE-2026-44108 Due to a flaw in the execution order of scripts during shutdown, the firewall is
CVE-2026-44108Critical 9.8
CVE-2026-44108 CVSS:9.8 Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This… - CVE-2026-44104 The firmware update process for the basemodule of the charging controller only v
CVE-2026-44104Critical 9.8
CVE-2026-44104 CVSS:9.8 The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic… - CVE-2026-54725 vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret
CVE-2026-54725Critical 9.6
CVE-2026-54725 CVSS:9.6 vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1,…
+GitHub-Advis - CVE-2026-17349 /misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced
CVE-2026-17349Critical 9.6
CVE-2026-17349 CVSS:9.6 /misc/workspace/adhoc_connect_server, part of the Workspaces feature introduced in pgAdmin 4 9.0, when passed the id of an existing… - CVE-2026-63221 CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query B
CVE-2026-63221Critical 9.4
CVE-2026-63221 CVSS:9.4 CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch() substitutes bound values from… - CVE-2026-66421 OpenClaw Dashboard contains a stored cross-site scripting vulnerability that all
CVE-2026-66421Critical 9.3
CVE-2026-66421 CVSS:9.3 OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute… - CVE-2026-66418 OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability t
CVE-2026-66418Critical 9.3
CVE-2026-66418 CVSS:9.3 OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject… - CVE-2026-11707 IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Applicati
CVE-2026-11707Critical 9.3
CVE-2026-11707 CVSS:9.3 IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting… - CVE-2026-47876 VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual
CVE-2026-47876Critical 9.3
CVE-2026-47876 CVSS:9.3 VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local… - CVE-2026-3141 The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file d
CVE-2026-3141Critical 9.1
CVE-2026-3141 CVSS:9.1 The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the… - CVE-2026-52539 Outstatic CMS <= 2.1.9 contains a hardcoded JWT signing secret. When the OST_TOK
CVE-2026-52539Critical 9.1
CVE-2026-52539 CVSS:9.1 Outstatic CMS <= 2.1.9 contains a hardcoded JWT signing secret. When the OST_TOKEN_SECRET environment variable is not set, the… - CVE-2026-54363 CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability tha
CVE-2026-54363Critical 9.1
CVE-2026-54363 CVSS:9.1 CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary… - CVE-2026-17351 The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query pas
CVE-2026-17351Critical 9.0
CVE-2026-17351 CVSS:9.0 The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to…
+PoC-in-GitHu - CVE-2026-18245 Improper control of code generation in Amazon @aws-amplify/codegen-ui-react befo
CVE-2026-18245Critical 9.0
CVE-2026-18245 CVSS:9.0 Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to…
High (139 条)
- CVE-2026-16635 The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in a
CVE-2026-16635High 8.8
CVE-2026-16635 CVSS:8.8 The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to… - CVE-2026-15988 The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPre
CVE-2026-15988High 8.8
CVE-2026-15988 CVSS:8.8 The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all… - CVE-2026-15414 The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privileg
CVE-2026-15414High 8.8
CVE-2026-15414 CVSS:8.8 The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0.… - CVE-2026-17346 The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched six
CVE-2026-17346High 8.8
CVE-2026-17346 CVSS:8.8 The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple / pgstatindex templates… - CVE-2026-16236 The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Up
CVE-2026-16236High 8.8
CVE-2026-16236 CVSS:8.8 The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is… - CVE-2026-13609 The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML ent
CVE-2026-13609High 8.8
CVE-2026-13609 CVSS:8.8 The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value after sanitizing… - CVE-2026-66420 MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass v
CVE-2026-66420High 8.8
CVE-2026-66420 CVSS:8.8 MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote… - CVE-2026-65423 An integer overflow in the UA_Variant arrayDimensions product computation in op
CVE-2026-65423High 8.8
CVE-2026-65423 CVSS:8.8 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an… - CVE-2026-12562 The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that
CVE-2026-12562High 8.8
CVE-2026-12562 CVSS:8.8 The RCU II+ and Multiload II+ are vulnerable to an unauthenticated service that exposes a debug interface granting full root-level… - CVE-2026-67207 Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in Backu
CVE-2026-67207High 8.8
CVE-2026-67207 CVSS:8.8 Wolf CMS through 0.8.3.1 contains an authorization bypass vulnerability in BackupRestoreController that allows authenticated… - CVE-2026-67206 Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileM
CVE-2026-67206High 8.8
CVE-2026-67206 CVSS:8.8 Wolf CMS through 0.8.3.1 contains a remote code execution vulnerability in FileManagerController that allows authenticated attackers to…
+PoC-in-GitHu - CVE-2026-66416 Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows u
CVE-2026-66416High 8.8
CVE-2026-66416 CVSS:8.8 Leantime 3.6.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to perform state-changing… - CVE-2026-58222 A security flaw combining LDAP filter injection and improper authorization check
CVE-2026-58222High 8.8
CVE-2026-58222 CVSS:8.8 A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller… - CVE-2026-28813 Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to cs
CVE-2026-28813High 8.8
CVE-2026-28813 CVSS:8.8 Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to… - CVE-2026-14522 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.
CVE-2026-14522High 8.8
CVE-2026-14522 CVSS:8.8 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute… - CVE-2026-67351 Serendipity before 2.6.1 contains an authentication context confusion vulnerabil
CVE-2026-67351High 8.8
CVE-2026-67351 CVSS:8.8 Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and session loading… - CVE-2026-54368 CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.Se
CVE-2026-54368High 8.8
CVE-2026-54368 CVSS:8.8 CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated… - CVE-2026-22622 Improper input validation in one of the session management interface of Eaton's
CVE-2026-22622High 8.8
CVE-2026-22622 CVSS:8.8 Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an… - CVE-2026-12721 The Kirki WordPress plugin before 6.0.13 does not properly sanitise and escape
CVE-2026-12721High 8.6
CVE-2026-12721 CVSS:8.6 The Kirki WordPress plugin before 6.0.13 does not properly sanitise and escape a value taken from the request before using it in a SQL… - CVE-2026-67346 Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request fo
CVE-2026-67346High 8.6
CVE-2026-67346 CVSS:8.6 Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that… - CVE-2026-54367 CentreStack before 17.2 contains an authentication bypass vulnerability that all
CVE-2026-54367High 8.6
CVE-2026-54367 CVSS:8.6 CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete… - CVE-2026-22620 Improper input validation in the authentication component of Eaton's Tripp Lite
CVE-2026-22620High 8.6
CVE-2026-22620 CVSS:8.6 Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated… - CVE-2026-10079 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). Wh
CVE-2026-10079High 8.5
CVE-2026-10079 CVSS:8.5 A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces… - CVE-2026-62246 Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge,
CVE-2026-62246High 8.5
CVE-2026-62246 CVSS:8.5 Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, Kamaji derives a TenantControlPlane datastore schema,… - CVE-2026-11536 IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execu
CVE-2026-11536High 8.5
CVE-2026-11536 CVSS:8.5 IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector. 产品: - CVE-2026-66415 Leantime 3.6.2 contains a server-side request forgery and local file inclusion v
CVE-2026-66415High 8.5
CVE-2026-66415 CVSS:8.5 Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability that allows authenticated attackers to… - CVE-2026-57862 Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability t
CVE-2026-57862High 8.5
CVE-2026-57862 CVSS:8.5 Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF… - CVE-2026-10535 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer
CVE-2026-10535High 8.4
CVE-2026-10535 CVSS:8.4 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc. 产品: - CVE-2026-11885 IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71,
CVE-2026-11885High 8.4
CVE-2026-11885 CVSS:8.4 IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS… - CVE-2026-14980 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerab
CVE-2026-14980High 8.3
CVE-2026-14980 CVSS:8.3 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forgery which could allow an… - CVE-2026-5219 Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology
CVE-2026-5219High 8.3
CVE-2026-5219 CVSS:8.3 Cross-Site request forgery (CSRF) vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site…
+PoC-in-GitHu - CVE-2026-22621 Improper input validation in one of the session management interface of Eaton's
CVE-2026-22621High 8.3
CVE-2026-22621 CVSS:8.3 Improper input validation in one of the session management interface of Eaton's Tripp Lite Series PADM firmware could allow an… - CVE-2026-53501 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0,
CVE-2026-53501High 8.2
CVE-2026-53501 CVSS:8.2 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor’s HMAC validation can be bypassed due to the…
+GitHub-Advis - CVE-2026-53500 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0,
CVE-2026-53500High 8.2
CVE-2026-53500 CVSS:8.2 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWED_SOURCES configuration passes plain strings…
+GitHub-Advis - CVE-2026-18141 A flaw was found in aap-gateway, a component of Ansible Automation Platform's Ev
CVE-2026-18141High 8.2
CVE-2026-18141 CVSS:8.2 A flaw was found in aap-gateway, a component of Ansible Automation Platform's Event-Driven Ansible (EDA). An unauthenticated remote… - CVE-2026-56672 ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0,
CVE-2026-56672High 8.2
CVE-2026-56672 CVSS:8.2 ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled HTML and… - CVE-2026-56670 ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes int
CVE-2026-56670High 8.2
CVE-2026-56670 CVSS:8.2 ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpoint served… - CVE-2026-12722 Missing authentication for critical function vulnerability in FTC Software IT Se
CVE-2026-12722High 8.2
CVE-2026-12722 CVSS:8.2 Missing authentication for critical function vulnerability in FTC Software IT Services FTC E-Commerce Management Panel allows… - CVE-2026-16144 The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vu
CVE-2026-16144High 8.1
CVE-2026-16144 CVSS:8.1 The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up… - CVE-2026-15450 The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable
CVE-2026-15450High 8.1
CVE-2026-15450 CVSS:8.1 The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in… - CVE-2026-53510 Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operatio
CVE-2026-53510High 8.1
CVE-2026-53510 CVSS:8.1 Savon is a Ruby SOAP client. From 0.9.8 until 2.17.2, Savon::Model .all_operations interpolates attacker-controlled WSDL operation…
+GitHub-Advis - CVE-2026-62391 The security fix for CVE-2025-66518 is incomplete. Any client who can access to
CVE-2026-62391High 8.1
CVE-2026-62391 CVSS:8.1 The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can… - CVE-2026-65313 A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engin
CVE-2026-65313High 8.1
CVE-2026-65313 CVSS:8.1 A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc… - CVE-2026-15258 The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not
CVE-2026-15258High 8.1
CVE-2026-15258 CVSS:8.1 The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape product-feed custom… - CVE-2026-12695 The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitte
CVE-2026-12695High 8.1
CVE-2026-12695 CVSS:8.1 The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted user's stored… - CVE-2026-12251 The Ultimate Member WordPress plugin before 2.12.1 does not filter administrato
CVE-2026-12251High 8.1
CVE-2026-12251 CVSS:8.1 The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable… - CVE-2026-63035 A heap use-after-free vulnerability in the TransferSubscriptions service in ope
CVE-2026-63035High 8.1
CVE-2026-63035 CVSS:8.1 A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a… - CVE-2026-13444 IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another us
CVE-2026-13444High 8.1
CVE-2026-13444 CVSS:8.1 IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by creating their own… - CVE-2026-15658 A vulnerability in the foreUP customer REST API allows any authenticated, low-pr
CVE-2026-15658High 8.1
CVE-2026-15658 CVSS:8.1 A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the… - CVE-2026-67348 Julep contains an insecure direct object reference vulnerability in the get_exec
CVE-2026-67348High 8.1
CVE-2026-67348 CVSS:8.1 Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authenticated… - CVE-2026-67345 MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirec
CVE-2026-67345High 8.1
CVE-2026-67345 CVSS:8.1 MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in… - CVE-2026-56428 The SSH service on BSH ELP (Electronic Platform) modules contains a platform-spe
CVE-2026-56428High 8.1
CVE-2026-56428 CVSS:8.1 The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured… - CVE-2026-34641 Premiere Pro is affected by an out-of-bounds write vulnerability that could resu
CVE-2026-34641High 7.8
CVE-2026-34641 CVSS:7.8 Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the… - CVE-2026-18157 A flaw was found in yggdrasil-worker-package-manager. A local attacker with exis
CVE-2026-18157High 7.8
CVE-2026-18157 CVSS:7.8 A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument… - CVE-2026-44106 A privilege escalation vulnerability in the init-script for user-applications al
CVE-2026-44106High 7.8
CVE-2026-44106 CVSS:7.8 A privilege escalation vulnerability in the init-script for user-applications allows a low-privileged local user to execute arbitrary… - CVE-2026-10685 The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp()
CVE-2026-10685High 7.6
CVE-2026-10685 CVSS:7.6 The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth/host/gatt.c invoked the… - CVE-2026-67527 OpenProject is open-source, web-based project management software. Prior to 17.6
CVE-2026-67527High 7.6
CVE-2026-67527 CVSS:7.6 OpenProject is open-source, web-based project management software. Prior to 17.6.0, PATCH /api/v3/work_packages/{id} accepted… - CVE-2026-41703 VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability.
CVE-2026-41703High 7.6
CVE-2026-41703 CVSS:7.6 VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could… - CVE-2026-18381 A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operato
CVE-2026-18381High 7.6
CVE-2026-18381 CVSS:7.6 A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows… - CVE-2026-18378 A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsC
CVE-2026-18378High 7.6
CVE-2026-18378 CVSS:7.6 A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR… - CVE-2026-18361 The IRIS web application in version 2.4.26 and possibly others is vulnerable to
CVE-2026-18361High 7.6
CVE-2026-18361 CVSS:7.6 The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the datastore… - CVE-2026-18360 The IRIS web application in version 2.4.26 and possibly others is vulnerable to
CVE-2026-18360High 7.6
CVE-2026-18360 CVSS:7.6 The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom… - CVE-2026-16969 The IRIS web application in version 2.4.26 and possibly others is vulnerable to
CVE-2026-16969High 7.6
CVE-2026-16969 CVSS:7.6 The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets… - CVE-2026-67304 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smart
CVE-2026-67304High 7.5
CVE-2026-67304 CVSS:7.5 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state… - CVE-2026-67301 FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async u
CVE-2026-67301High 7.5
CVE-2026-67301 CVSS:7.5 FreeRDP before 3.29.0 contains out-of-bounds read vulnerabilities in the async update message proxy for the PolygonSC and PolygonCB… - CVE-2026-67300 FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities i
CVE-2026-67300High 7.5
CVE-2026-67300 CVSS:7.5 FreeRDP before 3.29.0 contains client-side heap use-after-free vulnerabilities in the async update message proxy for RAIL… - CVE-2026-67299 FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async up
CVE-2026-67299High 7.5
CVE-2026-67299 CVSS:7.5 FreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message proxy for WINDOW_ICON_ORDER when… - CVE-2026-67298 FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server
CVE-2026-67298High 7.5
CVE-2026-67298 CVSS:7.5 FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler… - CVE-2026-67297 FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing T
CVE-2026-67297High 7.5
CVE-2026-67297 CVSS:7.5 FreeRDP before 3.29.0 fails to enforce the RESPONSE_SIZE_LIMIT when processing Transfer-Encoding: chunked HTTP responses in… - CVE-2026-67296 FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI se
CVE-2026-67296High 7.5
CVE-2026-67296 CVSS:7.5 FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU… - CVE-2026-67291 FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bound
CVE-2026-67291High 7.5
CVE-2026-67291 CVSS:7.5 FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in… - CVE-2026-67290 FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TS
CVE-2026-67290High 7.5
CVE-2026-67290 CVSS:7.5 FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO… - CVE-2026-67288 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smart
CVE-2026-67288High 7.5
CVE-2026-67288 CVSS:7.5 FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR… - CVE-2026-15006 The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email
CVE-2026-15006High 7.5
CVE-2026-15006 CVSS:7.5 The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to… - CVE-2026-62999 Copier is a library and CLI app for rendering project templates. From 9.5.0 thro
CVE-2026-62999High 7.5
CVE-2026-62999 CVSS:7.5 Copier is a library and CLI app for rendering project templates. From 9.5.0 through 9.16.0, percent-encoded parent-directory segments… - CVE-2026-53599 REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_m
CVE-2026-53599High 7.5
CVE-2026-53599 CVSS:7.5 REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rex_mediapool::isAllowedExtension in…
+GitHub-Advis - CVE-2026-53505 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0,
CVE-2026-53505High 7.5
CVE-2026-53505 CVSS:7.5 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion(<value>) filter does not…
+GitHub-Advis - CVE-2026-53504 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0,
CVE-2026-53504High 7.5
CVE-2026-53504 CVSS:7.5 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs…
+GitHub-Advis - CVE-2026-53503 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0,
CVE-2026-53503High 7.5
CVE-2026-53503 CVSS:7.5 Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(<matrix>, <columns>,…
+GitHub-Advis - CVE-2026-52856 Wings is the server control plane for Pterodactyl, a free, open-source game serv
CVE-2026-52856High 7.5
CVE-2026-52856 CVSS:7.5 Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed…
+GitHub-Advis - CVE-2026-17347 The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administr
CVE-2026-17347High 7.5
CVE-2026-17347 CVSS:7.5 The MASTER_PASSWORD_HOOK setting, introduced in pgAdmin 4 7.2, lets an administrator configure an external command that returns a… - CVE-2026-18446 fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash
CVE-2026-18446High 7.5
CVE-2026-18446 CVSS:7.5 fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses… - CVE-2026-18358 A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.
CVE-2026-18358High 7.5
CVE-2026-18358 CVSS:7.5 A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP… - CVE-2026-15722 A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). Th
CVE-2026-15722High 7.5
CVE-2026-15722 CVSS:7.5 A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c… - CVE-2026-11770 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can
CVE-2026-11770High 7.5
CVE-2026-11770 CVSS:7.5 A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV… - CVE-2026-65310 ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affecte
CVE-2026-65310High 7.5
CVE-2026-65310 CVSS:7.5 ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint… - CVE-2026-65309 ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmit
CVE-2026-65309High 7.5
CVE-2026-65309 CVSS:7.5 ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions stores and transmits user passwords using a reversible format instead of a… - CVE-2026-15048 The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization c
CVE-2026-15048High 7.5
CVE-2026-15048 CVSS:7.5 The Geeky Bot WordPress plugin before 1.2.8 does not perform an authorization check on one of its AJAX actions, allowing… - CVE-2026-14930 The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorizati
CVE-2026-14930High 7.5
CVE-2026-14930 CVSS:7.5 The JS Help Desk WordPress plugin before 3.1.4 does not perform any authorization, nonce, or ownership check on a front-end request… - CVE-2026-14830 The FlxWoo WordPress plugin before 3.1.1 does not verify with the payment proces
CVE-2026-14830High 7.5
CVE-2026-14830 CVSS:7.5 The FlxWoo WordPress plugin before 3.1.1 does not verify with the payment processor that a checkout session was actually paid before… - CVE-2026-14333 The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in
CVE-2026-14333High 7.5
CVE-2026-14333 CVSS:7.5 The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location under a predictable… - CVE-2026-14319 The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to
CVE-2026-14319High 7.5
CVE-2026-14319 CVSS:7.5 The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation… - CVE-2026-12720 The Kirki WordPress plugin before 6.0.13 does not restrict which classes may be
CVE-2026-12720High 7.5
CVE-2026-12720 CVSS:7.5 The Kirki WordPress plugin before 6.0.13 does not restrict which classes may be instantiated when it deserialises data that… - CVE-2026-63222 CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedF
CVE-2026-63222High 7.5
CVE-2026-63222 CVSS:7.5 CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument uses the… - CVE-2026-56673 ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node
CVE-2026-56673High 7.5
CVE-2026-56673 CVSS:7.5 ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0,… - CVE-2026-56671 ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes int
CVE-2026-56671High 7.5
CVE-2026-56671 CVSS:7.5 ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_preview in… - CVE-2026-43832 Full details and mitigation steps are currently restricted and will be published
CVE-2026-43832High 7.5
CVE-2026-43832 CVSS:7.5 Full details and mitigation steps are currently restricted and will be published at a later date. 产品: - CVE-2026-43831 Full details and mitigation steps are currently restricted and will be published
CVE-2026-43831High 7.5
CVE-2026-43831 CVSS:7.5 Full details and mitigation steps are currently restricted and will be published at a later date. 产品: - CVE-2026-43829 Full details and mitigation steps are currently restricted and will be published
CVE-2026-43829High 7.5
CVE-2026-43829 CVSS:7.5 Full details and mitigation steps are currently restricted and will be published at a later date. 产品: - CVE-2026-66360 The ISO Presentation layer contains a flaw in the handling of specific paramete
CVE-2026-66360High 7.5
CVE-2026-66360 CVSS:7.5 The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A missing length… - CVE-2026-63559 An integer overflow in the UA_Variant arrayDimensions product computation in op
CVE-2026-63559High 7.5
CVE-2026-63559 CVSS:7.5 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read… - CVE-2026-18064 An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Healt
CVE-2026-18064High 7.5
CVE-2026-18064 CVSS:7.5 An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leaves a separate NULL… - CVE-2026-68500 Sylius Mollie Plugin provides Mollie payment integration for Sylius applications
CVE-2026-68500High 7.5
CVE-2026-68500 CVSS:7.5 Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. Prior to 2.2.8, 3.2.4, and 3.3.1, Sylius Mollie…
+GitHub-Advis - CVE-2026-61536 Banks generates meaningful LLM prompts using a simple template language. In vers
CVE-2026-61536High 7.5
CVE-2026-61536 CVSS:7.5 Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.3, banks parses Tool JSON objects… - CVE-2026-18140 Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runti
CVE-2026-18140High 7.5
CVE-2026-18140 CVSS:7.5 Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code… - CVE-2026-15978 SGLang contains a model weight exfiltration vulnerability when no API keys are c
CVE-2026-15978High 7.5
CVE-2026-15978 CVSS:7.5 SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that… - CVE-2026-15977 SGLang contains a credential leakage vulnerability in the /server_info endpoint,
CVE-2026-15977High 7.5
CVE-2026-15977 CVSS:7.5 SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information… - CVE-2026-12942 IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse
CVE-2026-12942High 7.5
CVE-2026-12942 CVSS:7.5 IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. An attacker could send a… - CVE-2026-12733 IBM DataPower Gateway could allow a remote attacker to cause a denial of service
CVE-2026-12733High 7.5
CVE-2026-12733 CVSS:7.5 IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations. 产品: - CVE-2026-10545 IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redir
CVE-2026-10545High 7.5
CVE-2026-10545 CVSS:7.5 IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to… - CVE-2024-25039 IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 throu
CVE-2024-25039High 7.5
CVE-2024-25039 CVSS:7.5 IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit… - CVE-2026-9322 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv
CVE-2026-9322High 7.5
CVE-2026-9322 CVSS:7.5 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to… - CVE-2026-62663 Banks generates meaningful LLM prompts using a simple template language. In vers
CVE-2026-62663High 7.5
CVE-2026-62663 CVSS:7.5 Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image,… - CVE-2026-28814 Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki
CVE-2026-28814High 7.5
CVE-2026-28814 CVSS:7.5 Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data… - CVE-2026-28811 Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3.
CVE-2026-28811High 7.5
CVE-2026-28811 CVSS:7.5 Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4,… - CVE-2026-10842 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Serv
CVE-2026-10842High 7.5
CVE-2026-10842 CVSS:7.5 IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and… - CVE-2026-67349 OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, expo
CVE-2026-67349High 7.5
CVE-2026-67349 CVSS:7.5 OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELM_VALUES environment variable… - CVE-2026-16308 IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.
CVE-2026-16308High 7.5
CVE-2026-16308 CVSS:7.5 IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to… - CVE-2026-14519 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.
CVE-2026-14519High 7.5
CVE-2026-14519 CVSS:7.5 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to read arbitrary… - CVE-2026-12947 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.
CVE-2026-12947High 7.5
CVE-2026-12947 CVSS:7.5 IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive information in log… - CVE-2026-11897 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerab
CVE-2026-11897High 7.5
CVE-2026-11897 CVSS:7.5 IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a… - CVE-2026-60075 Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic ba
CVE-2026-60075High 7.5
CVE-2026-60075 CVSS:7.5 Date::Manip versions through 6.99 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time substitution in… - CVE-2026-60074 Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII
CVE-2026-60074High 7.5
CVE-2026-60074 CVSS:7.5 Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in… - CVE-2026-57859 e107 prior to version 2.3.8 contains a code execution vulnerability in the e_arr
CVE-2026-57859High 7.5
CVE-2026-57859 CVSS:7.5 e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows an attacker with… - CVE-2026-54366 CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerab
CVE-2026-54366High 7.5
CVE-2026-54366 CVSS:7.5 CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attackers to… - CVE-2026-54365 CentreStack before 17.3 contains an unauthenticated deserialization vulnerabilit
CVE-2026-54365High 7.5
CVE-2026-54365 CVSS:7.5 CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated… - CVE-2026-44107 A reboot of the charging controller can be triggered via Modbus TCP without auth
CVE-2026-44107High 7.5
CVE-2026-44107 CVSS:7.5 A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functionality is… - CVE-2026-18394 Incorrect authorization in the http_request tool in Strands Agents Tools before
CVE-2026-18394High 7.4
CVE-2026-18394 CVSS:7.4 Incorrect authorization in the http_request tool in Strands Agents Tools before 0.8.2 might allow remote attackers to obtain… - CVE-2026-18481 Stored cross-site scripting in the participant URL handling in AWS Ops Wheel be
CVE-2026-18481High 7.3
CVE-2026-18481 CVSS:7.3 Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR #168 might allow an authenticated remote user to… - CVE-2026-54737 @phun-ky/defaults-deep is a library like lodash defaultsDeep with array preserva
CVE-2026-54737High 7.3
CVE-2026-54737 CVSS:7.3 @phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5,…
+GitHub-Advis - CVE-2026-11980 IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution b
CVE-2026-11980High 7.3
CVE-2026-11980 CVSS:7.3 IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up. 产品: - CVE-2026-15052 The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin
CVE-2026-15052High 7.2
CVE-2026-15052 CVSS:7.2 The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site… - CVE-2026-16843 Some Hikvision Wireless Access Points are vulnerable to authenticated command ex
CVE-2026-16843High 7.2
CVE-2026-16843 CVSS:7.2 Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers… - CVE-2026-13392 The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not preve
CVE-2026-13392High 7.2
CVE-2026-13392 CVSS:7.2 The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with… - CVE-2026-15397 The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing
CVE-2026-15397High 7.2
CVE-2026-15397 CVSS:7.2 The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including,… - CVE-2025-71403 better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrig
CVE-2025-71403High 7.1
CVE-2025-71403 CVSS:7.1 better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and… - CVE-2026-65981 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.
CVE-2026-65981High 7.1
CVE-2026-65981 CVSS:7.1 Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed… - CVE-2026-55502 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0,
CVE-2026-55502High 7.1
CVE-2026-55502 CVSS:7.1 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only… - CVE-2026-12945 IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and m
CVE-2026-12945High 7.1
CVE-2026-12945 CVSS:7.1 IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper…
🤖 漏洞情报自动汇总 · 2026-08-03 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV