Vulnerabilities (CVE)

1,704 pages, showing 1,601–1,700, ordered by identifier.

CVE-2026-20133 — Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Cisco Catalyst SD-WAN Manager contains an exposure of sensitive information to an unauthorized actor vulnerability...
CVE-2026-20182 — Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability that allows an...
CVE-2026-20230 — Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management...
CVE-2026-20245 — Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output...
CVE-2026-20253 — Splunk Enterprise Missing Authentication for Critical Function Vulnerability Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an...
CVE-2026-20262 — Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow an...
CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability Cisco Secure Firewall Management Center (FMC) formerly known as Firepower Management Center contains a use of...
CVE-2026-20349 — Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) contain a heap...
CVE-2026-20700 — Apple Multiple Buffer Overflow Vulnerability Apple iOS, macOS, tvOS, watchOS, and visionOS contain an improper restriction of operations within the bounds of a...
CVE-2026-20805 — Microsoft Windows Information Disclosure Vulnerability Microsoft Windows Desktop Windows Manager contains an information disclosure vulnerability that allows an authorized...
CVE-2026-20963 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker...
CVE-2026-21385 — Qualcomm Multiple Chipsets Memory Corruption Vulnerability Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.
CVE-2026-21509 — Microsoft Office Security Feature Bypass Vulnerability Microsoft Office contains a security feature bypass vulnerability in which reliance on untrusted inputs in a...
CVE-2026-21510 — Microsoft Windows Shell Protection Mechanism Failure Vulnerability Microsoft Windows Shell contains a protection mechanism failure vulnerability that could allow an unauthorized...
CVE-2026-21513 — Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability Microsoft MSHTML Framework contains a protection mechanism failure vulnerability that could allow an unauthorized...
CVE-2026-21514 — Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability Microsoft Office Word contains a reliance on untrusted inputs in a security decision vulnerability that could allow...
CVE-2026-21519 — Microsoft Windows Type Confusion Vulnerability Microsoft Desktop Windows Manager contains a type confusion vulnerability that could allow an authorized attacker to...
CVE-2026-21525 — Microsoft Windows NULL Pointer Dereference Vulnerability Microsoft Windows Remote Access Connection Manager contains a NULL pointer dereference that could allow an...
CVE-2026-21533 — Microsoft Windows Improper Privilege Management Vulnerability Microsoft Windows Remote Desktop Services contains an improper privilege management vulnerability that could allow...
CVE-2026-21643 — Fortinet FortiClient EMS SQL Injection Vulnerability Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to...
CVE-2026-21962 — Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in contain an improper access control vulnerability that...
CVE-2026-22719 — Broadcom VMware Aria Operations Command Injection Vulnerability Broadcom VMware Aria Operations formerly known as vRealize Operations (vROps) contains a command injection...
CVE-2026-22769 — Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability Dell RecoverPoint for Virtual Machines (RP4VMs) contains an use of hard-coded credentials vulnerability that could...
CVE-2026-23760 — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability SmarterTools SmarterMail contains an authentication bypass using an alternate path or channel vulnerability in the...
CVE-2026-24061 — GNU InetUtils Argument Injection Vulnerability GNU InetUtils contains an argument injection vulnerability in telnetd that could allow for remote authentication...
CVE-2026-2441 — Google Chromium CSS Use-After-Free Vulnerability Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially...
CVE-2026-24423 — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability SmarterTools SmarterMail contains a missing authentication for critical function vulnerability in the ConnectToHub...
CVE-2026-24858 — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate...
CVE-2026-25089 — Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that...
CVE-2026-25108 — Soliton Systems K.K FileZen OS Command Injection Vulnerability Soliton Systems K.K FileZen contains an OS command injection vulnerability when an user logs-in to the affected...
CVE-2026-28318 — SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability SolarWinds Serv-U contains an uncontrolled resource consumption vulnerability that allows specially crafted POST...
CVE-2026-3055 — Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and...
CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.
CVE-2026-32201 — Microsoft SharePoint Server Improper Input Validation Vulnerability Microsoft SharePoint Server contains an improper input validation vulnerability that allows an unauthorized attacker...
CVE-2026-32202 — Microsoft Windows Protection Mechanism Failure Vulnerability Microsoft Windows Shell contains a protection mechanism failure vulnerability that allows an unauthorized attacker...
CVE-2026-33017 — Langflow Code Injection Vulnerability Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.
CVE-2026-33634 — Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to...
CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability Microsoft Internet Key Exchange (IKE) Service Extensions contains a double free vulnerability that could enable...
CVE-2026-33825 — Microsoft Defender Insufficient Granularity of Access Control Vulnerability Microsoft Defender contains an insufficient granularity of access control vulnerability that could allow an...
CVE-2026-34197 — Apache ActiveMQ Improper Input Validation Vulnerability Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.
CVE-2026-34486 — Apache Tomcat Missing Encryption of Sensitive Data Vulnerability Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the...
CVE-2026-34621 — Adobe Acrobat and Reader Prototype Pollution Vulnerability Adobe Acrobat and Reader contain a prototype pollution vulnerability that allows for arbitrary code execution.
CVE-2026-34908 — Ubiquiti UniFi OS Improper Access Control Vulnerability Ubiquiti UniFi OS contains an improper access control vulnerability which could allow a malicious actor with access...
CVE-2026-34909 — Ubiquiti UniFi OS Path Traversal Vulnerability Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with access to the...
CVE-2026-34910 — Ubiquiti UniFi OS Improper Input Validation Vulnerability Ubiquiti UniFi OS contains an improper input validation vulnerability which could allow a malicious actor with...
CVE-2026-34926 — Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability Trend Micro Apex One (on-premise) contains a directory traversal vulnerability that could allow a pre-authenticated...
CVE-2026-3502 — TrueConf Client Download of Code Without Integrity Check Vulnerability TrueConf Client contains a download of code without integrity check vulnerability. An attacker who is able to...
CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Oracle PeopleSoft Enterprise PeopleTools contains a missing authentication for critical function vulnerability which...
CVE-2026-35616 — Fortinet FortiClient EMS Improper Access Control Vulnerability Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated...
CVE-2026-3909 — Google Skia Out-of-Bounds Write Vulnerability Google Skia contains an out-of-bounds write vulnerability that could allow a remote attacker to perform out of...
CVE-2026-3910 — Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability Google Chromium V8 contains an improper restriction of operations within the bounds of a memory buffer vulnerability...
CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection Vulnerability Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to...
CVE-2026-39987 — Marimo Remote Code Execution Vulnerability Marimo contains an pre-authorization remote code execution vulnerability, allowing an unauthenticated attacked to...
CVE-2026-41091 — Microsoft Defender Link Following Vulnerability Microsoft Defender contains a link following vulnerability that allows an authorized attacker to elevate privileges locally.
CVE-2026-41940 — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authentication bypass vulnerability in...
CVE-2026-42208 — BerriAI LiteLLM SQL Injection Vulnerability BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's...
CVE-2026-42271 — BerriAI LiteLLM Command Injection Vulnerability BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including...
CVE-2026-42897 — Microsoft Exchange Server Cross-Site Scripting Vulnerability Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web...
CVE-2026-45247 — Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability Mirasvit Full Page Cache Warmer contains a deserialization of untrusted data vulnerability that could allow...
CVE-2026-45321 — TanStack Unspecified Vulnerability TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the...
CVE-2026-45498 — Microsoft Defender Denial of Service Vulnerability Microsoft Defender contains an unspecified vulnerability that allows for denial of service.
CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability Microsoft SharePoint Server contains a deserialization of untrusted data vulnerability which allows an authorized...
CVE-2026-46817 — Oracle E-Business Suite Improper Privilege Management Vulnerability Oracle E-Business Suite contains an improper privilege management vulnerability that allows an unauthenticated...
CVE-2026-48027 — Nx Console Embedded Malicious Code Vulnerability Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be...
CVE-2026-48172 — LiteSpeed cPanel Plugin Privilege Escalation Vulnerability LiteSpeed cPanel Plugin contains privilege escalation vulnerability that is exposed via the user-end cPanel plugin,...
CVE-2026-48282 — Adobe ColdFusion Path Traversal Vulnerability Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context...
CVE-2026-48558 — SimpleHelp Authentication Bypass Vulnerability SimpleHelp contains an authentication bypass vulnerability in the OIDC authentication flow. When OIDC authentication...
CVE-2026-48907 — Widget Factory Joomla Content Editor Improper Access Control Vulnerability Widget Factory Joomla Content Editor contains an improper access control vulnerability which could allow for upload...
CVE-2026-48908 — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows...
CVE-2026-48939 — iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability iCagenda contains an unrestricted upload of file with dangerous type vulnerability that allows the upload of...
CVE-2026-50522 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint contains a deserialization of untrusted data vulnerability which could allow an unauthorized...
CVE-2026-50751 — Check Point Security Gateway Improper Authentication Vulnerability Check Point Security Gateway contains an improper authentication vulnerability in IKEv1 key exchange that could...
CVE-2026-5281 — Google Dawn Use-After-Free Vulnerability Google Dawn contains an use-after-free vulnerability that could allow a remote attacker who had compromised the...
CVE-2026-53362 — Linux Kernel Unspecified Vulnerability Linux Kernel contains an unspecified vulnerability that can allow for privilege escalation via IPv6 networking...
CVE-2026-54420 — LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability LiteSpeed cPanel plugin contains a UNIX symbolic link (Symlink) following vulnerability that could allow a user with...
CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthorized attacker to bypass a...
CVE-2026-55255 — Langflow Authorization Bypass Through User-Controlled Key Vulnerability Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated...
CVE-2026-56155 — Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability...
CVE-2026-56164 — Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an...
CVE-2026-56290 — Joomlack Page Builder Improper Access Control Vulnerability Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution...
CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability that allows an...
CVE-2026-58644 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allows an unauthorized attacker...
CVE-2026-59310 — Broadcom VMware vCenter Path Traversal Vulnerability Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor with network access...
CVE-2026-60004 — Gitea Code Injection Vulnerability Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a...
CVE-2026-60137 — WordPress Core SQL Injection Vulnerability WordPress Core contains a SQL injection vulnerability when a plugin or theme passes untrusted input to the...
CVE-2026-63030 — WordPress Core Interpretation Conflict Vulnerability WordPress Core contains an interpretation conflict vulnerability that could allow an attacker to perform SQL...
CVE-2026-63077 — JetBrains TeamCity Deserialization of Untrusted Data Vulnerability JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated...
CVE-2026-64849 — MLflow Server-Side Request Forgery Vulnerability MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud...
CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability Apple macOS contains an improper authentication vulnerability that could allow an attacker on the network to...
CVE-2026-66384 — JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can...
CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an...
CVE-2026-6973 — Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability Ivanti Endpoint Manager Mobile (EPMM) contains an improper input validation vulnerability that allows a remotely...
CVE-2026-72529 — TrueConf Server Missing Authentication for Critical Function Vulnerability TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote...
CVE-2026-72530 — TrueConf Server Code Injection Vulnerability TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with...
CVE-2026-72898 — Metabase SQL Injection Vulnerability Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary...
CVE-2026-73570 — Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability Zimbra Collaboration Suite (ZCS) contains an OS command injection vulnerability which could allow an unauthenticated...
CVE-2026-7473 — Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when...
CVE-2026-8037 — Progress LoadMaster Command Injection Vulnerability Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute...
CVE-2026-81578 — PaperCut NG/MF Missing Authentication for Critical Function Vulnerability PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated...
CVE-2026-82078 — PaperCut NG/MF Unsafe Reflection Vulnerability PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.