| CVE-2026-64679 | 8.1 | — | — | — | — | Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. | 53d ago |
| CVE-2026-68745 | 8.1 | — | — | — | apache / cloudstack | Certificate validation failures in SAML authentication in Apache CloudStack 4.20.3.0 and 4.22.1.0 on all platforms | 53d ago |
| CVE-2026-18781exploited | 8.1 | 0.54% | 1/3 | +3d | — | The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the fi | 53d ago |
| CVE-2026-19437 | 8.1 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buf | 54d ago |
| CVE-2026-17138 | 8.1 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a sta | 54d ago |
| CVE-2026-17060 | 8.1 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and ca | 54d ago |
| CVE-2026-17000 | 8.1 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to impro | 54d ago |
| CVE-2026-76019 | 8.1 | — | — | — | google / chrome | Incorrect authorization in Workers in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had comp | 54d ago |
| CVE-2026-77176 | 8.1 | — | — | — | — | A flaw was found in Kata Containers. | 54d ago |
| CVE-2026-63042 | 8.1 | — | — | — | apache / inlong | Files or Directories Accessible to External Parties vulnerability in Apache InLong. | 54d ago |
| CVE-2026-63040 | 8.1 | — | — | — | apache / inlong | Files or Directories Accessible to External Parties vulnerability in Apache InLong. | 54d ago |
| CVE-2026-76633 | 8.1 | — | — | — | — | WeGIA before 3.9.2 contains an authorization bypass vulnerability in the password change flow that allows any auth | 54d ago |
| CVE-2026-28150 | 8.1 | — | — | — | — | Unauthenticated Local File Inclusion in Golo Framework < 1.7.5 versions. | 54d ago |
| CVE-2025-15637 | 8.1 | — | — | — | — | Unauthenticated Local File Inclusion in Shuffle <= 1.8 versions. | 54d ago |
| CVE-2026-76886 | 8.1 | — | — | — | wireshark / wireshark | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 55d ago |
| CVE-2026-76399 | 8.1 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided sche | 55d ago |
| CVE-2026-76397 | 8.1 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.0, a user who holds the "power" Splunk role could access and delete all re | 55d ago |
| CVE-2026-76388 | 8.1 | — | — | — | splunk / enterprise security | In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security ro | 55d ago |
| CVE-2026-76387 | 8.1 | — | — | — | splunk / enterprise security | In Splunk Enterprise Security versions below 8.6.1, a user who holds a Splunk Enterprise Security role that contai | 55d ago |
| CVE-2026-76356 | 8.1 | — | — | — | splunk / soar | In Splunk SOAR versions below 8.6.0, an unauthenticated user could spoof the source IP address in a crafted reques | 55d ago |
| CVE-2026-76354 | 8.1 | — | — | — | splunk / splunk | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "p | 55d ago |
| CVE-2026-76338 | 8.1 | — | — | — | splunk / splunk | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user who has access to | 55d ago |
| CVE-2026-76331 | 8.1 | — | — | — | splunk / splunk | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "p | 55d ago |
| CVE-2026-18544 | 8.1 | — | — | — | ibm / portieris | IBM Portieris 0.5.0 through 0.14.2 could allow a remote authenticated attacker to bypass image policy enforcement | 55d ago |
| CVE-2026-12633 | 8.1 | — | — | — | — | The IPv6 neighbor-discovery code in subsys/net/ip/ipv6_nbr.c processes the 6LoWPAN Context Option (6CO, RFC 6775) | 55d ago |
| CVE-2026-19506 | 8.1 | — | — | — | — | Race condition in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote attacker to gain una | 55d ago |
| CVE-2026-17414 | 8.1 | — | — | — | ibm / power system s1122 \(9824-22a\) firmware | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through F | 55d ago |
| CVE-2026-17429 | 8.1 | — | — | — | ibm / power system s1122 \(9824-22a\) firmware | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through F | 55d ago |
| CVE-2026-75146 | 8.1 | — | — | — | — | FFmpeg before commit 65b0dab contains an out-of-bounds read in the DASH demuxer (libavformat/dashdec.c). | 55d ago |
| CVE-2026-62667 | 8.1 | — | — | — | — | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. | 55d ago |
| CVE-2026-15078 | 8.1 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX | 55d ago |
| CVE-2026-76219 | 8.1 | — | — | — | gitpython project / gitpython | GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFi | 55d ago |
| CVE-2026-76207 | 8.1 | — | — | — | phpmyfaq / phpmyfaq | phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where remember-me tokens are issue | 55d ago |
| CVE-2026-76205 | 8.1 | — | — | — | phpmyfaq / phpmyfaq | phpMyFAQ before 4.1.7 contains a SQL injection vulnerability in the glossary create and update endpoints caused by | 55d ago |
| CVE-2026-70422 | 8.1 | — | — | — | dell / openmanage enterprise | Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used | 55d ago |
| CVE-2026-73387 | 8.1 | — | — | — | — | Unauthenticated Local File Inclusion in Resido <= 1.5 versions. | 55d ago |
| CVE-2026-58086 | 8.1 | — | — | — | freebsd / freebsd | As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a jailed root user. | 55d ago |
| CVE-2026-13169 | 8.1 | — | — | — | — | The Eventin WordPress plugin before 4.1.21 does not properly verify ownership of events before allowing them to be | 55d ago |
| CVE-2026-19942 | 8.1 | — | — | — | — | The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordP | 55d ago |
| CVE-2026-21584 | 8.1 | — | — | — | atlassian / bamboo | This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, | 56d ago |
| CVE-2026-71112 | 8.1 | — | — | — | oracle / peoplesoft enterprise fin common objects | Vulnerability in the PeopleSoft Enterprise FIN Common Objects product of Oracle PeopleSoft (component: Security). | 56d ago |
| CVE-2026-71110 | 8.1 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 56d ago |
| CVE-2026-71068 | 8.1 | — | — | — | oracle / agile plm mcad connector | Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Chain (component: CAX Client). | 56d ago |
| CVE-2026-71053 | 8.1 | — | — | — | oracle / agile engineering data management | Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Web Servi | 56d ago |
| CVE-2026-71042 | 8.1 | — | — | — | oracle / agile product lifecycle management | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: PGC / Excel Plugin). | 56d ago |
| CVE-2026-71035 | 8.1 | — | — | — | oracle / commerce experience manager | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce | 56d ago |
| CVE-2026-70999 | 8.1 | — | — | — | oracle / commerce experience manager | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce | 56d ago |
| CVE-2026-70959 | 8.1 | — | — | — | oracle / hyperion infrastructure technology | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation | 56d ago |
| CVE-2026-70957 | 8.1 | — | — | — | oracle / hyperion infrastructure technology | Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Installation | 56d ago |
| CVE-2026-70943 | 8.1 | — | — | — | oracle / hyperion financial management | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | 56d ago |
| CVE-2026-70931 | 8.1 | — | — | — | oracle / workflow | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). | 56d ago |
| CVE-2026-70929 | 8.1 | — | — | — | oracle / hyperion financial management | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | 56d ago |
| CVE-2026-70925 | 8.1 | — | — | — | oracle / hyperion financial management | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). | 56d ago |
| CVE-2026-70924 | 8.1 | — | — | — | oracle / web services manager | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Secu | 56d ago |
| CVE-2026-70904 | 8.1 | — | — | — | oracle / hyperion data relationship management | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an | 56d ago |
| CVE-2026-70901 | 8.1 | — | — | — | oracle / hyperion data relationship management | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an | 56d ago |
| CVE-2026-70881 | 8.1 | — | — | — | oracle / hyperion data relationship management | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an | 56d ago |
| CVE-2026-70878 | 8.1 | — | — | — | oracle / hyperion data relationship management | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access an | 56d ago |
| CVE-2026-70868 | 8.1 | — | — | — | oracle / application testing suite | Vulnerability in Oracle Application Testing Suite. | 56d ago |
| CVE-2026-70835 | 8.1 | — | — | — | oracle / irecruitment | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Internal Operations). | 56d ago |
