| CVE-2026-62192 | 8.1 | — | — | — | openclaw / openclaw | OpenClaw versions 2026.6.6 before 2026.6.9 contain an authorization bypass vulnerability in Discord guild actions | 107d ago |
| CVE-2026-62188 | 8.1 | — | — | — | openclaw / openclaw\/feishu | OpenClaw @openclaw/feishu versions 2026.6.6 and earlier contain an incorrect authorization vulnerability in which | 107d ago |
| CVE-2026-62187 | 8.1 | — | — | — | openclaw / openclaw\/feishu | OpenClaw Feishu tools (npm package @openclaw/feishu) in versions <= 2026.6.6 could ignore per-account disablement. | 107d ago |
| CVE-2026-59245 | 8.1 | — | — | — | apache / apache-airflow-providers-fab | In the Apache Airflow FAB auth manager, a DAG whose `dag_id` is `DAGs` collided with the global all-DAGs permissio | 107d ago |
| CVE-2026-58065 | 8.1 | — | — | — | apache / apache-airflow-providers-git | The Apache Airflow Git provider runs its git-over-SSH operations with `StrictHostKeyChecking=no` by default, disab | 107d ago |
| CVE-2026-57743 | 8.1 | — | — | — | — | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerabil | 107d ago |
| CVE-2026-11963 | 8.1 | — | — | — | — | The User Registration & Membership WordPress plugin before 5.2.2 does not perform an authorization check on a memb | 107d ago |
| CVE-2026-10666 | 8.1 | — | — | — | zephyrproject / zephyr | parse_ipv4() in subsys/net/ip/utils.c (reached via net_ipaddr_parse() for strings of the form "a.b.c.d:port") copi | 108d ago |
| CVE-2026-56313 | 8.1 | — | — | — | — | Capgo before 12.128.2 contains a cross-organization account disruption vulnerability in the SSO prelink endpoint t | 108d ago |
| CVE-2026-7655 | 8.1 | — | — | — | — | The SureCart plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and | 109d ago |
| CVE-2026-55810 | 8.1 | — | — | — | plotly / plotly.js graphing | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Plotly.js G | 110d ago |
| CVE-2026-55809 | 8.1 | — | — | — | flag attendance field project / flag attendance field | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Flag attend | 110d ago |
| CVE-2026-49213 | 8.1 | — | — | — | — | TypeBot is a chatbot builder tool. | 110d ago |
| CVE-2026-13244 | 8.1 | — | — | — | dakku / tealium iq tag management | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Tealium iQ | 110d ago |
| CVE-2026-55377 | 8.1 | — | — | — | — | Logto is the modern, open-source auth infrastructure for SaaS and AI apps. | 110d ago |
| CVE-2026-56668 | 8.1 | — | — | — | — | ZITADEL is an open source identity management platform. | 110d ago |
| CVE-2026-59796 | 8.1 | — | — | — | jetbrains / teamcity | In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks | 110d ago |
| CVE-2026-59795 | 8.1 | — | — | — | jetbrains / teamcity | In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible | 110d ago |
| CVE-2026-38057 | 8.1 | — | — | — | — | The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. | 110d ago |
| CVE-2026-22659 | 8.1 | — | — | — | — | FlaskBB through 2.2.0, fixed in commit acc88cf, contains an authorization bypass vulnerability that allows authent | 110d ago |
| CVE-2026-54771 | 8.1 | — | — | — | — | Langroid is a framework for building large-language-model-powered applications. | 111d ago |
| CVE-2026-12598 | 8.1 | — | — | — | — | The LoginPress Pro plugin for WordPress is vulnerable to authentication bypass in versions up to and including 6.2 | 111d ago |
| CVE-2026-12597 | 8.1 | — | — | — | — | The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via the GitHub OAuth callback in ve | 111d ago |
| CVE-2026-12595 | 8.1 | — | — | — | — | The LoginPress Pro plugin for WordPress is vulnerable to Authentication Bypass via Unverified OAuth Email in all v | 111d ago |
| CVE-2026-51925 | 8.1 | — | — | — | — | A Local File Inclusion (LFI) vulnerability exists in docuForm GmbH Client v.11.11c that allows a remote attacker t | 111d ago |
| CVE-2026-51924 | 8.1 | — | — | — | — | An issue in docuForm GmbH Client v.11.11c allows a remote attacker to execute arbitrary code via the file upload a | 111d ago |
| CVE-2026-51923 | 8.1 | — | — | — | — | An Insecure Direct Object Reference (IDOR) vulnerability exists in docuForm GmbH Client v.11.11c allowing a remote | 111d ago |
| CVE-2025-45422 | 8.1 | — | — | — | — | Incorrect access control in Proximus b-box v8c.725A allows authenticated attackers to bypass normal restrictions a | 111d ago |
| CVE-2026-33390 | 8.1 | — | — | — | nozominetworks / cmc | An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sen | 111d ago |
| CVE-2026-31985 | 8.1 | — | — | — | — | When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration | 111d ago |
| CVE-2026-35552 | 8.1 | — | — | — | — | In CAXperts UPVWebServices 2.4.2212.603 through 2.7.6 and UDiTH Portal 2026.0.0 through 2026.2.0, an authenticated | 112d ago |
| CVE-2026-54591 | 8.1 | — | — | — | — | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol | 112d ago |
| CVE-2026-3144 | 8.1 | — | — | — | ibm / api connect | IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthoriz | 112d ago |
| CVE-2026-54652 | 8.1 | — | — | — | — | Frigate is an open source network video recorder. | 112d ago |
| CVE-2026-56246 | 8.1 | — | — | — | — | Capgo before 12.128.2 contains a broken access control vulnerability in the organization management API where a sc | 112d ago |
| CVE-2026-3688 | 8.1 | — | — | — | — | The WCFM Membership – WooCommerce Memberships for Multivendor Marketplace plugin for WordPress is vulnerable to Ins | 112d ago |
| CVE-2026-12378 | 8.1 | — | — | — | — | The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate da | 112d ago |
| CVE-2026-44454 | 8.1 | — | — | — | coder / coder | Coder allows organizations to provision remote development environments via Terraform. | 113d ago |
| CVE-2026-13020 | 8.1 | — | — | — | esri / portal for arcgis | A Weak Password Recovery Mechanism for Forgotten Password exists in Esri Portal for ArcGIS versions 12.1 and earli | 113d ago |
| CVE-2026-11348 | 8.1 | — | — | — | — | Improper verification of cryptographic signature vulnerability in HAVELSAN Inc. | 113d ago |
| CVE-2026-59713 | 8.1 | — | — | — | — | Leantime contains an OIDC login CSRF vulnerability in the verifyState() method that unconditionally returns true w | 114d ago |
| CVE-2026-59712 | 8.1 | — | — | — | — | Leantime's Users::getUser method in the JSON-RPC API lacks proper authorization checks, allowing authenticated use | 114d ago |
| CVE-2026-14471 | 8.1 | — | — | — | — | Improper Neutralization of Special Elements in the metrics-service retention policy management component in Amazon | 114d ago |
| CVE-2026-40138 | 8.1 | — | — | — | beyondtrust / privileged remote access | A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support a | 114d ago |
| CVE-2026-49297 | 8.1 | — | — | — | apache / apache-airflow-providers-google | Apache Airflow's Google provider operators `GCSToSFTPOperator` and `GCSTimeSpanFileTransformOperator` joined GCS o | 114d ago |
| CVE-2026-43865 | 8.1 | — | — | — | apache / camel | Deserialization of Untrusted Data vulnerability in Apache Camel Hazelcast component. | 114d ago |
| CVE-2026-42527 | 8.1 | — | — | — | apache / camel | Deserialization of Untrusted Data vulnerability in Apache Camel. | 114d ago |
| CVE-2026-40859 | 8.1 | — | — | — | apache / camel | Deserialization of Untrusted Data vulnerability in Apache Camel. | 114d ago |
| CVE-2026-12083 | 8.1 | — | — | — | — | The Admin and Site Enhancements (ASE) WordPress plugin before 8.8.4, admin-site-enhancements-pro WordPress plugin | 114d ago |
| CVE-2026-12746 | 8.1 | — | — | — | — | Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter. | 116d ago |
| CVE-2026-12740 | 8.1 | — | — | — | — | Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter. | 116d ago |
| CVE-2025-71375 | 8.1 | — | — | — | — | picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scanning pickle files f | 117d ago |
| CVE-2025-71373 | 8.1 | — | — | — | — | picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files, allowing attackers | 117d ago |
| CVE-2025-71372 | 8.1 | — | — | — | — | Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ method | 117d ago |
| CVE-2025-71369 | 8.1 | — | — | — | — | picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.datapipes.utils.decoder. | 117d ago |
| CVE-2025-71367 | 8.1 | — | — | — | — | picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloads, allowing attacker | 117d ago |
| CVE-2025-71366 | 8.1 | — | — | — | — | picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofile function calls in | 117d ago |
| CVE-2025-71364 | 8.1 | — | — | — | — | picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._start function in pickl | 117d ago |
| CVE-2025-71362 | 8.1 | — | — | — | — | picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval o | 117d ago |
| CVE-2025-71360 | 8.1 | — | — | — | — | picklescan before 0.0.29 fails to detect malicious pickle files using idlelib.calltip.get_entity function in reduc | 117d ago |
