| CVE-2026-14163 | 7.5 | — | — | — | octopus / octopus server | In affected versions of Octopus Server under certain circumstances it is possible for sensitive variables to be pr | 54d ago |
| CVE-2026-75963 | 7.5 | — | — | — | — | The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and includi | 54d ago |
| CVE-2026-8619 | 7.5 | — | — | — | tp-link / tl-mr100 firmware | An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR640 | 54d ago |
| CVE-2026-76928 | 7.5 | — | — | — | wireshark / wireshark | X.509IF protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 54d ago |
| CVE-2026-76880 | 7.5 | — | — | — | wireshark / wireshark | RRC protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 54d ago |
| CVE-2026-76879 | 7.5 | — | — | — | wireshark / wireshark | C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service | 54d ago |
| CVE-2026-76396 | 7.5 | — | — | — | splunk / ai toolkit | In Splunk AI Toolkit versions below 6.0.0, a user that holds a role with the schedule_search capability could caus | 54d ago |
| CVE-2026-76355 | 7.5 | — | — | — | splunk / splunk | In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained | 54d ago |
| CVE-2026-76262 | 7.5 | — | — | — | splunk / splunk | In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics fro | 54d ago |
| CVE-2026-76254 | 7.5 | — | — | — | splunk / splunk | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, 9.4.14, and 9.3.14, an unauthenticated user could caus | 54d ago |
| CVE-2025-36255 | 7.5 | — | — | — | ibm / ds8900f firmware | IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an | 54d ago |
| CVE-2026-69222 | 7.5 | — | — | — | — | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. | 54d ago |
| CVE-2026-62317 | 7.5 | — | — | — | — | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. | 54d ago |
| CVE-2026-19507 | 7.5 | — | — | — | — | Uncontrolled resource consumption in `check.jst` in RDK-B WebUI `rdkb-2025q4-kirkstone.04.10.26` allows a remote u | 54d ago |
| CVE-2026-18821 | 7.5 | — | — | — | ibm / power system s1122 \(9824-22a\) firmware | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through F | 54d ago |
| CVE-2026-16852 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an | 54d ago |
| CVE-2026-16837 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to im | 54d ago |
| CVE-2026-16836 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 54d ago |
| CVE-2026-16831 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 54d ago |
| CVE-2026-16824 | 7.5 | — | — | — | ibm / aix | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 54d ago |
| CVE-2026-19875 | 7.5 | — | — | — | langflow / langflow | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to overwrite administrator email information a | 54d ago |
| CVE-2026-45798 | 7.5 | — | — | — | — | Wazuh is a free and open source platform used for threat prevention, detection, and response. | 54d ago |
| CVE-2026-20320 | 7.5 | — | — | — | — | A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, | 54d ago |
| CVE-2026-20319 | 7.5 | — | — | — | — | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload enginee | 54d ago |
| CVE-2026-63408 | 7.5 | — | — | — | — | Grav API Plugin is a RESTful API for Grav CMS that provides full headless access to your site's content. | 54d ago |
| CVE-2026-75953 | 7.5 | — | — | — | — | Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken fr | 54d ago |
| CVE-2026-49289 | 7.5 | — | — | — | — | The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. | 54d ago |
| CVE-2026-45742 | 7.5 | — | — | — | — | Gotenberg is a Docker-powered stateless API for PDF files. | 54d ago |
| CVE-2026-45741 | 7.5 | — | — | — | — | Gotenberg is a Docker-powered stateless API for PDF files. | 54d ago |
| CVE-2026-16818 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 54d ago |
| CVE-2026-16817 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a | 54d ago |
| CVE-2026-16706 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an | 54d ago |
| CVE-2026-16690 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to un | 54d ago |
| CVE-2026-14970 | 7.5 | — | — | — | ibm / vios | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buf | 54d ago |
| CVE-2026-76234 | 7.5 | — | — | — | — | libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation | 54d ago |
| CVE-2026-76218 | 7.5 | — | — | — | gitpython project / gitpython | GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git optio | 54d ago |
| CVE-2026-76216 | 7.5 | — | — | — | — | Vikunja through 2.4.0 contains a principal-type confusion vulnerability where LinkSharing principals with id N are | 54d ago |
| CVE-2026-51367 | 7.5 | — | — | — | — | An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via | 54d ago |
| CVE-2020-37267 | 7.5 | — | — | — | — | Renovate versions >=19.180.0 and <23.25.1, when used with Azure DevOps, may expose the bot's authorization token i | 54d ago |
| CVE-2019-25766 | 7.5 | — | — | — | — | Renovate versions >= 13.87.0 and <= 19.38.6 leak temporary repository tokens into pull request comments during cer | 54d ago |
| CVE-2026-76235 | 7.5 | — | — | — | — | A memory leak flaw was found in cockpit-ws. | 54d ago |
| CVE-2026-73394 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Stitch Express <= 1.9.0 versions. | 54d ago |
| CVE-2026-73386 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 <= 3.0.2 versions. | 54d ago |
| CVE-2026-73385 | 7.5 | — | — | — | — | Unauthenticated Broken Access Control in Outranking Plugin Options <= 1.1.3 versions. | 54d ago |
| CVE-2026-73384 | 7.5 | — | — | — | — | Unauthenticated Sensitive Data Exposure in Pay with Contact Form 7 <= 1.0.4 versions. | 54d ago |
| CVE-2026-75589 | 7.5 | — | — | — | — | Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant | 55d ago |
| CVE-2026-58085 | 7.5 | — | — | — | freebsd / freebsd | After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether th | 55d ago |
| CVE-2026-14861 | 7.5 | — | — | — | — | The User Verification by PickPlugins WordPress plugin through 2.0.47 does not verify that a request to resend a ve | 55d ago |
| CVE-2026-50142 | 7.5 | — | — | — | — | libheif is a HEIF and AVIF file format decoder and encoder. | 55d ago |
| CVE-2026-73938 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73936 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73935 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73934 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73927 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73915 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73908 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73907 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73903 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73902 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
| CVE-2026-73890 | 7.5 | — | — | — | oracle / helidon | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). | 55d ago |
