Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,118 vulnerabilities match.

CVESeveritySummary
CVE-2026-114540Not scoredDomain - Moderately critical - Access bypass - SA-CONTRIB-2026-238
CVE-2026-114543Not scoredSimple User Management - Moderately critical - Access bypass - SA-CONTRIB-2026-239
CVE-2026-114541Not scoredFrontend Editing - Moderately critical - Cross-Site Request Forgery (CSRF) - SA-CONTRIB-2026-240
CVE-2026-114553Not scoredFrontend Editing - Less critical - Access bypass - SA-CONTRIB-2026-241
CVE-2026-114542Not scoredSimple OAuth (OAuth2) & OpenID Connect - Moderately critical - Access bypass - SA-CONTRIB-2026-242
CVE-2026-114544Not scoredMedia Bulk Upload - Moderately critical - Access bypass - SA-CONTRIB-2026-243
CVE-2026-114545Not scoredFullcalendar View - Moderately critical - Access bypass - SA-CONTRIB-2026-244
CVE-2026-114546Not scoredMedia Alias Display - Moderately critical - Information disclosure - SA-CONTRIB-2026-245
CVE-2026-114547Not scoredTinyPNG - Moderately critical - Information disclosure - SA-CONTRIB-2026-246
CVE-2026-114548Not scoredImageAPI Optimize WebP - Moderately critical - Information disclosure - SA-CONTRIB-2026-247
CVE-2026-107256Not scoredShield - Moderately critical - Access bypass - SA-CONTRIB-2026-248
CVE-2026-114572Not scoredDomain Login Restrict - Moderately critical - Access bypass - SA-CONTRIB-2026-249
CVE-2026-114555Not scoredData field - Moderately critical - Cross site scripting - SA-CONTRIB-2026-250
CVE-2026-114554Not scoredAI File to Text - Moderately critical - Access bypass - SA-CONTRIB-2026-251
CVE-2026-114571Not scoredRabbit Hole - Moderately critical - Access Bypass - SA-CONTRIB-2026-252
CVE-2026-114573Not scoredMonster Menus - Critical - PHP object injection - SA-CONTRIB-2026-253
CVE-2026-118539Not scoredCommerce Core - Highly critical - Access bypass - SA-CONTRIB-2026-254
CVE-2026-118540Not scoredCommerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-255
CVE-2026-118541Not scoredCommerce Core - Less critical - Access bypass - SA-CONTRIB-2026-256
CVE-2026-118542Not scoredCommerce Core - Moderately critical - Access bypass - SA-CONTRIB-2026-257
CVE-2026-118543Not scoredCommerce Core - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-258
CVE-2026-118544Not scoredCommerce Core - Moderately critical - Information disclosure - SA-CONTRIB-2026-259
CVE-2026-118555Not scoredCommerce License - Moderately critical - Access bypass - SA-CONTRIB-2026-260
CVE-2026-118556Not scoredCommerce Shipping - Moderately critical - Access bypass - SA-CONTRIB-2026-261
CVE-2026-118557Not scoredCommerce Shipping - Less critical - Access bypass - SA-CONTRIB-2026-262
CVE-2026-118558Not scoredCommerce Stripe - Critical - Cross-site request forgery - SA-CONTRIB-2026-263
CVE-2026-118559Not scoredCommerce Stripe - Moderately critical - Improper verification of cryptographic signature - SA-CONTRIB-2026-264
CVE-2026-118560Not scoredCommerce Stripe - Moderately critical - Cross site scripting - SA-CONTRIB-2026-265
CVE-2026-118545Not scoredAI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-266
CVE-2026-118546Not scoredAI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-267
CVE-2026-118548Not scoredAI (Artificial Intelligence) - Moderately critical - Information disclosure - SA-CONTRIB-2026-268
CVE-2026-118549Not scoredAI (Artificial Intelligence) - Critical - Cross-site scripting - SA-CONTRIB-2026-269
CVE-2026-118550Not scoredAI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTRIB-2026-270
CVE-2026-118551Not scoredAI (Artificial Intelligence) - Less critical - Information Disclosure - SA-CONTRIB-2026-271
CVE-2026-118552Not scoredAI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-272
CVE-2026-118553Not scoredAI (Artificial Intelligence) - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-273
CVE-2026-118561Not scoredSingle Content Sync - Critical - External control of file name or path - SA-CONTRIB-2026-274
CVE-2026-118562Not scoredSingle Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275
CVE-2026-118563Not scoredCacheFlush - Critical - Unsupported - SA-CONTRIB-2026-276
CVE-2026-118564Not scoredPayUmoney for Drupal Commerce - Critical - Unsupported - SA-CONTRIB-2026-277
CVE-2026-118565Not scoredGroupEx PRO ( Daxko ) integration - Critical - Unsupported - SA-CONTRIB-2026-278
CVE-2026-118582Not scoredCAPTCHA - Moderately critical - Session Replay (CAPTCHA bypass) - SA-CONTRIB-2026-281
CVE-2026-118569Not scoredFasttoggle - Moderately critical - Access bypass - SA-CONTRIB-2026-282
CVE-2026-118570Not scoredFasttoggle - Moderately critical - Cross-Site Request Forgery - SA-CONTRIB-2026-283
CVE-2026-118574Not scoredS3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279
CVE-2026-118567Not scoredBulk Update User Roles - Moderately critical - Incorrect authorization - SA-CONTRIB-2026-280
CVE-2026-118572Not scoredOAuth Login - OAuth OIDC SSO - Critical - Authentication bypass - SA-CONTRIB-2026-284
CVE-2026-118575Not scoredSignature pad widget - Critical - Cross-site scripting - SA-CONTRIB-2026-285
CVE-2026-118576Not scoredStage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286
CVE-2026-118554Not scoredOpenID Connect Client - Moderately critical - Improper authentication - SA-CONTRIB-2026-287

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.