| CVE-2026-72122 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix lockless bound/ifindex race and | 74d ago |
| CVE-2026-72103 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: dm: avoid leaking the caller's thread keyring | 74d ago |
| CVE-2026-72019 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: macsec: don't read an unset MAC header in macs | 74d ago |
| CVE-2026-19826 | 7.3 | — | — | — | — | A vulnerability was detected in alldatacenter alldata up to 0.6.8. | 75d ago |
| CVE-2026-19825 | 7.3 | — | — | — | — | A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. | 75d ago |
| CVE-2026-19764 | 7.3 | — | — | — | — | A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5. | 75d ago |
| CVE-2026-19762 | 7.3 | — | — | — | — | A vulnerability was found in DTStack Taier 1.4.0. | 75d ago |
| CVE-2026-19758 | 7.3 | — | — | — | — | A vulnerability was determined in dromara lamp-cloud up to 5.10.0. | 75d ago |
| CVE-2026-19757 | 7.3 | — | — | — | — | A vulnerability was found in Dromara lamp-cloud up to 5.10.0. | 75d ago |
| CVE-2026-19753 | 7.3 | — | — | — | — | A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0. | 75d ago |
| CVE-2026-18511 | 7.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow | 76d ago |
| CVE-2026-17099 | 7.3 | — | — | — | ibm / i | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authent | 76d ago |
| CVE-2026-73669 | 7.3 | — | — | — | — | The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network int | 76d ago |
| CVE-2026-72677 | 7.3 | — | — | — | elastic / kibana | Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative | 76d ago |
| CVE-2026-72658 | 7.3 | — | — | — | elastic / kibana | Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CA | 76d ago |
| CVE-2026-14875 | 7.3 | — | — | — | ibm / i access client solutions | IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when i | 76d ago |
| CVE-2026-19710 | 7.3 | — | — | — | — | A vulnerability was found in SourceCodester Simple Student Information System. | 76d ago |
| CVE-2026-63424 | 7.3 | — | — | — | — | During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that cou | 76d ago |
| CVE-2026-28188 | 7.3 | — | — | — | — | Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions. | 76d ago |
| CVE-2026-13476 | 7.3 | — | — | — | ibm / informix dynamic server | IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary comman | 77d ago |
| CVE-2026-67260 | 7.3 | — | — | — | apache / airflow | Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept b | 77d ago |
| CVE-2026-71383 | 7.3 | — | — | — | adobe / coldfusion | is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. | 78d ago |
| CVE-2026-70355 | 7.3 | — | — | — | microsoft / sharepoint server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoin | 78d ago |
| CVE-2026-68821 | 7.3 | — | — | — | microsoft / app installer | Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges local | 78d ago |
| CVE-2026-64900 | 7.3 | — | — | — | microsoft / sharepoint server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoin | 78d ago |
| CVE-2026-62914 | 7.3 | — | — | — | microsoft / exchange server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server | 78d ago |
| CVE-2026-59119 | 7.3 | — | — | — | microsoft / powershell | Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. | 78d ago |
| CVE-2026-20890 | 7.3 | — | — | — | intel / proset\/wireless wifi | Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privilege | 78d ago |
| CVE-2026-18639 | 7.3 | — | — | — | — | When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username. | 78d ago |
| CVE-2026-44765 | 7.3 | — | — | — | — | Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthent | 78d ago |
| CVE-2026-44764 | 7.3 | — | — | — | — | Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthent | 78d ago |
| CVE-2026-59091 | 7.3 | — | — | — | gimp / gimp | A flaw was found in GIMP's file format plugins, including those for PSD and PAA files. | 79d ago |
| CVE-2026-6374 | 7.3 | — | — | — | — | Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Exe | 79d ago |
| CVE-2026-68320 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_chunk_list capacity check in sc | 79d ago |
| CVE-2026-68265 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix BO prefetch with CONSULT_MEM_AD | 79d ago |
| CVE-2026-68230 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and | 79d ago |
| CVE-2026-68134 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing facility check Only | 79d ago |
| CVE-2026-65948 | 7.3 | — | — | — | apache / ranger | UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. | 79d ago |
| CVE-2026-19384 | 7.3 | — | — | — | — | A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. | 79d ago |
| CVE-2026-19379 | 7.3 | — | — | — | — | A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. | 79d ago |
| CVE-2026-19376 | 7.3 | — | — | — | — | A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. | 79d ago |
| CVE-2026-19374 | 7.3 | — | — | — | — | A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06. | 79d ago |
| CVE-2026-19355 | 7.3 | — | — | — | — | A vulnerability was determined in MingSoft MCMS up to 3.0.6. | 80d ago |
| CVE-2026-19351 | 7.3 | — | — | — | — | A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. | 80d ago |
| CVE-2026-19344 | 7.3 | — | — | — | — | A vulnerability has been found in code-projects Task Management System 1.0. | 80d ago |
| CVE-2026-19343 | 7.3 | — | — | — | — | A flaw has been found in code-projects Task Management System 1.0. | 80d ago |
| CVE-2026-19342 | 7.3 | — | — | — | — | A vulnerability was detected in code-projects Task Management System 1.0. | 80d ago |
| CVE-2026-19263 | 7.3 | — | — | — | — | A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114. | 81d ago |
| CVE-2026-48098 | 7.3 | — | — | — | — | NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address | 82d ago |
| CVE-2026-19231 | 7.3 | — | — | — | — | A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0. | 82d ago |
| CVE-2026-11430 | 7.3 | — | — | — | — | Grav CMS's scheduler-webhook plugin contains an authentication bypass in the webhook token check. | 82d ago |
| CVE-2026-19211 | 7.3 | — | — | — | — | A vulnerability was found in SourceCodester Photo Share Website 1.0. | 82d ago |
| CVE-2026-19196 | 7.3 | — | — | — | — | A vulnerability was found in SourceCodester Photo Share Website 1.0. | 82d ago |
| CVE-2026-19062 | 7.3 | — | — | — | — | A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. | 82d ago |
| CVE-2026-65541 | 7.3 | — | — | — | — | Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions. | 83d ago |
| CVE-2026-19021 | 7.3 | — | — | — | — | A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0. | 83d ago |
| CVE-2026-19010 | 7.3 | — | — | — | — | A security vulnerability has been detected in TinyAGI 0.0.20. | 83d ago |
| CVE-2026-19009 | 7.3 | — | — | — | — | A weakness has been identified in TinyAGI 0.0.20. | 83d ago |
| CVE-2026-19000 | 7.3 | — | — | — | — | A vulnerability was identified in JeecgBoot up to 3.9.2. | 83d ago |
| CVE-2026-18991 | 7.3 | — | — | — | — | A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. | 83d ago |
