Browse CVEs

MEDIUM 6.5 CVE-2026-71273 OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET request with no CSRF token. If the par… No fix yet Fix from $1,6002026-08-05 HIGH 8.5 CVE-2026-71272 Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost and va… No fix yet Fix from $1,9502026-08-05 HIGH 8.5 CVE-2026-71271 Memos' webhook URL validation, isReservedIP (internal/webhook/validate.go), checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 a… No fix yet Fix from $1,9502026-08-05 HIGH 8.6 CVE-2026-71270 Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService SS… No fix yet Fix from $1,9502026-08-05 HIGH 7.2 CVE-2026-71269 Node-RED's local-filesystem library storage module (getLibraryEntry and saveLibraryEntry in packages/node_modules/@node-red/runtime/lib/storage/local… No fix yet Fix from $1,9502026-08-05 CRITICAL 9.9 CVE-2026-71268 OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives from uploaded Structured Text (.st) program files and writes t… No fix yet Fix from $2,3002026-08-05 CRITICAL 9.8 CVE-2026-71267 microtar's mtar_write_file_header and mtar_write_dir_header functions (src/microtar.c) copy a caller-supplied entry name into the 100-byte field of a… No fix yet Fix from $2,3002026-08-05 HIGH 7.8 CVE-2026-71266 tinyobjloader-c's tinyobj_parse_and_index_mtl_file (tinyobj_loader_c.h) reads each line of a .mtl material file into a fixed 4096-byte stack buffer v… No fix yet Fix from $1,9502026-08-05 HIGH 7.5 CVE-2026-71265 Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mo… No fix yet Fix from $1,9502026-08-05 HIGH 8.2 CVE-2026-71264 WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) calls serveJson with no settings-PIN check, unlike the /edit endpoint which expl… No fix yet Fix from $1,9502026-08-05 CRITICAL 9.1 CVE-2026-71263 The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP/port/porttcp.c). The check uses a strict greater… No fix yet Fix from $2,3002026-08-05 CRITICAL 9.8 CVE-2026-71262 IoTSharp BlobStorageController.cs lacks the [Authorize] attribute applied to every other controller in the application (DevicesController, CustomersC… Mitigation only Fix from $2,3002026-08-05 HIGH 7.8 CVE-2026-71261 dr_libs dr_wav.h (all versions through current master) contains an integer overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_chu… No fix yet Fix from $1,9502026-08-05 MEDIUM 6.5 CVE-2026-71260 ESPHome through 2026.7.0-dev discloses plaintext passwords via its web_server component. In WebServer::text_json_ (esphome/components/web_server/web_… No fix yet Fix from $1,6002026-08-05 HIGH 8.6 CVE-2026-71259 ESPHome through 2026.7.0-dev contains an operator-precedence bug in the cv.url validator in esphome/config_validation.py. Because binds tighter than … No fix yet Fix from $1,9502026-08-05 MEDIUM 5.1 CVE-2026-71227 A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output (AIO) interface. By reusing an AI… Hardened Images 1.5.1+ Fix from $1,6002026-08-05 HIGH 7.3 CVE-2026-71226 Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allo… Hardened Images 1.5.1+ Fix from $1,9502026-08-05 MEDIUM 6.5 CVE-2026-71225 A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs (over 64 KiB) in stateful modes such as Counter (C… Hardened Images 1.5.1+ Fix from $1,6002026-08-05 HIGH 7.8 CVE-2026-16022 @oblique/cli 15.4.0 contains an OS command injection vulnerability in the project creation functionality. The CLI constructs shell commands through s… No fix yet Fix from $1,9502026-08-05 MEDIUM 6.5 CVE-2026-0516 A improper neutralization of HTTP Headers for Scripting Syntax vulnerability in SonicOS could allow a remote attacker to manipulate the Host header a… No fix yet Fix from $1,6002026-08-05 HIGH 7.8 CVE-2026-64582 In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxe_mmap rxe_mmap() removes a rxe_mma… No fix yet Fix from $1,9502026-08-05 CRITICAL 9.8 CVE-2026-71256 nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_device_identification_basic / recv_read_… No fix yet Fix from $2,3002026-08-05 HIGH 8.6 CVE-2026-71255 nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, … No fix yet Fix from $1,9502026-08-05 CRITICAL 9.8 CVE-2026-71254 nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in … No fix yet Fix from $2,3002026-08-05 HIGH 7.5 CVE-2026-61891 In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GET /files/… Theia 1.74.0+ Fix from $1,9502026-08-05 HIGH 7.5 CVE-2026-46581 In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing a… Mojarra after 4.1.13 Fix from $1,9502026-08-05 HIGH 7.2 CVE-2026-18933 The wp-downloadmanager WordPress plugin, in version 1.68.11 (also affecting the 6.9.4 release line), allows an admin-privileged user (current_user_ca… No fix yet Fix from $1,9502026-08-05 HIGH 8.2 CVE-2026-71252 toner-management's admin state-changing handlers (add.php, edit.php, delete.php under admin/toners, admin/toner-brands, admin/printers, and related a… Patch available Fix from $1,9502026-08-05 MEDIUM 6.5 CVE-2026-71251 Akaunting's shared download route (app/Http/Controllers/Common/Uploads.php::download, reachable at uploads/{id}/download behind only generic auth mid… No fix yet Fix from $1,6002026-08-05 MEDIUM 6.1 CVE-2026-71249 299Ko's public contact form (plugin/contact/controllers/ContactController.php, home) sets raw POST field values (name, firstname, email, message) int… No fix yet Fix from $1,6002026-08-05