CVEs published February 2, 2026
77,396 CVEs in 2026
SanboxJS does not properly restrict __lookupGetter__ which can be used to obtain prototypes, which can be used for escaping the sandbox / remote code execution.
A command injection vulnerability allows authenticated users with write permissions to execute arbitrary shell commands on the Signal K server when the set-system-time plugin is enabled.
The database account and password are hardcoded, allowing login with the account to manipulate the database in MagicInfo9 Server.This issue affects MagicINFO 9 Server: less than 21.1090.1.
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server:…
When an invalid image is sent to vLLM's multimodal endpoint, PIL throws an error. vLLM returns this error to the client, leaking a heap address.
This could lead to remote escalation of privilege with no additional execution privileges needed.
This vulnerability allows an attacker with a malicious remote server to cause the local server to sign an arbitrary event upon user interaction.
This could lead to local escalation of privilege with User execution privileges needed.
Every NixOS based Odoo setup publicly exposes the database manager without any authentication.
An unauthenticated user can upload arbitrary files to execute remote code, leading to privilege escalation in MagicInfo9 Server.
25.0.82, and 26.0.5, the MaintenanceController exposes an action zipLanguage which takes a lang parameter and passes it directly to a system zip command via exec().
The application contains path traversal vulnerability in multiple file operation handlers in server/handles/fsmanage.go.
A command injection vulnerability existed in OpenClaw’s Docker sandbox execution mechanism due to unsafe handling of the PATH environment variable when constructing shell commands.
During the installation of the Native Access application, a privileged helper `com.native-instruments.NativeAccess.Helper2`, which is used by Native Access to trigger functions via XPC communication like…
This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed.
RaspAP raspap-webgui versions prior to 3.3.6 contain an OS command injection vulnerability.
A flaw was found in libsoup.
EAP Legislator is vulnerable to Path Traversal in file extraction functionality.
A vulnerability in the `lollms_generation_events.py` component of parisneo/lollms version 5.9.0 allows unauthenticated access to sensitive Socket.IO events.
The OAuth 2.0 implementation for GitHub and Google login providers is vulnerable to Login Cross-Site Request Forgery (CSRF).
Certificate verification is disabled by default for all storage driver communications.
User control of properties and methods of the Acroform module allows users to inject arbitrary PDF objects, such as JavaScript actions.
A flaw was found in foreman_kubevirt.
A flaw was found in fog-kubevirt.
FacturaScripts is open-source enterprise resource planning and accounting software.
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and BE3600 v1 (vpn modules) allows adjacent authenticated attacker execute arbitrary code.
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2 and Archer AXE75 v2 (web modules) allows adjacent authenticated attacker to execute arbitrary code.
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(vpn modules) and BE3600 v1 allows adjacent authenticated attacker execute arbitrary code.
An OS Command Injection vulnerability exists in the Surfshark VPN login functionality in TP-Link Archer BE230 v1.2, BE3600v1 and AXE75 v1, allowing an adjacent authenticated attacker to execute…
An OS Command Injection vulnerability in TP-Link Archer BE230 v1.2(web modules) and Archer AXE75 v1.0 allows adjacent authenticated attacker to execute arbitrary code.
It was found that the XPC service offered by the privileged helper of Native Access uses the PID of the connecting client to verify its code signature.
This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.
This could lead to local denial of service if a malicious actor has already obtained the System privilege.
This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.
A timing attack vulnerability in the sign-in process allows unauthenticated attackers to determine if a specific email address is registered on the platform.
Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
A vulnerability in huggingface/text-generation-inference version 3.3.6 allows unauthenticated remote attackers to exploit unbounded external image fetching during input validation in VLM mode.
A vulnerability was found in EFM ipTIME A8004T 14.18.2.
A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0.
A command injection vulnerability may be exploited after the admin's authentication via the configuration backup restoration function of the TP-Link Archer BE230 v1.2.
A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2.
A command injection vulnerability may be exploited after the admin's authentication in the VPN Connection Service on the Archer BE230 v1.2 and Archer AXE75 v1.0.
A command injection vulnerability may be exploited after the admin's authentication in the cloud communication interface on the TP-Link Archer BE230 v1.2.
The Amazon SageMaker Python SDK before v3.2.0 and v2.256.0 includes the ModelBuilder HMAC signing key in the cleartext response elements of the DescribeTrainingJob function.
The OpenTelemetry Go SDK in version v1.20.0-1.39.0 is vulnerable to Path Hijacking (Untrusted Search Paths) on macOS/Darwin systems.
BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2.
A medium-severity vulnerability has been identified in BeyondTrust Privilege Management for Windows versions <=25.7.
This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.
This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.
This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.
A vulnerability was determined in EFM ipTIME A8004T 14.18.2.
User control of the first argument of the addImage method results in denial of service.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed.
A vulnerability was identified in JeecgBoot 3.9.0.
A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions.
Cross-site scripting vulnerability exists in E-mail function of Cybozu Garoon 5.0.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
Amazon SageMaker Python SDK before v3.1.1 or v2.256.0 disables TLS certificate verification for HTTPS connections made by the service when a Triton Python model is imported, incorrectly allowing for…
This could lead to local denial of service if a malicious actor has already obtained the System privilege.
User control of the first argument of the addMetadata function allows users to inject arbitrary XML.
FacturaScripts is open-source enterprise resource planning and accounting software.
Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.
A Stored XSS exists in the chat in-game system.
This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege.
A flaw was found in SoupServer.
A vulnerability has been found in Free5GC pcf up to 1.4.1.
A flaw has been found in Open5GS up to 2.7.6.
A vulnerability was detected in Open5GS up to 2.7.6.
A security vulnerability has been detected in Open5GS up to 2.7.6.
A security flaw has been discovered in Zhong Bang CRMEB up to 5.6.3.
A path traversal vulnerability in SignalK Server's applicationData API allows authenticated users on Windows systems to read, write, and list arbitrary files and directories on the filesystem.
The addJS method in the jspdf Node.js build utilizes a shared module-scoped variable (text) to store JavaScript content.
A vulnerability was identified in EFM ipTIME A8004T 14.18.2.
Tuleap is missing CSRF protection in the Overview inconsistent items.
Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass.
A heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin.
A vulnerability was determined in SourceCodester Medical Certificate Generator App 1.0.
A weakness has been identified in Yealink MeetingBar A30 133.321.0.3.
The Five Star Restaurant Reservations WordPress plugin before 2.7.9 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as…
A vulnerability has been discovered in GitLab CE/EE affecting all versions starting with 16.8 before 18.5.0 that could have allowed unauthorized edits to merge request approval rules under certain conditions.
A vulnerability has been found in DJI Mavic Mini, Air, Spark and Mini SE up to 01.00.0500.
A vulnerability was found in D-Link DSL-6641K N8.TR069.20131126.
When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory.