| CVE-2026-41700 | 8.1 | — | — | — | vmware / spring for graphql | Spring for GraphQL applications that have enabled the WebSocket transport are vulnerable to Cross-Site WebSocket H | 139d ago |
| CVE-2026-41699 | 8.1 | — | — | — | vmware / spring for graphql | Spring for GraphQL applications are vulnerable to Unsafe Deserialization when processing paginated GraphQL queries | 139d ago |
| CVE-2026-10795zero day | 8.1 | 4.3% | 1/3 | 1d before | — | The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Authentication Bypass in all v | 139d ago |
| CVE-2026-53738 | 8.1 | — | — | — | — | Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_ | 140d ago |
| CVE-2026-45062 | 8.1 | — | — | — | — | FrankenPHP is a modern application server for PHP. | 140d ago |
| CVE-2026-45569 | 8.1 | — | — | — | — | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. | 140d ago |
| CVE-2026-45565 | 8.1 | — | — | — | — | Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. | 140d ago |
| CVE-2026-26239 | 8.1 | — | — | — | qnap / file station | A buffer overflow vulnerability has been reported to affect File Station 5. | 141d ago |
| CVE-2026-24724 | 8.1 | — | — | — | qnap / file station | An incorrect authorization vulnerability has been reported to affect File Station 6. | 141d ago |
| CVE-2026-53673 | 8.1 | — | — | — | — | BuddyPress 14.4.0 contains an insecure direct object reference vulnerability in the messages REST API that allows | 141d ago |
| CVE-2026-41732 | 8.1 | — | — | — | vmware / spring for apache pulsar | JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting a | 141d ago |
| CVE-2026-41731 | 8.1 | — | — | — | vmware / spring for apache kafka | JsonKafkaHeaderMapper and the deprecated DefaultKafkaHeaderMapper matched type headers against trusted packages us | 141d ago |
| CVE-2026-41729 | 8.1 | — | — | — | vmware / spring data rest | Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patc | 141d ago |
| CVE-2026-41717 | 8.1 | — | — | — | vmware / spring data mongodb | Spring Data MongoDB contains a SpEL (Spring Expression Language) expression injection vulnerability. | 141d ago |
| CVE-2026-9753 | 8.1 | — | — | — | mongodb / mongodb | The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malfo | 141d ago |
| CVE-2026-47930 | 8.1 | — | — | — | adobe / coldfusion | ColdFusion versions 2023.19, 2025.8 and earlier are affected by an Improper Input Validation vulnerability that co | 141d ago |
| CVE-2026-36720 | 8.1 | — | — | — | — | Insecure permissions in bookcars v8.3 allows authenticated attackers to escalate privileges from user to admin via | 141d ago |
| CVE-2026-9213 | 8.1 | — | — | — | netgear / mr70 firmware | A vulnerability in the affected NETGEAR gaming routers allows attackers with the ability to intercept and tamper wi | 141d ago |
| CVE-2026-7383 | 8.1 | — | — | — | openssl / openssl | Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1_mbstring_nco | 141d ago |
| CVE-2026-47631 | 8.1 | — | — | — | microsoft / exchange server | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server | 141d ago |
| CVE-2026-45635 | 8.1 | — | — | — | microsoft / windows 10 1607 | Access of resource using incompatible type ('type confusion') in Universal Plug and Play (upnp.dll) allows an unau | 141d ago |
| CVE-2026-45599 | 8.1 | — | — | — | microsoft / windows 10 1607 | Use after free in Universal Plug and Play (upnp.dll) allows an unauthorized attacker to execute code over a networ | 141d ago |
| CVE-2026-45503 | 8.1 | — | — | — | microsoft / exchange server | Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a n | 141d ago |
| CVE-2026-42987 | 8.1 | — | — | — | microsoft / windows server 2012 | Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network. | 141d ago |
| CVE-2026-42981 | 8.1 | — | — | — | microsoft / windows 11 23h2 | Integer underflow (wrap or wraparound) in Windows Performance Monitor allows an unauthorized attacker to execute c | 141d ago |
| CVE-2026-42974 | 8.1 | — | — | — | microsoft / windows 11 23h2 | Integer overflow or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over | 141d ago |
| CVE-2026-42835 | 8.1 | — | — | — | microsoft / teams | Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Te | 141d ago |
| CVE-2026-49948 | 8.1 | — | — | — | — | Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-ho | 141d ago |
| CVE-2026-24065 | 8.1 | — | — | — | — | Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the p | 141d ago |
| CVE-2026-9662 | 8.1 | — | — | — | — | The Recover Exit For WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to a | 142d ago |
| CVE-2026-41855 | 8.1 | — | — | — | vmware / spring framework | In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org | 142d ago |
| CVE-2026-11693 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Plugins in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had | 142d ago |
| CVE-2026-11689 | 8.1 | — | — | — | google / chrome | Insufficient policy enforcement in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker wh | 142d ago |
| CVE-2026-11643 | 8.1 | — | — | — | google / chrome | Use after free in Proxy in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary co | 142d ago |
| CVE-2026-46484 | 8.1 | — | — | — | — | Headplane is a feature-complete Web UI for Headscale. | 142d ago |
| CVE-2026-42863 | 8.1 | — | — | — | flowiseai / flowise | Flowise is a drag & drop user interface to build a customized large language model flow. | 142d ago |
| CVE-2026-11416 | 8.1 | — | — | — | — | MoviePilot contains a path traversal vulnerability in the AliPan, U115, and Rclone cloud storage download handlers | 145d ago |
| CVE-2026-45749 | 8.1 | — | — | — | termix / termix | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. | 145d ago |
| CVE-2026-45743 | 8.1 | — | — | — | termix / termix | Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. | 145d ago |
| CVE-2026-11231 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote atta | 146d ago |
| CVE-2026-11224 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to execute | 146d ago |
| CVE-2026-11185 | 8.1 | — | — | — | google / chrome | Use after free in V8 in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a | 146d ago |
| CVE-2026-11170 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attac | 146d ago |
| CVE-2026-11169 | 8.1 | — | — | — | google / chrome | Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject ar | 146d ago |
| CVE-2026-11111 | 8.1 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out of | 146d ago |
| CVE-2026-11015 | 8.1 | — | — | — | google / chrome | Out of bounds read in WebGPU in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform an out o | 146d ago |
| CVE-2026-11011 | 8.1 | — | — | — | google / chrome | Insufficient policy enforcement in Password Manager in Google Chrome prior to 149.0.7827.53 allowed a remote attac | 146d ago |
| CVE-2026-10930 | 8.1 | — | — | — | google / chrome | Out of bounds read in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to perform an | 146d ago |
| CVE-2026-10887 | 8.1 | — | — | — | google / chrome | Use after free in Chromoting in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to execute a | 146d ago |
| CVE-2026-10863 | 8.1 | — | — | — | misp-project / misp | A security issue was fixed in the correlations over-correlation endpoint where the order query parameter was accep | 146d ago |
| CVE-2025-59874 | 8.1 | — | — | — | — | HCL Hive Telco Observability is affected by a Required directives missing from the CSP issue is detected in keyclo | 146d ago |
| CVE-2026-36603 | 8.1 | — | — | — | — | Mercusys AC12G (EU) V1 router with firmware AC12G(EU)_V1_200909 exposes 15 of 18 UPnP IGD actions without authenti | 147d ago |
| CVE-2026-35081 | 8.1 | — | — | — | mbs-solutions / universal gateway firmware | The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insuf | 147d ago |
| CVE-2026-35080 | 8.1 | — | — | — | mbs-solutions / universal gateway firmware | The ugw-restoreinfo method allows a remote attacker with user privileges to delete arbitrary local files due to in | 147d ago |
| CVE-2026-35079 | 8.1 | — | — | — | mbs-solutions / universal gateway firmware | The ugw-restore method allows a remote attacker with user privileges to delete arbitrary local files due to insuff | 147d ago |
| CVE-2026-35078 | 8.1 | — | — | — | mbs-solutions / universal gateway firmware | The ugw-logstop method allows a remote attacker with user privileges to delete arbitrary local files due to insuff | 147d ago |
| CVE-2026-35077 | 8.1 | — | — | — | mbs-solutions / universal gateway firmware | The ugw-delete-file method allows a remote attacker with user privileges to delete arbitrary local files due to in | 147d ago |
| CVE-2026-35076 | 8.1 | — | — | — | mbs-solutions / universal gateway firmware | The bac-scanresult method allows a remote attacker with user privileges to delete arbitrary local files due to ins | 147d ago |
| CVE-2026-44654 | 8.1 | — | — | — | librechat / librechat | LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. | 148d ago |
| CVE-2026-42211 | 8.1 | — | — | — | shopify / react-router | React Router is a router for React. | 148d ago |
