All CVEs — page 65 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• MEDIUM 4.1CVE-2026-97869public exploit available2026-09-25
• LOW 3.5CVE-2026-978682026-09-25
• MEDIUM 4.3CVE-2026-974692026-09-25
• UNSCOREDCVE-2026-968742026-09-25
• CRITICAL 9.8CVE-2026-92161public exploit available2026-09-25

  The flaw in FriendsOfFlarum OAuth allows unauthenticated attackers to link their Discord account to a victim's Flarum account by exploiting the lack of email verification checks, potentially compromising user accounts, including administrator accounts.

• MEDIUM 4.8CVE-2026-85293public exploit available2026-09-25
• MEDIUM 4.8CVE-2026-85292public exploit available2026-09-25
• MEDIUM 6.5CVE-2026-85291public exploit available2026-09-25
• MEDIUM 5.3CVE-2026-85290public exploit available2026-09-25
• MEDIUM 6.5CVE-2026-85289public exploit available2026-09-25
• MEDIUM 6.5CVE-2026-85274public exploit available2026-09-25
• UNSCOREDCVE-2026-67236public exploit available2026-09-25
• CRITICAL 9.1CVE-2026-62262public exploit available2026-09-25

  This vulnerability allows unauthenticated users to extract database information through SQL injection by manipulating the ratings parameter in the search functionality.

• MEDIUM 6CVE-2026-54790public exploit available2026-09-25
• HIGH 7.5CVE-2026-50547public exploit available2026-09-25
• HIGH 7.5CVE-2026-49850public exploit available2026-09-25
• HIGH 8.1CVE-2026-44642public exploit available2026-09-25
• HIGH 7.2CVE-2026-42324public exploit available2026-09-25
• HIGH 7.2CVE-2026-42323public exploit available2026-09-25
• CRITICAL 9.1CVE-2026-42322public exploit available2026-09-25

  The flaw allows an authenticated administrator to upload an image with a server-executable extension, leading to arbitrary command execution and other severe impacts.

• MEDIUM 4.9CVE-2026-39372public exploit available2026-09-25
• CRITICAL 9.1CVE-2026-39353public exploit available2026-09-25

  The flaw allows a malicious PHP file to be executed with web-server privileges, enabling remote code execution.

• HIGH 7.2CVE-2026-33639public exploit available2026-09-25
• MEDIUM 5.3CVE-2026-100230public exploit available2026-09-25
• MEDIUM 5.6CVE-2026-97866public exploit available2026-09-25