Search vulnerabilities

Expected end of text, found '\' (at char 28), (line:1, col:29)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,877

CVE-2026-66465

WordPress Cartify theme <= 1.3.0.1 - Account Takeover vulnerability

Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Agnihd Wordpress
Products
Cartify Wordpress
CVE-2026-66466

WordPress StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart plugin <= 2.1.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.1 versions.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Wedevs Wordpress
Products
Storegrowth: Smart Sales Booster For Woocommerce | Bogo, Upsells, Direct Checkout, Quick View, Side Cart Wordpress
CVE-2026-66654

WordPress Vehica Core plugin <= 1.0.104 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.

CVSS 3.1 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Tangiblewp Wordpress
Products
Vehica Core Wordpress
CVE-2026-16101

forced re-pairing with already bonded device

Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device. See V1 in BLERP paper below

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Wiseconnect
CVE-2026-19291

Bluetooth re-pairing can use a lower security level than previous

Bluetooth re-pairing with an existing device can use a lower security level. RS9116W and SiWx91x impacted. See V3 in the BLERP paper linked below.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Wiseconnect
CVE-2026-19292

Bluetooth re-pairing with legitimate device can use lower security level

Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Wiseconnect
CVE-2026-19293

SMP security request

SMP security request (from peripheral) does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Wiseconnect
CVE-2026-65932

BT122 stops advertising

The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vulnerability B-E2 in the related paper below.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Bt122
CVE-2026-73505

Oh My Posh: Arbitrary command execution via template injection in the path segment

Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer. Prior to 29.35.1, the setStyle() function in src/segments/path.go passed pt.Path, which includes raw folder names, to template.Render, whose function map exposes cmd, so an attacker-controlled directory name containing a Go template expression could execute arbitrary operating system commands as the current user whenever the prompt rendered inside that directory or a descendant. This issue is fixed in version 29.35.1.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Jandedobbeleer
Products
Oh-my-posh
CVE-2026-65934

BT122 plaintext pause encryption request causes DOS

An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.  See vulnerability B-E10 in the related paper below.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Bt122
CVE-2026-65935

Bypassing passkey entry in legacy pairing

Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.  See vulnerability B-E3 in the related paper below.

CVSS 4.0 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Wiseconnect
CVE-2026-65936

RS9116W/SiWx917 malformed packet with increased length field causes memory leak

A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.  See vulnerability B-E4 in the related paper below.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Silabs.com
Products
Wiseconnect