Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,206 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-89216 | 8.6 High | vTables < 0.3 - Unauthenticated SQL Injection via orderby Parameter | Oct 29, 2026 |
| CVE-2026-88928 | 6.5 Medium | PAYCOMET for WooCommerce 5.36 - 5.45 - Unauthenticated Stored Payment Token Overwrite via Signature Verification Bypass | Oct 29, 2026 |
| CVE-2026-78396 | 5.3 Medium | Link Library < 7.10.0 - Unauthenticated Link Contact and Submitter Information Disclosure | Oct 29, 2026 |
| CVE-2026-78395 | 5.3 Medium | Link Library < 7.10.0 - Unauthenticated Link Submission Login Requirement Bypass | Oct 29, 2026 |
| CVE-2026-115302 | 5.3 Medium | Contact Form by Supsystic < 1.11.1 - Unauthenticated Arbitrary Statistics Deletion | Oct 29, 2026 |
| CVE-2026-115301 | 7.2 High | Contact Form by Supsystic < 1.11.1 - Admin+ SSTI via Form Text Block | Oct 29, 2026 |
| CVE-2026-115300 | 4.3 Medium | Contact Form by Supsystic < 1.11.1 - Contact Submission and Statistics Deletion via CSRF | Oct 29, 2026 |
| CVE-2026-115299 | 5.4 Medium | Contact Form by Supsystic < 1.11.1 - Arbitrary Plugin Settings Update via CSRF | Oct 29, 2026 |
| CVE-2026-115282 | 5.3 Medium | Recipe Card Blocks Lite 2.6.4 - 3.6.3 - Unauthenticated Unpublished Post Content Disclosure | Oct 29, 2026 |
| CVE-2026-93293 | 6.4 Medium | Password Protected <= 2.8.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Freemius purchase_completed Handler | Oct 29, 2026 |
| CVE-2026-118905 | 7.1 High | nvm_ls lets an untrusted version string inject sed commands, executing arbitrary commands with GNU sed | Oct 29, 2026 |
| CVE-2026-93757 | 7.5 High | Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite | Oct 29, 2026 |
| CVE-2026-96228 | 8.1 High | SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover | Oct 29, 2026 |
| CVE-2026-96666 | 7.2 High | Schema App Structured Data <= 2.3.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via 'Remove Microdata' Output Filter | Oct 29, 2026 |
| CVE-2026-93904 | 7.5 High | Social Web Suite <= 4.1.12 - Unauthenticated SQL Injection via 'exclude_posts' Parameter | Oct 29, 2026 |
| CVE-2026-93855 | 7.5 High | SendPress Newsletters <= 1.26.1.20 - Unauthenticated SQL Injection via 'subscriberid' Parameter | Oct 29, 2026 |
| CVE-2026-96669 | 7.2 High | Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookie | Oct 29, 2026 |
| CVE-2026-96741 | 7.2 High | DSGVO All in one for WP <= 5.0 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Output Buffer Regex Corruption | Oct 29, 2026 |
| CVE-2026-109516 | 9.8 Critical | Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token | Oct 29, 2026 |
| CVE-2026-42949 | 5.6 Medium | A authorization bypass vulnerability exists in the /api/runscript functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to execute priviledged operation. An attacker can make an unauthenticated HTTP… | Oct 29, 2026 |
| CVE-2026-40063 | 5.3 Medium | A information disclosure vulnerability exists in the /nodered/fuxa/scripts functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to an information leak. An attacker can make an unauthenticated HTTP… | Oct 29, 2026 |
| CVE-2026-42922 | 9.8 Critical | A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to… | Oct 29, 2026 |
| CVE-2026-118426 | 5.3 Medium | In affected versions of Octopus Server with the LDAP authentication provider enabled, any authenticated user could call the LDAP user search and LDAP group search. | Oct 29, 2026 |
| CVE-2026-113409 | 4.8 Medium | The Ortto plugin for WordPress before 1.0.25 did not escape stored settings on its admin settings page, leading to stored cross-site scripting. A threat actor able to modify the plugin's configuration could execute arbitrary JavaScript in… | Oct 29, 2026 |
| CVE-2026-114173 | 5.3 Medium | The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public storefront pages. An unauthenticated threat actor could read product passwords and private product metadata from an affected… | Oct 29, 2026 |
| CVE-2026-113387 | 8.6 High | The Ortto plugin for WordPress before 1.0.25 did not authenticate configuration update requests, relying only on a secret exposed in public HTML. An unauthenticated threat actor could overwrite the plugin's configuration to serve arbitrary… | Oct 29, 2026 |
| CVE-2026-66092 | 4.8 Medium | Stored XSS in pre-login notice via reachable legacy logon route | Oct 29, 2026 |
| CVE-2026-66091 | 6.9 Medium | Unauthenticated IDOR Enables Disclosure of Other Users’ last-known details | Oct 29, 2026 |
| CVE-2026-66090 | 7.1 High | XML External Entity (XXE) Injection in Metadata Field Allows Arbitrary File Read | Oct 29, 2026 |
| CVE-2026-66089 | 6.1 Medium | XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion | Oct 29, 2026 |
| CVE-2026-66088 | 9.4 Critical | Unrestricted Command Execution via system.execute | Oct 29, 2026 |
| CVE-2026-16889 | 4.8 Medium | Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin | Oct 29, 2026 |
| CVE-2026-21157 | 8.3 High | Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity. | Oct 29, 2026 |
| CVE-2026-79589 | Not scored | The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an attacker to gain unauthenticated root shell. The vulnerability is caused by the exposure of the UART debugging interface having… | Oct 29, 2026 |
| CVE-2026-51912 | Not scored | OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46). | Oct 29, 2026 |
| CVE-2026-51905 | Not scored | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent_execution_configuration in superagi/controllers/agent_execution_config.py. A remote authenticated attacker from one organization can read another… | Oct 29, 2026 |
| CVE-2026-51903 | Not scored | SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_execution in superagi/controllers/agent_execution.py. A remote authenticated attacker from one organization can retrieve latest execution and agent… | Oct 29, 2026 |
| CVE-2026-51902 | Not scored | SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent controller endpoint /api/agents/get/project/{project_id} allows authenticated users from one organization to retrieve the complete list of agents belonging… | Oct 29, 2026 |
| CVE-2026-51863 | Not scored | DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/examples_api.py:129). A remote attacker can use the validated exploitation path to write files outside the intended… | Oct 29, 2026 |
| CVE-2026-51851 | Not scored | modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_text_file. The save_text_file method accepts user-controlled file paths without normalization or… | Oct 29, 2026 |
| CVE-2026-51832 | Not scored | An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component | Oct 29, 2026 |
| CVE-2026-51831 | Not scored | An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a local attacker to execute arbitrary code via the id_service.exe component | Oct 29, 2026 |
| CVE-2026-107060 | Not scored | Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences. | Oct 29, 2026 |
| CVE-2026-107059 | Not scored | An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and switch to an attacker controlled progile, bypassing authentication. | Oct 29, 2026 |
| CVE-2026-107058 | 9.8 Critical | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another user's binder service API and preference state. | Oct 29, 2026 |
| CVE-2026-107057 | Not scored | An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip. | Oct 29, 2026 |
| CVE-2026-107056 | Not scored | Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database via a crafted SEND message. | Oct 29, 2026 |
| CVE-2026-107055 | Not scored | Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files. | Oct 29, 2026 |
| CVE-2026-107053 | Not scored | Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox. | Oct 29, 2026 |
| CVE-2026-107052 | 7.5 High | Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path. | Oct 29, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.