| CVE-2026-3334 | 8.8 | — | — | — | — | The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', | 220d ago |
| CVE-2026-2941 | 8.8 | — | — | — | — | The Linksy Search and Replace plugin for WordPress is vulnerable to unauthorized modification of data due to a miss | 220d ago |
| CVE-2026-32051 | 8.8 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.3.1 contain an authorization mismatch vulnerability that allows authenticated call | 220d ago |
| CVE-2026-32042 | 8.8 | — | — | — | openclaw / openclaw | OpenClaw versions 2026.2.22 prior to 2026.2.25 contain a privilege escalation vulnerability allowing unpaired devi | 220d ago |
| CVE-2026-4493 | 8.8 | — | — | — | — | A vulnerability was determined in Tenda A18 Pro 02.03.02.28. | 221d ago |
| CVE-2026-4492 | 8.8 | — | — | — | — | A vulnerability was found in Tenda A18 Pro 02.03.02.28. | 221d ago |
| CVE-2026-4491 | 8.8 | — | — | — | — | A vulnerability has been found in Tenda A18 Pro 02.03.02.28. | 221d ago |
| CVE-2026-4490 | 8.8 | — | — | — | — | A flaw has been found in Tenda A18 Pro 02.03.02.28. | 221d ago |
| CVE-2026-4489 | 8.8 | — | — | — | — | A vulnerability was detected in Tenda A18 Pro 02.03.02.28. | 221d ago |
| CVE-2026-4488 | 8.8 | — | — | — | — | A vulnerability was identified in UTT HiPER 1250GW up to 3.2.7-210907-180535. | 221d ago |
| CVE-2026-32989 | 8.8 | — | — | — | precurio / intranet portal | Precurio Intranet Portal 4.4 contains a cross-site request forgery vulnerability that allows attackers to induce a | 221d ago |
| CVE-2025-67260 | 8.8 | — | — | — | aster-te / terrapack tkservercgi | The Terrapack software, from ASTER TEC / ASTER S.p.A., with the indicated components and versions has a file uploa | 221d ago |
| CVE-2026-4487 | 8.8 | — | — | — | — | A vulnerability was determined in UTT HiPER 1200GW up to 2.5.3-170306. | 221d ago |
| CVE-2026-4486 | 8.8 | — | — | — | dlink / dir-513 firmware | A vulnerability was found in D-Link DIR-513 1.10. | 221d ago |
| CVE-2026-33124 | 8.8 | — | — | — | frigate / frigate | Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. | 221d ago |
| CVE-2026-33075 | 8.8 | — | — | — | fastgpt / fastgpt | FastGPT is an AI Agent building platform. | 221d ago |
| CVE-2026-33068 | 8.8 | — | — | — | anthropic / claude code | Claude Code is an agentic coding tool. | 221d ago |
| CVE-2026-4475 | 8.8 | — | — | — | — | A vulnerability has been found in Yi Technology YI Home Camera 2 2.1.1_20171024151200. | 221d ago |
| CVE-2026-33053 | 8.8 | — | — | — | langflow / langflow | Langflow is a tool for building and deploying AI-powered agents and workflows. | 221d ago |
| CVE-2026-33025 | 8.8 | — | — | — | wwbn / avideo-encoder | AVideo is a video-sharing Platform. | 221d ago |
| CVE-2026-32950 | 8.8 | — | — | — | fit2cloud / sqlbot | SQLBot is an intelligent data query system based on a large language model and RAG. | 221d ago |
| CVE-2026-32888 | 8.8 | — | — | — | opensourcepos / open source point of sale | Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework. | 221d ago |
| CVE-2026-4464 | 8.8 | — | — | — | google / chrome | Integer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit | 221d ago |
| CVE-2026-4463 | 8.8 | — | — | — | google / chrome | Heap buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially ex | 221d ago |
| CVE-2026-4462 | 8.8 | — | — | — | google / chrome | Out of bounds read in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of | 221d ago |
| CVE-2026-4461 | 8.8 | — | — | — | google / chrome | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentiall | 221d ago |
| CVE-2026-4460 | 8.8 | — | — | — | google / chrome | Out of bounds read in Skia in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform an out of | 221d ago |
| CVE-2026-4459 | 8.8 | — | — | — | google / chrome | Out of bounds read and write in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to pote | 221d ago |
| CVE-2026-4458 | 8.8 | — | — | — | google / chrome | Use after free in Extensions in Google Chrome prior to 146.0.7680.153 allowed an attacker who convinced a user to i | 221d ago |
| CVE-2026-4457 | 8.8 | — | — | — | google / chrome | Type Confusion in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap | 221d ago |
| CVE-2026-4456 | 8.8 | — | — | — | google / chrome | Use after free in Digital Credentials API in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who ha | 221d ago |
| CVE-2026-4455 | 8.8 | — | — | — | google / chrome | Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially ex | 221d ago |
| CVE-2026-4454 | 8.8 | — | — | — | google / chrome | Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit | 221d ago |
| CVE-2026-4452 | 8.8 | — | — | — | google / chrome | Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.153 allowed a remote attacker to potentia | 221d ago |
| CVE-2026-4451 | 8.8 | — | — | — | google / chrome | Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote | 221d ago |
| CVE-2026-4450 | 8.8 | — | — | — | google / chrome | Out of bounds write in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit | 221d ago |
| CVE-2026-4449 | 8.8 | — | — | — | google / chrome | Use after free in Blink in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit h | 221d ago |
| CVE-2026-4448 | 8.8 | — | — | — | google / chrome | Heap buffer overflow in ANGLE in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exp | 221d ago |
| CVE-2026-4447 | 8.8 | — | — | — | google / chrome | Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute ar | 221d ago |
| CVE-2026-4446 | 8.8 | — | — | — | google / chrome | Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit | 221d ago |
| CVE-2026-4445 | 8.8 | — | — | — | google / chrome | Use after free in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit | 221d ago |
| CVE-2026-4444 | 8.8 | — | — | — | google / chrome | Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially e | 221d ago |
| CVE-2026-4443 | 8.8 | — | — | — | google / chrome | Heap buffer overflow in WebAudio in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to execute arbi | 221d ago |
| CVE-2026-4442 | 8.8 | — | — | — | google / chrome | Heap buffer overflow in CSS in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially explo | 221d ago |
| CVE-2026-4441 | 8.8 | — | — | — | google / chrome | Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit he | 221d ago |
| CVE-2026-4440 | 8.8 | — | — | — | google / chrome | Out of bounds read and write in WebGL in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to perform | 221d ago |
| CVE-2026-4439 | 8.8 | — | — | — | google / chrome | Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker | 221d ago |
| CVE-2026-33289 | 8.8 | — | — | — | suitecrm / suitecrm | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. | 221d ago |
| CVE-2026-33288 | 8.8 | — | — | — | suitecrm / suitecrm | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. | 221d ago |
| CVE-2026-32756 | 8.8 | — | — | — | admidio / admidio | Admidio is an open-source user management solution. | 221d ago |
| CVE-2026-29099 | 8.8 | — | — | — | suitecrm / suitecrm | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. | 221d ago |
| CVE-2026-4342 | 8.8 | — | — | — | kubernetes / nginx ingress controller | A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject c | 221d ago |
| CVE-2026-32013 | 8.8 | — | — | — | openclaw / openclaw | OpenClaw versions prior to 2026.2.25 contain a symlink traversal vulnerability in the agents.files.get and agents. | 221d ago |
| CVE-2026-32622 | 8.8 | — | — | — | fit2cloud / sqlbot | SQLBot is an intelligent data query system based on a large language model and RAG. | 222d ago |
| CVE-2026-30711 | 8.8 | — | — | — | — | Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/se | 222d ago |
| CVE-2025-71260 | 8.8 | — | — | — | bmc / footprints | BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a deserialization of untrusted data vulnerabili | 222d ago |
| CVE-2026-25445 | 8.8 | — | — | — | — | Deserialization of Untrusted Data vulnerability in Membership Software WishList Member X allows Object Injection.T | 222d ago |
| CVE-2026-32321 | 8.8 | — | — | — | oxygenz / clipbucket | ClipBucket v5 is an open source video sharing platform. | 223d ago |
| CVE-2025-58112 | 8.8 | — | — | — | — | Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized rep | 223d ago |
| CVE-2026-31962 | 8.8 | — | — | — | htslib / htslib | HTSlib is a library for reading and writing bioinformatics file formats. | 223d ago |
