CVE-2026-39745: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

CVE-2026-32570: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Progressify - Progressive Web App PWA = 1.6.0 versions...

CVE-2026-25267: Missing Authorization

Memory corruption when non-secure loader rewrites page tables before secure memory initialization...

CVE-2026-25269: Out-of-bounds Write

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size...

CVE-2026-104385: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Groundhogg = 4.8.3 versions...

CVE-2026-102156: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Improper neutralization of Lightweight Directory Access Protocol LDAP authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service...

CVE-2026-104757: Incorrect Privilege Assignment

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

CVE-2026-25274: Use After Free

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization...

CVE-2026-57555: Use After Free

Memory Corruption when executing system service routines due to improper handling of user input buffers...

CVE-2026-25272: Out-of-bounds Write

Memory Corruption when processing camera CRE driver operations with improper handling of buffer limits during hardware update preparation...

CVE-2026-104395: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in picu = 3.10.1 versions...

CVE-2026-101150: Server-Side Request Forgery (SSRF)

Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations...

CVE-2026-32575: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in SUMO Affiliates Pro = 11.7.0 versions...

CVE-2025-8352: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling vulnerability in ESET PROTECT On-Prem increased resource consumption CPU and RAM, leading to conditions for a Denial-of-Service attack...

CVE-2026-41562: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in Norvis Backup = 1.1.0 versions...

CVE-2026-39790: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in e4jvikwp VikRentCar vikrentcar allows Reflected XSS.This issue affects VikRentCar: from n/a through 1.4.7...

CVE-2026-57546: Buffer Over-read

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

CVE-2026-55330: Use After Free

In BluetoothCccHandlerCallbackImpl of bluetoothccc.cc, there is a possible use-after-free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-25302: Improper Verification of Cryptographic Signature

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

CVE-2026-98334: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: reset state when starting AP fails ieee80211startap can set enablebeacon and beaconint and fail later, leaving it set forever. Scanning can then attempt to restore beaconing on such an interface, leading to: Oops:...