| CVE-2026-10221 | 7.3 | — | — | — | — | A vulnerability was identified in NousResearch hermes-agent up to 0.12.0. | 149d ago |
| CVE-2026-10220 | 7.3 | — | — | — | — | A vulnerability was determined in NousResearch hermes-agent up to 2026.4.30. | 149d ago |
| CVE-2026-10219 | 7.3 | — | — | — | — | A vulnerability was found in nextlevelbuilder GoClaw up to 3.11.3. | 149d ago |
| CVE-2026-10214 | 7.3 | — | — | — | — | A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. | 149d ago |
| CVE-2026-10208 | 7.3 | — | — | — | — | A flaw has been found in code-projects Online Hospital Management System 1.php. | 149d ago |
| CVE-2026-10186 | 7.3 | — | — | — | — | A security vulnerability has been detected in code-projects Online Hospital Management System 1.0. | 150d ago |
| CVE-2026-10185 | 7.3 | — | — | — | — | A weakness has been identified in SourceCodester Hospitals Patient Records Management System 1.0. | 150d ago |
| CVE-2026-10184 | 7.3 | — | — | — | — | A security flaw has been discovered in SourceCodester Hospitals Patient Records Management System 1.0. | 150d ago |
| CVE-2026-10178 | 7.3 | — | — | — | — | A vulnerability was detected in code-projects Online Music Site 1.0. | 150d ago |
| CVE-2026-10167 | 7.3 | — | — | — | — | A weakness has been identified in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86d | 150d ago |
| CVE-2026-10157 | 7.3 | — | — | — | — | A vulnerability was identified in Open5GS up to 2.7.6. | 150d ago |
| CVE-2026-10111 | 7.3 | — | — | — | — | A flaw has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. | 151d ago |
| CVE-2026-10110 | 7.3 | — | — | — | — | A vulnerability was detected in code-projects Student Details Management System 1.0. | 151d ago |
| CVE-2026-10068 | 7.3 | — | — | — | — | A flaw has been found in Shibby Tomato 1.28. | 152d ago |
| CVE-2026-39292 | 7.3 | — | — | — | — | Falco Solutions PHPPageBuilder v0.31.0 contains an unrestricted file upload vulnerability in the pagemanager/pageb | 152d ago |
| CVE-2026-45364 | 7.3 | — | — | — | — | Better Auth is an authentication and authorization library for TypeScript. | 152d ago |
| CVE-2026-30761 | 7.3 | — | — | — | — | An arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of SourceBans Material Admin | 152d ago |
| CVE-2026-30760 | 7.3 | — | — | — | — | An issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate arbitrary user data | 152d ago |
| CVE-2026-37579 | 7.3 | — | — | — | — | An issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the Cmpp7FDeliverReq | 153d ago |
| CVE-2026-9658 | 7.3 | — | — | — | — | Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request path | 153d ago |
| CVE-2026-9795 | 7.3 | — | — | — | redhat / build of keycloak | A flaw was found in Keycloak's Fine-Grained Admin Permissions (FGAPv2) feature. | 153d ago |
| CVE-2026-44320 | 7.3 | — | — | — | free5gc / free5gc | free5GC is an open-source implementation of the 5G core network. | 154d ago |
| CVE-2026-37713 | 7.3 | — | — | — | — | An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbi | 154d ago |
| CVE-2026-37712 | 7.3 | — | — | — | — | An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbi | 154d ago |
| CVE-2026-37711 | 7.3 | — | — | — | — | An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbi | 154d ago |
| CVE-2026-31266 | 7.3 | — | — | — | — | Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/m | 154d ago |
| CVE-2025-70103 | 7.3 | — | — | — | — | Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras::DecodeImagePNM func | 154d ago |
| CVE-2026-45932 | 7.3 | — | — | — | linux / linux kernel | In the Linux kernel, the following vulnerability has been resolved: bpf: Fix tcx/netkit detach permissions when pr | 154d ago |
| CVE-2026-38427 | 7.3 | — | — | — | — | An issue in fetch_jpg() in xdrv_10_scripter.ino in Tasmota through 15.3.0.3 allows a remote attacker to cause heap | 154d ago |
| CVE-2026-38426 | 7.3 | — | — | — | — | Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitra | 154d ago |
| CVE-2026-38422 | 7.3 | — | — | — | — | Buffer Overflow vulnerability in arendst Tasmota v.15.3.0.3 and before allows a remote attacker to execute arbitra | 154d ago |
| CVE-2026-36540 | 7.3 | — | — | — | — | Netis AC1200 Router NC21 V4.0.1.4296 is vulnerable to unauthenticated command injection via the /cgi-bin/skk_set.c | 154d ago |
| CVE-2026-36539 | 7.3 | — | — | — | — | Netis AC1200 Router NC21 V4.0.1.4296 exposes a CGI endpoint /cgi-bin/skk_get.cgi that returns the entire router co | 154d ago |
| CVE-2026-36538 | 7.3 | — | — | — | — | Netis AC1200 Router NC21 V4.0.1.4296 contains a hard-coded root credential stored in /etc/shadow.sample. | 154d ago |
| CVE-2026-36045 | 7.3 | — | — | — | — | picoclaw <=v0.1.2 and earlier is vulnerable to OS command injection via the ExecTool component (pkg/tools/shell.go | 154d ago |
| CVE-2026-42753 | 7.3 | — | — | — | — | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incor | 154d ago |
| CVE-2026-42746 | 7.3 | — | — | — | — | Insertion of Sensitive Information Into Sent Data vulnerability in ZAYTECH Smart Online Order for Clover clover-on | 154d ago |
| CVE-2026-42745 | 7.3 | — | — | — | — | Authentication Bypass Using an Alternate Path or Channel vulnerability in ZAYTECH Smart Online Order for Clover cl | 154d ago |
| CVE-2026-48962 | 7.3 | — | — | — | — | IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-control | 154d ago |
| CVE-2026-48961 | 7.3 | — | — | — | — | IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subr | 154d ago |
| CVE-2026-9606 | 7.3 | — | — | — | — | A vulnerability has been found in itsourcecode Courier Management System 1.0. | 154d ago |
| CVE-2026-9605 | 7.3 | — | — | — | — | A flaw has been found in GNU libredwg up to 0.13.4.8160. | 154d ago |
| CVE-2026-9584 | 7.3 | — | — | — | — | A security vulnerability has been detected in code-projects Project Management System 1.0. | 154d ago |
| CVE-2026-44983 | 7.3 | — | — | — | — | smallbitvec is a growable bit-vector for Rust, optimized for size. | 154d ago |
| CVE-2026-9580 | 7.3 | — | — | — | — | A vulnerability was determined in JeecgBoot up to 3.9.1. | 154d ago |
| CVE-2026-9575 | 7.3 | — | — | — | — | A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. | 154d ago |
| CVE-2026-9574 | 7.3 | — | — | — | — | A flaw has been found in itsourcecode Student Transcript Processing System 1.0. | 154d ago |
| CVE-2026-9573 | 7.3 | — | — | — | — | A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. | 154d ago |
| CVE-2026-8835 | 7.3 | — | — | — | ibm / http server | IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. | 155d ago |
| CVE-2026-9562 | 7.3 | — | — | — | — | A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d | 155d ago |
| CVE-2026-9552 | 7.3 | — | — | — | — | A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. | 155d ago |
| CVE-2026-9551 | 7.3 | — | — | — | — | A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. | 155d ago |
| CVE-2026-9550 | 7.3 | — | — | — | — | A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1 | 155d ago |
| CVE-2026-9544 | 7.3 | — | — | — | — | A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. | 155d ago |
| CVE-2026-9495 | 7.3 | — | — | — | — | Versions of the package @koa/router from 14.0.0 and before 15.0.0 are vulnerable to Access Control Bypass due to th | 155d ago |
| CVE-2026-9528 | 7.3 | — | — | — | — | A vulnerability was identified in itsourcecode Electronic Judging System 1.0. | 155d ago |
| CVE-2026-9526 | 7.3 | — | — | — | — | A vulnerability was found in itsourcecode Electronic Judging System 1.0. | 155d ago |
| CVE-2026-9525 | 7.3 | — | — | — | — | A vulnerability has been found in itsourcecode Electronic Judging System 1.0. | 155d ago |
| CVE-2026-9523 | 7.3 | — | — | — | — | A vulnerability was detected in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 300 | 155d ago |
| CVE-2026-9521 | 7.3 | — | — | — | — | A security vulnerability has been detected in fraillt bitsery up to 5.2.4. | 155d ago |
