415043CVEs tracked
4582Last 7 days
16022Last 30 days
1756CISA KEV
Published CVEs
CRITICALHIGHMEDIUMLOWUnscored
96733 CVEs in this period · counted 2026-10-25 14:13 UTC, refreshed hourly
Recently published CVEs
4582 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-116052 | 5.3
CNA v4.0 |
NetworkNo authUser action
C:NI:LA:N
|
— | LinkStackOrg LinkStack cross-site request forgery A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.8. The affected element is an unknown function. Performing a manipulation results in cross-site request forgery. Remote exploita… |
2026-10-25 |
| CVE-2026-116137 | 6.3
CNA v4.0 |
NetworkNo authNo interactionConditions
C:NI:LA:N
|
— | adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() check by using canonically equivalent entry names like './hello.txt' and 'hello.txt'… |
2026-10-25 |
| CVE-2026-116136 | 6.0
CNA v4.0 |
NetworkLoginNo interactionConditions
C:HI:LA:N
|
— | ProjectSend 2.0.0 through 2.7.1 Incorrect Authorization via File Version Linking ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows staff users to share files without authorization by linking file versions. Attack… |
2026-10-25 |
| CVE-2026-116073 | 6.9
CNA v4.0 |
NetworkNo authActive action
C:NI:HA:N
|
— | Leon before commit 50df142 Path Traversal via /download model Command Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers to write files outside the models directory via percent-encoded separators. Attack… |
2026-10-25 |
| CVE-2026-116072 | 5.3
CNA v4.0 |
NetworkNo authUser action
C:LI:LA:N
|
— | Infinity for Reddit through 8.3.4 OAuth Login CSRF via LoginChromeCustomTabActivity Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCus… |
2026-10-25 |
| CVE-2026-116071 | 8.2
CNA v4.0 |
NetworkNo authNo interactionConditions
C:HI:NA:N
|
— | rotki before 1.44.2 Weak Key Derivation for Premium Cloud Backup Encryption rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because the premium sync key is a single unsalted SHA-256 of the user password. Attackers … |
2026-10-25 |
| CVE-2026-116070 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:LI:LA:N
|
— | Docker-Proxy through 5.1.9 Missing Authentication via hubcmdui /api/config Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config. A… |
2026-10-25 |
| CVE-2026-116069 | 6.9
CNA v4.0 |
NetworkNo authNo interaction
C:LI:LA:N
|
— | NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value… |
2026-10-25 |
| CVE-2026-116068 | 8.7
CNA v4.0 |
NetworkLoginNo interaction
C:HI:HA:H
|
— | Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Route… Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values… |
2026-10-25 |
| CVE-2026-116067 | 8.8
CNA v4.0 |
NetworkNo authNo interaction
C:HI:LA:N
|
— | Paisa before 0.7.8 Path Traversal via Editor and Sheet API Paisa before 0.7.8 contains a path traversal vulnerability in the GetFile, GetSheet, DeleteBackups, and DeleteSheetBackups handlers that lets unauthenticated attackers read files and delete backups th… |
2026-10-25 |
| CVE-2026-116066 | 7.0
CNA v4.0 |
NetworkNo authNo interactionConditions
Scope change
C:LI:NA:N
|
— | Firecrawl before 2.11.586 SSRF Protection Bypass via DNS Rebinding in Playwright Service Firecrawl before 2.11.586 contains a server-side request forgery vulnerability in the Playwright service SSRF proxy that allows attackers to bypass isInternalHost checks via DNS rebinding. Attackers c… |
2026-10-25 |
| CVE-2026-116050 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | krupalshah Employee Recruitment System Registration registerform3.php sql injection A vulnerability has been found in krupalshah Employee Recruitment System up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. This affects an unknown part of the file /source/registerform3.php of the compo… |
2026-10-25 |
| CVE-2026-116049 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | krupalshah EmployeeRecruitmentSystem Registration Wizard registerform2.php mysql_query sql… A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this issue is the function mysql_query of the file /source/registerform2.php o… |
2026-10-25 |
| CVE-2026-116048 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | krupalshah EmployeeRecruitmentSystem Registration registerform1.php mysql_query sql inject… A vulnerability was detected in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql_query of the file /source/regi… |
2026-10-25 |
| CVE-2026-116047 | 4.3
CNA (via NVD) v3.1 |
NetworkNo authUser action
PoC
C:NI:LA:N
|
— | Privoce Vocechat Query Parameter widget.html cross site scripting A vulnerability has been found in Privoce Vocechat up to 0.9.121. This issue affects some unknown processing of the file widget.html of the component Query Parameter Handler. Such manipulation of the … |
2026-10-25 |
| CVE-2026-116046 | 5.3
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:LI:LA:L
|
— | eventcatalog sdk Custom Documentation Helpers custom-docs.ts rmCustomDoc path traversal A flaw has been found in eventcatalog sdk up to 2.29.0. This vulnerability affects the function getCustomDoc/writeCustomDoc/rmCustomDoc of the file packages/sdk/src/custom-docs.ts of the component Cus… |
2026-10-25 |
| CVE-2026-116045 | 4.3
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
PoC
C:LI:NA:N
|
— | 1999AZZAR designer-mcp MCP motion-dev-guidelines.md get_reference path traversal A vulnerability was detected in 1999AZZAR designer-mcp up to 2.1.0. This affects the function get_reference of the file skills/motion-designer/references/motion-dev-guidelines.md of the component MCP … |
2026-10-25 |
| CVE-2026-94295 | — | Not scored | — | Chikkili Google Pay for WooCommerce <= 1.0.6 - Unauthenticated Payment Confirmation Forger… The Chikkili- Google Pay India for Woocommerce WordPress plugin through 1.0.6 does not verify that a payment notification actually originated from the payment provider before marking the associated or… |
2026-10-25 |
| CVE-2026-116044 | 6.3
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
PoC
C:LI:LA:L
|
— | prasathmani TinyFileManager Remote URL File Upload tinyfilemanager.php unrestricted upload A security vulnerability has been detected in prasathmani TinyFileManager up to 2.6. Affected by this issue is some unknown functionality of the file tinyfilemanager.php of the component Remote URL Fi… |
2026-10-25 |
| CVE-2026-115251 | — | Not scored | — | Duplicator 1.5.17 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via One-Click… The Duplicator WordPress plugin before 5.0.0 does not restrict its one-click upgrade routine to users allowed to install Duplicator WordPress plugin before 5.0.0, and additionally exposes the routin… |
2026-10-25 |
| CVE-2026-115214 | — | Not scored | — | Datawiza Proxy Auth Plugin 1.1.0 - Unauthenticated Privilege Escalation via X-User and Rol… The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity and role HTTP request headers it trusts originate from a trusted reverse proxy, allowing unauthenti… |
2026-10-25 |
| CVE-2026-115183 | — | Not scored | — | Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget The Qi Addons For Elementor WordPress plugin before 1.11.2 does not properly sanitise a widget's heading text after decoding HTML entities in it, allowing users with the Contributor role and above to … |
2026-10-25 |
| CVE-2026-114743 | — | Not scored | — | InstaWP Connect < 0.1.4.2 - Authenticated Plugin Settings Update via instawp_update_settin… The InstaWP Connect WordPress plugin before 0.1.4.2 does not perform a capability check on its InstaWP Connect WordPress plugin before 0.1.4.2-settings update action, verifying only a nonce, allowin… |
2026-10-25 |
| CVE-2026-114742 | — | Not scored | — | WP VR 8.3.0 - 9.0.2 - Contributor+ Arbitrary Tour Update via IDOR The WPVR WordPress plugin before 9.0.3 does not perform object-level ownership checks when updating virtual tours, allowing users with contributor-level access and above to modify, reconfigure and pu… |
2026-10-25 |
| CVE-2026-114741 | — | Not scored | — | WP VR 9.0.0 - 9.0.2 - Contributor+ Arbitrary Tour Update and Disclosure via IDOR The WPVR WordPress plugin before 9.0.3 does not perform object-level authorization checks when reading and updating virtual tours, allowing users with contributor-level access and above to read and m… |
2026-10-25 |
| CVE-2026-114740 | — | Not scored | — | WP VR 8.5.55 - 9.1.2 - Contributor+ Arbitrary Tour Creation and Publishing via Setup Wizar… The WPVR WordPress plugin before 9.1.3 does not correctly check user capabilities when creating a tour through its setup wizard, allowing users with the Contributor role and above to create and publi… |
2026-10-25 |
| CVE-2026-111981 | — | Not scored | — | GiveWP < 4.19.0.1 - Authenticated Arbitrary Donor Address Modification via donor_manage_ad… The GiveWP WordPress plugin before 4.19.0.1 does not perform a capability check when handling donor address changes, allowing users who have been granted donor-report (view) access but not donor-edit… |
2026-10-25 |
| CVE-2026-111980 | — | Not scored | — | GiveWP < 4.19.0.1 - Give Worker+ Arbitrary Page Modification via Campaign Page Capability … The GiveWP WordPress plugin before 4.19.0.1 does not correctly determine which page a page-capability request applies to, allowing users with a custom fundraising role to edit, publish and read pages… |
2026-10-25 |
| CVE-2026-111979 | — | Not scored | — | GiveWP < 4.19.0.1 - Give Worker+ Stored XSS via Form Template Primary Color The GiveWP WordPress plugin before 4.19.0.1 does not properly sanitise and escape one of its donation form template settings before outputting it inside an HTML attribute, allowing users with a custo… |
2026-10-25 |
| CVE-2026-111978 | — | Not scored | — | GiveWP < 4.19.0.1 - Give Manager+ Path Traversal via Core Settings Import The GiveWP WordPress plugin before 4.19.0.1 does not properly validate a user-supplied filename before reading it from disk, allowing users with a high-privilege custom role to perform path traversal… |
2026-10-25 |
| CVE-2026-111976 | — | Not scored | — | GiveWP < 4.19.0.1 - Unauthenticated Unpublished Donation Form Disclosure via Form View Rou… The GiveWP WordPress plugin before 4.19.0.1 does not perform any status or capability check when rendering a donation form on a public front-end route, allowing unauthenticated visitors to view the c… |
2026-10-25 |
| CVE-2026-110285 | — | Not scored | — | WP Stripe Checkout < 1.2.2.62 - Unauthenticated Forged Payment Completion via an Unset Web… The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing secret is configured, which is its default state, allowing unauthenticated attacker… |
2026-10-25 |
| CVE-2025-15705 | — | Not scored | — | Contact Form by Supsystic < 1.8.0 - Admin+ Stored XSS The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users with access to the form editor to inject arbitrary web scripts that execute when a… |
2026-10-25 |
| CVE-2026-116007 | 3.7
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
PoC
C:LI:NA:N
|
— | YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeSe… A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The impacted element is the function SmsCodeServiceImpl.validateSmsCode0 of the file /service/sms/SmsCodeServiceImpl.java of … |
2026-10-25 |
| CVE-2026-116006 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification AuthController.java improper auth… A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an unknown function of the file AuthController.java of the component SMS Code Verification. Th… |
2026-10-25 |
| CVE-2026-116004 | 3.5
CNA (via NVD) v3.1 |
NetworkLoginUser action
PoC
C:NI:LA:N
|
— | onyx-dot-app Onyx PreviewTab.tsx cross site scripting A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation lead… |
2026-10-25 |
| CVE-2026-116000 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:LI:LA:L
|
— | Zylon PrivateGPT URI Artifact Loader uri_loader.py load_file_from_uri server-side request … A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.1. This vulnerability affects the function load_file_from_uri of the file private_gpt/server/ingest/uri_loader.py of the component URI… |
2026-10-25 |
| CVE-2026-115999 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:L
|
— | mansi-k Restaurant_IMS lsmodal.php mysqli_connect sql injection A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde0694. Affected is the function mysqli_connect of the file lsmodal.php. The manipulation of the argument log… |
2026-10-25 |
| CVE-2026-115997 | 6.3
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
PoC
C:LI:LA:L
|
— | pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection A flaw has been found in pig-mesh pig up to 4.1.0. This impacts the function orderItem.getColumn of the file pig-common/pig-common-data/src/main/java/com/pig4cloud/pig/common/data/resolver/SqlFilterAr… |
2026-10-25 |
| CVE-2026-89284 REJECTED | — | Not scored | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-24 |
| CVE-2026-115996 | 3.7
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:NI:LA:N
|
— | Unitree Robotics Unitree Go2 chat_go websocket.py WebSocketClient.connect certificate vali… A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function WebSocketClient.connect of the file websocket.py of the component chat_go. Perfor… |
2026-10-24 |
| CVE-2026-115995 | 9.6
CNA (via NVD) v3.1 |
NetworkNo authUser action
Scope change
C:HI:HA:H
|
— | Unitree Robotics Unitree Go2 chat_go gpt_thread.py set_volume os command injection A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the function set_volume of the file gpt_thread.py of the component chat_go. Such mani… |
2026-10-24 |
| CVE-2026-111326 REJECTED | — | Not scored | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-24 |
| CVE-2026-109111 REJECTED | — | Not scored | — | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. | 2026-10-24 |
| CVE-2026-115982 | 4.3
CNA (via NVD) v3.1 |
NetworkNo authUser action
PoC
C:NI:LA:N
|
— | phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file app/tools/racks/show-rack-popup.php of the component Rack Link Creation. Perfor… |
2026-10-24 |
| CVE-2026-115981 | 2.4
CNA (via NVD) v3.1 |
NetworkAdminUser action
PoC
C:NI:LA:N
|
— | phpIPAM index.php cross site scripting A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown functionality of the file upgrade/index.php. Such manipulation of the argument REQUEST_U… |
2026-10-24 |
| CVE-2026-115973 | 7.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:L
|
— | FaveoSuite Faveo Helpdesk ForgotPasswordController.php reset password recovery A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPasswordController::sendResetLinkEmail/PasswordController::reset of the file app/Http/Co… |
2026-10-24 |
| CVE-2026-114820 | 9.1
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:N
|
— | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u… | 2026-10-24 |
| CVE-2026-115972 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:LA:N
|
— | FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorization A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function UnAuthController.changeStatus/UnAuthController.close/UnAuthController.open/UnAut… |
2026-10-24 |
| CVE-2026-115971 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
PoC
C:NI:NA:L
|
— | Travisun Opptrix preParsing handler webhook Buffer.concat denial of service A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/webhook/ of the component preParsing handler. Performing a manipulation results in… |
2026-10-24 |