Export limit exceeded: 425892 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Expected end of text, found '–' (at char 33), (line:1, col:34)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,892

Export CSV
CVE-2026-13409

Denial of Service via VAPIX Dynamicoverlay CGI in Axis OS

The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality. This flaw can only be exploited after authenticating with an operator or admin-privileged service account.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Axis Communications Ab
Products
Axis Os
CVE-2026-14542

Privilege Escalation in Axis OS VAPIX SIP Configuration API

The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation. This flaw can only be exploited after authenticating with an admin-privileged service account.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Axis Communications Ab
Products
Axis Os
CVE-2026-63288

Authentication Bypass via WebSocket Endpoint in Axis Secure Entry Cameras

A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint. This bypasses the intended authentication layer.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-12389

Remote Code Execution via Deserialization Vulnerability in Axis Camera Station Pro

A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Axis Communications Ab
Products
Axis Camera Station Pro
CVE-2026-112137

Cross‑Site Request Forgery Vulnerability in Mendix Studio Pro 11

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly validate Content-Type and Origin headers on incoming HTTP requests, leaving it vulnerable to Cross-Site Request Forgery (CSRF). This could allow a malicious web page to trick a user's browser into sending unauthorized requests and executing unintended actions on the local MCP Server.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-101275

Insufficient validation of payment status in pretix-adyen

Our payment integration with Adyen did not properly validate payment status responses. An attacker could use a successful payment status response from one payment and supply it to the system for a different payment, gaining access to multiple valid tickets with only one payment.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-124684

Use After Free in Samsung Escargot Leading to Pointer Manipulation

A use-after-free vulnerability exists in Samsung Escargot 5.0.2 in the buffer-access paths for ReloadableString and CompressibleString. Internal raw character accessors and the public StringRef::stringBufferAccessData() API did not preserve the lifetime of the underlying buffer while it remained in use. As a result, idle unloading or garbage-collection compression could release the buffer and leave a stale pointer. Subsequent access may cause the process to crash or, under allocation-dependent conditions, expose limited contents of another heap allocation. The issue was addressed by adding buffer-lifetime reference tracking and removing unsafe raw character accessors.

CVSS 3.1 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung Open Source
Products
Escargot
CVE-2026-110984

RegistrationMagic < 6.1.0.4 - Admin+ SQLi via 'rm_fromdate' and 'rm_dateupto' Parameters

The RegistrationMagic WordPress plugin before 6.1.0.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-103361

Payment Gateway via Valitor for WooCommerce < 1.9.41 - Unauthenticated Payment Bypass via a Shipped Default Verification Code

The Payment Gateway via Valitor for WooCommerce WordPress plugin before 1.9.41 does not properly validate the authenticity of payment callbacks, relying on a verification secret that ships with a hard-coded default value used by every store that has not changed it, allowing unauthenticated attackers to forge a valid payment confirmation and mark arbitrary orders as paid.

CVSS n/a EPSS n/a KEV · Not listed
Vendors
—
Products
—
CVE-2026-125715

TA Session Access Control Failure in Samsung mTower

Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or use a close existing sessions if thier identifiers are known, The impact depends on the affected TA.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Samsung Open Source
Products
Mtower
CVE-2026-58114

NTLM Relay Authentication Vulnerability in Siemens SIMATIC Products

A vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information Server 2020 (All versions), SIMATIC Information Server 2022 (All versions), SIMATIC PCS 7 V9.1 (All versions), SIMATIC Process Historian 2020 (All versions), SIMATIC Process Historian 2022 (All versions), SIMATIC WinCC Runtime Professional V17 (All versions), SIMATIC WinCC Runtime Professional V18 (All versions), SIMATIC WinCC Runtime Professional V19 (All versions), SIMATIC WinCC Runtime Professional V20 (All versions), SIMATIC WinCC Runtime Professional V21 (All versions), SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected systems do not properly secure their remote user authentication with the deprecated NTLM protocol. This could allow unauthenticated remote attackers, who have achieved a machine in the middle position, to relay NTLM authentication and impersonate a legitimate user. The potential impact depends on the services that are accessible, e.g. a SQL server used by WinCC.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-59082

Arbitrary Code Execution via Implicit Active Content Execution in SIMATIC WinCC

A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute active content when opening files. This could allow an attacker to make the user execute arbitrary code on the device.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-109097

Code Injection via Unescaped Message Definition Files in ROS#

A vulnerability has been identified in ROS# (All versions < V2.3.1). Affected systems do not properly escape text of message definition files. This could allow an attacker that is able to pass a crafted message definition file to the user to inject arbitrary code into the generated program.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Siemens
Products
Ros
CVE-2026-109830

Unchecked Configuration File Execution Leading to Remote Code Execution on Siemens meta-iot2050

A vulnerability has been identified in meta-iot2050 (All versions >= V01.03.01). Affected devices take parts from a configuration file and execute them unchecked. This could allow an attacker which is able to manipulate the configuration file to make the user execute arbitrary code on the device.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
—
Products
—
CVE-2026-112136

Loopback Listener Misconfiguration Exposing MCP Server to Remote Access

A vulnerability has been identified in Mendix Studio Pro 11 (All versions >= V11.15.0 < V11.16.0), Mendix Studio Pro 11.12 (All versions >= V11.12.6 < V11.12.7). The affected products MCP Server does not properly restrict its HTTP listener to the loopback interface, leaving it potentially exposed to remote systems. This could allow an attacker with network access to interact with the MCP Server remotely.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
—
Products
—