All CVEs — page 255 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• UNSCOREDCVE-2026-122602026-10-08
• CRITICAL 9.8CVE-2026-105110public exploit available2026-10-08

  This flaw allows unauthenticated attackers to execute arbitrary commands as root via the CLI parameter in the login.xgi CGI endpoint, posing a critical risk due to potential full system compromise.

• UNSCOREDCVE-2026-936992026-10-08
• MEDIUM 6.1CVE-2026-1074662026-10-08
• UNSCOREDCVE-2026-874282026-10-08
• UNSCOREDCVE-2026-874262026-10-08
• UNSCOREDCVE-2026-874252026-10-08
• UNSCOREDCVE-2026-874242026-10-08
• UNSCOREDCVE-2026-854902026-10-08
• UNSCOREDCVE-2026-854892026-10-08
• UNSCOREDCVE-2026-854882026-10-08
• UNSCOREDCVE-2026-854872026-10-08
• UNSCOREDCVE-2026-854862026-10-08
• UNSCOREDCVE-2026-854232026-10-08
• UNSCOREDCVE-2026-854222026-10-08
• UNSCOREDCVE-2026-854212026-10-08
• CRITICAL 9.8CVE-2026-850972026-10-08

  The Bricksforge plugin for WordPress allows unauthenticated attackers to upload and execute arbitrary PHP code by exploiting insufficient validation of the 'temporaryFileUploads' parameter.

• MEDIUM 5.3CVE-2026-942752026-10-08
• LOW 2.7CVE-2026-942582026-10-08
• MEDIUM 6.3CVE-2026-942462026-10-08
• MEDIUM 6.5CVE-2026-942452026-10-08
• MEDIUM 4.3CVE-2026-942442026-10-08
• MEDIUM 6.6CVE-2026-868282026-10-08
• MEDIUM 5.3CVE-2026-868272026-10-08
• MEDIUM 5.9CVE-2026-868262026-10-08