| CVE-2026-59780 | 7.5 | — | — | — | apache / cloudstack | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's LDAP authenticatio | 69d ago |
| CVE-2026-59657 | 7.5 | — | — | — | apache / cloudstack | Cleartext Storage of Sensitive Information vulnerability in Apache CloudStack with AsyncJob storage in the databas | 69d ago |
| CVE-2026-59655 | 7.5 | — | — | — | apache / cloudstack | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudStack's OAuth authenticati | 69d ago |
| CVE-2026-50222 | 7.5 | — | — | — | apache / cloudstack | Missing Authorization, Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache CloudSta | 69d ago |
| CVE-2026-16323 | 7.5 | — | — | — | — | Execution after redirect (EAR) vulnerability in FuyaWeb Internet and Informatics Services ArchitectPanel Web Admin | 69d ago |
| CVE-2026-65644 | 7.5 | — | — | — | rocket.chat / rocket.chat | Rocket.Chat in versions before 8.8.0, 8.7.1, 8.6.2, 8.5.3, 8.4.6, 8.3.8, 8.2.8, 8.1.8, and 7.10.15 has a REST API | 69d ago |
| CVE-2026-77642 | 7.5 | — | — | — | — | tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpec | 69d ago |
| CVE-2026-72818 | 7.5 | — | — | — | — | The URLS regular expression in nltk/tokenize/casual.py, compiled into TweetTokenizer.WORD_RE and applied by TweetT | 69d ago |
| CVE-2026-64773 | 7.5 | — | — | — | apple / container | An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to | 69d ago |
| CVE-2026-49217 | 7.5 | — | — | — | — | Mailu is a mail server as a set of Docker images. | 69d ago |
| CVE-2026-19446 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 allows a remote unauthenticated attacker can send a crafted UDP pack | 69d ago |
| CVE-2026-17425 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a | 69d ago |
| CVE-2026-17170 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to im | 69d ago |
| CVE-2026-17165 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a | 69d ago |
| CVE-2026-17163 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to im | 69d ago |
| CVE-2026-17159 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an | 69d ago |
| CVE-2026-17121 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 69d ago |
| CVE-2025-52182 | 7.5 | — | — | — | — | The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability | 69d ago |
| CVE-2026-76020 | 7.5 | — | — | — | google / chrome | Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code | 69d ago |
| CVE-2026-52021 | 7.5 | — | — | — | — | An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain sensitive information | 69d ago |
| CVE-2026-53587 | 7.5 | — | — | — | — | libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, al | 69d ago |
| CVE-2026-76641 | 7.5 | — | — | — | — | Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruptio | 70d ago |
| CVE-2026-63495 | 7.5 | — | — | — | — | Libevent is an event notification library. | 70d ago |
| CVE-2026-69183 | 7.5 | — | — | — | — | Monkeytype is a minimalistic and customizable typing test. | 70d ago |
| CVE-2026-61704 | 7.5 | — | — | — | — | Link Preview JS extracts web links information. | 70d ago |
| CVE-2026-75140 | 7.5 | — | — | — | — | jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlT | 70d ago |
| CVE-2026-63043 | 7.5 | — | — | — | apache / inlong | Relative Path Traversal vulnerability in Apache InLong. | 70d ago |
| CVE-2026-63490 | 7.5 | — | — | — | — | Handlebars.java provides logic-less and semantic Mustache templates with Java. | 70d ago |
| CVE-2026-16928 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a | 70d ago |
| CVE-2026-16924 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an | 70d ago |
| CVE-2026-74021 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions. | 70d ago |
| CVE-2026-74020 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Koji <= 2.2.1 versions. | 70d ago |
| CVE-2026-73198 | 7.5 | — | — | — | redhat / enterprise linux | A flaw was found in FreeIPA. | 70d ago |
| CVE-2026-73197 | 7.5 | — | — | — | redhat / enterprise linux | A flaw was found in FreeIPA. | 70d ago |
| CVE-2026-14952 | 7.5 | — | — | — | — | An unauthenticated remote attacker can retrieve sensible files from the FDS Web server, such as the backup archive | 70d ago |
| CVE-2026-14163 | 7.5 | — | — | — | octopus / octopus server | In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be pr | 70d ago |
| CVE-2026-75963 | 7.5 | — | — | — | — | The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includi | 70d ago |
| CVE-2026-8619 | 7.5 | — | — | — | tp-link / tl-mr100 firmware | An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR640 | 70d ago |
| CVE-2026-76928 | 7.5 | — | — | — | wireshark / wireshark | X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 70d ago |
| CVE-2026-76880 | 7.5 | — | — | — | wireshark / wireshark | RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 70d ago |
| CVE-2026-76879 | 7.5 | — | — | — | wireshark / wireshark | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 70d ago |
| CVE-2026-76396 | 7.5 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could caus | 70d ago |
| CVE-2026-76355 | 7.5 | — | — | — | splunk / splunk | In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained | 70d ago |
| CVE-2026-76262 | 7.5 | — | — | — | splunk / splunk | In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics fro | 70d ago |
| CVE-2026-76254 | 7.5 | — | — | — | splunk / splunk | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could caus | 70d ago |
| CVE-2025-36255 | 7.5 | — | — | — | ibm / ds8900f firmware | IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an | 70d ago |
| CVE-2026-69222 | 7.5 | — | — | — | — | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. | 70d ago |
| CVE-2026-62317 | 7.5 | — | — | — | — | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. | 70d ago |
| CVE-2026-19507 | 7.5 | — | — | — | — | Uncontrolled resource consumption in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote u | 70d ago |
| CVE-2026-18821 | 7.5 | — | — | — | ibm / power system s1122 \(9824-22a\) firmware | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through F | 70d ago |
| CVE-2026-16852 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an | 70d ago |
| CVE-2026-16837 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to im | 70d ago |
| CVE-2026-16836 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 70d ago |
| CVE-2026-16831 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 70d ago |
| CVE-2026-16824 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 70d ago |
| CVE-2026-19875 | 7.5 | — | — | — | langflow / langflow | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information a | 71d ago |
| CVE-2026-45798 | 7.5 | — | — | — | — | Wazuh is a free and open source platform used for threat prevention, detection, and response. | 71d ago |
| CVE-2026-20320 | 7.5 | — | — | — | — | A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, | 71d ago |
| CVE-2026-20319 | 7.5 | — | — | — | — | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload enginee | 71d ago |
| CVE-2026-63408 | 7.5 | — | — | — | — | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. | 71d ago |
