9.8 CVE-2026-19632
The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is...

7.6 CVE-2026-29988
A cleartext transmission of sensitive information vulnerability in the NFC interface of multiple Milesight...

CVE-2026-52776
Compliance-trestle (Trestle) is a tooling platform for managing compliance as code. In versions before...

7 CVE-2026-54467
On the Trusted Firmware-M (TF-M) 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on...

7.8 CVE-2026-57170
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents....

7.7 CVE-2026-57171
Compliance-trestle (Trestle) is a Python SDK and command-line tool for managing OSCAL compliance documents....

7.8 CVE-2026-58089
When a process calls execve(2) to execute a setuid or setgid image, hwpmc(4) is supposed to detach PMCs...

7.8 CVE-2026-58090
The SOCK_STREAM receive path in the unix socket implementation failed to fully detach control messages...

7.8 CVE-2026-58091
The implementation of this ioctl attempts to acquire locks on all channels in a sync group. If locking...

5.4 CVE-2026-58092
In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary...

CVE-2026-73335
Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom...

CVE-2026-76148
CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the...

CVE-2026-76149
CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to...

6.5 CVE-2026-80189
LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir...

7.5 CVE-2026-80191
GROWI applies its page-viewer permission check to attachment requests only when the request carries...

8.1 CVE-2026-80192
@better-auth/sso before 1.6.27 (and before 1.4.8 in the 1.4.x line and before 1.7.0-rc.5 in the 1.7...

8.8 CVE-2026-80193
Kimai before 2.62.0 fails to validate create_other_timesheet permission in the QuickEntry controller...

4.3 CVE-2026-80194
Kimai before 2.64.0 contains a missing authorization vulnerability in the ProjectViewController export...

5.4 CVE-2026-80195
Kimai before 2.63.0 contains a business logic / improper authorization vulnerability in the team update...

7.5 CVE-2026-80196
Kimai before 2.58.0 contains an authentication bypass vulnerability where password reset links remain...

4.3 CVE-2026-80197
Kimai before 2.57.0 contains an improper authorization vulnerability in the favorite timesheet add and...