CVE-2026-125365: harung1993 dollardollar: DollarDollar through 4.4 contains a missing authorization vulnerability in add_expense() that allows authenticated…

DollarDollar through 4.4 contains a missing authorization vulnerability in addexpense that allows authenticated users to modify other users' account balances by supplying foreign accountid values. Attackers can submit sequential accountid, destinationaccountid, and groupid values to /addexpense t...

CVE-2026-125378: PowerDNS-Admin: PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for…

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the applyrecords handler for /admin/template/...

CVE-2026-125401: ettercap: Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c…

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gggetversion in src/dissectors/ecgg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt he...

CVE-2026-89126: SAP_SE SAP Web Dispatcher: SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component

SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the...

CVE-2026-76965: SAP_SE SAP NetWeaver and ABAP Platform: SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain…

SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful...

CVE-2026-125394: FreeRDP: FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in update_gdi_patblt(), update_gdi_polygon_cb() and…

FreeRDP before 3.33.0 contains a heap use-after-free vulnerability in updategdipatblt, updategdipolygoncb and updategdimem3blt that retain stale brush cache pointers. A malicious RDP server can resend CACHEBRUSH to the same slot then send PATBLT, causing clients to read freed heap memory,...

CVE-2026-123439: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-123438: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-123437: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-123430: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-123425: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-110516: Unknown All in One Addons For WPBakery Page Builder (formerly Visual Composer): The All in One Addons For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2 does not…

The All in One Addons For WPBakery Page Builder formerly Visual Composer WordPress plugin through 1.2 does not validate a shortcode attribute before using it to build a file path that is included and executed, which could allow users with the contributor role and above to include and execute...

CVE-2026-112125: Hitachi HA Monitor: Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor

Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor. This issue affects HA Monitor: from 01-00 before 01-83-01...

CVE-2026-109796: SAP_SE SAP NetWeaver and ABAP Platform: SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal…

SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal components. Under certain condition, an attacker with low privileges could disclose uninitialized memory contents under specific conditions. This results in a low impact on...

CVE-2026-109794: SAP_SE: SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource…

SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource consumption when processing certain requests. An unauthenticated attacker could send specially crafted requests to the affected component, causing excessive resource utilization and...

CVE-2026-109805: SAP_SE SAP NetWeaver and ABAP Platform (Application Server ABAP): Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform…

Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform Application Server ABAP, an authenticated attacker with high privileges and access to a network segment between application servers on an SAP system could intercept network communication...

CVE-2026-109806: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request containing malformed image data, triggering an integer overflow that leads to repeated termination of the worker...

CVE-2026-109807: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request causing the affected process to read beyond the declared values, resulting in repeated termination of the worker...

CVE-2026-109808: SAP_SE SAP Solution Tools Plug-In (ST-PI): Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an…

Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an authenticated attacker to invoke this functionality to access data that would otherwise be restricted. Exploitation is only possible under certain conditions, as the attacker must ha...

CVE-2026-109800: SAP_SE SAP Web Dispatcher: SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory…

SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory corruption. An attacker authenticated as a non-administrative user could exploit this vulnerability by providing specially crafted input, causing the Web Dispatcher process to terminate...

CVE-2026-107241: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…

The Node.js web service on VOS previously Versa FlexVNF is used for URL-based Zero Touch Provisioning ZTP of the VOS appliance and is not required after provisioning is complete. This service authenticates users and administrators to its web interface during initial provisioning using default...

CVE-2026-124598: GeoVision Inc. GV-Face: An API key is hardcoded and retrievable from the GV-Face package

An API key is hardcoded and retrievable from the GV-Face package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-120010: SAP_SE SAP NetWeaver Application Server (SAP Message Server): SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain…

SAP NetWeaver Application Server SAP Message Server does not properly size memory allocations when handling certain HTTP requests. An unauthenticated attacker could send a specially crafted request to trigger a heap buffer overflow in affected functionality. Successful exploitation causes the...

CVE-2026-120015: SAP_SE SAP Host Agent: SAP Host Agent does not sufficiently validate certain inputs

SAP Host Agent does not sufficiently validate certain inputs. Under certain condition, an attacker with low privileges could abuse the affected functionality to influence an internal component into loading a malicious file under a privileged account. Successful exploitation could lead to persiste...

CVE-2026-120008: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests

SAP NetWeaver Internet Graphics Service does not sufficiently validate certain input values within incoming requests. An unauthenticated user could send a specially crafted request to trigger an out-of-bounds memory write in a worker process. Successful exploitation could result in memory...

CVE-2026-125076: SourceCodester Smart Attendance System with QR Code Scanner: A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected is an unknown function of the file api/attendancehandler.php of the component JSON Endpoint. Performing a manipulation of the argument studentcode results in missing authentication. It is possib...

CVE-2026-125078: SourceCodester Smart Attendance System with QR Code Scanner: A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.0

A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This affects an unknown part of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has been released to the public and may be us...

CVE-2026-125087: Michael-A-Kuykendall Shimmy: A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4

A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.4. The affected element is an unknown function of the file src/server.rs of the component Inference API. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. Upgrading to...

CVE-2026-107242: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…

The Node.js web service on VOS previously Versa FlexVNF is used for URL-based Zero Touch Provisioning ZTP of the VOS appliance and is not required after provisioning is complete. This service generates session identifiers using UUID version 1 UUIDv1, which is derived from the system’s date and ti...

CVE-2026-124604: GeoVision Inc. GV-Cloud: The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application…

The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application package. Because Android applications can be extracted and reverse engineered, storing private cryptographic keys directly inside the client application may allow an attacker to...

CVE-2026-115646: Hitachi: Partial String Comparison Vulnerability in HiRDB

Partial String Comparison Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-50-06 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-50-/F through 09-66/V; HiRDB Server Version 932: from 09-50-06...

CVE-2026-125397: nocobase: NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee()…

NocoBase plugin-ai 2.1.0 through 2.2.41 contains an authorization bypass vulnerability in getAccessibleAIEmployee that lets authenticated users access unassigned AI employees by overriding the role-derived filter with a supplied username. Attackers can use the dispatch-sub-agent-task tool to run...

CVE-2026-125392: webmin: Webmin through 2.670 contains a stored cross-site scripting vulnerability in bind8/edit_recs.cgi that outputs raw DNS…

Webmin through 2.670 contains a stored cross-site scripting vulnerability in bind8/editrecs.cgi that outputs raw DNS record values without HTML escaping in ALL view mode. Delegated zone users such as Virtualmin domain owners can store record values containing script that executes in an...

CVE-2026-125393: MailEnable MailEnable Enterprise Premium: MailEnable Enterprise Premium before 10.62 contains a heap overflow vulnerability in the IMAP X-FB-FETCH command that…

MailEnable Enterprise Premium before 10.62 contains a heap overflow vulnerability in the IMAP X-FB-FETCH command that allows authenticated users to overflow a fixed 0x400-byte heap buffer. Attackers can supply an X-FB-USER address longer than about 1016 bytes, which is formatted without a length...

CVE-2026-125369: fsinfuhh Bitpoll: Bitpoll through 0.11.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers…

Bitpoll through 0.11.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to read votes and comments from other polls via unscoped object lookups in views.py. Attackers can pair any public poll slug with sequential vote or comment IDs in vote,...

CVE-2026-125374: krayin laravel-crm: Krayin CRM before 2.2.8 contains a broken object level authorization vulnerability in Lead TagController attach and…

Krayin CRM before 2.2.8 contains a broken object level authorization vulnerability in Lead TagController attach and detach actions that skip the data-scope check. Authenticated users restricted to individual or group data scope can add or remove tags on leads owned by users outside their scope...

CVE-2026-14543: Axis Communications AB AXIS OS: The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting…

The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account...

CVE-2026-13409: Axis Communications AB AXIS OS: The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality

The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account...

CVE-2026-14542: Axis Communications AB AXIS OS: The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation

The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an admin-privileged service account...

CVE-2026-63282: Axis Communications AB AXIS OS: Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which…

Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege escalation...

CVE-2026-89129: SAP_SE SAP NetWeaver AS Java (Web Services): Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated…

Due to a Server-Side Request Forgery SSRF vulnerability in SAP NetWeaver AS Java Web Services, an unauthenticated attacker could craft a SOAP request that causes the server to return a SOAP fault to a URL under the attacker�s control. Successful exploitation could allow the attacker to disclose...

CVE-2026-88710: ASUS Router firmware: Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an…

Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an unauthenticated nearby user to trigger a chain of actions—unauthenticated queries, identifier guessing, credential overwriting, and command injection—resulting in the execution of arbitrary...

CVE-2026-89119: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient…

SAP Web Dispatcher and SAP NetWeaver Application Server ABAP Internet Communication Manager do not perform sufficient request validation in certain administrative functionality. In the context of Application Server ABAP and SAP Web Dispatcher, an unauthenticated attacker could trick a logged-on...

CVE-2026-89125: SAP_SE SAP Web Dispatcher and Internet Communication Manager: Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker…

Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker with administrative privileges could obtain sensitive information from stored data. This may allow correlation of credentials across users and deployments, potentially leading to...

CVE-2026-91760: Hitachi Hitachi Dynamic Link Manager for Linux: Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux

Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00...

CVE-2026-91764: Hitachi Hitachi Dynamic Link Manager for Linux: Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux

Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 6.1.1.-00 before 9.0.5-00...

CVE-2026-93427: armember: The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for…

The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Registration Custom Field Profile Cover in all versions up to, and including, 7.8.1 due to insufficient input sanitization...

CVE-2026-91758: Hitachi Hitachi Dynamic Link Manager for Linux: Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux

Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 7.5.0-00 before 9.0.5-00...

CVE-2026-91754: Hitachi Hitachi Dynamic Link Manager for VMware: Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware

Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 8.7.3-00 before 9.0.4-01...

CVE-2026-125652: Red Hat: A flaw was found in the keycloak-services component of Keycloak, which provides the core authentication and…

A flaw was found in the keycloak-services component of Keycloak, which provides the core authentication and authorization logic for the identity provider. The issue occurs when a user initiates a login after visiting the password reset page, causing the system to skip mandatory security checks fo...