| CVE-2026-33335 | 8 | — | — | — | vikunja / vikunja | Vikunja is an open-source self-hosted task management platform. | 218d ago |
| CVE-2026-32813 | 8 | — | — | — | admidio / admidio | Admidio is an open-source user management solution. | 223d ago |
| CVE-2026-32014 | 8 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.26 contain a metadata spoofing vulnerability where reconnect platform and device | 223d ago |
| CVE-2025-55041 | 8 | — | — | — | murasoftware / mura cms | MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUser | 224d ago |
| CVE-2025-41258 | 8 | — | — | — | librechat / librechat | LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises | 224d ago |
| CVE-2026-3561 | 8 | — | — | — | philips / hue bridge v2 firmware | Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability. | 226d ago |
| CVE-2026-3557 | 8 | — | — | — | philips / hue bridge v2 firmware | Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnera | 226d ago |
| CVE-2026-3555 | 8 | — | — | — | philips / hue bridge v2 firmware | Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerabili | 226d ago |
| CVE-2026-22248 | 8 | — | — | — | teclib-edition / glpi | GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses | 231d ago |
| CVE-2026-85649 | 7.9 | — | — | — | — | (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in | 54d ago |
| CVE-2026-78408 | 7.9 | — | — | — | — | The nsenter --join-cgroup option opens the target cgroup.procs file as root and leaves that file descriptor open a | 56d ago |
| CVE-2026-73776 | 7.9 | — | — | — | hpe / arubaos-cx | A signature verification bypass vulnerability exists in the command line interface of AOS-CX. | 57d ago |
| CVE-2026-82636 | 7.9 | — | — | — | — | Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to | 59d ago |
| CVE-2026-44629 | 7.9 | — | — | — | — | Improper access control to the Synergis Softwire installation folder. | 62d ago |
| CVE-2026-80550 | 7.9 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Fix out of bounds check on CCW | 63d ago |
| CVE-2026-18716 | 7.9 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive info | 69d ago |
| CVE-2026-17063 | 7.9 | — | — | — | ibm / power system s1122 \(9824-22a\) firmware | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by | 70d ago |
| CVE-2026-70685 | 7.9 | — | — | — | oracle / hyperion calculation manager | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). | 71d ago |
| CVE-2026-54552 | 7.9 | — | — | — | — | sh provides Python process launching. | 71d ago |
| CVE-2026-15218 | 7.9 | — | — | — | — | A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. | 72d ago |
| CVE-2026-72312 | 7.9 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix VF bringup affecting PF prom | 75d ago |
| CVE-2026-20891 | 7.9 | — | — | — | intel / proset\/wireless wifi | Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers | 78d ago |
| CVE-2026-20737 | 7.9 | — | — | — | intel / proset\/wireless wifi | Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Win | 78d ago |
| CVE-2026-6726 | 7.9 | — | — | — | — | An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attack | 78d ago |
| CVE-2026-66763 | 7.9 | — | — | — | — | SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objec | 79d ago |
| CVE-2026-68116 | 7.9 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a fa | 79d ago |
| CVE-2026-48346 | 7.9 | — | — | — | adobe / animate | Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the | 106d ago |
| CVE-2026-12250 | 7.9 | — | — | — | — | Invocation of process using visible sensitive information vulnerability in TUBITAK BILGEM Software Technologies Re | 115d ago |
| CVE-2026-42487 | 7.9 | — | — | — | — | HVM guest I/O port accesses are subject to either emulation or at least translation. | 132d ago |
| CVE-2026-46848 | 7.9 | — | — | — | oracle / weblogic server | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). | 133d ago |
| CVE-2026-48578 | 7.9 | — | — | — | microsoft / windows 10 1607 | Improper access control in Windows Secure Boot allows an authorized attacker to elevate privileges locally. | 141d ago |
| CVE-2026-48576 | 7.9 | — | — | — | microsoft / windows 10 1607 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 141d ago |
| CVE-2026-48575 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature loc | 141d ago |
| CVE-2026-48573 | 7.9 | — | — | — | microsoft / windows 10 1607 | No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 141d ago |
| CVE-2026-48570 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature loc | 141d ago |
| CVE-2026-48568 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature loc | 141d ago |
| CVE-2026-47656 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature lo | 141d ago |
| CVE-2026-45654 | 7.9 | — | — | — | microsoft / windows 11 24h2 | Improper access control in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | 141d ago |
| CVE-2026-45588 | 7.9 | — | — | — | microsoft / windows 10 1607 | Protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature loc | 141d ago |
| CVE-2026-35266 | 7.9 | — | — | — | oracle / rest data services | Vulnerability in Oracle REST Data Services (component: Core). | 153d ago |
| CVE-2026-44711 | 7.9 | — | — | — | — | pam_usb provides hardware authentication for Linux using ordinary removable media. | 154d ago |
| CVE-2026-46076 | 7.9 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Raise #UD if unhandled VMMCALL isn' | 154d ago |
| CVE-2026-41217 | 7.9 | — | — | — | f5 / big-ip access policy manager | A vulnerability exists in an undisclosed BIG-IP TMOS Shell (tmsh) command that may allow an authenticated attacker | 168d ago |
| CVE-2026-86095 | 7.8 | — | — | — | — | Unidata netcdf-c through 4.10.1 contains an out-of-bounds write vulnerability in NC4_HDF5_inq_attname() that copie | 54d ago |
| CVE-2026-80119 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 54d ago |
| CVE-2026-80116 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 54d ago |
| CVE-2026-80114 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 54d ago |
| CVE-2026-80112 | 7.8 | — | — | — | — | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 bu | 54d ago |
| CVE-2026-85656 | 7.8 | — | — | — | — | An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allo | 54d ago |
| CVE-2026-85654 | 7.8 | — | — | — | — | Improper neutralization of special elements used in a template engine in the CDK generator in Amazon awslabs.dynam | 54d ago |
| CVE-2026-85690 | 7.8 | — | — | — | — | Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function that allows attackers to write fi | 54d ago |
| CVE-2026-85674 | 7.8 | — | — | — | — | aider (aider-chat) automatically loads a .aider.conf.yml configuration file from the root of the git repository it | 54d ago |
| CVE-2026-6958 | 7.8 | — | — | — | — | Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability S | 54d ago |
| CVE-2026-81302 | 7.8 | — | — | — | — | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to | 54d ago |
| CVE-2026-85439 | 7.8 | — | — | — | — | MOOS-IvP through 24.8.1 contains a remote code execution vulnerability in alogsplit's SplitHandler::handlePreCheck | 55d ago |
| CVE-2026-64200 | 7.8 | — | — | — | — | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. | 55d ago |
| CVE-2026-64199 | 7.8 | — | — | — | — | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. | 55d ago |
| CVE-2026-64198 | 7.8 | — | — | — | — | There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. | 55d ago |
| CVE-2026-64197 | 7.8 | — | — | — | — | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulti | 55d ago |
| CVE-2026-64196 | 7.8 | — | — | — | — | There is an out-of-bounds write vulnerability in DASYLab due to improper validation of user-supplied data, resulti | 55d ago |
