CVE-2026-120513: wpeverest: The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is…

The Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder with AI plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the removecsvfileafteremailsend function in all versions up to, and including, 3.6.2 This makes it possible fo...

CVE-2026-84938: themefusion Avada (Fusion) Builder: The Avada (Fusion) Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Notification…

The Avada Fusion Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Notification Dynamic-Data actionhook → Media Upload Chain ID3 Metadata / htmlattributes in all versions up to, and including, 3.16.1 due to insufficient input sanitization and output escaping. This...

CVE-2026-123432: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-123431: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-123429: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-123424: Rejected reason: This CVE ID has been rejected as a duplicate.

Rejected reason: This CVE ID has been rejected as a duplicate...

CVE-2026-12963: Axis Communications AB: A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on…

A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on the server...

CVE-2026-117477: GMO Prime Strategy Co., Ltd.: KUSANAGI provided by GMO Prime Strategy Co., Ltd

KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL...

CVE-2026-106025: Unknown Cargo Shipping Location for WooCommerce: The Cargo Shipping Location for WooCommerce WordPress plugin before 6.0 does not properly restrict access to a REST API…

The Cargo Shipping Location for WooCommerce WordPress plugin before 6.0 does not properly restrict access to a REST API endpoint that updates order shipment statuses, relying on an attacker-controllable value for authorization, allowing unauthenticated users to manipulate order statuses and...

CVE-2026-125361: Tencent BrowserSkill: Tencent BrowserSkill through 0.4.2 contains a missing authentication vulnerability that allows local attackers to…

Tencent BrowserSkill through 0.4.2 contains a missing authentication vulnerability that allows local attackers to impersonate the bsk daemon because remoteSocket connects to the loopback WebSocket without credentials or peer verification. Attackers who bind the daemon port before it starts or aft...

CVE-2026-125368: YeQing17-2026 OmniAgent: OmniAgent through commit 12b98c5 contains an approval bypass vulnerability in ReflexionAgent._is_safe_bash_command that…

OmniAgent through commit 12b98c5 contains an approval bypass vulnerability in ReflexionAgent.issafebashcommand that treats any command starting with find as safe without inspecting -execdir arguments. Prompt-injected agents can run find with -execdir to invoke binaries like dd, nc, perl or openss...

CVE-2026-125389: Intermesh Group-Office: Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a stored cross-site scripting vulnerability in…

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a stored cross-site scripting vulnerability in the email viewer due to a flawed regex in StringHelper::filterXSS. Remote attackers can send emails containing tags like svg/onload, which MessagePanel.js renders raw, executing...

CVE-2026-89115: SAP_SE SAP Start Service and SAP Microsoft Management Console: SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection

SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection. An attacker with high privileges and local access could inspect the memory to recover credentials and reuse them for authentication. This results in a high impact on...

CVE-2026-120012: SAP_SE SAP Cloud SDK for AI(JavaScript): SAP Cloud SDK for AI (Node.js) could inadvertently include sensitive authentication credentials in error messages…

SAP Cloud SDK for AI Node.js could inadvertently include sensitive authentication credentials in error messages generated by certain internal operations under specific failure conditions. An attacker with low privileges and access to application logs or forwarded error output could obtain these...

CVE-2026-109804: SAP_SE SAP NetWeaver (SAP Message Server): SAP Message Server does not properly handle certain malformed requests, which could be leveraged by an unauthenticated…

SAP Message Server does not properly handle certain malformed requests, which could be leveraged by an unauthenticated attacker to send specially crafted input. Successful exploitation could allow the attacker to retrieve sensitive information, resulting in a high impact on confidentiality. There...

CVE-2026-125371: tinyproxy: Tinyproxy through 1.11.3 contains an access control bypass vulnerability in acl_string_processing() in src/acl.c that…

Tinyproxy through 1.11.3 contains an access control bypass vulnerability in aclstringprocessing in src/acl.c that compares only trailing hostname characters without checking DNS label boundaries. Attackers controlling the PTR record for their source IP, such as untrusted.net, can satisfy an 'Allo...

CVE-2026-125401: ettercap: Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gg_get_version() in src/dissectors/ec_gg.c…

Ettercap through 0.8.4.1 contains a heap buffer overflow vulnerability in gggetversion in src/dissectors/ecgg.c that writes up to 44 bytes into a 30-byte allocation. Remote attackers can send Gadu-Gadu traffic on TCP port 8074 with a crafted version field through a monitored network to corrupt he...

CVE-2026-125404: ettercap: Ettercap through 0.8.4.1 contains an integer underflow in ccmp_decrypt() in src/ec_encryption_ccmp.c that subtracts the…

Ettercap through 0.8.4.1 contains an integer underflow in ccmpdecrypt in src/ecencryptionccmp.c that subtracts the 8-byte CCMP trailer without checking minimum length. Attackers on a network whose WPA key is loaded can send a short crafted CCMP frame to overflow a stack buffer in the Ettercap...

CVE-2026-120295: nerves-hub nerves_hub_web: Incorrect Authorization vulnerability in the devices page bulk move in nerves-hub nerves_hub_web allows an…

Incorrect Authorization vulnerability in the devices page bulk move in nerves-hub nerveshubweb allows an authenticated user with the manage role in one organization and only the view role in another to move devices into the second organization's product via the "Move devices to product" action. T...

CVE-2026-125362: haiwen seahub: Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch…

Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post that generates batch share link passwords using Python's non-cryptographic random.choices. Authenticated users permitted to create share links can request many generated passwords via the multi-share-link...

CVE-2026-125365: harung1993 dollardollar: DollarDollar through 4.4 contains a missing authorization vulnerability in add_expense() that allows authenticated…

DollarDollar through 4.4 contains a missing authorization vulnerability in addexpense that allows authenticated users to modify other users' account balances by supplying foreign accountid values. Attackers can submit sequential accountid, destinationaccountid, and groupid values to /addexpense t...

CVE-2026-125378: PowerDNS-Admin: PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for…

PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the applyrecords handler for /admin/template/...

CVE-2026-107240: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…

The Node.js web service on VOS previously Versa FlexVNF is used for URL-based Zero Touch Provisioning ZTP of the VOS appliance and is not required after provisioning is complete. The /authenticate endpoint of this service passes user-supplied username and password values to childprocess.exec...

CVE-2026-119273: Unknown BulletProof Security: The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent…

The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent sensitive authentication material from being written to them, relying on access controls that are not enforced under all common web-server configurations, allowing unauthenticated...

CVE-2026-124601: GeoVision Inc. GV-Access: An API key is hardcoded and retrievable from the GV-Access package

An API key is hardcoded and retrievable from the GV-Access package. Since Android applications can be reverse engineered, embedding sensitive API credentials directly in the client application may allow unauthorized users to extract and misuse the key...

CVE-2026-120009: SAP_SE SAP ABAP Developer Tools (AMDP Data Preview): SAP ABAP Developer Tools (AMDP Data Preview) does not perform sufficient validation and authorization checks within…

SAP ABAP Developer Tools AMDP Data Preview does not perform sufficient validation and authorization checks within certain affected functionality. An attacker with high privileges could submit specially crafted input to inject and execute arbitrary code on the system. Successful exploitation could...

CVE-2026-125079: D-Link DCS-6501LH: A vulnerability was determined in D-Link DCS-6501LH 3.03.02

A vulnerability was determined in D-Link DCS-6501LH 3.03.02. This impacts the function pfgetonvifuserpwd/mydlinkdefaultsysinfo of the file /mnt/conf/SystemConfig.ini of the component Media Service. This manipulation of the argument pincode causes hard-coded credentials. It is possible to initiate...

CVE-2026-125086: D-Link M60: A vulnerability has been found in D-Link M60 1.12.B01

A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf of the component emDaemon MQTT Broker. Such manipulation leads to hard-coded credentials. The attack can be executed remotely. The exploit has been disclosed to the publ...

CVE-2026-13312: Axis Communications AB: A vulnerability that could allow an attacker to compromise a system.

A vulnerability that could allow an attacker to compromise a system...

CVE-2026-13387: Axis Communications AB AXIS Camera Station Pro: A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected…

A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected to unintended external content under specific conditions...

CVE-2026-125388: Intermesh Group-Office: Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows…

Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows authenticated users to download form reports via api/download.php without permission checks. Attackers can request the business/forms/report blob with a form ID to export every...

CVE-2026-88707: ASUS Router firmware: An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request…

An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request containing parameters that exceed the buffer length, potentially overwriting other memory regions or causing the system to crash. Refer to the ' Security Update for ASUS Router...

CVE-2026-88708: ASUS Router firmware: An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a…

An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a specific header length, potentially overwriting memory and causing the affected service to crash. Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Securit...

CVE-2026-89128: SAP_SE SAP NetWeaver AS Java (Process Integration Test Tool): Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP…

Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP operations exposed over HTTP without proper access control. Successful exploitation could allow disclosure of information accessible through the affected service, resulting in a low impac...

CVE-2026-91761: Hitachi Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux

UNIX Symbolic Link Symlink Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.6.2.-00 before 9.0.5-00...

CVE-2026-91762: Hitachi Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux

UNIX Symbolic Link Symlink Following Vulnerability in Hitachi Dynamic Link Manager for Linux. This issue affects Hitachi Dynamic Link Manager for Linux: from 8.5.3.-00 before 9.0.5-00...

CVE-2026-91757: Hitachi Hitachi Dynamic Link Manager for VMware: OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware

OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware. This issue affects Hitachi Dynamic Link Manager for VMware: from 7.3.0-00 before 9.0.4-01...

CVE-2026-76973: SAP_SE SAP NetWeaver and ABAP Platform (SAP Message Server): Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an…

Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an unauthenticated attacker could send specially crafted network requests to the affected service. By triggering the vulnerability, the attacker could cause the server to crash and disrupt acti...

CVE-2026-8372: Axis Communications AB AXIS Camera Station Pro: A vulnerability that could allow an attacker to gain unauthorized access.

A vulnerability that could allow an attacker to gain unauthorized access...

CVE-2026-4762: Axis Communications AB AXIS Camera Station Pro: A vulnerability to perform a privilege escalation attack on the server as a non-admin user.

A vulnerability to perform a privilege escalation attack on the server as a non-admin user...

CVE-2026-86579: Hitachi Hitachi Dynamic Link Manager for Windows: Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows

Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01...

CVE-2026-109798: SAP_SE SAP BusinessObjects Business Intelligence Platform (Web Intelligence): SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity…

SAP BusinessObjects Business Intelligence Platform Web Intelligence does not properly restrict external entity resolution when processing OLAP connection requests. An authenticated attacker could exploit this vulnerability to access restricted resources, enabling them to read sensitive files on t...

CVE-2026-109793: SAP_SE SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher: SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values…

SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values processed during inbound request handling. An unauthenticated attacker could send a specially crafted request to cause the affected process to become unavailable.This results in a high...

CVE-2026-109801: SAP_SE SAP NetWeaver Application Server Java (NWDI Cockpit): SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain…

SAP NetWeaver Application Server Java NWDI Cockpit� does not perform sufficient authorization checks for certain functionality that retrieves sensitive information. An attacker with low privileges could send a specially crafted request to access sensitive information belonging to other system...

CVE-2026-60045: MB connect line, Helmholz: A high privileged remote attacker can upload arbitrary files to a guessable location

A high privileged remote attacker can upload arbitrary files to a guessable location. This can result in a loss of availability and might be chained with other vulnerabilities...

CVE-2026-123178: NETGEAR: An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated…

An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected...

WordPress Plugin: armember: CVE-2026-93427: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Registration Custom Field Profile Cover in all versions up to, and including, 7.8.1 due to insufficient input sanitization...

CVE-2026-101275: pretix pretix-adyen: Our payment integration with Adyen did not properly validate payment status responses

Our payment integration with Adyen did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment...

CVE-2026-12266: Zohocorp DDI Central: Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to LDAP bind password exposure through…

Zoho Corporation ManageEngine DDI Central versions 6200 and below are vulnerable to LDAP bind password exposure through insufficiently protected LDAP settings API...

CVE-2026-125750: Firekylin: Firekylin through 2.18.1 contains an improper authorization vulnerability that allows editor-role users to read…

Firekylin through 2.18.1 contains an improper authorization vulnerability that allows editor-role users to read administrator-only secrets because the admin API base guard permits all GET actions. Editors can query options.js for TOTP secrets, push credentials, and cloud storage keys, or user.js...