Search vulnerabilities

Expected end of text, found '–' (at char 47), (line:1, col:48)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,500

CVE-2026-64471

Bluetooth: btusb: fix use-after-free on registration failure

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on registration failure Make sure to release the sibling interfaces in case controller registration fails to avoid use-after-free and double-free when they are eventually disconnected. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel
CVE-2026-64470

Bluetooth: btusb: fix use-after-free on marvell probe failure

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: fix use-after-free on marvell probe failure Make sure to stop any TX URBs submitted during Marvell OOB wakeup configuration on later probe failures to avoid use-after-free in the completion callback. This issue was reported by Sashiko while reviewing a fix for a wakeup source leak in the btusb probe errors paths.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Linux
Products
Linux Kernel
CVE-2026-125839

WordPress ElitePress theme <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This issue affects ElitePress: from n/a through 3.2.1.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-126145

OS Command Injection in FortiMail Enabling Arbitrary Root Execution

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated administrator with system-time read-write access to execute unauthorized code or commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126146

OS Command Injection via Archive Account Configuration in FortiMail and FortiRecorder

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2.0 through 7.2.9, FortiRecorder 7.6.0, FortiRecorder 7.2.0 through 7.2.11, FortiRecorder 7.0.0 through 7.0.6 may allow an authenticated privileged attacker to execute unauthorized code or commands via a specifically crafted archive account configuration.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail Fortirecorder
CVE-2026-126149

Integer Overflow Leading to Remote Daemon Crash in FortiMail

A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to crash the daemon.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126158

OS Command Injection Exploitable by Authenticated Admin in FortiMail 8.0.x

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow an authenticated administrator to execute unauthorized code or commands as root via specially crafted HTTP requests.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126153

Path Traversal Allowing Unauthenticated Command Execution in FortiMail

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized commands via crafted requests.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126151

Authentication Algorithm Vulnerability Allowing Unauthenticated Remote Account Takeover

A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to gain elevation of privilege (account takeover) via a crafted request.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126152

Authorization Bypass Allowing Root Directory Deletion and Cross-Tenant Data Access in FortiMail

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker to delete arbitrary directories as root, or to access or delete other users' calendar and mailbox data across tenant domains, via crafted HTTP requests to the webmail and administrative interfaces.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126156

Authorization Bypass via User-Controlled Key in FortiMail

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to take over an arbitrary IBE recipient account via crafted HTTP requests.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126147

Path Traversal Vulnerability Enabling Remote Code Execution in FortiMail

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126159

Authorization Bypass via User‑Controlled Key in FortiMail Quarantine Management

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release request.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126160

Unauthenticated Privilege Escalation Allowing Quarantine Message Manipulation in Fortinet FortiMail

A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to escalate privileges and release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release requests.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126164

SQL Injection in FortiMail Allows Unauthenticated Code Execution

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-121367

Security Advisory 0220

On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain conditions, RIPv2 might be silently enabled on management interfaces even when the RIP agent intends to disable it. It allows an unauthenticated attacker with access to the adjacent network to send crafted RIPv2 route advertisements to the device's management IP address. The device could accept and install those routes without authentication. Successful exploitation could allow the attacker to redirect traffic flows to an attacker-controlled destination, install more-specific routes that blackhole legitimate traffic, or otherwise disrupt network reachability for systems whose traffic passes through the affected device.

CVSS 4.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Arista
Products
Eos
CVE-2026-121368

Security Advisory 0206

On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency (direct or multi-hop) to a BFD-enabled interface can send a specially crafted BFD packet resulting in a system reboot.

CVSS 4.0 · 8.9 High EPSS < 1% KEV · Not listed
Vendors
Arista
Products
Eos
CVE-2026-108536

Multiple vulnerabilities that affects IBM Db2 Genius Hub

IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security restrictions due to improper restriction of rendered UI layers or frames.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
Agentics Db2 Genius Hub