|
cve-2026-96876
|
6.9 (v4.0)
|
Anonymous reflected XSS in CargoExport invalid-alias errors
|
The Wikimedia Foundation
|
Mediawiki - Cargo extension
|
2026-09-25T19:33:17.700Z |
2026-09-29T21:20:24.081Z |
|
cve-2026-96875
|
6.9 (v4.0)
|
Reflected XSS in Cargo Drilldown hierarchy filters
|
The Wikimedia Foundation
|
Mediawiki - Cargo extension
|
2026-09-25T19:29:19.032Z |
2026-09-29T21:19:24.823Z |
|
cve-2026-5267
|
N/A
|
Unauthenticated Event Stream Exposure of Session Token…
|
Ciena
|
Navigator NCS
|
2026-09-25T19:10:46.330Z |
2026-09-25T20:40:31.039Z |
|
cve-2026-100306
|
6.9 (v4.0)
5.3 (v3.1)
|
TDuck survey form through 6.0 Write Password Bypass vi…
|
TDuckCloud
|
tduck-survey-form
|
2026-09-25T18:47:40.936Z |
2026-09-30T17:29:31.975Z |
|
cve-2026-100305
|
5.3 (v4.0)
4.3 (v3.1)
|
TDuck survey form through 6.0 Fill-In Restriction Bypa…
|
TDuckCloud
|
tduck-survey-form
|
2026-09-25T18:47:40.211Z |
2026-09-25T19:06:51.767Z |
|
cve-2026-100304
|
6 (v4.0)
5.3 (v3.1)
|
TDuck survey form 6.0 Information Disclosure via Fail-…
|
TDuckCloud
|
tduck-survey-form
|
2026-09-25T18:47:39.440Z |
2026-09-29T17:51:07.650Z |
|
cve-2026-100303
|
5.3 (v4.0)
5.4 (v3.1)
|
TDuck survey form through 6.0 Missing Authorization in…
|
TDuckCloud
|
tduck-survey-form
|
2026-09-25T18:47:38.596Z |
2026-09-30T00:05:13.799Z |
|
cve-2026-97897
|
|
Krayin laravel-crm TinyMCE Media Upload Sanitizer.php …
|
Krayin
|
laravel-crm
|
2026-09-25T18:45:09.156Z |
2026-09-29T17:54:15.390Z |
|
cve-2026-53629
|
|
GLPI: SQL injection in history tab
|
glpi-project
|
glpi
|
2026-09-25T18:38:43.308Z |
2026-09-25T19:45:17.922Z |
|
cve-2026-53626
|
|
GLPI: Arbitrary Document Read via Form Context Authori…
|
glpi-project
|
glpi
|
2026-09-25T18:37:53.046Z |
2026-09-30T00:04:14.035Z |
|
cve-2026-48482
|
|
GLPI: RCE via Form import
|
glpi-project
|
glpi
|
2026-09-25T18:37:10.625Z |
2026-09-30T00:02:57.203Z |
|
cve-2026-53625
|
|
GLPI: Privilege Escalation via authtype API manipulation
|
glpi-project
|
glpi
|
2026-09-25T18:35:36.780Z |
2026-09-25T19:06:26.156Z |
|
cve-2026-53610
|
|
GLPI: Reflected XSS in dashboards
|
glpi-project
|
glpi
|
2026-09-25T18:34:43.674Z |
2026-09-29T17:57:14.916Z |
|
cve-2026-47679
|
|
GLPI: arbitrary file deletion
|
glpi-project
|
glpi
|
2026-09-25T18:33:55.668Z |
2026-09-25T19:05:50.870Z |
|
cve-2026-55214
|
|
GLPI: Stored XSS in suppliers
|
glpi-project
|
glpi
|
2026-09-25T18:33:03.953Z |
2026-09-29T17:59:12.072Z |
|
cve-2026-49470
|
|
GLPI: Missing Rate Limiting on Login and TOTP Verifica…
|
glpi-project
|
glpi
|
2026-09-25T18:30:55.981Z |
2026-09-28T13:40:15.230Z |
|
cve-2026-97896
|
|
krayin laravel-crm Upload Functionality ConfigurationF…
|
krayin
|
laravel-crm
|
2026-09-25T18:30:19.532Z |
2026-09-30T00:01:55.385Z |
|
cve-2026-55217
|
|
GLPI: Unallowed modfication of knowbase items comments…
|
glpi-project
|
glpi
|
2026-09-25T18:29:28.418Z |
2026-09-25T19:05:01.467Z |
|
cve-2026-53628
|
|
GLPI: Unallowed authentication method update by admini…
|
glpi-project
|
glpi
|
2026-09-25T18:28:25.584Z |
2026-09-30T00:00:41.958Z |
|
cve-2026-45801
|
|
GLPI: Unauthorized Debug Mode Activation via Profile U…
|
glpi-project
|
glpi
|
2026-09-25T18:27:33.123Z |
2026-09-25T19:41:40.597Z |
|
cve-2026-53627
|
|
GLPI: Unexpected access to update operations through the API
|
glpi-project
|
glpi
|
2026-09-25T18:26:37.407Z |
2026-09-25T19:03:35.397Z |
|
cve-2026-49469
|
|
GLPI: LDAP filter injection in user import feature
|
glpi-project
|
glpi
|
2026-09-25T18:25:43.769Z |
2026-09-29T18:00:54.072Z |
|
cve-2026-63208
|
|
Zammad: Microsoft Graph error logs expose partially ma…
|
zammad
|
zammad
|
2026-09-25T18:23:47.098Z |
2026-09-25T18:42:12.452Z |
|
cve-2026-63006
|
|
Zammad: HTML sanitizer API path allowlist bypass via i…
|
zammad
|
zammad
|
2026-09-25T18:23:13.578Z |
2026-09-29T18:03:56.994Z |
|
cve-2026-63204
|
|
Zammad: Authenticated agents can read AI summary error…
|
zammad
|
zammad
|
2026-09-25T18:22:40.491Z |
2026-09-25T18:41:43.228Z |
|
cve-2026-61855
|
|
Zammad: Invalid PGP Detached Signatures Reported as Go…
|
zammad
|
zammad
|
2026-09-25T18:21:55.462Z |
2026-09-25T19:02:38.605Z |
|
cve-2026-84461
|
|
Zammad: Missing rate limiting allows password brute-fo…
|
zammad
|
zammad
|
2026-09-25T18:21:20.015Z |
2026-09-25T18:41:14.822Z |
|
cve-2026-63207
|
|
Zammad: Sensitive Information Exposure in Integration …
|
zammad
|
zammad
|
2026-09-25T18:20:44.058Z |
2026-09-29T18:06:28.995Z |
|
cve-2026-84465
|
|
Zammad: S/MIME signature verification allows forged se…
|
zammad
|
zammad
|
2026-09-25T18:19:58.735Z |
2026-09-29T18:08:05.375Z |
|
cve-2026-84463
|
|
Zammad: Stored HTML injection in Knowledge Base video …
|
zammad
|
zammad
|
2026-09-25T18:19:19.193Z |
2026-09-29T19:42:48.916Z |