| CVE-2026-53958 | 7.6 | — | — | — | — | 4gaBoards is a boards system for realtime project management. | 72d ago |
| CVE-2026-71048 | 7.6 | — | — | — | — | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component: Installation Is | 72d ago |
| CVE-2026-71027 | 7.6 | — | — | — | oracle / commerce experience manager | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce | 72d ago |
| CVE-2026-71022 | 7.6 | — | — | — | oracle / commerce experience manager | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce | 72d ago |
| CVE-2026-71021 | 7.6 | — | — | — | oracle / commerce experience manager | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce | 72d ago |
| CVE-2026-71020 | 7.6 | — | — | — | oracle / commerce experience manager | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce | 72d ago |
| CVE-2026-70960 | 7.6 | — | — | — | oracle / hyperion financial management | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | 72d ago |
| CVE-2026-70864 | 7.6 | — | — | — | oracle / application testing suite | Vulnerability in Oracle Application Testing Suite. | 72d ago |
| CVE-2026-70803 | 7.6 | — | — | — | oracle / general ledger | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). | 72d ago |
| CVE-2026-70791 | 7.6 | — | — | — | oracle / transportation execution | Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Opera | 72d ago |
| CVE-2026-70786 | 7.6 | — | — | — | oracle / service fulfillment manager | Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment | 72d ago |
| CVE-2026-70764 | 7.6 | — | — | — | oracle / general ledger | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). | 72d ago |
| CVE-2026-70725 | 7.6 | — | — | — | oracle / advanced inbound telephony | Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Ope | 72d ago |
| CVE-2026-70678 | 7.6 | — | — | — | oracle / hyperion calculation manager | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security). | 72d ago |
| CVE-2026-61296 | 7.6 | — | — | — | oracle / enterprise asset management | Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Linear Asse | 72d ago |
| CVE-2026-61227 | 7.6 | — | — | — | oracle / webcenter portal | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). | 72d ago |
| CVE-2026-61208 | 7.6 | — | — | — | oracle / webcenter portal | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). | 72d ago |
| CVE-2026-60909 | 7.6 | — | — | — | oracle / webcenter content | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). | 72d ago |
| CVE-2026-60748 | 7.6 | — | — | — | oracle / general ledger | Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). | 72d ago |
| CVE-2026-49223 | 7.6 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 72d ago |
| CVE-2026-49222 | 7.6 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 72d ago |
| CVE-2026-49227 | 7.6 | — | — | — | — | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. | 72d ago |
| CVE-2026-69189 | 7.6 | — | — | — | — | Hoppscotch is an open source API development ecosystem. | 72d ago |
| CVE-2026-75831 | 7.6 | — | — | — | — | Grav before 2.0.15 contains a stored cross-site scripting vulnerability in the audio and video media rendering thr | 72d ago |
| CVE-2026-65822 | 7.6 | — | — | — | — | ERPNext is a free and open source Enterprise Resource Planning tool. | 73d ago |
| CVE-2026-72825 | 7.6 | — | — | — | — | The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-co | 76d ago |
| CVE-2026-73408 | 7.6 | — | — | — | — | Budibase is an open-source low-code platform. | 77d ago |
| CVE-2026-72853 | 7.6 | — | — | — | — | Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row | 77d ago |
| CVE-2026-72669 | 7.6 | — | — | — | elastic / kibana | The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, a | 77d ago |
| CVE-2026-16961 | 7.6 | — | — | — | ibm / i | IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection. | 77d ago |
| CVE-2026-73509 | 7.6 | — | — | — | — | OpenList a file list program that supports multiple storage. | 77d ago |
| CVE-2026-73346 | 7.6 | — | — | — | — | Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions. | 77d ago |
| CVE-2026-73326 | 7.6 | — | — | — | — | CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to ac | 78d ago |
| CVE-2026-17111 | 7.6 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection. | 78d ago |
| CVE-2026-16907 | 7.6 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper | 78d ago |
| CVE-2026-73264 | 7.6 | — | — | — | — | Prowler is a cloud security platform. | 78d ago |
| CVE-2026-18693 | 7.6 | — | — | — | — | An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privi | 79d ago |
| CVE-2026-48767 | 7.6 | — | — | — | — | TypeBot is a chatbot builder tool. | 79d ago |
| CVE-2026-48415 | 7.6 | — | — | — | — | Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature byp | 79d ago |
| CVE-2026-48766 | 7.6 | — | — | — | — | TypeBot is a chatbot builder tool. | 79d ago |
| CVE-2026-44763 | 7.6 | — | — | — | — | SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path vali | 79d ago |
| CVE-2026-18621 | 7.6 | — | — | — | — | A flaw was found in Data Science Pipelines (DSP). | 80d ago |
| CVE-2026-72594 | 7.6 | — | — | — | — | A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged aut | 80d ago |
| CVE-2026-19387 | 7.6 | — | — | — | — | A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding | 80d ago |
| CVE-2026-67621 | 7.6 | — | — | — | — | Flowise through 3.1.4 contains a missing authorization vulnerability that allows authenticated workspace members t | 84d ago |
| CVE-2026-34966 | 7.6 | — | — | — | — | Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to | 85d ago |
| CVE-2026-71294 | 7.6 | — | — | — | — | Cotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes that may be instanti | 85d ago |
| CVE-2026-25292 | 7.6 | — | — | — | qualcomm / sm6225p firmware | Memory Corruption when processing untrusted user input in the fastboot command handler for audio framework configu | 86d ago |
| CVE-2026-67352 | 7.6 | — | — | — | — | luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that a | 89d ago |
| CVE-2026-10685 | 7.6 | — | — | — | zephyrproject / zephyr | The Zephyr Bluetooth GATT client CCC-write response handler gatt_write_ccc_rsp() in subsys/bluetooth/host/gatt.c i | 90d ago |
| CVE-2026-67527 | 7.6 | — | — | — | — | OpenProject is open-source, web-based project management software. | 91d ago |
| CVE-2026-41703 | 7.6 | — | — | — | — | VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. | 91d ago |
| CVE-2026-18381 | 7.6 | — | — | — | redhat / cost management metrics operator | A flaw was found in the koku-metrics-operator for Red Hat OpenShift. | 91d ago |
| CVE-2026-18378 | 7.6 | — | — | — | redhat / cost management metrics operator | A flaw was found in koku-metrics-operator. | 91d ago |
| CVE-2026-18361 | 7.6 | — | — | — | — | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) | 91d ago |
| CVE-2026-18360 | 7.6 | — | — | — | — | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) | 91d ago |
| CVE-2026-16969 | 7.6 | — | — | — | — | The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) | 91d ago |
| CVE-2026-16313 | 7.6 | — | — | — | — | A flaw was found in sg3_utils. | 93d ago |
| CVE-2026-66427 | 7.6 | — | — | — | — | Administrator SQL Injection in WP Google Review Slider <= 18.4 versions. | 94d ago |
| CVE-2026-59537 | 7.6 | — | — | — | — | Administrator SQL Injection in Sender – Newsletter, SMS and Email Marketing Automation for WooCommerce <= 2.10.22 | 94d ago |
