| CVE-2026-9196 | 8.1 | — | — | — | langflow / langflow | IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to execute unintended code during Agent | 84d ago |
| CVE-2026-70429 | 8.1 | — | — | — | — | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity in user names and group names incons | 84d ago |
| CVE-2026-8400 | 8.1 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery ha | 84d ago |
| CVE-2026-7327 | 8.1 | — | — | — | progress / marklogic server | An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic S | 84d ago |
| CVE-2026-39923 | 8.1 | — | — | — | — | Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allows unauthenticated attac | 84d ago |
| CVE-2026-16102 | 8.1 | — | — | — | redhat / build of keycloak | A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management | 84d ago |
| CVE-2026-15573 | 8.1 | — | — | — | redhat / build of keycloak | A flaw was found in Keycloak's Authorization Services. | 84d ago |
| CVE-2026-15979 | 8.1 | — | — | — | — | The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary Fi | 84d ago |
| CVE-2026-71285 | 8.1 | — | — | — | — | Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable M | 84d ago |
| CVE-2026-71239 | 8.1 | — | — | — | — | DjangoCRM's massmail module renders user-controlled EmlMessage fields (subject, content) through Django's Template | 84d ago |
| CVE-2026-7520 | 8.1 | — | — | — | — | The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a m | 84d ago |
| CVE-2026-7444 | 8.1 | — | — | — | — | The Search Analytics for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, | 84d ago |
| CVE-2026-54418 | 8.1 | — | — | — | — | Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEn | 84d ago |
| CVE-2026-15230 | 8.1 | — | — | — | — | The YayPricing WordPress plugin before 3.5.7 does not perform capability checks on several of its REST API routes, | 84d ago |
| CVE-2026-14553 | 8.1 | — | — | — | — | The zportals WordPress plugin before 6.3.4 does not properly validate uploaded files, trusting the client-supplied | 84d ago |
| CVE-2026-70494 | 8.1 | — | — | — | — | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. | 85d ago |
| CVE-2026-70482 | 8.1 | — | — | — | — | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. | 85d ago |
| CVE-2026-18830 | 8.1 | — | — | — | — | Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to exec | 85d ago |
| CVE-2026-24079 | 8.1 | — | — | — | qualcomm / ar8035 firmware | Cryptographic Issue while processing registration requests with malformed or missing authentication parameters. | 85d ago |
| CVE-2026-66318 | 8.1 | — | — | — | microsoft / edge chromium | Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information | 86d ago |
| CVE-2026-52521 | 8.1 | — | — | — | — | A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers to execute arbitrary SQL commands | 86d ago |
| CVE-2026-67611 | 8.1 | — | — | — | open-emr / openemr | OpenEMR through 8.2.0 contains an authentication bypass vulnerability that allows attackers with valid credentials | 86d ago |
| CVE-2026-67610 | 8.1 | — | — | — | — | OpenEMR through 8.2.0 contains an improper authentication vulnerability in the OAuth2 dynamic client registration | 86d ago |
| CVE-2026-69088 | 8.1 | — | — | — | — | Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static method calls (Class::method) in blu | 86d ago |
| CVE-2026-18092 | 8.1 | — | — | — | timlegge / net\ | Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_f | 86d ago |
| CVE-2026-16539 | 8.1 | — | — | — | — | The sm page duplicator WordPress plugin through 1.0.0 does not sanitise and escape a stored value before using it | 86d ago |
| CVE-2025-15672 | 8.1 | — | — | — | — | The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deseri | 86d ago |
| CVE-2026-20465 | 8.1 | — | — | — | — | In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. | 86d ago |
| CVE-2026-18577zero day | 8.1 | 14.6% | 3/3 | same day | n-able / n-central | An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions | 87d ago |
| CVE-2026-68581 | 8.1 | — | — | — | — | Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. | 87d ago |
| CVE-2026-12586 | 8.1 | — | — | — | — | The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password | 87d ago |
| CVE-2026-67328 | 8.1 | — | — | — | — | @better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider han | 88d ago |
| CVE-2026-16144exploited | 8.1 | 1.2% | 1/3 | +4d | — | The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution | 88d ago |
| CVE-2026-15450 | 8.1 | — | — | — | — | The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via pat | 88d ago |
| CVE-2026-15368 | 8.1 | — | — | — | — | The User Profile Builder WordPress plugin before 3.16.4 does not correctly bind the automatic login performed afte | 88d ago |
| CVE-2026-14836 | 8.1 | — | — | — | — | The Login & Register Forms WordPress plugin before 3.2.5 does not properly enforce the rate limit on its password- | 88d ago |
| CVE-2026-14309 | 8.1 | — | — | — | — | The Chat On Desk Order Notifications WordPress plugin before 1.0.9 does not verify that the one-time password has | 88d ago |
| CVE-2026-53510 | 8.1 | — | — | — | — | Savon is a Ruby SOAP client. | 89d ago |
| CVE-2026-62391 | 8.1 | — | — | — | apache / kyuubi | The security fix for CVE-2025-66518 is incomplete. | 89d ago |
| CVE-2026-65313 | 8.1 | — | — | — | — | A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, | 89d ago |
| CVE-2026-15258 | 8.1 | — | — | — | — | The Product Feed Manager For WooCommerce WordPress plugin before 7.6.1 does not properly sanitise and escape produ | 89d ago |
| CVE-2026-12695 | 8.1 | — | — | — | — | The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the tar | 89d ago |
| CVE-2026-12251 | 8.1 | — | — | — | — | The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles | 89d ago |
| CVE-2026-63035 | 8.1 | — | — | — | — | A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated a | 90d ago |
| CVE-2026-13444 | 8.1 | — | — | — | langflow / langflow | IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to access another user's private vector documents by c | 90d ago |
| CVE-2026-13117 | 8.1 | — | — | — | openvpn / openvpn | An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers | 90d ago |
| CVE-2026-12996 | 8.1 | — | — | — | openvpn / openvpn | A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to | 90d ago |
| CVE-2026-12932 | 8.1 | — | — | — | openvpn / openvpn | A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7 | 90d ago |
| CVE-2026-15658 | 8.1 | — | — | — | — | A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endp | 90d ago |
| CVE-2026-67348 | 8.1 | — | — | — | — | Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows | 90d ago |
| CVE-2026-67345 | 8.1 | — | — | — | — | MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in | 90d ago |
| CVE-2026-56428 | 8.1 | — | — | — | — | The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an impr | 90d ago |
| CVE-2026-67245 | 8.1 | — | — | — | asustor / data master | A path traversal vulnerability was found in the VPN Clients on the ADM. | 90d ago |
| CVE-2026-18188 | 8.1 | — | — | — | asustor / data master | A format string vulnerability was found in the Rsync Backup on the ADM. | 90d ago |
| CVE-2026-18187 | 8.1 | — | — | — | asustor / data master | A format string vulnerability was found in the Internal Backup on the ADM. | 90d ago |
| CVE-2026-18186 | 8.1 | — | — | — | asustor / data master | A stored format string vulnerability was found in the FTP Backup on the ADM. | 90d ago |
| CVE-2026-17995 | 8.1 | — | — | — | google / chrome | Out of bounds read in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of | 91d ago |
| CVE-2026-17869 | 8.1 | — | — | — | google / chrome | Out of bounds read in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform an out of | 91d ago |
| CVE-2026-17686 | 8.1 | — | — | — | google / chrome | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote a | 91d ago |
| CVE-2026-67595zero day | 8.1 | 0.76% | 1/3 | same day | — | VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade templ | 91d ago |
