Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,822

CVE-2026-81754

Vigilant <= 2.10.2 - Unauthenticated Stored Cross-Site Scripting

The Vigilant – 100% Free Security Suite: Firewall, 2FA, Login, Headers, Scanner… plugin for WordPress is vulnerable to Stored Cross-Site Scripting via User-Agent Header in all versions up to, and including, 2.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The malicious payload is delivered passively by any unauthenticated visitor who triggers a failed login attempt with a crafted User-Agent header, requiring no further interaction from the attacker once stored.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fernandot Wordpress
Products
Vigilant – 100% Free Security Suite: Firewall, 2fa, Login, Headers, Scanner… Wordpress
CVE-2026-18562

HUSKY <= 1.4.3 - Reflected Cross-Site Scripting

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via SEO-friendly permalink filter URL segments in versions up to, and including, 1.4.3. This is due to insufficient input sanitization and output escaping in the wp_load_js() function, which reads filter values from the URL path via the url_request extension's parse_url_query() and embeds them into an inline JavaScript string using json_encode() without escaping single quotes. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a specially crafted link.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Realmag777 Wordpress
Products
Husky – Products Filter For Woocommerce Professional Wordpress
CVE-2026-86781

SSL Zen < 4.7.40 - Subscriber+ TLS Private Key Disclosure

The SSL Zen — SSL Certificate Installer & HTTPS Redirects WordPress plugin before 4.7.40 does not perform capability or nonce checks on a certificate-file download routine that runs early in the WordPress admin request lifecycle, allowing any authenticated user, including Subscribers, to download the site's TLS private key, certificates, and diagnostic logs.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Unknown Wordpress
Products
Ssl Zen — Ssl Certificate Installer & Https Redirects Wordpress
CVE-2026-73784

HPE IceWall products, Remote Bypass of Security Restrictions

A potential security vulnerability in HPE IceWall products could be exploited to tamper SAML response, allowing an attacker to impersonate another user.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise
Products
Hpe Icewall Products
CVE-2026-73785

HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service (DoS).

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Hewlett Packard Enterprise
Products
Hpe Icewall Products
CVE-2026-89173

Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Kingdom Communication Associated
Products
Eh1000b Eh2070 Eh3040 and 1 more
CVE-2026-89174

Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection

Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Kingdom Communication Associated
Products
Eh1000b Eh2070 Eh3040 and 1 more
CVE-2026-89175

Kingdom Communication Associated｜Smart Video Intercom System - Client-Side Authentication

Smart Video Intercom System developed by Kingdom Communication Associated has a Client-Side Authentication vulnerability. Unauthenticated remote attackers can bypass authentication to access specific pages and obtain partial system configuration values.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Kingdom Communication Associated
Products
Eh1000b Eh2070 Eh3040 and 1 more
CVE-2026-89176

Howyar｜WeenyGenius - Missing Authentication

WeenyGenius, a computer lab management system developed by Howyar Technologies, has a Missing Authentication vulnerability. Unauthenticated attackers on the same network can easily spoof student or teacher endpoints. Impersonating a student can disrupt normal classroom operations, whereas impersonating a teacher can induce student computers to initiate connections, thereby gaining remote control over the student endpoints.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Howyar
Products
Weenygenius
CVE-2026-89177

Howyar｜WeenyGenius - Use of Insecure Protocol

WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to disrupt classroom operations.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Howyar
Products
Weenygenius
CVE-2026-89178

Howyar｜WeenyGenius - Origin Validation Error

WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the attacker.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Howyar
Products
Weenygenius
CVE-2026-89179

Howyar｜WeenyGenius - Missing Support for Integrity Check

WeenyGenius, a computer lab management system by Howyar Technologies, has a Missing Support for Integrity Check vulnerability. Unauthenticated attackers on the same network can intercept a student's connection packet and replay it, thereby forging the appearance that the student remains connected.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Howyar
Products
Weenygenius
CVE-2025-15679

BMC root account active without password on BullSequana XH3406 and XH3515

Under certain circumstances such as reset to factory default operation, the BMC root account is made active without a password on BullSequana XH3406 and XH3515.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Bull
Products
Bullsequana Xh3406 Bullsequana Xh3515
CVE-2026-19486

SSRF in Gemini Enterprise Agent Platform App Builder

A Server-Side Request Forgery (SSRF) vulnerability in Google Cloud Gemini Enterprise Agent Platform App Builder versions prior to 2026-06-01 on Google Cloud Platform allows an unauthenticated attacker to leak the Compute Engine default service account access token. This vulnerability was patched on 01 June 2026. Users will need to redeploy their previously deployed apps.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Google Cloud
Products
Gemini Enterprise Agent Platform App Builder
CVE-2026-80469

CVE-2026-80469

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Sick Ag
Products
Sentio Creator Extension 'device Manager'
CVE-2026-89146

libp2p-rendezvous through 0.17.1 Denial of Service via Unbounded Registration TTL in Discovery Responses

libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing attackers to trigger timer arithmetic overflow. A malicious rendezvous server can send a discovery response with an unbounded TTL value that causes the client node process to panic when computing the expiry timer.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Libp2p
Products
Libp2p-rendezvous
CVE-2026-87776

compression vulnerable to Denial of Service via memory leak on premature response close

compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection while a compressed response is still being sent, the zlib stream created to compress that response is never destroyed, so each aborted compressed response leaks its native zlib memory. A remote unauthenticated attacker can repeatedly open requests and disconnect early, exhausting the available memory and crashing the server. All applications using compression are affected. The issue is fixed in compression 1.8.2, and users should upgrade to 1.8.2 or later.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Expressjs
Products
Compression
CVE-2026-80462

Privilege Escalation in Progress Chef Automate

A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain elevated access to protected Chef Automate functionality under specific conditions.

CVSS 3.1 · 10 Critical EPSS 2.0% KEV · Not listed
Vendors
Progress Software
Products
Chef Automate
CVE-2026-15710

Netskope Client Endpoint DLP Kernel Driver Information Leakage

An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message validation, allowing local unprivileged processes to send unauthorized queries. Additionally, a reply buffer used by the port message handler was not properly initialized before returning data, leaking residual kernel pool memory from prior allocations. A local unprivileged attacker could exploit this vulnerability to enumerate DLP configuration and feature flags, extract live session tokens, and read kernel memory fragments from other users' operations.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Netskope
Products
Endpoint Dlp
CVE-2026-82583

NextGen Healthcare Mirth Connect SQL Injection

NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition.

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Nextgen Healthcare
Products
Mirth Connect