| CVE-2026-12720 | 7.5 | — | — | — | — | The Kirki WordPress plugin before 6.0.13 does not restrict which classes may be instantiated when it deserialises | 73d ago |
| CVE-2026-63222 | 7.5 | — | — | — | — | CodeIgniter is a PHP full-stack web framework. | 73d ago |
| CVE-2026-56673 | 7.5 | — | — | — | — | ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. | 73d ago |
| CVE-2026-56671 | 7.5 | — | — | — | — | ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. | 73d ago |
| CVE-2026-43832 | 7.5 | — | — | — | — | Full details and mitigation steps are currently restricted and will be published at a later date. | 73d ago |
| CVE-2026-43831 | 7.5 | — | — | — | — | Full details and mitigation steps are currently restricted and will be published at a later date. | 73d ago |
| CVE-2026-43829 | 7.5 | — | — | — | — | Full details and mitigation steps are currently restricted and will be published at a later date. | 73d ago |
| CVE-2026-14541 | 7.5 | — | — | — | google / mcp toolbox for databases | An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Goo | 73d ago |
| CVE-2026-14539 | 7.5 | — | — | — | google / mcp toolbox for databases | An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versio | 73d ago |
| CVE-2026-66360 | 7.5 | — | — | — | — | The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. | 73d ago |
| CVE-2026-63559 | 7.5 | — | — | — | — | An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker | 74d ago |
| CVE-2026-18064 | 7.5 | — | — | — | — | An incomplete fix for CVE-2026-15352 in the NASA core Flight System (cFS) Health and Safety (HS) application leave | 74d ago |
| CVE-2026-68500 | 7.5 | — | — | — | — | Sylius Mollie Plugin provides Mollie payment integration for Sylius applications. | 74d ago |
| CVE-2026-66755 | 7.5 | — | — | — | apache / tika | Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1.8 through 3.3.1, an | 74d ago |
| CVE-2026-61536 | 7.5 | — | — | — | — | Banks generates meaningful LLM prompts using a simple template language. | 74d ago |
| CVE-2026-18140 | 7.5 | — | — | — | amazon / aws-smithy-json | Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the | 74d ago |
| CVE-2026-15978 | 7.5 | — | — | — | lmsys / sglang | SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose t | 74d ago |
| CVE-2026-15977 | 7.5 | — | — | — | lmsys / sglang | SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SS | 74d ago |
| CVE-2026-12942 | 7.5 | — | — | — | langflow / langflow | IBM Langflow OSS 1.0.0 through 1.10.1 could allow a remote attacker to traverse directories on the system. | 74d ago |
| CVE-2026-12733 | 7.5 | — | — | — | ibm / datapower gateway | IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitati | 74d ago |
| CVE-2026-10545 | 7.5 | — | — | — | ibm / planning analytics local | IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to red | 74d ago |
| CVE-2024-25039 | 7.5 | — | — | — | ibm / engineering requirements management doors web access | IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9 | 74d ago |
| CVE-2026-9322 | 7.5 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0. | 74d ago |
| CVE-2026-62663 | 7.5 | — | — | — | — | Banks generates meaningful LLM prompts using a simple template language. | 74d ago |
| CVE-2026-11771 | 7.5 | — | — | — | openvpn / openvpn | OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write | 74d ago |
| CVE-2026-28814 | 7.5 | — | — | — | apache / jspwiki | Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to ob | 74d ago |
| CVE-2026-28811 | 7.5 | — | — | — | apache / jspwiki | Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. | 74d ago |
| CVE-2026-10842 | 7.5 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0 | 74d ago |
| CVE-2026-6540 | 7.5 | — | — | — | tigera / calico | Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perfo | 74d ago |
| CVE-2026-67349 | 7.5 | — | — | — | — | OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELM_VALUES en | 74d ago |
| CVE-2026-41186 | 7.5 | — | — | — | tigera / calico | When Calico's shared debug server is enabled (disabled by default), the Calico kube-controllers and Goldmane compo | 74d ago |
| CVE-2026-16308 | 7.5 | — | — | — | — | IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow | 74d ago |
| CVE-2026-14519 | 7.5 | — | — | — | ibm / app connect enterprise | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacke | 74d ago |
| CVE-2026-12947 | 7.5 | — | — | — | ibm / app connect enterprise | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 stores potentially sensitive | 74d ago |
| CVE-2026-11897 | 7.5 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused | 74d ago |
| CVE-2026-60075 | 7.5 | — | — | — | — | Date::Manip versions through 7.00 for Perl allow CPU exhaustion via quadratic backtracking in the unanchored time | 74d ago |
| CVE-2026-60074 | 7.5 | — | — | — | — | Date::Manip versions through 7.00 for Perl return corrupted dates via non-ASCII decimal digits that pass the numer | 74d ago |
| CVE-2026-57859 | 7.5 | — | — | — | — | e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that al | 74d ago |
| CVE-2026-54366 | 7.5 | — | — | — | — | CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated | 74d ago |
| CVE-2026-54365 | 7.5 | — | — | — | — | CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows u | 74d ago |
| CVE-2026-44107 | 7.5 | — | — | — | — | A reboot of the charging controller can be triggered via Modbus TCP without authentication. | 74d ago |
| CVE-2026-16529 | 7.5 | — | — | — | — | A signed integer overflow in the PCP __pmGetPDU() function can be exploited via crafted network packets during PDU | 74d ago |
| CVE-2026-15240 | 7.5 | — | — | — | — | The Customer Switching WordPress plugin before 2.1.3 does not securely bind an active user-switching session to th | 74d ago |
| CVE-2026-13178 | 7.5 | — | — | — | — | The Eventin WordPress plugin before 4.1.16 does not properly authorize order creation and accepts an attacker-supp | 74d ago |
| CVE-2026-12687 | 7.5 | — | — | — | — | The ProfileGrid WordPress plugin before 5.9.9.8 does not restrict which group an anonymous visitor may register in | 74d ago |
| CVE-2026-12500 | 7.5 | — | — | — | — | The WP Travel Engine WordPress plugin before 6.8.2 does not perform a capability check on an AJAX action that upda | 74d ago |
| CVE-2026-1360 | 7.5 | — | — | — | — | The BuddyPress plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and i | 74d ago |
| CVE-2026-17979 | 7.5 | — | — | — | google / chrome | Race in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sa | 74d ago |
| CVE-2026-17952 | 7.5 | — | — | — | google / chrome | Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a use | 74d ago |
| CVE-2026-17948 | 7.5 | — | — | — | google / chrome | Type Confusion in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a | 74d ago |
| CVE-2026-17930 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote | 74d ago |
| CVE-2026-17916 | 7.5 | — | — | — | google / chrome | Insufficient policy enforcement in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who | 74d ago |
| CVE-2026-17898 | 7.5 | — | — | — | google / chrome | Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to ins | 74d ago |
| CVE-2026-17896 | 7.5 | — | — | — | google / chrome | Use after free in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary | 74d ago |
| CVE-2026-17887 | 7.5 | — | — | — | google / chrome | Use after free in TabStrip in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user | 74d ago |
| CVE-2026-17816 | 7.5 | — | — | — | google / chrome | Insufficient policy enforcement in Speech in Google Chrome on Android prior to 151.0.7922.72 allowed a remote atta | 74d ago |
| CVE-2026-17774 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attack | 74d ago |
| CVE-2026-17698 | 7.5 | — | — | — | google / chrome | Insufficient validation of untrusted input in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a loca | 74d ago |
| CVE-2026-67437 | 7.5 | — | — | — | — | OliveTin gives access to predefined shell commands from a web interface. | 75d ago |
| CVE-2026-50782 | 7.5 | — | — | — | — | Jinher OA C6 contains an XML External Entity (XXE) injection vulnerability in the /c6/JHSoft.Web.HrmAttendance/sp_ | 75d ago |
