EUVD-2026-1759

This vulnerability exists in Tenda wireless routers 300Mbps Wireless Router F3 and N300 Easy Setup Router due to the plaintext transmission of login credentials during the initial login or post-factory reset setup through the web-based administrative interface. An attacker on the same network cou...

EUVD-2026-1763

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.3 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could have allowed a user to leak certain information by referencing specially crafted images that bypass asset proxy protection...

EUVD-2026-1723

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via a crafted HTTP request...

EUVD-2026-1522

Server-Side Request Forgery SSRF vulnerability in nK nK Themes Helper nk-themes-helper allows Server Side Request Forgery.This issue affects nK Themes Helper: from n/a through = 1.7.9...

EUVD-2026-1547

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeMove Mitech mitech allows PHP Local File Inclusion.This issue affects Mitech: from n/a through = 2.3.4...

EUVD-2026-1555

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in THEMELOGI Navian navian allows PHP Local File Inclusion.This issue affects Navian: from n/a through = 1.5.4...

EUVD-2026-1165

Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files .bfmemo during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with images without validation, integrity...

EUVD-2026-1217

EUVD-2026-1217...

EUVD-2026-1254

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in JanStudio Gecko allows PHP Local File Inclusion.This issue affects Gecko: from n/a through 1.9.8...

EUVD-2026-1338

The aBlocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data and disclosure of sensitive information due to missing capability checks on multiple AJAX actions in all versions up to, and including, 2.4.0. This makes it possible for authenticated...

EUVD-2026-0985

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Themepoints Accordion accordions-wp allows Stored XSS.This issue affects Accordion: from n/a through = 3.0.3...

EUVD-2026-1008

A weakness has been identified in Tenda AC23 16.03.07.52. This affects the function sscanf of the file /goform/PowerSaveSet. Executing a manipulation of the argument Time can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could ...

EUVD-2026-0784

EUVD-2026-0784...

EUVD-2026-0078

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0189

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0217

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0222

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0284

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0321

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

EUVD-2026-0346

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...