Export limit exceeded: 425898 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Expected end of text, found ',' (at char 59), (line:1, col:60)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,898

Export CSV
CVE-2026-110960

Auth Armor <= 1.0.3 - Unauthenticated Account Takeover

The Auth Armor WordPress plugin through 1.0.3 does not require authentication on several handlers available to logged-out users, which leak the site's stored API credentials and allow an unauthenticated attacker to reset an administrator's enrollment and take over that administrator account.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-110987

RegistrationMagic < 6.1.0.4 - Reflected XSS via 'rm_tr' and 'rm_ur' Parameters

The RegistrationMagic WordPress plugin before 6.1.0.4 does not properly escape a user-supplied value before printing it inside an inline script block on several of its admin screens, allowing unauthenticated attackers to inject arbitrary JavaScript that executes in the session of an administrator who is tricked into opening a crafted link.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-114451

Kadence Memberships < 4.0.6 - Unauthenticated Table Collation Downgrade via 'rcp-action' Parameter

The Membership Plugin WordPress plugin before 4.0.6 does not perform any authorization or CSRF check before running a schema-altering database maintenance routine, allowing unauthenticated users to convert the Membership Plugin WordPress plugin before 4.0.6's own tables to a narrower character set, which irreversibly replaces every 4-byte character (such as emoji and some CJK characters) in the membership level, discount code and payment records with a question mark.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-124671

Burst Statistics < 3.7.5 - Unauthenticated Analytics Disclosure Beyond Shared Report Date Range

The Burst Statistics WordPress plugin before 3.7.5 does not enforce a shared report's date range on the analytics it serves to the report's share link, allowing anyone holding the link to read the report's statistics for any period the site retains rather than the period the report was shared for.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
Wordpress-extensions
Products
Burst Statistics
CVE-2026-124673

Burst Statistics < 3.7.5 - Unauthenticated Draft and Private Post Title Disclosure via Forged Page View

The Burst Statistics WordPress plugin before 3.7.5 does not check that a reported page view belongs to published content, nor check post status before listing post titles and links in its public statistics output, allowing unauthenticated attackers to disclose the titles and permalinks of draft, pending and private posts.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
Wordpress-extensions
Products
Burst Statistics
CVE-2026-127048

Lazy Blocks < 3.0.0 - Unauthenticated RCE

The Custom Block Builder WordPress plugin before 3.0.0 does not properly deny unauthorised requests to its REST routes, as its permission checks return a non-error response that WordPress treats as granted, allowing unauthenticated users to execute arbitrary PHP code on the server.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-13409

Denial of Service via VAPIX Dynamicoverlay CGI in Axis OS

The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Axis Communications Ab
Products
Axis Os
CVE-2026-14542

Privilege Escalation in Axis OS VAPIX SIP Configuration API

The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an admin-privileged service account.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Axis Communications Ab
Products
Axis Os
CVE-2026-63288

Authentication Bypass via WebSocket Endpoint in Axis Secure Entry Cameras

A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-12389

Remote Code Execution via Deserialization Vulnerability in Axis Camera Station Pro

A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Axis Communications Ab
Products
Axis Camera Station Pro
CVE-2026-112137

Cross‑Site Request Forgery Vulnerability in Mendix Studio Pro 11

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly validate Content-Type and Origin headers on incoming HTTP requests, leaving it vulnerable to Cross-Site Request Forgery (CSRF). This could allow a malicious web page to trick a user's browser into sending unauthorized requests and executing unintended actions on the local MCP Server.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-110984

RegistrationMagic < 6.1.0.4 - Admin+ SQLi via 'rm_fromdate' and 'rm_dateupto' Parameters

The RegistrationMagic WordPress plugin before 6.1.0.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-103361

Payment Gateway via Valitor for WooCommerce < 1.9.41 - Unauthenticated Payment Bypass via a Shipped Default Verification Code

The Payment Gateway via Valitor for WooCommerce WordPress plugin before 1.9.41 does not properly validate the authenticity of payment callbacks, relying on a verification secret that ships with a hard-coded default value used by every store that has not changed it, allowing unauthenticated attackers to forge a valid payment confirmation and mark arbitrary orders as paid.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-125715

TA Session Access Control Failure in Samsung mTower

Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or use a close existing sessions if thier identifiers are known, The impact depends on the affected TA.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung Open Source
Products
Mtower
CVE-2026-58114

NTLM Relay Authentication Vulnerability in Siemens SIMATIC Products

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V17 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC Runtime Professional V20 (All versions), SIMATIC WinCC Runtime Professional V21 (All versions), SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected systems do not properly secure their remote user authentication with the deprecated NTLM protocol. This could allow unauthenticated remote attackers, who have achieved a machine in the middle position, to relay NTLM authentication and impersonate a legitimate user. The potential impact depends on the services that are accessible, e.g. a SQL server used by WinCC.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—