Browse CVEs

CRITICAL 9.8 CVE-2026-6057 FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrar… Patch available Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-6029 A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setVpnAccountCfg of the file /cgi-bin/cst… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-6028 A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setPptpServerCfg of the file /cgi-bin/c… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-6027 A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setUrlFilterRules of the file /cgi-bin/cstec… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-6026 A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setPortalConfWeChat of the file… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.6 CVE-2026-1115 A Stored Cross-Site Scripting (XSS) vulnerability was identified in the social feature of parisneo/lollms, affecting the latest version prior to 2.2.… Lollms after 2.1.0 Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-6025 A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of t… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-6024 A vulnerability was determined in Tenda i6 1.0.0.7(2204). Affected by this issue is the function R7WebsSecurityHandlerfunction of the component HTTP … I6 Firmware Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-5997 A vulnerability was detected in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setLoginPasswordCfg of the file /cgi-bin/… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-5996 A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. The affected element is the function setAdvancedInfoShow of the … Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-5995 A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. Impacted is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-5994 A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This issue affects the function setTelnetCfg of the file /cgi-bin/cstec… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.8 CVE-2026-5993 A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. This vulnerability affects the function setWiFiGuestCfg of the file /cgi-bin… Mitigation only Fix from $2,3002026-04-10 CRITICAL 9.1 CVE-2026-5393 Dual-Algorithm CertificateVerify out-of-bounds read. When processing a dual-algorithm CertificateVerify message, an out-of-bounds read can occur on c… Wolfssl 5.9.1+ Fix from $2,3002026-04-10 CRITICAL 9.1 CVE-2026-5503 In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL. This caused TLSX_UseSNI to attach … Wolfssl after 5.9.0 Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-34424 Smart Slider 3 Pro version 3.5.1.35 for WordPress and Joomla contains a multi-stage remote access toolkit injected through a compromised update syste… Mitigation only Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5264 Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overfl… Wolfssl 5.9.1+ Fix from $2,3002026-04-09 CRITICAL 9.6 CVE-2026-40154 PraisonAI is a multi-agent teams system. Prior to 4.5.128, PraisonAI treats remotely fetched template files as trusted executable code without integr… Praisonai 4.5.128+ Fix from $2,3002026-04-09 CRITICAL 10.0 CVE-2026-40114 PraisonAI is a multi-agent teams system. Prior to 4.5.128, the /api/v1/runs endpoint accepts an arbitrary webhook_url in the request body with no URL… Praisonai 4.5.128+ Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-33784 A Use of Default Password vulnerability in the Juniper Networks Support Insights (JSI) Virtual Lightweight Collector (vLWC) allows an unauthentic… Virtual Lightweight Collector 3.0.94+ Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5978 A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024. Affected is the function setWiFiAclRules of the file /cgi-bin/cs… Mitigation only Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5977 A weakness has been identified in Totolink A7100RU 7.4cu.2313_b20191024. This impacts the function setWiFiBasicCfg of the file /cgi-bin/cstecgi.cgi o… Mitigation only Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5976 A security flaw has been discovered in Totolink A7100RU 7.4cu.2313_b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cg… Mitigation only Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5975 A vulnerability was identified in Totolink A7100RU 7.4cu.2313_b20191024. The impacted element is the function setDmzCfg of the file /cgi-bin/cstecgi.… Mitigation only Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5974 A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.1. The affected element is the function Bash.run in the library metagpt/tools/li… Metagpt after 0.8.1 Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5973 A vulnerability was found in FoundationAgents MetaGPT up to 0.8.1. Impacted is the function get_mime_type of the file metagpt/utils/common.py. The ma… Metagpt after 0.8.1 Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5972 A vulnerability has been found in FoundationAgents MetaGPT up to 0.8.1. This issue affects the function Terminal.run_command in the library metagpt/t… Metagpt after 0.8.1 Fix from $2,3002026-04-09 CRITICAL 9.1 CVE-2026-5194 Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the … Wolfssl 5.9.1+ Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-5187 Two potential heap out-of-bounds write locations existed in DecodeObjectId() in wolfcrypt/src/asn.c. First, a bounds check only validates one availab… Wolfssl after 5.9.0 Fix from $2,3002026-04-09 CRITICAL 9.9 CVE-2026-40089 Sonicverse is a Self-hosted Docker Compose stack for live radio streaming. The Sonicverse Radio Audio Streaming Stack dashboard contains a Server-Sid… Radio Audio Streaming Stack 1.7.2+ Fix from $2,3002026-04-09