| CVE-2026-16327 | 7.3 | — | — | — | — | A vulnerability was determined in D-Link DNS-320 1.0.2. | 99d ago |
| CVE-2026-16324 | 7.3 | — | — | — | — | A vulnerability was identified in Metasoft 美特软件 MetaCRM up to 6.4.0 Beta06. | 99d ago |
| CVE-2026-56624 | 7.3 | — | — | — | apache / mina sshd | Improper certificate validation in Apache MINA SSHD (server-side). | 99d ago |
| CVE-2026-32825 | 7.3 | — | — | — | — | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. | 100d ago |
| CVE-2026-32824 | 7.3 | — | — | — | — | dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. | 100d ago |
| CVE-2026-16252 | 7.3 | — | — | — | — | A security flaw has been discovered in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display S | 100d ago |
| CVE-2026-12080 | 7.3 | — | — | — | — | A flaw was found in the QEMU Guest Agent (qga). | 100d ago |
| CVE-2026-64621 | 7.3 | — | — | — | freerdp / freerdp | FreeRDP before 3.28.0 (affected 3.x through 3.27.1) contains a double-free vulnerability in freerdp_client_rdp_fil | 100d ago |
| CVE-2026-16247 | 7.3 | — | — | — | — | In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. | 100d ago |
| CVE-2026-16246 | 7.3 | — | — | — | — | In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. | 100d ago |
| CVE-2026-64126 | 7.3 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Adverti | 101d ago |
| CVE-2026-63914 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: xfrm: route MIGRATE notifications to caller's | 101d ago |
| CVE-2026-63883 | 7.3 | — | — | — | — | In the Linux kernel, the following vulnerability has been resolved: serial: qcom_geni: fix kfifo underflow when fl | 101d ago |
| CVE-2026-16228 | 7.3 | — | — | — | — | A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. | 101d ago |
| CVE-2026-16227 | 7.3 | — | — | — | — | A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. | 101d ago |
| CVE-2026-16210 | 7.3 | — | — | — | — | A vulnerability was found in newpanjing simpleui 2026.01.13. | 101d ago |
| CVE-2026-16209 | 7.3 | — | — | — | — | A vulnerability has been found in Gerapy up to 0.9.13. | 101d ago |
| CVE-2026-16200 | 7.3 | — | — | — | — | A vulnerability has been found in zevorn rt-claw up to 0.2.0. | 101d ago |
| CVE-2026-16154 | 7.3 | — | — | — | — | A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/1.php. | 101d ago |
| CVE-2026-16152 | 7.3 | — | — | — | — | A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. | 101d ago |
| CVE-2026-16128 | 7.3 | — | — | — | — | A security flaw has been discovered in zevorn rt-claw up to 0.2.0. | 102d ago |
| CVE-2026-16127 | 7.3 | — | — | — | — | A vulnerability was identified in zevorn rt-claw up to 0.2.0. | 102d ago |
| CVE-2026-16126 | 7.3 | — | — | — | — | A vulnerability was determined in zevorn rt-claw up to 0.2.0. | 102d ago |
| CVE-2026-16125 | 7.3 | — | — | — | — | A vulnerability was found in zevorn rt-claw up to 0.2.0. | 102d ago |
| CVE-2026-16084 | 7.3 | — | — | — | — | A weakness has been identified in Sipeed PicoClaw up to 0.2.9. | 102d ago |
| CVE-2026-16016 | 7.3 | — | — | — | — | A vulnerability was identified in poco-ai poco-claw up to 0.5.4. | 103d ago |
| CVE-2026-16014 | 7.3 | — | — | — | — | A vulnerability was found in code-projects Hospital Bed Management System 1.0. | 103d ago |
| CVE-2024-32386 | 7.3 | — | — | — | — | Directory traversal vulnerability in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 allows a rem | 103d ago |
| CVE-2026-62290 | 7.3 | — | — | — | linuxfoundation / cert-manager | cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies th | 104d ago |
| CVE-2026-13104 | 7.3 | — | — | — | — | A potential vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese market, that co | 104d ago |
| CVE-2026-13103 | 7.3 | — | — | — | — | A potential path traversal vulnerability was reported in Lenovo App Store, distributed exclusively in the Chinese | 104d ago |
| CVE-2026-15907 | 7.3 | — | — | — | — | A flaw has been found in H3C SecPath F1000-C8300 up to 20260522. | 104d ago |
| CVE-2026-45738 | 7.3 | — | — | — | argoproj / argo cd | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. | 105d ago |
| CVE-2026-61438 | 7.3 | — | — | — | — | PraisonAI before 4.6.78 contains a remote code execution vulnerability in JobWorkflowExecutor._exec_inline_python( | 105d ago |
| CVE-2026-61427 | 7.3 | — | — | — | — | PraisonAI before 4.6.78 exposes the MCP HTTP-stream transport without authentication by default: the CLI --api-key | 105d ago |
| CVE-2026-56398 | 7.3 | — | — | — | openwebui / open webui | Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow wher | 105d ago |
| CVE-2026-15752 | 7.3 | — | — | — | — | A vulnerability was found in zhinianboke xianyu-auto-reply up to dcb445ad97816ad65299a7580ee0c8c8f929da84. | 105d ago |
| CVE-2026-24229 | 7.3 | — | — | — | — | NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attac | 105d ago |
| CVE-2026-15643 | 7.3 | — | — | — | — | AWS HealthLake MCP Server (awslabs.healthlake-mcp-server) is a Model Context Protocol server that enables AI assis | 105d ago |
| CVE-2026-45073 | 7.3 | — | — | — | sensiolabs / symfony | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. | 106d ago |
| CVE-2026-55126 | 7.3 | — | — | — | microsoft / sharepoint server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoin | 106d ago |
| CVE-2026-55034 | 7.3 | — | — | — | microsoft / sharepoint server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoin | 106d ago |
| CVE-2026-55021 | 7.3 | — | — | — | microsoft / sharepoint server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoin | 106d ago |
| CVE-2026-50482 | 7.3 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 106d ago |
| CVE-2026-58640 | 7.3 | — | — | — | microsoft / windows 10 1607 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally. | 106d ago |
| CVE-2026-50364 | 7.3 | — | — | — | microsoft / windows 10 21h2 | Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attac | 106d ago |
| CVE-2026-49790 | 7.3 | — | — | — | microsoft / windows 10 1607 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | 106d ago |
| CVE-2026-49789 | 7.3 | — | — | — | microsoft / windows 10 1607 | Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. | 106d ago |
| CVE-2026-15703 | 7.3 | — | — | — | — | A vulnerability was detected in SourceCodester Simple and Nice Shopping Cart Script 1.0. | 106d ago |
| CVE-2026-8314 | 7.3 | — | — | — | rockwellautomation / arena | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the siman.exe (Siman) | 106d ago |
| CVE-2026-8313 | 7.3 | — | — | — | rockwellautomation / arena | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the linker.exe (Siman) | 106d ago |
| CVE-2026-8312 | 7.3 | — | — | — | rockwellautomation / arena | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the expmt.exe (Siman) | 106d ago |
| CVE-2026-8085 | 7.3 | — | — | — | rockwellautomation / arena | A security issue exists within Arena® Simulation due to a memory corruption vulnerability in the model.exe (Siman) | 106d ago |
| CVE-2026-15677 | 7.3 | — | — | — | — | A weakness has been identified in code-projects Online Job Portal 1.0. | 106d ago |
| CVE-2026-15676 | 7.3 | — | — | — | — | A security flaw has been discovered in code-projects Online Job Portal up to 1.0. | 106d ago |
| CVE-2026-15675 | 7.3 | — | — | — | — | A vulnerability was identified in code-projects Online Job Portal 1.0. | 106d ago |
| CVE-2026-15684 | 7.3 | — | — | — | — | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. | 106d ago |
| CVE-2026-15597 | 7.3 | — | — | — | — | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/2.php. | 106d ago |
| CVE-2025-45869 | 7.3 | — | — | — | — | LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). | 107d ago |
| CVE-2026-15557 | 7.3 | — | — | — | — | A weakness has been identified in waooAI waoowaoo up to 0.4.1. | 107d ago |
