Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
49645
Total
4014
Critical
14740
High
14481
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-17613 | HIGH | 7.5 | Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the target server and subscribe … | Aug 05, 2026 |
| CVE-2026-16102 | HIGH | 8.1 | A flaw was found in the Dynamic Client Registration (DCR) component of Keycloak, an identity and access management solution. The default DCR policy fails to … | Aug 05, 2026 |
| CVE-2026-16100 | MEDIUM | 6.5 | A flaw was found in the user-event metrics recording of Keycloak. When metrics are enabled, the system records raw error messages from failed account operations … | Aug 05, 2026 |
| CVE-2026-16071 | MEDIUM | 5.4 | A flaw was found in the LDAP storage provider of Keycloak, which is used to federate user identities from external directories. The issue occurs when … | Aug 05, 2026 |
| CVE-2026-15573 | HIGH | 8.1 | A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies (PathMatcher) does not properly normalize URIs before … | Aug 05, 2026 |
| CVE-2026-12410 | HIGH | 7.8 | Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM via … | Aug 05, 2026 |
| CVE-2026-7529 | HIGH | 7.5 | The wiseCampaign – WooCommerce Conversions Made Easy plugin for WordPress is vulnerable to unauthorized modification and disclosure of data due to every one of its … | Aug 05, 2026 |
| CVE-2026-7456 | MEDIUM | 6.5 | The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_disconnect()` function in all … | Aug 05, 2026 |
| CVE-2026-67623 | HIGH | 8.8 | Mistral Vibe before 2.23.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary commands by embedding a malicious core.fsmonitor hook in a … | Aug 05, 2026 |
| CVE-2026-17506 | HIGH | 7.2 | The Independent Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 404 not_found_url tracking parameter in versions up to, and including, 2.15.0. … | Aug 05, 2026 |
| CVE-2026-16443 | HIGH | 7.4 | A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat … | Aug 05, 2026 |
| CVE-2026-15979 | HIGH | 8.1 | The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up … | Aug 05, 2026 |
| CVE-2025-70962 | HIGH | 7.5 | Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The application contains hardcoded credentials in the RTSP authentication mechanism. An attacker with network access can … | Aug 05, 2026 |
| CVE-2026-71294 | HIGH | 7.6 | Cotonti CMS's Comments plugin deserializes user-supplied data without restricting the classes that may be instantiated. In plugins/comments/controllers/actions/CreateAction.php, a `ci` POST parameter obtained via `cot_import('ci', 'P', … | Aug 05, 2026 |
| CVE-2026-71293 | MEDIUM | 6.2 | Statamic CMS's user-augmentation resolver, AugmentedUser::get() in src/Auth/AugmentedUser.php, contains an explicit case for the `two_factor_recovery_codes` handle that returns the user's raw two-factor recovery codes with no … | Aug 05, 2026 |
| CVE-2026-71292 | HIGH | 7.2 | Subrion CMS's admin grid sorting helper, _gridGetSorting() in includes/classes/ia.base.controller.admin.php, whitelists the `dir` (ASC/DESC) request parameter via in_array(), but falls back to the raw, attacker-supplied `sort` … | Aug 05, 2026 |
| CVE-2026-71291 | HIGH | 8.8 | Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered anywhere in the codebase. In src/Entity/Field.php, getTwigValue() calls shouldBeRenderedAsTwig(), which … | Aug 05, 2026 |
| CVE-2026-71289 | CRITICAL | 9.8 | The NASA-AMMOS Asynchronous Network Management System (ANMS) reference implementation's default docker-compose.yml publishes the amp-manager service's REST API directly to the host network interface (port 8089, … | Aug 05, 2026 |
| CVE-2026-71288 | HIGH | 8.8 | Koha's guided report builder (reports/guided_reports.pl) reads the `order_by` CGI parameter and, for each value, a dynamically-named `{order}_ovalue` parameter, and concatenates both directly into an SQL … | Aug 05, 2026 |
| CVE-2026-71287 | HIGH | 8.8 | Cacti's sanitize_sql_column() (lib/functions.php) sanitizes user-supplied ORDER BY column names using the regex `preg_replace('/[^a-zA-Z0-9_().]/', '', $column)`. Because this allowlist retains letters, digits, underscore, parentheses, and dot … | Aug 05, 2026 |
| CVE-2026-71286 | MEDIUM | 6.1 | The render-template component of ember-dynamic-render-template (addon/components/render-template.js) passes its `templateString` property directly into Ember/Glimmer's compileTemplate() (from @ember/template-compilation) with no sanitization, allow-listing, or validation of the input. … | Aug 05, 2026 |
| CVE-2026-71285 | HIGH | 8.1 | Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo `siteId` value as a bare, unquoted JavaScript expression inside a <script> block rendered on every … | Aug 05, 2026 |
| CVE-2026-71284 | HIGH | 7.2 | Fledge's backup-restore upload handler, upload_backup() (python/fledge/services/core/api/backup_restore.py), takes the first extracted tar member's filename (tar_file_names[0]) and builds a shell command via string formatting: `cmd = "cp … | Aug 05, 2026 |
| CVE-2026-71283 | MEDIUM | 4.9 | Fledge's backup-restore upload handler, upload_backup() (python/fledge/services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) on an admin-uploaded tar archive with no filter argument and no per-member path validation. A crafted tar … | Aug 05, 2026 |
| CVE-2026-71282 | MEDIUM | 6.5 | ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storage/device.rs, in both get_count() and list()) interpolates the user-supplied tag KEY directly into a raw SQL fragment via Rust's format!() … | Aug 05, 2026 |