| CVE-2026-85786 | 7.5 | — | — | — | — | Improper handling of highly compressed data in Amazon ion-java before 1.12.1 might allow remote attackers to cause | 55d ago |
| CVE-2026-61686 | 7.5 | — | — | — | — | SolidInvoice is an open-source invoicing platform. | 55d ago |
| CVE-2026-19534 | 7.5 | — | — | — | — | undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds wi | 55d ago |
| CVE-2021-44320 | 7.5 | — | — | — | — | Parrot AR.Drone version 1 and 2 does not employ a suitable mechanism to prevent denial-of-service (DoS) attacks. | 55d ago |
| CVE-2026-19300 | 7.5 | — | — | — | — | IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain sensitive information due to incompl | 55d ago |
| CVE-2026-85699 | 7.5 | — | — | — | — | jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the | 55d ago |
| CVE-2026-85691 | 7.5 | — | — | — | — | MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoin | 55d ago |
| CVE-2026-85687 | 7.5 | — | — | — | — | surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /page, | 55d ago |
| CVE-2026-85686 | 7.5 | — | — | — | — | ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that | 55d ago |
| CVE-2026-85685 | 7.5 | — | — | — | — | AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add_skill that copies arb | 55d ago |
| CVE-2026-85675 | 7.5 | — | — | — | — | OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_conte | 55d ago |
| CVE-2026-85673 | 7.5 | — | — | — | — | LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI-compatible API multimodal media U | 55d ago |
| CVE-2026-85671 | 7.5 | — | — | — | — | QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/local_doc_qa/get_file_base64 and /api/ | 55d ago |
| CVE-2026-85668 | 7.5 | — | — | — | — | Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability in t | 55d ago |
| CVE-2026-85666 | 7.5 | — | — | — | — | OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticated server-side request forgery vul | 55d ago |
| CVE-2026-85664 | 7.5 | — | — | — | — | Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neighbors, ef_construction, and ef_sear | 55d ago |
| CVE-2026-85626 | 7.5 | — | — | — | — | git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref and object parameters of git_log, gi | 55d ago |
| CVE-2026-85619 | 7.5 | — | — | — | — | AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to the workspace in authorization check | 55d ago |
| CVE-2026-85608 | 7.5 | — | — | — | — | Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery vulnerability in the /api/download | 55d ago |
| CVE-2026-85606 | 7.5 | — | — | — | — | firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability in the firecrawl_parse tool that a | 55d ago |
| CVE-2026-19205 | 7.5 | — | — | — | — | Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting. | 55d ago |
| CVE-2026-12483 | 7.5 | — | — | — | — | The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and includ | 55d ago |
| CVE-2026-85612 | 7.5 | — | — | — | — | OpenPanel before 2.3.0 contains an unauthenticated server-side request forgery vulnerability in the /misc/favicon | 55d ago |
| CVE-2026-85609 | 7.5 | — | — | — | — | Openpanel before 2.3.0 contains an unauthenticated full-read server-side request forgery (SSRF) vulnerability in t | 55d ago |
| CVE-2026-85585 | 7.5 | — | — | — | — | SiYuan before v3.8.2 contains an unbounded resource consumption vulnerability in the request-concurrency middlewar | 55d ago |
| CVE-2026-85584 | 7.5 | — | — | — | — | SiYuan versions before v3.8.2 contain a denial of service vulnerability in the publish-service Basic Auth throttle | 55d ago |
| CVE-2026-85581 | 7.5 | — | — | — | — | SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint | 55d ago |
| CVE-2026-19080 | 7.5 | — | — | — | — | Observable response discrepancy vulnerability in Menulux Software Inc. | 55d ago |
| CVE-2026-84428 | 7.5 | — | — | — | — | fastify versions before 5.12.2 implement the case-insensitive nature of HTTP header names by lowercasing names in | 55d ago |
| CVE-2026-84469 | 7.5 | — | — | — | — | fastify versions before 5.12.2 decide whether to compile a request schema based on JavaScript truthiness, but JSON | 55d ago |
| CVE-2026-76169 | 7.5 | — | — | — | — | fastify versions >= 4.0.0 and before 5.12.2 can route a malformed URL sent under one plugin prefix to the custom n | 55d ago |
| CVE-2026-81665 | 7.5 | — | — | — | — | A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. | 55d ago |
| CVE-2026-81270 | 7.5 | — | — | — | — | Apache Allura: exposure of non-public information via search. | 55d ago |
| CVE-2026-66840 | 7.5 | — | — | — | — | XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) | 55d ago |
| CVE-2026-85505 | 7.5 | — | — | — | — | ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text | 55d ago |
| CVE-2026-85147 | 7.5 | — | — | — | — | SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. | 55d ago |
| CVE-2026-85450 | 7.5 | — | — | — | — | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in the MOOSDB HTTP server that creates un | 55d ago |
| CVE-2026-85449 | 7.5 | — | — | — | — | MOOS-IvP pMarineViewer through 24.8.1 fails to limit the number of tracked node identities from NODE_REPORT messag | 55d ago |
| CVE-2026-85448 | 7.5 | — | — | — | — | MOOS-IvP uFldShoreBroker through 24.8.1 fails to limit the number of claimed communities stored in parallel vector | 55d ago |
| CVE-2026-85447 | 7.5 | — | — | — | — | MOOS-IvP pRealm through version 24.8.1 accepts unbounded REALMCAST_REQ subscriptions without validating duration o | 55d ago |
| CVE-2026-85446 | 7.5 | — | — | — | — | MOOS-IvP versions through 24.8.1 contain a quadratic processing vulnerability in uFldNodeComms where each new node | 55d ago |
| CVE-2026-85445 | 7.5 | — | — | — | — | MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that tr | 55d ago |
| CVE-2026-85444 | 7.5 | — | — | — | — | MOOS-IvP through 24.8.1 contains a buffer over-read vulnerability in isQuoted(), isBraced(), and isChevroned() fun | 55d ago |
| CVE-2026-85443 | 7.5 | — | — | — | — | MOOS core-moos through 10.4.0 contains a denial of service vulnerability in MOOSCommServer::ListenLoop() where the | 55d ago |
| CVE-2026-85442 | 7.5 | — | — | — | — | MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), allo | 55d ago |
| CVE-2026-85441 | 7.5 | — | — | — | — | MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::opera | 55d ago |
| CVE-2026-85436 | 7.5 | — | — | — | — | MOOS essential-moos through 10.0.1 contains a buffer overflow vulnerability in CMOOSUDPLink::ReadPktFromArray() th | 55d ago |
| CVE-2026-85431 | 7.5 | — | — | — | — | MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOS | 55d ago |
| CVE-2026-85429 | 7.5 | — | — | — | — | MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating | 55d ago |
| CVE-2026-8862 | 7.5 | — | — | — | — | IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source | 56d ago |
| CVE-2026-82520 | 7.5 | — | — | — | — | parsedmarc before 11.0.1 decompresses gzip and ZIP attachments in a single unbounded read with no limit on decompr | 56d ago |
| CVE-2026-77465 | 7.5 | — | — | — | — | toml-node is a TOML parser for Node.js and the browser. | 56d ago |
| CVE-2026-85045 | 7.5 | — | — | — | — | Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code i | 56d ago |
| CVE-2026-82527 | 7.5 | — | — | — | — | R2R through 3.6.6 contains a SQL injection vulnerability that allows unauthenticated attackers to inject SQL predi | 56d ago |
| CVE-2026-85396 | 7.5 | — | — | — | — | rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entry#extract that fails to properly | 56d ago |
| CVE-2026-85393 | 7.5 | — | — | — | — | node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1. | 56d ago |
| CVE-2026-33630 | 7.5 | — | — | — | — | c-ares is an asynchronous resolver library. | 56d ago |
| CVE-2026-84847 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Quick Event Manager <= 9.17 versions. | 56d ago |
| CVE-2026-84778 | 7.5 | — | — | — | — | Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions. | 56d ago |
| CVE-2026-84776 | 7.5 | — | — | — | — | Unauthenticated Denial of Service Attack in MalCare Security <= 6.69 versions. | 56d ago |
