410224CVEs tracked
4216Last 7 days
16059Last 30 days
1756CISA KEV
Published CVEs
CRITICALHIGHMEDIUMLOWUnscored
4073 CVEs in this period · counted 2026-10-25 16:37 UTC, refreshed hourly
Recently published CVEs
4216 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-116055 | 5.3
CNA v4.0 |
NetworkLoginNo interaction
PoC
C:LI:LA:L
|
— | SourceCodester Performance Indicator System deleteproduct.php sql injection A vulnerability was detected in SourceCodester Performance Indicator System 1.0. This impacts an unknown function of the file /opils/admin/deleteproduct.php. The manipulation of the argument ID result… |
2026-10-25 |
| CVE-2026-116191 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:HA:N
|
— | Rclone before 1.75.2 Path Traversal via serve webdav MKCOL Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attacke… |
2026-10-25 |
| CVE-2026-116183 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:HA:N
|
— | phpMyFAQ before 4.1.10 Authorization Bypass via /api/faq/create openQuestionID phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers to modify or delete any visitor question by supplying an arbitrary openQuestion… |
2026-10-25 |
| CVE-2026-116156 | 3.3
CNA (via NVD) v3.1 |
LocalNo authUser action
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via -set profile Option ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak caused by a missing cleanup when the -set profile option is used. An attacker who induces a user to process images with the … |
2026-10-25 |
| CVE-2026-116154 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak via XML Parsing Depth Lim… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in its XML parsing code, where allocated memory is not released when parsing reaches the nesting depth limit. Attackers can … |
2026-10-25 |
| CVE-2026-116153 | 2.5
CNA (via NVD) v3.1 |
LocalNo authUser actionConditions
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Heap Buffer Overflow via Convex-Hull on 32-bit ImageMagick before 7.1.2-33 contains a heap buffer overflow vulnerability on 32-bit systems that allows attackers to overwrite heap memory when convex-hull information is requested. Attackers can supp… |
2026-10-25 |
| CVE-2026-116152 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Memory Leak in MAT Decoder Error Path ImageMagick before 7.1.2-33 contains a memory leak vulnerability in the MAT decoder that fails to release allocated memory in a specific error path. Attackers can supply crafted MAT files that trigger… |
2026-10-25 |
| CVE-2026-116151 | 3.7
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Memory Leak in JNG Encoder ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a memory leak in the JNG encoder that fails to release allocated memory when processing a crafted image. Attackers can supply crafted imag… |
2026-10-25 |
| CVE-2026-116149 | 8.1
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
C:NI:HA:H
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Stack Buffer Overflow via bzip2 Compr… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a stack-based buffer overflow in the handling of bzip2 compressed images. Attackers can supply a crafted image using bzip2 compression to … |
2026-10-25 |
| CVE-2026-116147 | 3.7
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:NI:NA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 Null Pointer Dereference in DJVU Deco… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder because the result of a memory allocation is not checked before use. Attackers can supply a… |
2026-10-25 |
| CVE-2026-116145 | 3.9
CNA (via NVD) v3.1 |
LocalAdminNo interactionConditions
C:LI:LA:L
|
— | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete… ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for the policy bypass reported in GHSA-jjp4-3fwf-393j. An attacker able to supply inp… |
2026-10-25 |
| CVE-2026-116142 | 3.3
CNA (via NVD) v3.1 |
LocalNo authUser action
C:LI:NA:N
|
— | ImageMagick before 7.1.2-33 Heap Buffer Over-Read via Minimum-Bounding-Box ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocated memory when printing a minimum-bounding-box. Attackers can supply a crafted im… |
2026-10-25 |
| CVE-2026-116141 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | ImageMagick before 7.1.2-33 Policy Bypass in UHDR Decoder ImageMagick before 7.1.2-33 contains a policy bypass vulnerability in the UHDR decoder that allows attackers to evade image width and height limits because extent checks occur after decoding. Attacker… |
2026-10-25 |
| CVE-2026-116054 | 2.1
CNA v4.0 |
NetworkAdminNo interactionConditions
PoC
C:LI:NA:N
|
— | SH3 Módulo de Gestão/Módulo de Arrecadação weak password hash A security vulnerability has been detected in SH3. This affects an unknown function of the component Módulo de Gestão/Módulo de Arrecadação. The manipulation leads to password hash with insufficient c… |
2026-10-25 |
| CVE-2026-116053 | 4.8
CNA v4.0 |
LocalLoginNo interaction
PoC
C:LI:LA:L
|
— | dbcli mycli Whitelist source.py source_special_command_is_safe os command injection A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function source_special_command_is_safe of the file mycli/packages/special/source.py of the component Whi… |
2026-10-25 |
| CVE-2026-116186 | 2.3
CNA v4.0 |
NetworkLoginNo interactionConditions
C:NI:LA:N
|
— | OpenRemote before 1.31.0 Gateway Authorization Bypass via Reversible mapAssetId OpenRemote core (openremote-manager) before 1.31.0 does not perform realm or gateway-descendant authorization on inbound edge gateway events and maps event asset IDs only through the reversible Gatewa… |
2026-10-25 |
| CVE-2026-116185 | 5.3
CNA v4.0 |
NetworkLoginNo interaction
Scope change
C:LI:NA:N
|
— | OpenRemote before 1.31.0 Cross-Realm Information Disclosure via getGatewayActiveTunnelInfo… OpenRemote core before 1.31.0 contains an authorization bypass vulnerability that allows authenticated users to read other realms' gateway tunnel information via getGatewayActiveTunnelInfos. Attackers… |
2026-10-25 |
| CVE-2026-116184 | 2.1
CNA v4.0 |
NetworkAdminNo interactionConditions
C:LI:LA:L
|
— | OpenRemote before 1.31.0 Cross-Realm Gateway Impersonation via Websocket OpenRemote before 1.31.0 contains an authorization bypass vulnerability that allows realm admins to impersonate gateways in other realms because GatewayService only checks the gateway ID, not the real… |
2026-10-25 |
| CVE-2026-116211 | 8.8
CNA v4.0 |
NetworkNo authNo interaction
C:HI:LA:N
|
— | YesWiki 4.5.0 before 4.7.0 SQL Injection via date_maj_fiche in Bazar entry create YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche field of a Bazar entry-creation request is concatenated unescaped into an INSERT sta… |
2026-10-25 |
| CVE-2026-116208 | 7.2
CNA v4.0 |
NetworkNo authUser action
C:NI:HA:H
|
— | YesWiki 4.6.2 before 4.7.0 Missing Authorization in ActivityPub syncActorPosts YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts that lets malicious ActivityPub servers manipulate other actors' mirrored entries. … |
2026-10-25 |
| CVE-2026-116207 | 8.8
CNA v4.0 |
NetworkNo authNo interaction
C:HI:NA:H
|
— | YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Entries Search API YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability in SearchManager::prepareSearchRequest(). Field names from the query and searchf… |
2026-10-25 |
| CVE-2026-116206 | 5.3
CNA v4.0 |
NetworkLoginNo interaction
Scope change
C:LI:LA:N
|
— | YesWiki 4.2.0 before 4.7.0 Stored XSS via Comment Raw-HTML Syntax YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject script into comment bodies using the wakka raw-HTML syntax. Attackers can… |
2026-10-25 |
| CVE-2026-116205 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:LI:NA:N
|
— | YesWiki before 4.7.0 Unauthenticated SSRF via [[|URL]] Raw-Inclusion Syntax YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to fetch arbitrary URLs by supplying [[|URL]] wiki syntax to the render handler.… |
2026-10-25 |
| CVE-2026-116204 | 7.2
CNA v4.0 |
NetworkNo authUser action
C:NI:HA:H
|
— | YesWiki before 4.7.0 CSRF via despam Admin Action YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/despam.php) that lets unauthenticated attackers delete or restore pages through an… |
2026-10-25 |
| CVE-2026-116203 | 5.3
CNA v4.0 |
NetworkNo authUser action
Scope change
C:NI:NA:N
|
— | YesWiki before 4.7.0 Stored XSS via filtertags Action Parameters YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes attacker-controlled token values without output encoding. Anonymous attackers can injec… |
2026-10-25 |
| CVE-2026-116202 | 5.1
CNA v4.0 |
NetworkLoginUser action
Scope change
C:NI:NA:N
|
— | YesWiki before 4.7.0 Stored XSS via ImageField SVG Upload YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users to upload unsanitized SVG files through the bazar ImageField class. Attackers ca… |
2026-10-25 |
| CVE-2026-116201 | 8.7
CNA v4.0 |
NetworkLoginNo interaction
C:HI:HA:H
|
— | Snipe-IT before 8.5.0 SAML Assertion Replay via Race Condition Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions by exploiting a non-atomic nonce check in the SAML acs handler. Attackers can se… |
2026-10-25 |
| CVE-2026-116200 | 8.2
CNA v4.0 |
NetworkNo authNo interactionConditions
C:HI:NA:N
|
— | Snipe-IT before 8.6.3 LDAP StartTLS Downgrade via connectToLdap() Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to force cleartext LDAP binds. Attackers can answer the StartTLS request with a pro… |
2026-10-25 |
| CVE-2026-116199 | 9.2
CNA v4.0 |
NetworkNo authNo interactionConditions
C:HI:HA:H
|
— | Snipe-IT before 8.6.3 Authentication Bypass via Google SSO Callback Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in the user whose username matches the Google account email without enforcing the acti… |
2026-10-25 |
| CVE-2026-116198 | 5.3
CNA v4.0 |
NetworkLoginNo interaction
C:NI:LA:N
|
— | Snipe-IT before 8.7.0 Missing Encryption via Api AssetsController store Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext into encrypted-flagged custom-field columns when callers lack assets.view.encrypt… |
2026-10-25 |
| CVE-2026-116197 | 2.1
CNA v4.0 |
AdjacentLoginNo interactionConditions
C:LI:NA:N
|
— | Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can prefer wildcard configuration entries over concrete domain matches. Whe… |
2026-10-25 |
| CVE-2026-116196 | 6.0
CNA v4.0 |
AdjacentNo authNo interactionConditions
C:HI:NA:N
|
— | Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url Rclone before v1.75.2 contains a credential exposure vulnerability in the b2 backend that leaks the live account Authorization token and SSE-C keys on HTTP redirects from --b2-download-url hosts. Atta… |
2026-10-25 |
| CVE-2026-116195 | 7.0
CNA v4.0 |
NetworkNo authUser actionConditions
Scope change
C:NI:HA:N
|
— | Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the .rclonelink suffix from a path after the containment check, so a name can re… |
2026-10-25 |
| CVE-2026-116194 | 7.6
CNA v4.0 |
NetworkNo authUser actionConditions
C:HI:HA:N
|
— | Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost OAuth callback, which disables the state check and trusts the hostname parameter.… |
2026-10-25 |
| CVE-2026-116193 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:LI:NA:N
|
— | Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated attackers skip authentication by sending OPTIONS requests. Attackers can prob… |
2026-10-25 |
| CVE-2026-116192 | 8.2
CNA v4.0 |
NetworkNo authNo interactionConditions
C:HI:NA:N
|
— | rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash r… |
2026-10-25 |
| CVE-2026-116190 | 6.3
CNA v4.0 |
NetworkNo authNo interactionConditions
C:LI:NA:N
|
— | rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards operator-configured custom credential headers to different hosts on HTTP 3xx red… |
2026-10-25 |
| CVE-2026-116189 | 7.7
CNA v4.0 |
NetworkNo authUser actionConditions
C:HI:HA:H
|
— | rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. Attackers contr… |
2026-10-25 |
| CVE-2026-116188 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:NI:NA:L
|
— | rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory accounting that bypasses the configured buffer limit. Attackers can open two concurr… |
2026-10-25 |
| CVE-2026-116187 | 6.1
CNA v4.0 |
NetworkLoginNo interactionConditions
C:HI:LA:L
|
— | Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads Rclone from v1.68.0 before v1.75.2 contains an authorization bypass vulnerability in serve s3 --auth-proxy that allows authenticated tenants to manipulate other tenants' multipart uploads by referenci… |
2026-10-25 |
| CVE-2026-116182 | 5.3
CNA v4.0 |
NetworkLoginNo interaction
Scope change
C:LI:NA:N
|
— | phpMyFAQ before 4.1.10 SSRF via PDF Export Image Fetching phpMyFAQ before 4.1.10 contains a server-side request forgery vulnerability in the PDF export feature that fetches external images referenced in FAQ answers. Attackers who can influence FAQ content ca… |
2026-10-25 |
| CVE-2026-116181 | 7.1
CNA v4.0 |
NetworkLoginNo interaction
C:NI:NA:H
|
— | vLLM 0.20.1 before 0.29.0 DoS and GPU Out-of-Bounds Write via stop_token_ids vLLM from 0.20.1 before 0.29.0 contains an improper input validation vulnerability that allows remote attackers to crash the engine by supplying out-of-vocabulary stop_token_ids. Attackers can send Op… |
2026-10-25 |
| CVE-2026-116180 | 8.3
CNA v4.0 |
NetworkLoginNo interaction
Scope change
C:NI:NA:H
|
— | vLLM from 0.8.5 before 0.31.0 Cross-Tenant DoS via Uninitialized LogprobsTensors vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates an uninitialized int32 tensor, and the V1 model runner leaves prompt positions r… |
2026-10-25 |
| CVE-2026-116179 | 8.7
CNA v4.0 |
NetworkNo authNo interaction
C:NI:NA:H
|
— | vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_io_kwargs num_frames Override vLLM from 0.18.0 before 0.31.0 contains a resource exhaustion vulnerability that allows API clients to bypass the video/jpeg frame-count cap by overriding num_frames through media_io_kwargs. Attackers… |
2026-10-25 |
| CVE-2026-116178 | 8.2
CNA v4.0 |
NetworkNo authNo interactionConditions
C:NI:NA:H
|
— | vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholders vLLM from 0.20.0 before 0.30.0 contains a denial of service vulnerability that allows remote attackers to crash the engine by sending inconsistent multimodal metadata to the disaggregated /inference/v… |
2026-10-25 |
| CVE-2026-116177 | 8.7
CNA v4.0 |
NetworkNo authNo interaction
C:NI:NA:H
|
— | vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypass vLLM from 0.10.2 before 0.25.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated attackers to exhaust memory because the Nemotron-VL processors globally set Image… |
2026-10-25 |
| CVE-2026-116176 | 8.8
CNA v4.0 |
NetworkNo authNo interaction
C:HI:NA:L
|
— | vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnector vLLM from 0.9.2 before 0.24.0 contains a server-side request forgery vulnerability that allows API callers to force outbound connections by embedding a decode address in the X-Request-Id header. Attac… |
2026-10-25 |
| CVE-2026-116175 | 7.1
CNA v4.0 |
NetworkLoginNo interaction
C:NI:NA:H
|
— | vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS via Chat Completions vLLM from 0.19.0 before 0.24.0 contains a decompression bomb vulnerability because the AudioMediaIO multimodal path calls load_audio without the max_duration_s decoded-duration limit. Authenticated at… |
2026-10-25 |
| CVE-2026-116174 | 8.2
CNA v4.0 |
NetworkNo authNo interactionConditions
C:NI:NA:H
|
— | vLLM 0.22.0 before 0.24.0 Denial of Service via Rust gRPC Generate vLLM from 0.22.0 before 0.24.0 contains an improper input validation vulnerability in the Rust gRPC Generate and GenerateStream service that forwards unchecked prompt token IDs to EngineCore. Attacker… |
2026-10-25 |
| CVE-2026-116173 | 8.2
CNA v4.0 |
NetworkNo authNo interactionConditions
C:NI:NA:H
|
— | vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_ids vLLM from 0.22.0 before 0.24.0 contains a denial of service vulnerability that allows remote attackers to terminate EngineCore by bypassing logprob_token_ids limits in the Rust gRPC frontend. Attacker… |
2026-10-25 |