Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 79 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-9508 |
10 (4.0)
|
Incorrect Permission Assignment for Critical Resource … |
Suprema |
BioStar 2 (server) |
2026-05-29T12:09:02.026Z | 2026-05-29T13:33:31.937Z |
| CVE-2026-9152 |
10 (4.0)
|
Unauthenticated SOAP Endpoint in Altium 365 SearchServ… |
Altium |
Altium 365 |
2026-05-21T00:47:24.365Z | 2026-05-21T12:41:39.633Z |
| CVE-2026-8985 |
10 (4.0)
|
Unauthenticated Command Injection |
Autel |
MaxiCharger Single |
2026-07-21T21:11:25.089Z | 2026-07-22T19:37:37.583Z |
| CVE-2026-8984 |
10 (4.0)
|
Unauthenticated RCE |
Autel |
MaxiCharger Single |
2026-07-21T21:08:49.622Z | 2026-07-22T19:38:02.292Z |
| CVE-2026-8983 |
10 (4.0)
|
Backdoor Authentication Token |
Autel |
MaxiCharger Single |
2026-07-21T21:03:22.675Z | 2026-07-22T19:40:28.831Z |
| CVE-2026-8982 |
10 (4.0)
|
Hard-coded / Backdoor Accounts |
Autel |
MaxiCharger Single |
2026-07-21T21:01:02.360Z | 2026-07-22T19:40:35.197Z |
| CVE-2026-8326 |
10 (4.0)
|
Remote Spark SparkView Path Traversal in RDP Drive Red… |
Remote Spark (https://www.remotespark.com/) |
SparkView |
2026-05-29T11:47:02.652Z | 2026-05-29T13:34:00.474Z |
| CVE-2026-8054 |
10 (4.0)
|
Unauthenticated SQL Injection in dotCMS Publish Audit API |
dotCMS |
dotCMS Core |
2026-05-27T07:55:25.905Z | 2026-05-27T13:40:13.159Z |
| CVE-2026-77946 |
10 (4.0)
10 (3.1)
10 (3.0)
|
TRENDnet TEW-821DAP NTP Timezone Configuration apply_t… |
TRENDnet |
TEW-821DAP |
2026-08-22T11:00:09.399Z | 2026-08-22T11:00:09.399Z |
| CVE-2026-76607 |
10 (4.0)
|
Joomla Extension - fabrikar.com - Missing ACL check in… |
fabrikar.com |
Fabrik extension for Joomla |
2026-08-22T14:15:50.998Z | 2026-08-22T14:15:50.998Z |
| CVE-2026-76606 |
10 (4.0)
|
Joomla Extension - fabrikar.com - Path Traversal via i… |
fabrikar.com |
Fabrik extension for Joomla |
2026-08-22T14:23:09.316Z | 2026-08-22T14:23:09.316Z |
| CVE-2026-76605 |
10 (4.0)
|
Joomla Extension - fabrikar.com - Remote code executio… |
fabrikar.com |
Fabrik extension for Joomla |
2026-08-22T14:20:27.677Z | 2026-08-22T14:20:27.677Z |
| CVE-2026-76604 |
10 (4.0)
|
Joomla Extension - fabrikar.com - Unauthenticated remo… |
fabrikar.com |
Fabrik extension for Joomla |
2026-08-22T14:18:07.007Z | 2026-08-22T14:18:07.007Z |
| CVE-2026-76008 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Comfast CF-N1-S URI Parameter Parsing mbox-config get_… |
Comfast |
CF-N1-S |
2026-08-19T02:30:09.048Z | 2026-08-19T15:47:03.268Z |
| CVE-2026-75949 |
10 (4.0)
|
Joomla Extension - cmsjunkie.com - Arbitrary file upl… |
cmsjunkie.com |
J-BusinessDirectory extension for Joomla |
2026-08-19T14:40:42.379Z | 2026-08-21T19:16:00.768Z |
| CVE-2026-75874 |
10 (3.1)
|
Sandbox escape in the Remote Settings Client component |
Mozilla |
Firefox |
2026-08-18T12:23:35.478Z | 2026-08-18T19:24:04.720Z |
| CVE-2026-75784 |
10 (4.0)
10 (3.1)
10 (3.0)
|
TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c sta… |
TRENDnet |
TEW-WLC100 |
2026-08-18T14:00:09.095Z | 2026-08-20T17:20:33.880Z |
| CVE-2026-74843 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_… |
Wavlink |
WN531P3 |
2026-08-17T11:15:08.412Z | 2026-08-17T14:44:57.952Z |
| CVE-2026-74803 |
10 (4.0)
|
Joomla Extension - yootheme.com - Unauthenticated arbi… |
yootheme.com |
Zoo extension for Joomla |
2026-08-19T13:39:24.213Z | 2026-08-21T04:48:18.227Z |
| CVE-2026-74764 |
10 (4.0)
|
Path Traversal in TAR Archive Extraction Allows Arbitr… |
pandora-analysis |
pandora |
2026-08-15T21:39:09.862Z | 2026-08-17T19:40:57.773Z |
| CVE-2026-74475 |
10 (3.1)
|
vxlan: use neigh_ha_snapshot() in route_shortcircuit() |
Linux |
Linux |
2026-08-15T12:27:10.685Z | 2026-08-19T16:37:28.096Z |
| CVE-2026-74309 |
10 (3.1)
|
vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler |
Linux |
Linux |
2026-08-15T05:58:09.366Z | 2026-08-17T05:45:41.596Z |
| CVE-2026-74280 |
10 (3.1)
|
crypto: marvell/octeontx - fix DMA cleanup using wrong… |
Linux |
Linux |
2026-08-15T05:57:50.809Z | 2026-08-17T05:45:21.184Z |
| CVE-2026-74279 |
10 (3.1)
|
crypto: cavium/cpt - fix DMA cleanup using wrong loop index |
Linux |
Linux |
2026-08-15T05:57:50.131Z | 2026-08-17T05:45:20.085Z |
| CVE-2026-74253 |
10 (4.0)
|
Joomla Extension - regularlabs.com - Unauthenticated R… |
regularlabs.com |
Sourcerer extension for Joomla |
2026-08-17T17:12:55.129Z | 2026-08-17T17:37:26.797Z |
| CVE-2026-7411 |
10 (3.1)
|
In Eclipse BaSyx Java Server SDK versions prior t… |
Eclipse Foundation |
Eclipse BaSyx |
2026-05-05T14:07:53.476Z | 2026-05-06T15:25:50.007Z |
| CVE-2026-73678 |
10 (3.1)
10 (4.0)
|
MindsDB Minds Platform v26.1.0 Unauthenticated RCE via… |
MindsDB |
Minds Platform |
2026-08-14T18:49:36.356Z | 2026-08-17T18:08:41.453Z |
| CVE-2026-73343 |
10 (3.1)
|
WordPress WP Compress plugin < 7.20.01 - Remote Code E… |
AresIT |
WP Compress |
2026-08-18T14:00:09.450Z | 2026-08-18T19:48:21.270Z |
| CVE-2026-73299 |
10 (3.1)
|
Prompty: Server-Side Template Injection to Remote Code… |
microsoft |
prompty |
2026-08-12T17:31:38.807Z | 2026-08-12T18:54:20.646Z |
| CVE-2026-7312 |
10 (3.1)
|
CWE‑522: Insufficiently Protected Credentials in web s… |
Progress Software |
Sitefinity |
2026-06-02T13:09:06.250Z | 2026-06-03T12:55:14.770Z |