CVEs published February 24, 2026
77,396 CVEs in 2026
Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component.
Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software.
Sandbox escape in the Storage: IndexedDB component.
Sandbox escape in the Graphics: WebRender component.
Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.
Memory safety bugs present in Firefox 147 and Thunderbird 147.
Invalid pointer in the DOM: Core & HTML component.
Spoofing issue in the WebAuthn component in Firefox for Android.
Use-after-free in the DOM: Core & HTML component.
Use-after-free in the JavaScript: GC component.
JIT miscompilation in the JavaScript: WebAssembly component.
Use-after-free in the JavaScript: GC component.
Memory safety bugs present in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147.
Memory safety bugs present in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147.
Mitigation bypass in the Networking: Cache component.
Same-origin policy bypass in the Networking: JAR component.
Use-after-free in the Graphics: ImageLib component.
Incorrect boundary conditions in the Audio/Video: GMP component.
Use-after-free in the DOM: Window and Location component.
Use-after-free in the JavaScript Engine component.
Invalid pointer in the JavaScript Engine component.
Mitigation bypass in the DOM: Security component.
Privilege escalation in the Netmonitor component.
Integer overflow in the Libraries component in NSS.
Privilege escalation in the Netmonitor component.
Incorrect boundary conditions in the Networking: JAR component.
Privilege escalation in the Messaging System component.
Mitigation bypass in the DOM: HTML Parser component.
Integer overflow in the Audio/Video component.
Incorrect boundary conditions in the Web Audio component.
Use-after-free in the Audio/Video: Playback component.
Undefined behavior in the DOM: Core & HTML component.
Use-after-free in the DOM: Bindings (WebIDL) component.
Use-after-free in the JavaScript: WebAssembly component.
Use-after-free in the JavaScript Engine: JIT component.
Use-after-free in the JavaScript Engine component.
JIT miscompilation, use-after-free in the JavaScript Engine: JIT component.
Use-after-free in the JavaScript Engine component.
Integer overflow in the JavaScript: Standard Library component.
Caddy's FastCGI path splitting logic computes the split index on a lowercased copy of the request path and then uses that byte index to slice the original path.
Incorrect boundary conditions in the Graphics: ImageLib component.
Use-after-free in the JavaScript: GC component.
Incorrect boundary conditions in the WebRTC: Audio/Video component.
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain hard-coded administrative credentials that cannot be changed by users.
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior implement an authentication token (X-User-Token) with insufficient expiration.
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior ship with default credentials that are not forced to be changed during installation or commissioning.
Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains.
Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe using the ObjectURI "doclinkServer.soap".
When performing aggregate queries, Ormar ORM constructs SQL expressions by passing user-supplied column names directly into `sqlalchemy.text()` without any validation or sanitization.
All versions of InSAT MasterSCADA BUK-TS are susceptible to OS command injection through a field in its MMadmServ web interface.
InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface.
The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs.
An attacker may leverage a vulnerability in the password reset feature to capture a user's token and reset the password on their behalf.
bleon-ethical/api-gateway-deploy provides API gateway deployment.
Uninitialized memory in the Graphics: Text component.
Caddy's HTTP `host` request matcher is documented as case-insensitive, but when configured with a large host list (>100 entries) it becomes case-sensitive due to an optimized matching path.
Caddy's HTTP `path` request matcher is intended to be case-insensitive, but when the match pattern contains percent-escape sequences (`%xx`) it compares against the request's escaped path without lowercasing.
Two swallowed errors in `ClientAuthentication.provision()` cause mTLS client certificate authentication to silently fail open when a CA certificate file is missing, unreadable, or malformed.
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 generate predictable numeric session identifiers in the web management interface.
A vulnerability has been found in Tenda AC8 16.03.34.06.
Use-after-free in the DOM: Core & HTML component.
Use-after-free in the Storage: IndexedDB component.
There is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution.
When yt-dlp's `--netrc-cmd` command-line option (or `netrc_cmd` Python API parameter) is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL.…
EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface.
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior contain a command injection vulnerability in the traceroute diagnostic function of the affected device web management interface.
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization vulnerability.
ImageMagick is free and open-source software used for editing and manipulating digital images.
Server-Side Rendered pages that return an error with a prerendered custom error page (eg. `404.astro` or `500.astro`) are vulnerable to SSRF.
FASP registration requires manual approval by an administrator.
ImageMagick is free and open-source software used for editing and manipulating digital images. `WriteUHDRImage` in `coders/uhdr.c` uses `int` arithmetic to compute the pixel buffer size.
The `aVideoEncoder.json.php` API endpoint accepts a `downloadURL` parameter and fetches the referenced resource server-side without proper validation or an allow-list.
A vulnerability exists in REB500 for an authenticated user with low-level privileges to access and alter the content of directories by using the DAC protocol that the user is not authorized to do so.
A vulnerability exists in REB500 for an authenticated user with Installer role to access and alter the contents of directories that the role is not authorized to do so.
An out of bounds read vulnerability in the grpcfuse kernel module present in the Linux VM in Docker Desktop for Windows, Linux and macOS up to version 4.61.0 could allow a local attacker to cause an…
SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.
A potential unsafe operation occurs in component `MarkdownRenderer.jsx`, allowing for Cross-Site Scripting(XSS) when the model outputs items containing `<script>` tag.
Information disclosure, mitigation bypass in the Settings UI component.
Incorrect boundary conditions in the JavaScript: WebAssembly component.
Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android.
Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component.
free5gc UDM provides Unified Data Management (UDM) for free5GC, an open-source project for 5th generation (5G) mobile core networks.
Missing authentication middleware in the ActualBudget server component allows any unauthenticated user to query the SimpleFIN and Pluggy.ai integration endpoints and read sensitive bank account balance and…
36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of the `wasi:http/types.fields` resource is susceptible to panics when too many fields are added to the set of headers.
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior do not implement rate limiting or account lockout on failed login attempts, enabling brute-force attacks against user credentials.
Binardat 10G08-0800GSM network switch firmware versions prior to V300SP10260209 store a user password in a client-side cookie as a Base64-encoded value accessible via the web interface.
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior use RC4 with a hard-coded key embedded in client-side JavaScript.
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior expose user passwords in plaintext within the administrative interface and HTTP responses, allowing recovery of valid credentials.
The `component-model-async` feature became the default, which brought with it a new implementation of `[Typed]Func::call_async` which made it capable of calling async-typed guest export functions.
Tattile Smart+, Vega, and Basic device families firmware versions 1.181.5 and prior expose RTSP streams without requiring authentication.
free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks.
free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
The use of the `fiber_flash` cookie can force an unbounded allocation on any server.
A Path Traversal (CWE-22) vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and read arbitrary files on the server file system on Windows.
A denial of service vulnerability exists in Fiber v2 and v3 that allows remote attackers to crash the application by sending requests to routes with more than 30 parameters.
free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
A security vulnerability has been detected in itsourcecode Document Management System 1.0.
A weakness has been identified in itsourcecode Document Management System 1.0.
A vulnerability was determined in DataLinkDC dinky up to 1.2.5.
A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0.
A vulnerability was detected in itsourcecode Event Management System 1.0.
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50(ABPM.9.7)C0 could allow an authenticated…
An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary files and conduct denial-of-service during installation by placing…
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary…
Improper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0 and earlier allows an authenticated user with view-only permission to access sensitive connection data.
The local caddy admin API (default listen `127.0.0.1:2019`) exposes a state-changing `POST /load` endpoint that replaces the entire running configuration.
The path sanitization routine in file matcher doesn't sanitize backslashes which can lead to bypassing path related security protections.
A Server-Side Request Forgery (SSRF) vulnerability exists in Payload's external file upload functionality.
36.0.6, 4.0.04, 41.0.4, and 42.0.0, Wasmtime's implementation of WASI host interfaces are susceptible to guest-controlled resource exhaustion on the host.
The SSRF validation in Craft CMS’s GraphQL Asset mutation uses `gethostbyname()`, which only resolves IPv4 addresses.
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
A SQL LIKE wildcard injection vulnerability in the `/api/token/search` endpoint allows authenticated users to cause denial of service through resource exhaustion by crafting malicious search patterns.
An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a PostgreSQL database connection.
A Sensitive Data Exposure vulnerability exists in Apache Superset allowing authenticated users to retrieve sensitive user information.
An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls.
Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via…
Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts.
A specially crafted `RESTORE` command can cause Valkey to hit an assertion, causes the server to shutdown.
A vulnerability was determined in exiftool up to 13.49 on macOS.
A vulnerability was found in Intelbras TIP 635G 1.12.3.5.
A vulnerability has been found in HummerRisk up to 1.5.0.
A flaw has been found in HummerRisk up to 1.5.0.
A vulnerability was detected in HummerRisk up to 1.5.0.
A security vulnerability has been detected in HummerRisk up to 1.5.0.
A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10.
A vulnerability was found in DataLinkDC dinky up to 1.2.5.
A vulnerability has been found in DataLinkDC dinky up to 1.2.5.
The SSRF validation in Craft CMS’s GraphQL Asset mutation performs DNS resolution separately from the HTTP request.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
AVideo allows Markdown in video comments and uses Parsedown (v1.7.4) without Safe Mode enabled.
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and execute arbitrary JavaScript in the…
Several NiceGUI APIs that execute methods on client-side elements (`Element.run_method()`, `AgGrid.run_grid_method()`, `EChart.run_chart_method()`, and others) use an `eval()` fallback in the…
Astro server actions have no default request body size limit, which can lead to memory exhaustion DoS.
The WebSockets handling of NATS messages handles compressed messages via the WebSockets negotiated compression.
FASP registration requires manual approval by an administrator.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
A path traversal vulnerability ("Zip Slip") exists in bit7z's archive extraction functionality.
Use-after-free in the JavaScript: WebAssembly component.
Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.
The NEF component reliably leaks internal parsing error details (e.g., invalid character 'n' after top-level value) to remote clients, which can aid attackers in service fingerprinting.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
ImageMagick is free and open-source software used for editing and manipulating digital images.
RTU500 web interface: An unprivileged user can read user management information.
ImageMagick is free and open-source software used for editing and manipulating digital images.
The filter query parameter in the dependency listing endpoints is JSON-decoded and the value field is concatenated directly into RLIKE clauses without sanitization or parameterized queries.
A post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to crash a firewall.
A post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker to crash a firewall.
A post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a firewall.
Multiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS management interface due to improper bounds checking in a API endpoint.
A Time-of-Check-Time-of-Use (TOCTOU) race condition exists in Craft CMS’s token validation service for tokens that explicitly set a limited usage.
A stored Cross-site Scripting (XSS) vulnerability exists in the `editableTable.twig` component when using the `html` column type.
GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components functionality within components.php.
A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.
A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4.
A vulnerability was detected in horilla-opensource horilla up to 1.0.2.
A flaw has been found in itsourcecode Event Management System 1.0.
Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior lack CSRF protections for state-changing actions in the administrative interface.
Under certain conditions SAP S/4HANA (Manage Payment Media) allows an authenticated attacker to access information which would otherwise be restricted.
NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue.
A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issue affects Devolutions Server: before 2025.3.15.
Race condition in the JavaScript: GC component.
A flaw has been found in horilla-opensource horilla up to 1.0.2.
Dell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of Server-Side Security vulnerability.