Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

402,123 vulnerabilities match.

CVESeveritySummary
CVE-2026-1112332.3 LowNetgate pfSense CE 2.7.1 through 2.9.0 Reflected XSS via firewall_rules.php
CVE-2026-1112324.8 MediumNetgate pfSense CE 2.3.0 through 2.9.0 Stored XSS via Separator Color
CVE-2026-1112306.9 MediumNetgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL
CVE-2026-1112285.1 MediumNetgate pfSense CE 2.7.1 through 2.9.0 CRLF Injection via services_unbound_advanced.php
CVE-2026-1112275.1 MediumNetgate pfSense CE through 2.9.0 CRLF Injection via services_unbound_acls.php
CVE-2026-1112268.6 HighNetgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanced_admin.php
CVE-2026-1112252.3 LowNetgate pfSense CE 2.5.0 through 2.9.0 OS Command Injection via openvpn.learn-address.sh
CVE-2026-1112247.7 HighNetgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_async.sh
CVE-2026-1112238.6 HighNetgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Login Banner
CVE-2026-1112227.5 HighNetgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting
CVE-2026-1112208.6 HighNetgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid
CVE-2026-1112197.5 HighNetgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username
CVE-2026-1112188.6 HighNetgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shaper Limiters
CVE-2026-1112178.6 HighNetgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID
CVE-2026-1112168.6 HighNetgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP
CVE-2026-1112158.6 HighNetgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Interface
CVE-2026-1112148.6 HighNetgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qinq_edit.php
CVE-2026-1091315.4 MediumAnsible-ui: ansible-ui: stored xss via unsafe javascript url scheme in hub collection module documentation (formatparturl)
CVE-2026-1112359.1 CriticalOpenNMS REST authorization bypass via non-canonical HTTP method
CVE-2026-623226.5 MediumPython Social Auth: Login CSRF in LINE backend (LineOAuth2) — missing OAuth state validation (incomplete fix of 5.0.0 campaign)
CVE-2026-1083347.4 HighGithub.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides
CVE-2026-1099325.9 Mediumundici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering
CVE-2026-1041508.7 HighAdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
CVE-2026-574969.6 CriticalNetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction
CVE-2026-870187.5 Highundici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation
CVE-2026-1056606.9 MediumUnvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in Bandit
CVE-2026-1048287.2 HighHtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entity decode without re-encode
CVE-2026-927075.3 MediumMessagePack: Nested arrays can blow past buffer length limits
CVE-2026-1093837.4 Highundici vulnerable to TLS certificate validation bypass via dropped tls options in Agent
CVE-2026-571836.1 MediumScoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs
CVE-2026-558405.4 MediumScoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypass
CVE-2026-558425.4 MediumScoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domain
CVE-2026-1029469.1 Criticaljoserfc: JWS signature verification bypass via empty signatures array in jws.deserialize_json
CVE-2026-1098297.4 Highundici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects
CVE-2026-558728.7 HighGYM One admin user list is vulnerable to stored cross-site scripting
CVE-2026-558716.5 MediumGYM One: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in admin/users/index.php
CVE-2026-946216.3 MediumAliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction
CVE-2026-1098415.9 Mediumundici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens
CVE-2026-555878.1 HighAliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID
CVE-2026-1103616.5 MediumWordPress Infinite Uploads plugin <= 3.4.1 - Sensitive Data Exposure vulnerability
CVE-2026-1103625.3 MediumWordPress PlanetStudio Payment Gateway plugin <= 1.3.3 - Broken Access Control vulnerability
CVE-2026-1048277.5 Highreact/http: Unbounded HTTP Client Response Header Buffering Leads to Memory Exhaustion DoS
CVE-2026-1098936.5 MediumWordPress Presto Player plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-1103744.3 MediumWordPress Login with phone number plugin <= 1.8.77 - Broken Access Control vulnerability
CVE-2026-1084995.3 MediumWordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerability
CVE-2026-973707.5 HighJunrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 extraction
CVE-2026-1103645.3 MediumWordPress Flexible Quantity – Measurement Price Calculator for WooCommerce plugin <= 2.3.23 - Broken Access Control vulnerability
CVE-2026-1099245.9 Mediumundici vulnerable to Denial of Service via unbounded memory in the EventSource parser
CVE-2026-1103756.5 MediumWordPress Download Monitor plugin <= 5.3.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-472189.3 Criticalrunwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox

Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.