All CVEs — page 1138 of 1220

The complete archive, 25 per page, newest first. 30483 records. Search instead.

• HIGH 7.3CVE-2026-93972public exploit available2026-09-20
• MEDIUM 5.3CVE-2026-93971public exploit available2026-09-20
• HIGH 7.3CVE-2026-93970public exploit available2026-09-20
• MEDIUM 4.3CVE-2026-865542026-09-20
• HIGH 7.3CVE-2026-93969public exploit available2026-09-20
• LOW 3.8CVE-2026-93968public exploit available2026-09-20
• MEDIUM 5.5CVE-2026-93967public exploit available2026-09-20
• MEDIUM 4.7CVE-2026-93966public exploit available2026-09-20
• LOW 3.7CVE-2026-929652026-09-20
• HIGH 7.2CVE-2026-925412026-09-20
• HIGH 7.2CVE-2026-925402026-09-20
• LOW 2.7CVE-2026-924232026-09-20
• MEDIUM 6.5CVE-2026-924222026-09-20
• MEDIUM 4.3CVE-2026-924102026-09-20
• MEDIUM 5.3CVE-2026-878402026-09-20
• HIGH 7.5CVE-2026-878392026-09-20
• MEDIUM 6.6CVE-2026-870682026-09-20
• HIGH 8.5CVE-2026-870672026-09-20

  The flaw allows users with forms-management permissions to execute arbitrary code by deserializing a value from an XML-RPC request, posing a high risk due to the broad permissions associated with this role.

• HIGH 7.5CVE-2026-850172026-09-20
• MEDIUM 6.8CVE-2026-842232026-09-20
• HIGH 8.1CVE-2026-828422026-09-20

  This flaw allows an attacker to authenticate as any account, including an administrator, by controlling the login name asserted by the identity provider, bypassing the configured criterion for linking identities.

• LOW 3.1CVE-2026-816542026-09-20
• MEDIUM 4.2CVE-2026-816532026-09-20
• LOW 2.7CVE-2026-816522026-09-20
• LOW 3.1CVE-2026-816512026-09-20