CVEs published February 16, 2026
77,396 CVEs in 2026
The WhatsApp bridge component in Nanobot binds the WebSocket server to all network interfaces (0.0.0.0) on port 3001 by default and does not require authentication for incoming connections.
A vulnerability was found in EFM iptime A6004MX 14.18.2.
Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids.
Heap buffer overflow in libvpx.
The WowRevenue plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'Notice::install_activate_plugin' function in all versions up to, and…
A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script…
A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T.
An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to…
An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to…
A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an…
Mattermost Desktop App versions <=6.0 6.2.0 5.2.13.0 fail to validate help links which allows a malicious Mattermost server to execute arbitrary executables on a user’s system via the user clicking on…
Crypt::URandom versions from 0.41 before 0.55 for Perl is vulnerable to a heap buffer overflow in the XS function crypt_urandom_getrandom().
A vulnerability has been found in zhanghuanhao LibrarySystem 图书馆管理系统 up to 1.1.1.
A security flaw has been discovered in yued-fe LuLu UI up to 3.0.0.
A flaw has been found in Tosei Self-service Washing Machine 4.02.
SmarterTools SmarterMail before 9526 allows XSS via MAPI requests.
A vulnerability was detected in Wavlink WL-NU516U1 20251208.
A security vulnerability has been detected in Wavlink WL-NU516U1 up to 130/260.
A weakness has been identified in Total VPN 0.5.29.0 on Windows.
A security flaw has been discovered in Flos Freeware Notepad2 4.2.22/4.2.23/4.2.24/4.2.25.
A weakness has been identified in Wavlink WL-NU516U1 20251208.
Emails sent by pretix can utilize placeholders that will be filled with customer data.
Emails sent by pretix can utilize placeholders that will be filled with customer data.
A vulnerability was identified in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533.
A vulnerability was determined in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533.
A vulnerability was found in JingDong JD Cloud Box AX6600 up to 4.5.1.r4533.
A vulnerability has been found in kalcaddle kodbox up to 1.64.05.
A flaw has been found in GeekAI up to 4.2.4.
A security vulnerability has been detected in cskefu up to 8.0.1.
A security flaw has been discovered in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15.
A flaw has been found in WAYOS FBM-220G 24.10.19.
A vulnerability was determined in opencc JFlow up to 20260129.
A vulnerability was found in Comfast CF-N1 V2 2.6.0.2.
A vulnerability has been found in Comfast CF-N1 V2 2.6.0.2.
A vulnerability was detected in lintsinghua DeepAudit up to 3.0.3.
A security vulnerability has been detected in MindsDB up to 25.14.1.
A weakness has been identified in Wavlink WL-WN579A3 up to 20210219.
A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219.
A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219.
A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219.
A vulnerability was found in Wavlink WL-WN579A3 up to 20210219.
Emails sent by pretix can utilize placeholders that will be filled with customer data.
A vulnerability was identified in ZenTao up to 21.7.8.
A vulnerability was determined in ZenTao up to 21.7.8.
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 fail to properly validate login method restrictions which allows an authenticated user to bypass SSO-only login requirements via…
A vulnerability has been found in Free5GC up to 4.1.0.
A flaw has been found in Open5GS 2.7.6.
A vulnerability was detected in Open5GS up to 2.7.6.
A security vulnerability has been detected in Open5GS up to 2.7.6.
A weakness has been identified in JeecgBoot 3.9.1.
A vulnerability was identified in Comfast CF-E4 2.6.0.1.
Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain.
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate user identity and post ownership in the {{/api/v1/askPMI}} endpoint…
Mattermost versions 11.1.x <= 11.1.2, 10.11.x <= 10.11.9, 11.2.x <= 11.2.1 and Mattermost Plugin Zoom versions <=1.11.0 fail to validate the authenticated user when processing…
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site.
A vulnerability was detected in cskefu up to 8.0.1.
A vulnerability was detected in LigeroSmart up to 6.1.26.
A security vulnerability has been detected in LigeroSmart up to 6.1.26.
A weakness has been identified in LigeroSmart up to 6.1.26.
A vulnerability was identified in vichan-devel vichan up to 5.1.5.