📊 2026-08-09 漏洞情报日报 · 200 条 · 高危 194
每日漏洞情报汇总 · 2026-08-09
📊 2026-08-09 漏洞情报日报
📋 共 200 条
🔥 高危/严重 194 条
🐙 GitHub-Advisory 13 条 🔥7
🛡️ NVD-Latest 187 条 🔥187
🤖 今日安全态势分析
🎯 今日重点关注
- WordPress 供应链投毒：Premium SEO 插件内置后门（CVE-2026-14812），MonsterInsights Pro 更新源被攻陷（CVE-2026-11976），可创建管理员账户、执行任意代码，影响大量站点，需立即排查。
- 微软云服务高危授权缺陷：Microsoft Teams（CVE-2026-65667）、Azure SQL Database（CVE-2026-56162）、Planetary Computer Pro（CVE-2026-63508）均获 CVSS 10.0，可在未授权情况下实现权限提升，需关注官方公告。
- WordPress 插件漏洞：Type Hub ≤2.0.6 存在未认证任意文件上传（CVE-2026-66665），Spider Analyser ≤2.1.3 存在未认证 RCE（CVE-2026-65553），利用门槛低，易被批量扫描。
- Git 工具链批量漏洞：GitPython 共 5 个 High 漏洞（含 CVE-2018-11235 复现），go-git 存在符号链接遍历（CVE-2026-71556），可导致任意命令执行或工作区文件被篡改，影响 CI/CD 和开发环境。
- Craft CMS Passkey 重放：GHSA-wg23-69c2-gjc8 允许已捕获的 WebAuthn 登录请求重放，凭据计数器未更新，可绕过身份验证。
📈 威胁趋势
- 远程代码执行 / 任意文件上传：WordPress 插件（Spider Analyser、Type Hub）及恶意插件后门，攻击者可完全控制服务器。
- 权限提升 / 缺失认证：微软云服务（Teams、Azure SQL、SRE Agent）及 Planetary Computer，多为授权或认证逻辑缺陷，风险极高。
- 供应链投毒：Official 插件更新源被攻陷，属于软件供应链攻击，影响范围不可控。
- 安全特性绕过：GitPython 多个选项注入/绕过（read-tree、init、config注入），Craft CMS Passkey 重放，均绕过既有防护。
- 路径遍历与符号链接：go-git 可在工作区外修改文件，GitPython 子模块路径校验缺失。
🛡️ 缓解建议
- 立即停用受影响的 WordPress 插件（Premium SEO、MonsterInsights Pro、Type Hub、Spider Analyser），并全面扫描站点，排查隐藏管理员账户及恶意文件。
- 关注微软官方安全更新，评估 Teams、Azure SQL、Planetary Computer 等服务的暴露面，启用条件访问和 MFA，限制网络访问。
- 升级 GitPython 至修复版本（≥修复 commit），审查 CI/CD 中 Git 操作参数；升级 go-git，避免使用不可信仓库。
- 对 Craft CMS 部署启用 WebAuthn 重放防护，升级到修复版本；同时监控身份验证日志，排查可疑登录。
🐙 GitHub-Advisory（13 条）
Critical (1 条)
- GHSA-wg23-69c2-gjc8 - Craft CMS: Passkey login accepts replayed WebAuthn assertions Critical
Craft CMS passkey login accepts WebAuthn requestOptions from the unauthenticated login request body and does not persist the updated credential counter…
High (6 条)
- GHSA-4gmw-gg2m-w46p - GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/rese High
## Summary `IndexFile.from_tree`, `IndexFile.reset` (→ from_tree) and `IndexFile.merge_tree` append caller-influenced treeish strings positionally to `git… - GHSA-9rj7-rf2p-w77r - GitPython: Unguarded git option forwarding in Repo.init enables arbitrary comman High
## Summary `Repo.init()` forwards `**kwargs` verbatim to `git init` with no unsafe-option guard and no `allow_unsafe_options` parameter. `git init… - GHSA-hmq2-w58f-27jc - GitPython: Arbitrary Git Repository Creation Outside the Working Tree via Unvali
CVE-2018-11235High
Summary GitPython computes the on-disk location of a submodule's separate Git directory (`.git/modules/<name>`) from the submodule's `.gitmodules` section name… - GHSA-jm78-9fvv-mhgr - GitPython: git-config OPTION-name injection via =/#/whitespace bypasses name val High
## Summary GitPython's config-name validator only neutralizes CR/LF/NUL for the `"option"` label; it does not reject `=`, `#`, `;`, `[`, `]`, or whitespace in… - GHSA-wvpp-8hx9-p66j - GitPython: Unsafe git option guard bypass via split_single_char_options=False sh High
## Summary The `check_unsafe_options` guard can be bypassed on every guarded method (clone/clone_from, fetch/pull/push, ls_remote, iter_commits, blame,… - CVE-2026-71556 - go-git: Worktree operations may follow symlinks
CVE-2026-71556High
## Impact A symlink traversal issue in `go-git` could allow worktree operations to modify files outside the intended worktree path. The `worktreeFilesystem`…
Medium (6 条)
- GHSA-xxpx-f366-4xpq - Craft CMS:Authorization bypass: view-only Categories user can modify category st Medium
A control-panel user who holds only the viewCategories permission for a category group (and not saveCategories) can permanently modify that group's category… - CVE-2026-62992 - Smarty: Symlink path traversal out of trusted directories
CVE-2026-62992Medium
When Smarty's Security policy is enabled, secure_dir (and the configured template/trusted directories) restrict which local files a template may read via… - CVE-2026-62996 - Smarty Security stream restriction bypass through stream: resource
CVE-2026-62996Medium
`smarty/smarty` version `5.8.0` can read local files through PHP stream wrappers even when Smarty Security is enabled and all streams are disabled with… - GHSA-55q2-fjhq-7xh7 - DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing X Medium
Summary During `IN_PLACE` sanitization, a hook that removes an element can leave that element's detached descendants executable. A descendant image can retain… - GHSA-hh9p-6wh2-4mfc - GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() an Medium
## Summary `IndexFile.remove()` and `Head.checkout()` forward `**kwargs` into `git rm` and `git checkout` with no guard. Passing `--pathspec-from-file=<file>`… - CVE-2026-71557 - go-git: Malicious reference names may modify files outside the reference storage
CVE-2026-71557Medium
Impact A path traversal issue in `go-git` could allow malicious reference names to access files outside the repository's intended reference storage. Loose…
🛡️ NVD-Latest（187 条）
Critical (66 条)
- CVE-2026-65667 Missing authorization in Microsoft Teams allows an unauthorized attacker to elev
CVE-2026-65667Critical 10.0
CVE-2026-65667 CVSS:10.0 Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network. 产品: microsoft teams - CVE-2026-63508 Missing authentication for critical function in Microsoft Planetary Computer Pro
CVE-2026-63508Critical 10.0
CVE-2026-63508 CVSS:10.0 Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges… - CVE-2026-56162 Improper authentication in Azure SQL Database allows an unauthorized attacker to
CVE-2026-56162Critical 10.0
CVE-2026-56162 CVSS:10.0 Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network. 产品: microsoft… - CVE-2026-14812 The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backd
CVE-2026-14812Critical 10.0
CVE-2026-14812 CVSS:10.0 The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and,… - CVE-2026-11976 The official MonsterInsights Pro update distribution bucket (`monster-insights.s
CVE-2026-11976Critical 10.0
CVE-2026-11976 CVSS:10.0 The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both the current… - CVE-2026-66665 Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.
CVE-2026-66665Critical 10.0
CVE-2026-66665 CVSS:10.0 Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions. 产品: - CVE-2026-65553 Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress
CVE-2026-65553Critical 10.0
CVE-2026-65553 CVSS:10.0 Unauthenticated Remote Code Execution (RCE) in Spider Analyser – WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions. 产品: - CVE-2026-62830 Missing authorization in Azure SRE Agent allows an authorized attacker to elevat
CVE-2026-62830Critical 9.9
CVE-2026-62830 CVSS:9.9 Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network. 产品: microsoft… - CVE-2026-59115 '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an autho
CVE-2026-59115Critical 9.9
CVE-2026-59115 CVSS:9.9 '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.… - CVE-2026-50515 Deserialization of untrusted data in Azure Service Bus allows an authorized atta
CVE-2026-50515Critical 9.9
CVE-2026-50515 CVSS:9.9 Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network. 产品: microsoft… - CVE-2026-50481 Modification of assumed-immutable data (maid) in Azure Active Directory allows a
CVE-2026-50481Critical 9.9
CVE-2026-50481 CVSS:9.9 Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a… - CVE-2026-65548 Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.
CVE-2026-65548Critical 9.9
CVE-2026-65548 CVSS:9.9 Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions. 产品: - CVE-2026-71558 Heap type confusion vulnerability in Apache Fory C++ deserialization. This issu
CVE-2026-71558Critical 9.8
CVE-2026-71558 CVSS:9.8 Heap type confusion vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before… - CVE-2026-16258 The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deseri
CVE-2026-16258Critical 9.8
CVE-2026-16258 CVSS:9.8 The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent the deserialization of untrusted input, allowing unauthenticated… - CVE-2026-14205 The WP Events Manager WordPress plugin before 2.2.5 does not validate the reques
CVE-2026-14205Critical 9.8
CVE-2026-14205 CVSS:9.8 The WP Events Manager WordPress plugin before 2.2.5 does not validate the requested quantity when registering for a paid event and… - CVE-2026-14365 The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress i
CVE-2026-14365Critical 9.8
CVE-2026-14365 CVSS:9.8 The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up… - CVE-2026-14364 The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress i
CVE-2026-14364Critical 9.8
CVE-2026-14364 CVSS:9.8 The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password… - CVE-2026-62873 Improper verification of cryptographic signature in Microsoft 365 Admin Center a
CVE-2026-62873Critical 9.8
CVE-2026-62873 CVSS:9.8 Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges… - CVE-2026-17032 Multiple Supsystic Pro plugins were distributed with malicious code through the
CVE-2026-17032Critical 9.8
CVE-2026-17032 CVSS:9.8 Multiple Supsystic Pro plugins were distributed with malicious code through the vendor's compromised update server, allowing… - CVE-2026-15734 A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3
CVE-2026-15734Critical 9.8
CVE-2026-15734 CVSS:9.8 A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and earlier, allows authenticated attackers to… - CVE-2026-15733 A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 a
CVE-2026-15733Critical 9.8
CVE-2026-15733 CVSS:9.8 A Remote Code Execution (RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows… - CVE-2026-15732 A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version
CVE-2026-15732Critical 9.8
CVE-2026-15732 CVSS:9.8 A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard version 4.2.3 and earlier. The webhook functionality allows… - CVE-2026-66662 Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10
CVE-2026-66662Critical 9.8
CVE-2026-66662 CVSS:9.8 Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions. 产品: - CVE-2026-65581 Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
CVE-2026-65581Critical 9.8
CVE-2026-65581 CVSS:9.8 Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions. 产品: - CVE-2026-65579 Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
CVE-2026-65579Critical 9.8
CVE-2026-65579 CVSS:9.8 Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions. 产品: - CVE-2026-65578 Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
CVE-2026-65578Critical 9.8
CVE-2026-65578 CVSS:9.8 Unauthenticated PHP Object Injection in Agora <= 1.9 versions. 产品: - CVE-2026-65577 Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.
CVE-2026-65577Critical 9.8
CVE-2026-65577 CVSS:9.8 Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions. 产品: - CVE-2026-65576 Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
CVE-2026-65576Critical 9.8
CVE-2026-65576 CVSS:9.8 Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions. 产品: - CVE-2026-65575 Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
CVE-2026-65575Critical 9.8
CVE-2026-65575 CVSS:9.8 Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions. 产品: - CVE-2026-65574 Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.
CVE-2026-65574Critical 9.8
CVE-2026-65574 CVSS:9.8 Unauthenticated PHP Object Injection in Abogado <= 1.18 versions. 产品: - CVE-2026-65573 Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.
CVE-2026-65573Critical 9.8
CVE-2026-65573 CVSS:9.8 Unauthenticated PHP Object Injection in Abelle <= 1.22 versions. 产品: - CVE-2026-65572 Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.
CVE-2026-65572Critical 9.8
CVE-2026-65572 CVSS:9.8 Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions. 产品: - CVE-2026-65571 Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.
CVE-2026-65571Critical 9.8
CVE-2026-65571 CVSS:9.8 Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions. 产品: - CVE-2026-65556 Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1
CVE-2026-65556Critical 9.8
CVE-2026-65556 CVSS:9.8 Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions. 产品: - CVE-2026-65552 Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions.
CVE-2026-65552Critical 9.8
CVE-2026-65552 CVSS:9.8 Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions. 产品: - CVE-2026-65507 Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.
CVE-2026-65507Critical 9.8
CVE-2026-65507 CVSS:9.8 Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions. 产品: - CVE-2026-53975 OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerabili
CVE-2026-53975Critical 9.8
CVE-2026-53975 CVSS:9.8 OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary… - CVE-2026-28139 Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions.
CVE-2026-28139Critical 9.8
CVE-2026-28139 CVSS:9.8 Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions. 产品: - CVE-2026-28005 Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.
CVE-2026-28005Critical 9.8
CVE-2026-28005 CVSS:9.8 Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions. 产品: - CVE-2026-5134 Improper neutralization of special elements used in an SQL command ('SQL injecti
CVE-2026-5134Critical 9.8
CVE-2026-5134 CVSS:9.8 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Loca Software Informatics… - CVE-2026-70332 Improper neutralization of input during web page generation ('cross-site scripti
CVE-2026-70332Critical 9.6
CVE-2026-70332 CVSS:9.6 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an… - CVE-2026-62896 Improper authentication in Microsoft Teams allows an authorized attacker to elev
CVE-2026-62896Critical 9.6
CVE-2026-62896 CVSS:9.6 Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network. 产品: microsoft teams - CVE-2026-56161 Improper access control in Azure Logic Apps allows an authorized attacker to dis
CVE-2026-56161Critical 9.6
CVE-2026-56161 CVSS:9.6 Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network. 产品: microsoft… - CVE-2026-19175 Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a re
CVE-2026-19175Critical 9.6
CVE-2026-19175 CVSS:9.6 Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape… - CVE-2026-19171 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allo
CVE-2026-19171Critical 9.6
CVE-2026-19171 CVSS:9.6 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox… - CVE-2026-19170 Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allo
CVE-2026-19170Critical 9.6
CVE-2026-19170 CVSS:9.6 Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox… - CVE-2026-19166 Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 al
CVE-2026-19166Critical 9.6
CVE-2026-19166 CVSS:9.6 Use after free in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a… - CVE-2026-19164 Insufficient validation of untrusted input in Codecs in Google Chrome prior to 1
CVE-2026-19164Critical 9.6
CVE-2026-19164 CVSS:9.6 Insufficient validation of untrusted input in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially… - CVE-2026-19157 Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109
CVE-2026-19157Critical 9.6
CVE-2026-19157 CVSS:9.6 Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a… - CVE-2026-19149 Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed
CVE-2026-19149Critical 9.6
CVE-2026-19149 CVSS:9.6 Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox… - CVE-2026-12605 In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet
CVE-2026-12605Critical 9.6
CVE-2026-12605 CVSS:9.6 In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to… - CVE-2026-59118 Improper authorization in Microsoft Power Apps allows an unauthorized attacker t
CVE-2026-59118Critical 9.3
CVE-2026-59118 CVSS:9.3 Improper authorization in Microsoft Power Apps allows an unauthorized attacker to elevate privileges over a network. 产品: microsoft… - CVE-2026-18367 A privilege escalation vulnerability allows local users to execute arbitrary cod
CVE-2026-18367Critical 9.3
CVE-2026-18367 CVSS:9.3 A privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than… - CVE-2026-66447 Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.
CVE-2026-66447Critical 9.3
CVE-2026-66447 CVSS:9.3 Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions. 产品: - CVE-2026-65546 Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.
CVE-2026-65546Critical 9.3
CVE-2026-65546 CVSS:9.3 Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions. 产品: - CVE-2026-65520 Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.
CVE-2026-65520Critical 9.3
CVE-2026-65520 CVSS:9.3 Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions. 产品: - CVE-2026-65508 Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versi
CVE-2026-65508Critical 9.3
CVE-2026-65508 CVSS:9.3 Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions. 产品: - CVE-2026-71560 Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue
CVE-2026-71560Critical 9.1
CVE-2026-71560 CVSS:9.1 Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory C++ versions from 0.14.0 before… - CVE-2026-16038 The MStore API WordPress plugin before 4.21.0 does not verify the payment with
CVE-2026-16038Critical 9.1
CVE-2026-16038 CVSS:9.1 The MStore API WordPress plugin before 4.21.0 does not verify the payment with the payment gateway before marking an order as paid on… - CVE-2026-68823 Exposed dangerous method or function in Azure Confidential Ledger allows an auth
CVE-2026-68823Critical 9.1
CVE-2026-68823 CVSS:9.1 Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network. 产品:… - CVE-2026-3418 The System REST API accepts user-supplied file uploads without enforcing suffici
CVE-2026-3418Critical 9.1
CVE-2026-3418 CVSS:9.1 The System REST API accepts user-supplied file uploads without enforcing sufficient validation on the file type or destination, allowing… - CVE-2026-54489 Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.
CVE-2026-54489Critical 9.1
CVE-2026-54489 CVSS:9.1 Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Information Disclosure… - CVE-2026-53976 OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving e
CVE-2026-53976Critical 9.1
CVE-2026-53976 CVSS:9.1 OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw… - CVE-2026-34191 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti
CVE-2026-34191Critical 9.1
CVE-2026-34191 CVSS:9.1 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility… - CVE-2026-32327 A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack ag
CVE-2026-32327Critical 9.1
CVE-2026-32327 CVSS:9.1 A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from… - CVE-2025-14561 In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isol
CVE-2025-14561Critical 9.0
CVE-2025-14561 CVSS:9.0 In multi-tenant deployments, the Publisher REST APIs fail to enforce tenant isolation correctly. This allows a user in one tenant,…
High (121 条)
- CVE-2026-9169 DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows a
CVE-2026-9169High 8.8
CVE-2026-9169 CVSS:8.8 DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with… - CVE-2026-16263 The WP Maps WordPress plugin before 4.9.7 does not perform a capability check i
CVE-2026-16263High 8.8
CVE-2026-16263 CVSS:8.8 The WP Maps WordPress plugin before 4.9.7 does not perform a capability check in one of its AJAX actions and does not properly… - CVE-2026-15215 The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify
CVE-2026-15215High 8.8
CVE-2026-15215 CVSS:8.8 The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does not verify the user's capability before installing and activating… - CVE-2026-65668 Improper access control in Microsoft Purview eDiscovery allows an authorized att
CVE-2026-65668High 8.8
CVE-2026-65668 CVSS:8.8 Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network. 产品:… - CVE-2026-49163 Improper limitation of a pathname to a restricted directory ('path traversal') i
CVE-2026-49163High 8.8
CVE-2026-49163 CVSS:8.8 Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized… - CVE-2026-19174 Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote
CVE-2026-19174High 8.8
CVE-2026-19174 CVSS:8.8 Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks in Google Chrome
CVE-2026-19169High 8.8
CVE-2026-19169 CVSS:8.8 Insufficient validation of untrusted input in Contextual Tasks in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to… - CVE-2026-19168 Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allo
CVE-2026-19168High 8.8
CVE-2026-19168 CVSS:8.8 Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside… - CVE-2026-19162 Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a rem
CVE-2026-19162High 8.8
CVE-2026-19162 CVSS:8.8 Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox… - CVE-2026-19151 Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote a
CVE-2026-19151High 8.8
CVE-2026-19151 CVSS:8.8 Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via… - CVE-2026-19150 Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allo
CVE-2026-19150High 8.8
CVE-2026-19150 CVSS:8.8 Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside… - CVE-2026-19145 Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a r
CVE-2026-19145High 8.8
CVE-2026-19145 CVSS:8.8 Use after free in Translate in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a… - CVE-2026-19144 Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote
CVE-2026-19144High 8.8
CVE-2026-19144 CVSS:8.8 Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a… - CVE-2024-39024 In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote
CVE-2024-39024High 8.8
CVE-2024-39024 CVSS:8.8 In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution. 产品:
+PoC-in-GitHu - CVE-2026-18258 Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and
CVE-2026-18258High 8.8
CVE-2026-18258 CVSS:8.8 Authorization bypass in the Line, LineTranscription, VirtualCollection, tag and process API endpoints in Scripta/eScriptorium through… - CVE-2026-65542 Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.
CVE-2026-65542High 8.8
CVE-2026-65542 CVSS:8.8 Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions. 产品: - CVE-2026-28111 Contributor Privilege Escalation in Forminator <= 1.56.0 versions.
CVE-2026-28111High 8.8
CVE-2026-28111 CVSS:8.8 Contributor Privilege Escalation in Forminator <= 1.56.0 versions. 产品: - CVE-2026-62836 Improper restriction of communication channel to intended endpoints in Azure SQL
CVE-2026-62836High 8.7
CVE-2026-62836 CVSS:8.7 Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to… - CVE-2026-3415 The XML and schema validation functionalities within the SchemaValidator Mediato
CVE-2026-3415High 8.7
CVE-2026-3415 CVSS:8.7 The XML and schema validation functionalities within the SchemaValidator Mediator process XML input as part of validation flows. Under…
+Exploit-DB-R+GitHub-Advis+PoC-in-GitHu - CVE-2026-16315 OMICRON StationGuard before version 4.10 contains a cryptographic timing side-ch
CVE-2026-16315High 8.7
CVE-2026-16315 CVSS:8.7 OMICRON StationGuard before version 4.10 contains a cryptographic timing side-channel vulnerability in the backend authentication… - CVE-2026-19143 Insufficient validation of untrusted input in WebAPKs in Google Chrome on Androi
CVE-2026-19143High 8.6
CVE-2026-19143 CVSS:8.6 Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to… - CVE-2026-3430 The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and esc
CVE-2026-3430High 8.6
CVE-2026-3430 CVSS:8.6 The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitize and escape a parameter before using in an SQL statement,… - CVE-2026-18359 Server-side request forgery in the METS and IIIF import URI handling in Scripta
CVE-2026-18359High 8.5
CVE-2026-18359 CVSS:8.5 Server-side request forgery in the METS and IIIF import URI handling in Scripta eScriptorium through 26.04.1 allows a remote… - CVE-2026-65569 Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.
CVE-2026-65569High 8.5
CVE-2026-65569 CVSS:8.5 Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions. 产品: - CVE-2026-65547 Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.
CVE-2026-65547High 8.5
CVE-2026-65547 CVSS:8.5 Subscriber SQL Injection in Creative Mail <= 1.6.9 versions. 产品: - CVE-2026-19177 Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0
CVE-2026-19177High 8.3
CVE-2026-19177 CVSS:8.3 Insufficient validation of untrusted input in UI in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised… - CVE-2026-19173 Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a r
CVE-2026-19173High 8.3
CVE-2026-19173 CVSS:8.3 Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process… - CVE-2026-19172 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remot
CVE-2026-19172High 8.3
CVE-2026-19172 CVSS:8.3 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-19163 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allo
CVE-2026-19163High 8.3
CVE-2026-19163 CVSS:8.3 Use after free in Media in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer… - CVE-2026-19155 Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a re
CVE-2026-19155High 8.3
CVE-2026-19155 CVSS:8.3 Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process… - CVE-2026-19154 Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allow
CVE-2026-19154High 8.3
CVE-2026-19154 CVSS:8.3 Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer… - CVE-2026-19152 Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.79
CVE-2026-19152High 8.3
CVE-2026-19152 CVSS:8.3 Insufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised… - CVE-2026-19148 Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 all
CVE-2026-19148High 8.3
CVE-2026-19148 CVSS:8.3 Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer… - CVE-2026-19147 Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed
CVE-2026-19147High 8.3
CVE-2026-19147 CVSS:8.3 Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer… - CVE-2026-19141 Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109
CVE-2026-19141High 8.3
CVE-2026-19141 CVSS:8.3 Use after free in Resources in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the… - CVE-2026-19140 Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote
CVE-2026-19140High 8.3
CVE-2026-19140 CVSS:8.3 Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-19138 Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109
CVE-2026-19138High 8.3
CVE-2026-19138 CVSS:8.3 Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the… - CVE-2026-19137 Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allo
CVE-2026-19137High 8.3
CVE-2026-19137 CVSS:8.3 Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer… - CVE-2026-16030 The MStore API WordPress plugin before 4.21.0 does not correctly verify the cry
CVE-2026-16030High 8.1
CVE-2026-16030 CVSS:8.1 The MStore API WordPress plugin before 4.21.0 does not correctly verify the cryptographic signature of the token used to authenticate… - CVE-2026-15361 The Content Views WordPress plugin before 4.5 does not perform a capability che
CVE-2026-15361High 8.1
CVE-2026-15361 CVSS:8.1 The Content Views WordPress plugin before 4.5 does not perform a capability check on one of its AJAX actions and does not properly… - CVE-2026-19153 Insufficient validation of untrusted input in Workers in Google Chrome prior to
CVE-2026-19153High 8.1
CVE-2026-19153 CVSS:8.1 Insufficient validation of untrusted input in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had… - CVE-2026-19111 Insecure direct object reference in the mongodb_memory, elasticsearch_memory, an
CVE-2026-19111High 8.1
CVE-2026-19111 CVSS:8.1 Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools… - CVE-2026-65570 Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versio
CVE-2026-65570High 8.1
CVE-2026-65570 CVSS:8.1 Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions. 产品: - CVE-2026-19195 A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affec
CVE-2026-19195High 7.8
CVE-2026-19195 CVSS:7.8 A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library… - CVE-2026-19193 A flaw has been found in Jiangmin Antivirus 21. Impacted is the function Message
CVE-2026-19193High 7.8
CVE-2026-19193 CVSS:7.8 A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the… - CVE-2026-19192 A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affec
CVE-2026-19192High 7.8
CVE-2026-19192 CVSS:7.8 A vulnerability was detected in DeepCool DisplayService 1.2.12. This issue affects some unknown processing of the file… - CVE-2026-19191 A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. T
CVE-2026-19191High 7.8
CVE-2026-19191 CVSS:7.8 A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file… - CVE-2026-19190 A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an
CVE-2026-19190High 7.8
CVE-2026-19190 CVSS:7.8 A weakness has been identified in StableBit Scanner 2.6.13.4088. This affects an unknown part of the file C:\Program Files… - CVE-2026-45198 Kernel software from a non-secure operating system on a platform with Trusted Ex
CVE-2026-45198High 7.8
CVE-2026-45198 CVSS:7.8 Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to… - CVE-2026-19189 A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected
CVE-2026-19189High 7.8
CVE-2026-19189 CVSS:7.8 A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this issue is some unknown functionality in the… - CVE-2026-1289 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a
CVE-2026-1289High 7.8
CVE-2026-1289 CVSS:7.8 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force a Use-After-Free vulnerability. A malicious actor can… - CVE-2026-11803 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an
CVE-2026-11803High 7.8
CVE-2026-11803 CVSS:7.8 A maliciously crafted PDF file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor… - CVE-2026-43622 llama.cpp builds b1886 through b7445 contain a double free vulnerability in the
CVE-2026-43622High 7.8
CVE-2026-43622 CVSS:7.8 llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates… - CVE-2026-56793 Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Im
CVE-2026-56793High 7.7
CVE-2026-56793 CVSS:7.7 Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthenticated… - CVE-2026-15816 A flaw was found in dracut. The die() error-handling function writes its message
CVE-2026-15816High 7.5
CVE-2026-15816 CVSS:7.5 A flaw was found in dracut. The die() error-handling function writes its message into a shell script under the initramfs emergency-hook… - CVE-2026-71559 Deserialization of Untrusted Data vulnerability in the Go implementation of Apac
CVE-2026-71559High 7.5
CVE-2026-71559 CVSS:7.5 Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service… - CVE-2026-49007 By accessing unencrypted information in the device firmware, an attacker can obt
CVE-2026-49007High 7.5
CVE-2026-49007 CVSS:7.5 By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web… - CVE-2026-16262 The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its O
CVE-2026-16262High 7.5
CVE-2026-16262 CVSS:7.5 The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not bind its OAuth social login flow to the initiating user session,… - CVE-2026-16041 The MStore API WordPress plugin before 4.21.0 does not perform authorization or
CVE-2026-16041High 7.5
CVE-2026-16041 CVSS:7.5 The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review… - CVE-2026-14943 The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial
CVE-2026-14943High 7.5
CVE-2026-14943 CVSS:7.5 The Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content WordPress plugin before 2.8.4 does not… - CVE-2026-62918 Improper verification of cryptographic signature in Microsoft Teams allows an un
CVE-2026-62918High 7.5
CVE-2026-62918 CVSS:7.5 Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.… - CVE-2026-19176 Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote
CVE-2026-19176High 7.5
CVE-2026-19176 CVSS:7.5 Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to… - CVE-2026-19165 Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an
CVE-2026-19165High 7.5
CVE-2026-19165 CVSS:7.5 Use after free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious… - CVE-2026-19159 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remot
CVE-2026-19159High 7.5
CVE-2026-19159 CVSS:7.5 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific… - CVE-2026-19158 Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allo
CVE-2026-19158High 7.5
CVE-2026-19158 CVSS:7.5 Use after free in Views in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in… - CVE-2026-19156 Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an
CVE-2026-19156High 7.5
CVE-2026-19156 CVSS:7.5 Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who convinced a user to install a malicious… - CVE-2026-19142 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remot
CVE-2026-19142High 7.5
CVE-2026-19142 CVSS:7.5 Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific… - CVE-2026-16620 The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not e
CVE-2026-16620High 7.5
CVE-2026-16620 CVSS:7.5 The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce its server-side price allowlist for products… - CVE-2026-16619 The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the nu
CVE-2026-16619High 7.5
CVE-2026-16619 CVSS:7.5 The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly limit the number of second-factor verification attempts, tracking… - CVE-2026-13399 The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does n
CVE-2026-13399High 7.5
CVE-2026-13399 CVSS:7.5 The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not have proper authorization checks on a REST endpoint,… - CVE-2026-12584 The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2
CVE-2026-12584High 7.5
CVE-2026-12584 CVSS:7.5 The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin before 7.0.2 does not verify the authenticity of incoming… - CVE-2026-10599 The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not v
CVE-2026-10599High 7.5
CVE-2026-10599 CVSS:7.5 The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 does not validate that a verified payment transaction belongs to… - CVE-2026-10524 The CoCart WordPress plugin before 4.9.0 does not validate a user-supplied price
CVE-2026-10524High 7.5
CVE-2026-10524 CVSS:7.5 The CoCart WordPress plugin before 4.9.0 does not validate a user-supplied price value against the actual product price when items are… - CVE-2026-53985 Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vuln
CVE-2026-53985High 7.5
CVE-2026-53985 CVSS:7.5 Ground Station prior to 0.6.0 contains an unauthenticated denial-of-service vulnerability in the Socket.IO server's service_control… - CVE-2026-53977 OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows u
CVE-2026-53977High 7.5
CVE-2026-53977 CVSS:7.5 OpenChamber 1.11.7 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to terminate the server… - CVE-2026-18427 @fastify/static before version 10.1.3 contains an incomplete fix for a previous
CVE-2026-18427High 7.5
CVE-2026-18427 CVSS:7.5 @fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass. The static file handler rejected… - CVE-2026-65543 Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.
CVE-2026-65543High 7.5
CVE-2026-65543 CVSS:7.5 Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions. 产品: - CVE-2026-65523 Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Sig
CVE-2026-65523High 7.5
CVE-2026-65523 CVSS:7.5 Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions. 产品: - CVE-2026-65504 Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versi
CVE-2026-65504High 7.5
CVE-2026-65504 CVSS:7.5 Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions. 产品: - CVE-2026-34502 Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memc
CVE-2026-34502High 7.5
CVE-2026-34502 CVSS:7.5 Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime… - CVE-2026-34501 Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redi
CVE-2026-34501High 7.5
CVE-2026-34501 CVSS:7.5 Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client. This issue affects Apache Portable Runtime… - CVE-2026-28140 Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.
CVE-2026-28140High 7.5
CVE-2026-28140 CVSS:7.5 Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions. 产品: - CVE-2025-49506 APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not c
CVE-2025-49506High 7.5
CVE-2025-49506 CVSS:7.5 APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords… - CVE-2026-66733 Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vul
CVE-2026-66733High 7.5
CVE-2026-66733 CVSS:7.5 Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory allocation vulnerability in ReceivedPacketCache::enqueuePacket() that… - CVE-2026-65551 Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incor
CVE-2026-65551High 7.5
CVE-2026-65551 CVSS:7.5 Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Control Security Levels. This… - CVE-2026-19139 Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 a
CVE-2026-19139High 7.4
CVE-2026-19139 CVSS:7.4 Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.109 allowed a local attacker to perform OS-level privilege… - CVE-2026-19196 A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacte
CVE-2026-19196High 7.3
CVE-2026-19196 CVSS:7.3 A vulnerability was found in SourceCodester Photo Share Website 1.0. The impacted element is an unknown function of the file… - CVE-2026-19062 A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a20
CVE-2026-19062High 7.3
CVE-2026-19062 CVSS:7.3 A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the… - CVE-2026-65541 Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions.
CVE-2026-65541High 7.3
CVE-2026-65541 CVSS:7.3 Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions. 产品: - CVE-2026-65559 Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.
CVE-2026-65559High 7.2
CVE-2026-65559 CVSS:7.2 Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions. 产品: - CVE-2026-65549 Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.
CVE-2026-65549High 7.2
CVE-2026-65549 CVSS:7.2 Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions. 产品: - CVE-2026-19036 A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the
CVE-2026-19036High 7.2
CVE-2026-19036 CVSS:7.2 A security flaw has been discovered in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the file /tmp/ppp/wanoptions.… - CVE-2026-49746 Software installed and run as a non-privileged user may conduct improper GPU sys
CVE-2026-49746High 7.1
CVE-2026-49746 CVSS:7.1 Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in… - CVE-2026-18277 Missing authorization in the OcrModelRight create and delete views in Scripta eS
CVE-2026-18277High 7.1
CVE-2026-18277 CVSS:7.1 Missing authorization in the OcrModelRight create and delete views in Scripta eScriptorium through 26.04.1 allows a remote… - CVE-2026-66702 Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 version
CVE-2026-66702High 7.1
CVE-2026-66702 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions. 产品: - CVE-2026-66694 Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versi
CVE-2026-66694High 7.1
CVE-2026-66694 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions. 产品: - CVE-2026-66690 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
CVE-2026-66690High 7.1
CVE-2026-66690 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions. 产品: - CVE-2026-66664 Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2
CVE-2026-66664High 7.1
CVE-2026-66664 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions. 产品: - CVE-2026-66663 Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVE-2026-66663High 7.1
CVE-2026-66663 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions. 产品: - CVE-2026-66470 Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 vers
CVE-2026-66470High 7.1
CVE-2026-66470 CVSS:7.1 Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions. 产品: - CVE-2026-66457 Unauthenticated Cross Site Scripting (XSS) in Events Manager <= 7.4.1 versions.
CVE-2026-66457High 7.1
CVE-2026-66457 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Events Manager <= 7.4.1 versions. 产品: - CVE-2026-66440 Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor
CVE-2026-66440High 7.1
CVE-2026-66440 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions. 产品: - CVE-2026-66439 Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3
CVE-2026-66439High 7.1
CVE-2026-66439 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions. 产品: - CVE-2026-65565 Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.
CVE-2026-65565High 7.1
CVE-2026-65565 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions. 产品: - CVE-2026-65560 Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 ver
CVE-2026-65560High 7.1
CVE-2026-65560 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions. 产品: - CVE-2026-65554 Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 version
CVE-2026-65554High 7.1
CVE-2026-65554 CVSS:7.1 Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions. 产品: - CVE-2026-65545 Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.
CVE-2026-65545High 7.1
CVE-2026-65545 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions. 产品: - CVE-2026-65544 Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 version
CVE-2026-65544High 7.1
CVE-2026-65544 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions. 产品: - CVE-2026-65517 Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.
CVE-2026-65517High 7.1
CVE-2026-65517 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions. 产品: - CVE-2026-65515 Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.
CVE-2026-65515High 7.1
CVE-2026-65515 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions. 产品: - CVE-2026-65513 Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.
CVE-2026-65513High 7.1
CVE-2026-65513 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions. 产品: - CVE-2026-65509 Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.
CVE-2026-65509High 7.1
CVE-2026-65509 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions. 产品: - CVE-2026-61982 Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versi
CVE-2026-61982High 7.1
CVE-2026-61982 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions. 产品: - CVE-2026-61964 Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.
CVE-2026-61964High 7.1
CVE-2026-61964 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions. 产品: - CVE-2026-61963 Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 ve
CVE-2026-61963High 7.1
CVE-2026-61963 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions. 产品: - CVE-2026-61961 Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.
CVE-2026-61961High 7.1
CVE-2026-61961 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions. 产品: - CVE-2026-28177 Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.
CVE-2026-28177High 7.1
CVE-2026-28177 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions. 产品: - CVE-2026-28172 Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.
CVE-2026-28172High 7.1
CVE-2026-28172 CVSS:7.1 Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions. 产品: - CVE-2026-28143 Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.
CVE-2026-28143High 7.1
CVE-2026-28143 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions. 产品: - CVE-2026-28141 Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions.
CVE-2026-28141High 7.1
CVE-2026-28141 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions. 产品: - CVE-2026-28082 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.
CVE-2026-28082High 7.1
CVE-2026-28082 CVSS:7.1 Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions. 产品:
🤖 漏洞情报自动汇总 · 2026-08-09 · 数据来源: NVD / GitHub Advisory / Sploitus / CISA-KEV