| CVE-2026-44636 | 7.4 | — | — | — | saitoha / libsixel | libsixel is a SIXEL encoder/decoder implementation derived from kmiya's sixel. | 167d ago |
| CVE-2026-44511 | 7.4 | — | — | — | — | Katalyst Koi is a framework for building Rails admin functionality. | 167d ago |
| CVE-2026-33376 | 7.4 | — | — | — | grafana / grafana | When using an IPv6 allow-list for the Auth Proxy feature, it defaults to /32 addresses. | 168d ago |
| CVE-2026-41132 | 7.4 | — | — | — | okfn / ckan | CKAN is an open-source DMS (data management system) for powering data hubs and data portals. | 168d ago |
| CVE-2026-34647 | 7.4 | — | — | — | adobe / commerce | Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected | 169d ago |
| CVE-2026-42893 | 7.4 | — | — | — | microsoft / outlook | Improper neutralization of special elements used in a command ('command injection') in M365 Copilot allows an unau | 169d ago |
| CVE-2026-41107 | 7.4 | — | — | — | microsoft / edge chromium | External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo | 169d ago |
| CVE-2026-40414 | 7.4 | — | — | — | microsoft / windows 10 1607 | Windows TCP/IP Denial of Service Vulnerability | 169d ago |
| CVE-2026-40413 | 7.4 | — | — | — | microsoft / windows 10 1607 | Windows TCP/IP Denial of Service Vulnerability | 169d ago |
| CVE-2026-27851 | 7.4 | — | — | — | dovecot / dovecot | When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly inter | 169d ago |
| CVE-2026-41872 | 7.4 | — | — | — | — | "Kura Sushi Official App" provided by EPG, Inc. | 169d ago |
| CVE-2026-33488 | 7.4 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 219d ago |
| CVE-2026-4600 | 7.4 | — | — | — | kjur / jsrsasign | Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature | 219d ago |
| CVE-2026-32887 | 7.4 | — | — | — | effectful / effect | Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript app | 222d ago |
| CVE-2026-2378 | 7.4 | — | — | — | thebrowser / arc search | ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content | 222d ago |
| CVE-2026-33131 | 7.4 | — | — | — | h3 / h3 | H3 is a minimal H(TTP) framework. | 222d ago |
| CVE-2026-32019 | 7.4 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.22 contain incomplete IPv4 special-use range validation in the isPrivateIpv4() f | 223d ago |
| CVE-2026-4428 | 7.4 | — | — | — | — | A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectl | 223d ago |
| CVE-2026-31989 | 7.4 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation red | 223d ago |
| CVE-2026-32775 | 7.4 | — | — | — | libexif project / libexif | libexif through 0.6.25 has a flaw in decoding MakerNotes. | 226d ago |
| CVE-2025-71263 | 7.4 | — | — | — | opengroup / unix | In UNIX Fourth Research Edition (v4), the su command is vulnerable to a buffer overflow due to the 'password' vari | 229d ago |
| CVE-2026-32242 | 7.4 | — | — | — | parseplatform / parse-server | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. | 230d ago |
| CVE-2026-28791 | 7.4 | — | — | — | ssw / tinacms\/cli | Tina is a headless content management system. | 230d ago |
| CVE-2026-32132 | 7.4 | — | — | — | zitadel / zitadel | ZITADEL is an open source identity management platform. | 231d ago |
| CVE-2026-20074 | 7.4 | — | — | — | cisco / ios xr | A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) multi-instance routing feature of Cisco | 231d ago |
| CVE-2026-85702 | 7.3 | — | — | — | — | A security vulnerability has been detected in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca9269df0f13e10ec1 | 54d ago |
| CVE-2026-85638 | 7.3 | — | — | — | — | A weakness has been identified in jofpin trape 2.0. | 54d ago |
| CVE-2026-85516 | 7.3 | — | — | — | — | A vulnerability was detected in code-projects Vehicle Management System 1.0. | 54d ago |
| CVE-2026-85512 | 7.3 | — | — | — | — | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. | 54d ago |
| CVE-2026-85403 | 7.3 | — | — | — | — | A flaw has been found in code-projects Doctor Appointment System 1.0. | 54d ago |
| CVE-2026-85402 | 7.3 | — | — | — | — | A vulnerability was detected in code-projects Doctor Appointment System 1.0. | 54d ago |
| CVE-2026-85399 | 7.3 | — | — | — | — | A security flaw has been discovered in code-projects Hospital Information System 1.0. | 54d ago |
| CVE-2026-85398 | 7.3 | — | — | — | — | A vulnerability was identified in code-projects Hospital Information System 1.0. | 54d ago |
| CVE-2026-85397 | 7.3 | — | — | — | — | A vulnerability was determined in code-projects Hospital Information System 1.0. | 54d ago |
| CVE-2026-85380 | 7.3 | — | — | — | — | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814 | 54d ago |
| CVE-2026-85379 | 7.3 | — | — | — | — | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618 | 54d ago |
| CVE-2026-85378 | 7.3 | — | — | — | — | A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814 | 54d ago |
| CVE-2026-85225 | 7.3 | — | — | — | — | A vulnerability was identified in code-projects Doctor Appointment System 1.0. | 54d ago |
| CVE-2026-85208 | 7.3 | — | — | — | — | A security flaw has been discovered in itsourcecode Online Medicine Delivery System 1.0. | 55d ago |
| CVE-2026-85187 | 7.3 | — | — | — | — | A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. | 55d ago |
| CVE-2026-85138 | 7.3 | — | — | — | — | A vulnerability was detected in SeaCMS up to 13.6. | 55d ago |
| CVE-2026-85137 | 7.3 | — | — | — | — | A security vulnerability has been detected in SeaCMS up to 13.6. | 55d ago |
| CVE-2026-85105 | 7.3 | — | — | — | — | A flaw has been found in NousResearch hermes-agent 0.18.0. | 55d ago |
| CVE-2026-80738 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_protocol in bpf_ | 55d ago |
| CVE-2026-80735 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before de | 55d ago |
| CVE-2026-84841 | 7.3 | — | — | — | — | A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. | 56d ago |
| CVE-2026-84652 | 7.3 | — | — | — | — | In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenti | 56d ago |
| CVE-2026-78590 | 7.3 | — | — | — | elastic / kibana | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in the Kibana Fleet featur | 56d ago |
| CVE-2026-76782 | 7.3 | — | — | — | — | Vulnerability in Drupal Screenshot. | 56d ago |
| CVE-2026-76759 | 7.3 | — | — | — | — | Vulnerability in Drupal Screenshot. | 56d ago |
| CVE-2026-84441 | 7.3 | — | — | — | — | A security vulnerability has been detected in Piwigo up to 16.3.0. | 56d ago |
| CVE-2026-84478 | 7.3 | — | — | — | — | WWBN AVideo contains a path traversal vulnerability in the API get_api_login_code endpoint that allows unauthentic | 56d ago |
| CVE-2026-84423 | 7.3 | — | — | — | — | A vulnerability has been found in Casdoor up to 4.0.0. | 56d ago |
| CVE-2026-73770 | 7.3 | — | — | — | hpe / arubaos-cx | An authenticated arbitrary file write vulnerability exists in AOS-CX. | 57d ago |
| CVE-2026-73768 | 7.3 | — | — | — | hpe / arubaos-cx | A vulnerability exists in the command line interface of AOS-CX that may allow for improper processing of malformed | 57d ago |
| CVE-2026-78592 | 7.3 | — | — | — | elastic / kibana | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) in Kibana can lead to the | 57d ago |
| CVE-2026-19592 | 7.3 | — | — | — | — | OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git | 57d ago |
| CVE-2026-19590 | 7.3 | — | — | — | — | OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git opera | 57d ago |
| CVE-2026-84111 | 7.3 | — | — | — | — | A flaw has been found in Chanjet CRM up to 20260707. | 57d ago |
| CVE-2026-82957 | 7.3 | — | — | — | — | A vulnerability was found in hyperledger-firefly firefly up to 1.4.0. | 58d ago |
