Browse CVEs

CRITICAL 9.1 CVE-2026-0234 An improper verification of cryptographic signature vulnerability exists in Cortex XSOAR and Cortex XSIAM platforms during integration of Microsoft T… Cortex Xsiam 1.5.52+ Fix from $2,3002026-04-13 CRITICAL 9.1 CVE-2026-5085 Solstice::Session versions through 1440 for Perl generates session ids insecurely. The _generateSessionID method returns an MD5 digest seeded by the… Solstice\ Mitigation only Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-5936 An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. Thi… Pdf Services Api 2026-04-07+ Fix from $2,3002026-04-13 CRITICAL 9.1 CVE-2026-34865 Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentialit… Harmonyos No fix yet Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-40446 Access of resource using incompatible type ('type confusion') vulnerability in Samsung Open Source Escargot allows Pointer Manipulation.This issue af… Escargot Patch available Fix from $2,3002026-04-13 CRITICAL 9.1 CVE-2026-25209 Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a… Escargot Patch available Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-25208 Integer overflow vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689a71… Escargot Patch available Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-25207 Out-of-bounds write vulnerability in Samsung Open Source Escargot allows Overflow Buffers.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a0c689… Escargot Patch available Fix from $2,3002026-04-13 CRITICAL 9.1 CVE-2026-25206 Out-of-bounds read vulnerability in Samsung Open Source Escargot allows Resource Leak Exposure.This issue affects Escargot: 97e8115ab1110bc502b4b5e4a… Escargot Patch available Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-25205 Heap-based buffer overflow vulnerability in Samsung Open Source Escargot allows out-of-bounds write.This issue affects Escargot:commit hash  97e8115a… Escargot Patch available Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-6156 A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setIpQosRules of the file /cgi-bin/cst… Mitigation only Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-6155 A weakness has been identified in Totolink A7100RU 7.4cu.2313. The impacted element is the function setWanCfg of the file /cgi-bin/cstecgi.cgi of the… Mitigation only Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-6154 A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setWizardCfg of the file /cgi-bin/… Mitigation only Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-6140 A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function UploadFirmwareFile of the file /cgi-bin/cstecgi.cgi of … Mitigation only Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-6139 A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function UploadOpenVpnCert of the file /cgi-bin/cstecgi.cgi… Mitigation only Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-6138 A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setAccessDeviceCfg of the file /cgi-bin/cstecgi.… Mitigation only Fix from $2,3002026-04-13 CRITICAL 9.8 CVE-2026-6132 A vulnerability was determined in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setLedCfg of the file /cgi-bin/cstecg… Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-6131 A vulnerability was found in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTracerouteCfg of the file /cgi-… Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-40393 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an … Mesa 25.3.6+ Fix from $2,3002026-04-12 CRITICAL 9.1 CVE-2019-25710 Dolibarr ERP-CRM 8.0.4 contains an SQL injection vulnerability in the rowid parameter of the admin dict.php endpoint that allows attackers to execute… Dolibarr Erp\/crm after 8.0.4 Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2019-25709 CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the … Image Hosting Script Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2019-25697 CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code throug… Cmssite Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-6116 A vulnerability has been found in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setDiagnosisCfg of the file /cgi-bin… Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-6115 A flaw has been found in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setAppCfg of the file /cgi-bin/cstecgi.cgi of the component… Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-6114 A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this issue is the function setNetworkCfg of the file /cgi-bin/cste… Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-6113 A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected by this vulnerability is the function setTtyServiceCfg … Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-6112 A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the… Mitigation only Fix from $2,3002026-04-12 CRITICAL 9.8 CVE-2026-6110 A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.1. This affects the function generate_thoughts of the file metagpt/strategy/tot.… Metagpt Patch available Fix from $2,3002026-04-12 CRITICAL 9.3 CVE-2026-31845 A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6.4 and earlier in the Zadarma telephony API endpoint (/api/… Mitigation only Fix from $2,3002026-04-11 CRITICAL 9.8 CVE-2026-5059 aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… Mitigation only Fix from $2,3002026-04-11