Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 81 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-9508 |
10 (4.0)
|
Incorrect Permission Assignment for Critical Resource … |
Suprema |
BioStar 2 (server) |
2026-05-29T12:09:02.026Z | 2026-05-29T13:33:31.937Z |
| CVE-2026-9152 |
10 (4.0)
|
Unauthenticated SOAP Endpoint in Altium 365 SearchServ… |
Altium |
Altium 365 |
2026-05-21T00:47:24.365Z | 2026-05-21T12:41:39.633Z |
| CVE-2026-8985 |
10 (4.0)
|
Unauthenticated Command Injection |
Autel |
MaxiCharger Single |
2026-07-21T21:11:25.089Z | 2026-07-22T19:37:37.583Z |
| CVE-2026-8984 |
10 (4.0)
|
Unauthenticated RCE |
Autel |
MaxiCharger Single |
2026-07-21T21:08:49.622Z | 2026-07-22T19:38:02.292Z |
| CVE-2026-8983 |
10 (4.0)
|
Backdoor Authentication Token |
Autel |
MaxiCharger Single |
2026-07-21T21:03:22.675Z | 2026-07-22T19:40:28.831Z |
| CVE-2026-8982 |
10 (4.0)
|
Hard-coded / Backdoor Accounts |
Autel |
MaxiCharger Single |
2026-07-21T21:01:02.360Z | 2026-07-22T19:40:35.197Z |
| CVE-2026-86296 |
10 (4.0)
10 (3.1)
10 (3.0)
|
D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-ba… |
D-Link |
DIR-822A |
2026-09-07T10:30:08.515Z | 2026-09-07T10:30:08.515Z |
| CVE-2026-86218 |
10 (4.0)
|
pre-authentication remote code execution |
N-able |
N-central |
2026-09-06T02:15:28.824Z | 2026-09-07T10:54:58.576Z |
| CVE-2026-86152 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command … |
Tenda |
CP3 |
2026-09-06T01:30:10.981Z | 2026-09-06T01:30:10.981Z |
| CVE-2026-85061 |
10 (3.1)
|
MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize()… |
maplibre |
maplibre-gl-js |
2026-09-03T20:18:50.854Z | 2026-09-04T18:37:12.250Z |
| CVE-2026-84147 |
10 (4.0)
|
Remote Code Execution Vulnerability in Manacle Technol… |
Manacle Technologies |
Multi-tenant ERP System |
2026-09-01T12:32:59.881Z | 2026-09-01T15:38:06.159Z |
| CVE-2026-83711 |
10 (3.1)
|
Microsoft Azure Active Directory B2C Elevation of Priv… |
Microsoft |
Entra |
2026-09-03T22:59:15.478Z | 2026-09-05T03:55:31.206Z |
| CVE-2026-83548 |
10 (3.1)
|
A Pre-authentication SSRF vulnerability exists in… |
SonicWall |
SMA1000 |
2026-09-01T21:25:45.368Z | 2026-09-03T03:55:31.337Z |
| CVE-2026-8326 |
10 (4.0)
|
Remote Spark SparkView Path Traversal in RDP Drive Red… |
Remote Spark (https://www.remotespark.com/) |
SparkView |
2026-05-29T11:47:02.652Z | 2026-05-29T13:34:00.474Z |
| CVE-2026-82971 |
10 (4.0)
10 (3.1)
10 (3.0)
|
QVidium Opera11 CGI Script net_tr.cgi command injection |
QVidium |
Opera11 |
2026-08-31T22:15:39.929Z | 2026-09-01T18:10:36.300Z |
| CVE-2026-82970 |
10 (3.1)
|
WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy C… |
WP Legal Pages |
WP Cookie Notice for GDPR, CCPA & ePrivacy Consent |
2026-08-31T14:43:38.358Z | 2026-08-31T18:51:27.733Z |
| CVE-2026-82695 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Tenda AC18 Telnet telnet missing authentication |
Tenda |
AC18 |
2026-08-31T12:45:09.596Z | 2026-08-31T14:29:57.559Z |
| CVE-2026-82694 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Tenda AC1206 Web UI ate R7WebsSecurityHandler missing … |
Tenda |
AC1206 |
2026-08-31T12:30:10.652Z | 2026-08-31T17:44:30.348Z |
| CVE-2026-82693 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Tenda AC1206 Web UI telnet TendaTelnet missing authent… |
Tenda |
AC1206 |
2026-08-31T12:15:12.193Z | 2026-08-31T22:03:13.167Z |
| CVE-2026-82542 |
10 (4.0)
10 (3.1)
10 (3.0)
|
Tenda HG10 Boa Web Server formIPv6Routing buffer overflow |
Tenda |
HG10 |
2026-08-30T12:30:09.679Z | 2026-09-01T14:02:01.116Z |
| CVE-2026-82456 |
10 (4.0)
10 (3.1)
|
argocd-mcp 0.8.0 Authentication Bypass via Unauthentic… |
argoproj-labs |
argocd-mcp |
2026-08-29T13:47:57.447Z | 2026-09-02T18:00:04.584Z |
| CVE-2026-82222 |
10 (3.1)
|
WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Exec… |
Liquid Web / StellarWP |
GiveWP |
2026-08-28T10:46:14.315Z | 2026-08-28T14:50:53.520Z |
| CVE-2026-81780 |
10 (3.1)
|
WordPress Hash Form plugin <= 1.4.2 - Arbitrary File U… |
hashthemes |
Hash Form |
2026-08-31T20:30:52.324Z | 2026-09-01T18:11:04.583Z |
| CVE-2026-81779 |
10 (3.1)
|
WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor … |
Silk Themes |
Newspapers X |
2026-08-31T20:42:27.262Z | 2026-09-01T13:48:21.018Z |
| CVE-2026-81735 |
10 (4.0)
10 (3.1)
|
UI-TARS-desktop @agent-infra MCP Servers Bind Every In… |
bytedance |
UI-TARS-desktop |
2026-08-27T14:51:20.291Z | 2026-08-31T18:14:39.625Z |
| CVE-2026-81096 |
9.3 (4.0)
10 (3.1)
|
ToolUniverse through 1.2.6 Unauthenticated Remote Code… |
mims-harvard |
ToolUniverse |
2026-08-27T14:50:36.897Z | 2026-08-29T11:48:10.764Z |
| CVE-2026-8054 |
10 (4.0)
|
Unauthenticated SQL Injection in dotCMS Publish Audit API |
dotCMS |
dotCMS Core |
2026-05-27T07:55:25.905Z | 2026-05-27T13:40:13.159Z |
| CVE-2026-79911 |
10 (4.0)
10 (3.1)
10 (3.0)
|
TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-b… |
TOTOLINK |
N600R |
2026-08-25T22:15:13.200Z | 2026-08-27T14:34:41.311Z |
| CVE-2026-78167 |
10 (4.0)
10 (3.1)
10 (3.0)
|
EFM ipTIME T16000M Session Validation httpcon_check_se… |
EFM |
ipTIME T16000M |
2026-08-24T01:15:12.094Z | 2026-08-24T18:00:21.875Z |
| CVE-2026-77998 |
10 (4.0)
|
Joomla Extension - miniorange.com - Unauthenticated Au… |
miniorange.com |
SAML SSO Free for Joomla extension for Joomla |
2026-08-25T12:50:46.506Z | 2026-08-26T22:35:35.616Z |