All CVEs — page 528 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• UNSCOREDCVE-2026-95806public exploit available2026-09-22
• UNSCOREDCVE-2026-95805public exploit available2026-09-22
• HIGH 8.1CVE-2026-95655public exploit available2026-09-22

  Aureus ERP before 1.5.0 allows authenticated users to access arbitrary messages by submitting sequential message IDs, leading to unauthorized access and potential data exposure.

• HIGH 7.4CVE-2026-95654public exploit available2026-09-22
• HIGH 7.5CVE-2026-95653public exploit available2026-09-22
• HIGH 7.5CVE-2026-946402026-09-22
• LOW 3.4CVE-2026-92706public exploit available2026-09-22
• MEDIUM 5.4CVE-2026-904622026-09-22
• UNSCOREDCVE-2026-88010public exploit available2026-09-22
• MEDIUM 6.3CVE-2026-868052026-09-22
• UNSCOREDCVE-2026-86698public exploit available2026-09-22
• UNSCOREDCVE-2026-85055public exploit available2026-09-22
• MEDIUM 5.5CVE-2026-81886public exploit available2026-09-22
• MEDIUM 5.5CVE-2026-81885public exploit available2026-09-22
• LOW 2.5CVE-2026-81884public exploit available2026-09-22
• LOW 3.3CVE-2026-81883public exploit available2026-09-22
• LOW 3.3CVE-2026-81882public exploit available2026-09-22
• LOW 3.3CVE-2026-81881public exploit available2026-09-22
• MEDIUM 5.5CVE-2026-81880public exploit available2026-09-22
• MEDIUM 5.5CVE-2026-81879public exploit available2026-09-22
• MEDIUM 5.5CVE-2026-81878public exploit available2026-09-22
• CRITICAL 9.1CVE-2026-801562026-09-22

  This vulnerability allows authenticated attackers to write arbitrary data to any location on the device's filesystem, leading to remote code execution by exploiting a path traversal flaw in the web management portal upload endpoint.

• CRITICAL 10CVE-2026-801552026-09-22

  This vulnerability allows unauthenticated attackers to read sensitive configuration files and upload files to arbitrary locations, leading to remote code execution.

• CRITICAL 9.6CVE-2026-801542026-09-22

  The flaw allows unauthenticated attackers to derive valid session tokens and bypass security checks, leading to unauthorized access and potential device control.

• CRITICAL 9.1CVE-2026-801522026-09-22

  The flaw allows authenticated attackers with services permission to execute arbitrary shell commands as root, leading to complete loss of confidentiality, integrity, and availability.