Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,710 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-107685 | 9.1 Critical | WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers | Oct 23, 2026 |
| CVE-2026-95620 | 2.1 Low | Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt | Oct 23, 2026 |
| CVE-2026-94263 | 4.8 Medium | Advanced Custom Fields: Extended 0.9.2.4 - 0.9.2.7 - Unauthenticated Arbitrary Shortcode Execution via Form Success Message | Oct 23, 2026 |
| CVE-2026-111965 | 4.3 Medium | Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass | Oct 23, 2026 |
| CVE-2026-105963 | 5.1 Medium | Secret key base exposed in stack trace arguments on wrong-typed Plug.Crypto arguments | Oct 23, 2026 |
| CVE-2026-16762 | 8.7 High | Denial-of-service vulnerability in the Qt Core QXmlStream parser (QXmlStreamReader) impacts Qt | Oct 23, 2026 |
| CVE-2026-89320 | 8.8 High | HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity | Oct 23, 2026 |
| CVE-2026-25784 | 9.3 Critical | bluespice/wiki container: Insecure default configuration of service token authentication allows privilege escalation to sysop | Oct 23, 2026 |
| CVE-2026-89319 | 6.3 Medium | JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation | Oct 23, 2026 |
| CVE-2026-25716 | 7.1 High | BlueSpiceUserManager: Missing authorization in REST endpoints for blocking and unblocking users | Oct 23, 2026 |
| CVE-2026-89318 | 6.9 Medium | JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check) | Oct 23, 2026 |
| CVE-2026-89317 | 6.3 Medium | JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11) | Oct 23, 2026 |
| CVE-2026-89316 | 6.3 Medium | LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion | Oct 23, 2026 |
| CVE-2026-89315 | 6.9 Medium | JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix | Oct 23, 2026 |
| CVE-2026-89314 | 6.9 Medium | Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s | Oct 23, 2026 |
| CVE-2026-89313 | 6.3 Medium | JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil | Oct 23, 2026 |
| CVE-2026-89312 | 6.9 Medium | AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV | Oct 23, 2026 |
| CVE-2025-58403 | 5.1 Medium | Reflected Cross-Site Scripting (XSS) in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30054 | 9.3 Critical | Local Privilege Escalation in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30053 | 6.9 Medium | Missing Authentication in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30052 | 8.8 High | Authentication Bypass via IP Spoofing in CGM CLININET rsyncd | Oct 23, 2026 |
| CVE-2025-30051 | 6.8 Medium | Insecure File Permissions in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30050 | 9.4 Critical | Remote Code Execution in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30049 | 8.2 High | Use of Unsalted MD5 Password Hashes in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30047 | 9.4 Critical | Remote Code Execution via Java Deserialization in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30046 | 9.0 Critical | Remote Code Execution in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30045 | 8.6 High | Code Injection in CGM CLININET | Oct 23, 2026 |
| CVE-2025-30043 | 7.1 High | Missing Authentication in CGM CLININET | Oct 23, 2026 |
| CVE-2026-115657 | 4.8 Medium | KNIME Analytics Platform logs credentials of configured proxy when used as an executor | Oct 23, 2026 |
| CVE-2026-112860 | 9.3 Critical | WordPress Participants Database plugin <= 2.7.8.5 - SQL Injection vulnerability | Oct 23, 2026 |
| CVE-2026-112862 | 9.8 Critical | WordPress Participants Database plugin <= 2.7.8.5 - PHP Object Injection vulnerability | Oct 23, 2026 |
| CVE-2026-112835 | 7.1 High | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability | Oct 23, 2026 |
| CVE-2026-112837 | 8.5 High | WordPress GamiPress plugin <= 8.0.7 - SQL Injection vulnerability | Oct 23, 2026 |
| CVE-2026-112359 | 7.5 High | WordPress WPMobile.App plugin <= 11.86 - Broken Access Control vulnerability | Oct 23, 2026 |
| CVE-2026-112838 | 7.1 High | WordPress VikRentCar plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability | Oct 23, 2026 |
| CVE-2026-112821 | 6.5 Medium | WordPress Knit Pay plugin <= 9.6.3.0 - Broken Access Control vulnerability | Oct 23, 2026 |
| CVE-2026-112825 | 6.5 Medium | WordPress Car Rental Manager plugin <= 1.5.3 - Broken Access Control vulnerability | Oct 23, 2026 |
| CVE-2026-4952 | 5.1 Medium | Stored Cross-Site Scripting in OrderAdministration Portal (AuftragsManager) via Business Reference in VertiGIS WebOrderSystem | Oct 23, 2026 |
| CVE-2026-4951 | 5.1 Medium | Reflected Cross-Site Scripting in CustomerAdministration Portal (KundenManager)in VertiGIS WebOrderSystem | Oct 23, 2026 |
| CVE-2026-4950 | 4.8 Medium | Stored Cross-Site Scripting in CustomerAdministration Portal (KundenManager) in VertiGIS WebOrderSystem | Oct 23, 2026 |
| CVE-2026-63244 | 9.8 Critical | Authentication Bypass Vulnerability | Oct 23, 2026 |
| CVE-2026-75775 | 7.7 High | Improper Neutralization of Special Elements used in an OS Command in certain ASUS routers allows remote user to execute arbitrary commands with root privileges via crafted parameters sent to the router while the device is in its… | Oct 23, 2026 |
| CVE-2026-93489 | 8.7 High | Improper Authentication in ASUS router modules allows an unauthenticated nearby user to send an HTTP request and forge an access ticket, subsequently enabling the user to perform administrator operations. Refer to the ' Security Update for… | Oct 23, 2026 |
| CVE-2026-75779 | 8.6 High | Improper Neutralization of Special Elements used in an OS Command (“OS Command Injection”) and Cross-Site Request Forgery (CSRF) in an ASUS router model allow an attacker to trick a logged-in administrator into visiting a phishing website,… | Oct 23, 2026 |
| CVE-2026-63243 | 4.3 Medium | Firmware verification vulnerability | Oct 23, 2026 |
| CVE-2026-55981 | 9.6 Critical | Firmware verification vulnerability | Oct 23, 2026 |
| CVE-2026-94268 | 8.1 High | Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Administrator Account Takeover via Front-End User Update Action | Oct 23, 2026 |
| CVE-2026-94267 | 9.0 Critical | Advanced Custom Fields: Extended < 0.9.2.8 - Unauthenticated RCE via Front-End Post Update Action | Oct 23, 2026 |
| CVE-2026-94264 | 6.8 Medium | Advanced Custom Fields: Extended 0.8.9.4 - 0.9.2.7 - Contributor+ XSS via Form Shortcode Attributes | Oct 23, 2026 |
| CVE-2026-94262 | 8.1 High | Advanced Custom Fields: Extended 0.9.2.7 - Unauthenticated Non-Administrator Account Takeover via Front-End User Update Action | Oct 23, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.