|
cve-2026-88772
|
9.5 (v4.0)
|
Memory overflow vulnerability leading to Remote Code E…
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:09:56.033Z |
2026-09-28T03:55:42.777Z |
|
cve-2026-88771
|
9.5 (v4.0)
|
A remote code execution vulnerability exists due to im…
|
Citrix NetScaler
|
ADC
|
2026-09-27T16:02:07.001Z |
2026-09-29T03:55:15.090Z |
|
cve-2026-101041
|
6.3 (v4.0)
|
Vulnerability-Lookup - Race Condition in Account Recov…
|
vulnerability-lookup
|
vulnerability-lookup
|
2026-09-27T14:47:57.012Z |
2026-09-29T15:28:11.374Z |
|
cve-2026-101033
|
5.3 (v4.0)
4.3 (v3.1)
|
KitchenOwl through 0.7.10 IDOR via unchecked category ID
|
TomBursch
|
kitchenowl
|
2026-09-27T13:16:56.459Z |
2026-09-30T16:59:31.646Z |
|
cve-2026-101032
|
7.3 (v4.0)
7 (v3.1)
|
navi through 2.24.0 OS Command Injection via Cheatshee…
|
denisidoro
|
navi
|
2026-09-27T13:16:55.793Z |
2026-09-28T13:13:39.534Z |
|
cve-2026-100872
|
8.7 (v4.0)
7.5 (v3.1)
|
Sylius 2.x before 2.1.16 and 2.2.9 Payment Amount Overwrite
|
Sylius
|
Sylius
|
2026-09-27T13:09:56.034Z |
2026-10-06T13:36:51.750Z |
|
cve-2026-100871
|
8.7 (v4.0)
8.8 (v3.1)
|
Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2…
|
Sylius
|
Sylius
|
2026-09-27T13:09:55.386Z |
2026-10-06T13:36:51.028Z |
|
cve-2026-100870
|
8.7 (v4.0)
8.8 (v3.1)
|
Sylius before 1.12.25, 1.13.17, 1.14.20, 2.1.16, and 2…
|
Sylius
|
Sylius
|
2026-09-27T13:09:54.715Z |
2026-10-06T13:36:50.158Z |
|
cve-2026-100869
|
8.2 (v4.0)
5.9 (v3.1)
|
Sylius 2.x before 2.1.16 and 2.2.9 Arbitrary Payment A…
|
Sylius
|
Sylius
|
2026-09-27T13:09:54.038Z |
2026-10-06T13:36:49.073Z |
|
cve-2026-100868
|
5.3 (v4.0)
6.3 (v3.1)
|
Penpot before 2.18.0 Unauthenticated WebSocket Access …
|
penpot
|
penpot
|
2026-09-27T13:09:53.387Z |
2026-10-08T15:22:06.862Z |
|
cve-2026-100867
|
4.8 (v4.0)
3.3 (v3.1)
|
spaceship-prompt through 4.22.5 Terminal Escape Sequen…
|
spaceship-prompt
|
spaceship-prompt
|
2026-09-27T13:09:52.715Z |
2026-09-30T15:26:16.430Z |
|
cve-2026-100866
|
4.8 (v4.0)
3.3 (v3.1)
|
onefetch through 2.28.1 Terminal Escape Sequence Injection
|
o2sh
|
onefetch
|
2026-09-27T13:09:52.041Z |
2026-09-30T15:40:20.298Z |
|
cve-2026-100748
|
6.9 (v4.0)
|
Joomla Extension - svenbluege.de - CSRF in various car…
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-09-27T11:51:46.871Z |
2026-09-29T17:04:29.515Z |
|
cve-2026-97164
|
7 (v4.0)
|
Joomla Extension - svenbluege.de - Path Traversal in C…
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-09-27T11:51:32.792Z |
2026-09-29T17:04:13.320Z |
|
cve-2026-100747
|
5.1 (v4.0)
|
Joomla Extension - svenbluege.de - CSRF in image uploa…
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-09-27T11:50:07.882Z |
2026-09-30T15:12:55.150Z |
|
cve-2026-100749
|
5.1 (v4.0)
|
Joomla Extension - svenbluege.de - CSRF in backend cle…
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-09-27T11:45:36.841Z |
2026-09-30T15:07:31.808Z |
|
cve-2026-97165
|
5.3 (v4.0)
|
Joomla Extension - svenbluege.de - Reflected XSS and o…
|
svenbluege.de
|
Event Gallery for Joomla
|
2026-09-27T11:44:38.823Z |
2026-09-30T15:06:29.231Z |
|
cve-2026-15442
|
2.3 (v4.0)
|
Heap use-after-free on read during bidirectional (D)TL…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:24:31.594Z |
2026-09-30T10:48:05.055Z |
|
cve-2026-89102
|
8.3 (v4.0)
|
OCSP stapling v2 multi accepts non-CA chain certificat…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:22:42.265Z |
2026-09-29T16:04:31.679Z |
|
cve-2026-89133
|
6.3 (v4.0)
|
NameConstraints not enforced across unconstrained inte…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:18:43.843Z |
2026-09-29T16:16:06.256Z |
|
cve-2026-89134
|
6.3 (v4.0)
|
Subject CN name-constraint check bypassed when non-DNS…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:16:58.067Z |
2026-09-29T16:37:26.748Z |
|
cve-2026-89135
|
6.3 (v4.0)
|
Failed X509_verify_cert leaves unverified CA in shared…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:14:44.599Z |
2026-09-29T16:20:11.379Z |
|
cve-2026-89136
|
8.3 (v4.0)
|
Client accepts unsolicited RawPublicKey server certifi…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:12:39.137Z |
2026-09-29T16:39:15.460Z |
|
cve-2026-93302
|
8.3 (v4.0)
|
Trusted peer certificate match ignores public key, all…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:07:35.999Z |
2026-09-29T16:41:22.187Z |
|
cve-2026-93304
|
6.3 (v4.0)
|
(D)TLS 1.2 client accepts early ChangeCipherSpec befor…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:05:37.132Z |
2026-09-29T16:43:16.572Z |
|
cve-2026-94417
|
2.3 (v4.0)
|
CRL check skipped when OCSP enabled and certificate ha…
|
wolfSSL
|
wolfSSL
|
2026-09-27T09:00:59.581Z |
2026-09-29T17:33:10.533Z |
|
cve-2026-94418
|
2.3 (v4.0)
|
Signature failure masked by date error under WOLFSSL_S…
|
wolfSSL
|
wolfSSL
|
2026-09-27T08:58:56.538Z |
2026-09-29T16:45:58.115Z |
|
cve-2026-94419
|
2.3 (v4.0)
|
Client session cache reference poisoning allows resump…
|
wolfSSL
|
wolfSSL
|
2026-09-27T08:54:18.510Z |
2026-09-29T16:50:09.410Z |
|
cve-2026-100741
|
9.8 (v3.1)
|
Improper Neutralization of Directives in Dynamically E…
|
Progressive Robot Ltd
|
hMailServer
|
2026-09-27T07:12:54.503Z |
2026-09-28T13:31:30.984Z |
|
cve-2026-97319
|
N/A
|
PowerPress < 11.17.2 - Contributor+ Stored XSS via Pod…
|
Unknown
|
PowerPress Podcasting plugin by Blubrry
|
2026-09-27T06:00:23.019Z |
2026-09-28T00:48:07.210Z |