CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-89079 | CRITICAL | 9.8 | The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover i… | — |
|
2026-10-16 |
| CVE-2026-103768 | CRITICAL | 9.8 | The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitr… | — |
|
2026-10-16 |
| CVE-2026-109515 | CRITICAL | 9.8 | The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin fo… | — |
|
2026-10-16 |
| CVE-2026-109219 | CRITICAL | 9.8 | The Mang Board plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, an… | — |
|
2026-10-16 |
| CVE-2026-104798 | CRITICAL | 9.8 | The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to Privilege Escalatio… | — |
|
2026-10-16 |
| CVE-2026-111444 | CRITICAL | 9.8 | Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKS… | — |
|
2026-10-16 |
| CVE-2026-94134 | CRITICAL | 9.1 | The Apache Airflow SSH provider hook disables SSH host-key verification by default: unless `host_key… | — |
|
2026-10-15 |
| CVE-2026-111329 | CRITICAL | 9.8 | JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow un… | — |
|
2026-10-15 |
| CVE-2026-111322 | CRITICAL | 9.8 | Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthentic… | — |
|
2026-10-15 |
| CVE-2026-111283 | CRITICAL | 9.0 | BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability … | — |
|
2026-10-15 |
| CVE-2026-111281 | CRITICAL | 9.8 | Jooan JA-A12 IP cameras with firmware 009_20171107 and 05.02.31.105 contain a remote code execution … | — |
|
2026-10-15 |
| CVE-2026-110916 | CRITICAL | 9.6 | Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attack… | — |
|
2026-10-15 |
| CVE-2026-105039 | CRITICAL | 9.6 | EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 do not check user roles on… | — |
|
2026-10-15 |
| CVE-2026-105038 | CRITICAL | 9.8 | The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model adminis… | — |
|
2026-10-15 |
| CVE-2026-105037 | CRITICAL | 9.9 | EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-… | — |
|
2026-10-15 |
| CVE-2026-105032 | CRITICAL | 9.1 | The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and pr… | — |
|
2026-10-15 |
| CVE-2026-102764 | CRITICAL | 9.8 | The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The com… |
T1190
T1203
|
|
2026-10-15 |
| CVE-2026-57496 | CRITICAL | 9.6 | NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage … | — |
|
2026-10-15 |
| CVE-2026-55240 | CRITICAL | 9.1 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29,… | — |
|
2026-10-15 |
| CVE-2026-111235 | CRITICAL | 9.1 | An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridia… | — |
|
2026-10-15 |