| CVE-2026-39310 | 8.6 | — | — | — | — | Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowled | 160d ago |
| CVE-2026-8958 | 8.6 | — | — | — | mozilla / firefox | Information disclosure, sandbox escape in the Security: Process Sandboxing component. | 161d ago |
| CVE-2026-6379 | 8.6 | — | — | — | — | The WP Photo Album Plus WordPress plugin before 9.1.11.001 does not properly sanitize and escape a parameter before | 162d ago |
| CVE-2026-2652exploited | 8.6 | 20.8% | 1/3 | +84d | lfprojects / mlflow | A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes | 165d ago |
| CVE-2026-20224 | 8.6 | — | — | — | cisco / catalyst sd-wan manager | A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenti | 166d ago |
| CVE-2026-42595 | 8.6 | — | — | — | thecodingmachine / gotenberg | Gotenberg is a Docker-powered stateless API for PDF files. | 166d ago |
| CVE-2026-42281 | 8.6 | — | — | — | magicmirror / magicmirror | MagicMirror² is an open source modular smart mirror platform. | 166d ago |
| CVE-2026-29205 | 8.6 | — | — | — | cpanel / cpanel | Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the | 167d ago |
| CVE-2026-44578 | 8.6 | — | — | — | vercel / next.js | Next.js is a React framework for building full-stack web applications. | 167d ago |
| CVE-2026-44001 | 8.6 | — | — | — | vm2 project / vm2 | vm2 is an open source vm/sandbox for Node.js. | 167d ago |
| CVE-2026-33362 | 8.6 | — | — | — | — | In Meari IoT SDK builds embedded in CloudEdge 5.5.0 (build 220), Arenti 1.8.1 (build 220), and white-label Android | 169d ago |
| CVE-2025-10470 | 8.6 | — | — | — | wso2 / identity server | The Magic Link authentication flow accepts multiple invalid authentication requests without adequate rate limiting | 169d ago |
| CVE-2026-4690 | 8.6 | — | — | — | mozilla / firefox | Sandbox escape due to incorrect boundary conditions, integer overflow in the XPCOM component. | 217d ago |
| CVE-2026-4687 | 8.6 | — | — | — | mozilla / firefox | Sandbox escape due to incorrect boundary conditions in the Telemetry component. | 217d ago |
| CVE-2026-22739 | 8.6 | — | — | — | vmware / spring cloud config | Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Conf | 218d ago |
| CVE-2026-33719 | 8.6 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 218d ago |
| CVE-2026-33513 | 8.6 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 218d ago |
| CVE-2026-33480 | 8.6 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 218d ago |
| CVE-2026-33166 | 8.6 | — | — | — | qameta / allure report | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. | 221d ago |
| CVE-2026-33191 | 8.6 | — | — | — | free5gc / udm | Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks. | 221d ago |
| CVE-2026-33039 | 8.6 | — | — | — | wwbn / avideo | WWBN AVideo is an open source video platform. | 221d ago |
| CVE-2026-32721 | 8.6 | — | — | — | openwrt / luci | LuCI is the OpenWrt Configuration Interface. | 222d ago |
| CVE-2026-26139 | 8.6 | — | — | — | microsoft / purview | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over | 222d ago |
| CVE-2026-26138 | 8.6 | — | — | — | microsoft / purview | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over | 222d ago |
| CVE-2026-23659 | 8.6 | — | — | — | microsoft / azure data factory | Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker t | 222d ago |
| CVE-2026-23658 | 8.6 | — | — | — | microsoft / azure devops | Insufficiently protected credentials in Azure DevOps allows an unauthorized attacker to elevate privileges over a | 222d ago |
| CVE-2026-3511 | 8.6 | — | — | — | — | Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram | 222d ago |
| CVE-2026-31998 | 8.6 | — | — | — | openclaw / openclaw | OpenClaw versions 2026.2.22 and 2026.2.23 contain an authorization bypass vulnerability in the synology-chat chann | 223d ago |
| CVE-2026-32255exploited | 8.6 | 26.4% | 1/3 | +182d | kan / kan | Kan is an open-source project management tool. | 223d ago |
| CVE-2026-22729 | 8.6 | — | — | — | vmware / spring ai | A JSONPath injection vulnerability in Spring AI's AbstractFilterExpressionConverter allows authenticated users to | 223d ago |
| CVE-2026-28500 | 8.6 | — | — | — | linuxfoundation / onnx | Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. | 224d ago |
| CVE-2026-85651 | 8.5 | — | — | — | — | Trigger.dev versions before 4.5.2 fail to validate environment membership during run replay operations, allowing a | 53d ago |
| CVE-2026-85616 | 8.5 | — | — | — | — | Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in checkout-acceptance report actions | 53d ago |
| CVE-2026-70178 | 8.5 | — | — | — | — | Missing authorization in Microsoft Fabric allows an authorized attacker to elevate privileges over a network. | 54d ago |
| CVE-2026-69857 | 8.5 | — | — | — | — | Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoof | 54d ago |
| CVE-2026-65818 | 8.5 | — | — | — | — | Server-side request forgery (ssrf) in Power Automate allows an authorized attacker to elevate privileges over a ne | 54d ago |
| CVE-2026-85179 | 8.5 | — | — | — | — | Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to i | 54d ago |
| CVE-2026-73707 | 8.5 | — | — | — | arubanetworks / fabric composer | Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric Composer. | 56d ago |
| CVE-2026-81287 | 8.5 | — | — | — | — | Subscriber SQL Injection in Charitable <= 1.8.12.1 versions. | 57d ago |
| CVE-2026-55108 | 8.5 | — | — | — | — | KubeVela is an open source application delivery platform. | 60d ago |
| CVE-2026-82227 | 8.5 | — | — | — | — | Contributor SQL Injection in WPBulky <= 1.2.2 versions. | 60d ago |
| CVE-2026-81277 | 8.5 | — | — | — | — | Contributor SQL Injection in Suggestion Engine for WooCommerce <= 2.0.11 versions. | 61d ago |
| CVE-2026-78285 | 8.5 | — | — | — | — | Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions. | 61d ago |
| CVE-2026-32564 | 8.5 | — | — | — | — | Subscriber SQL Injection in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.63 versions. | 61d ago |
| CVE-2026-32550 | 8.5 | — | — | — | — | Subscriber SQL Injection in Kadence Shop Kit <= 3.0.6 versions. | 61d ago |
| CVE-2026-81027 | 8.5 | — | — | — | — | one-api gates one of its two channel-pinning paths and not the other. | 62d ago |
| CVE-2026-65092 | 8.5 | — | — | — | nvidia / openshell | NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass | 63d ago |
| CVE-2026-70551 | 8.5 | — | — | — | — | A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS | 63d ago |
| CVE-2026-55526 | 8.5 | — | — | — | — | PraisonAI is a multi-agent teams system. | 63d ago |
| CVE-2026-68960 | 8.5 | — | — | — | — | A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. | 63d ago |
| CVE-2026-68959 | 8.5 | — | — | — | — | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. | 63d ago |
| CVE-2026-68062 | 8.5 | — | — | — | — | SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. | 63d ago |
| CVE-2026-76838 | 8.5 | — | — | — | — | Hi.Events validates a webhook destination only when it is registered, never when it is used. | 64d ago |
| CVE-2026-32478 | 8.5 | — | — | — | — | Subscriber SQL Injection in WP Project Manager Pro <= 4.0.1 versions. | 64d ago |
| CVE-2026-32471 | 8.5 | — | — | — | — | Subscriber SQL Injection in ProLancer Element <= 1.4.8 versions. | 64d ago |
| CVE-2026-10053 | 8.5 | — | — | — | gitlab / gitlab | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.8 before 19.0.6, 19.1 before 19.1.4, | 65d ago |
| CVE-2026-22681 | 8.5 | — | — | — | — | OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privile | 67d ago |
| CVE-2026-72860 | 8.5 | — | — | — | — | The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP | 68d ago |
| CVE-2026-69543 | 8.5 | — | — | — | microsoft / azure virtual machines | Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges o | 68d ago |
| CVE-2026-69419 | 8.5 | — | — | — | microsoft / azure data manager for energy | Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over | 68d ago |
