CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-107656 | CRITICAL | 9.8 | An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5… |
T1078
T1548
|
|
2026-10-26 |
| CVE-2026-107092 | CRITICAL | 9.8 | NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116235 | CRITICAL | 9.1 | A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116234 | CRITICAL | 9.1 | A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116233 | CRITICAL | 9.1 | A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown … |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116232 | CRITICAL | 9.9 | A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmp_set o… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116231 | CRITICAL | 9.9 | A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unkn… |
T1190
T1203
|
|
2026-10-26 |
| CVE-2026-116207 | CRITICAL | 9.1 | YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL inje… |
T1190
T1005
+1
|
|
2026-10-25 |
| CVE-2026-115214 | CRITICAL | 9.8 | The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the user-identity… |
T1078
T1548
|
|
2026-10-25 |
| CVE-2026-115995 | CRITICAL | 9.6 | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impac… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114820 | CRITICAL | 9.1 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-115933 | CRITICAL | 9.9 | Postiz signs its session, invitation and password reset tokens with one shared secret and without an… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-115932 | CRITICAL | 9.6 | When a post is published, Postiz treats a media path that is not a web address as a file on the serv… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-94075 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite a… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-114196 | CRITICAL | 9.8 | Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows Object Inje… |
T1190
T1203
|
|
2026-10-24 |
| CVE-2026-112866 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-24 |
| CVE-2026-111402 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-10-24 |
| CVE-2026-110956 | CRITICAL | 9.8 | The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a genuine secon… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-115806 | CRITICAL | 9.8 | The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object Injection in… |
T1078
T1548
|
|
2026-10-24 |
| CVE-2026-115931 | CRITICAL | 9.9 | Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. T… |
T1190
T1203
|
|
2026-10-23 |