CVE-2026-5515
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.0 stores potentially sensitive information in log files that could be read by a local user.
PUBLISHED
- Vendor
- IBM
- Product
- App Connect Enterprise
- Provider severity
- MEDIUM
- Conflicts
- 0
Data & Insights
CVE Explorer
Search one exact, source-linked CVE snapshot by CVE ID or explicit vendor and product tokens. Provider severity, KEV, conflicts, and stale state remain separate observations—not a Baitaphish risk rating.
Exact snapshot results
353,537 CVE records
CVE-2026-55145
Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.
PUBLISHED
- Vendor
- Microsoft
- Product
- Microsoft Copilot
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-55144
Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Windows Server 2025 (Server Core installation), Windows Server 2025, Windows Server 2022, Windows 11 Version 24H2, Windows 11 version 26H1, Windows 11 Version 25H2
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55142
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft SharePoint Server Subscription Edition, Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Word 2016, Microsoft Office LTSC 2021, Microsoft SharePoint Enterprise Server 2016, Microsoft Office LTSC 2024, Microsoft Office 2019, Microsoft SharePoint Server 2019
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-55141
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Office Online Server, Microsoft Office LTSC 2024, Microsoft Office 365 for Mac, Microsoft Excel 2016, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2021, Microsoft Office 2019, Microsoft 365 Apps for Enterprise
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55140
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC 2021, Microsoft Office 2019, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2024, Microsoft Office 365 for Mac, Microsoft Office 2016, Microsoft Office LTSC for Mac 2024, Microsoft 365 Apps for Enterprise
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55139
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC 2024, Microsoft Office 365 for Mac, Microsoft Office 2016, Microsoft Office LTSC for Mac 2024, Microsoft Office 2019, Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2021, Microsoft 365 Apps for Enterprise
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-55138
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Office Online Server, Microsoft Office LTSC 2021, Microsoft Office 365 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2024, Microsoft Excel 2016, Microsoft Office 2019, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-55137
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Excel 2016, Office Online Server, Microsoft Office LTSC 2021, Microsoft Office 365 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55136
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Excel 2016, Microsoft Office LTSC for Mac 2024, Microsoft Office 2019, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2024, Office Online Server, Microsoft Office 365 for Mac
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55135
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft
- Product
- Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-55134
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server 2016, Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Word 2016, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55133
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office 365 for Mac, Microsoft 365 Apps for Enterprise
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55132
Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft SharePoint Enterprise Server 2016, Microsoft Office LTSC 2024, Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2024, Microsoft Word 2016, Microsoft SharePoint Server Subscription Edition, Microsoft Office LTSC for Mac 2021, Microsoft Office 365 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft SharePoint Server 2019
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55131
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Office Online Server, Microsoft Office 2019, Microsoft Excel 2016, Microsoft Office LTSC 2021, Microsoft Office 365 for Mac, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft 365 Apps for Enterprise
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55130
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019, Microsoft Office LTSC 2024, Microsoft Office 2019, Microsoft SharePoint Enterprise Server 2016, Microsoft 365 Apps for Enterprise, Microsoft Word 2016, Microsoft Office LTSC 2021
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-5513
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to
PUBLISHED
- Vendor
- ladela
- Product
- Online Scheduling and Appointment Booking System – Bookly
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55129
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2021, Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office 2019, Microsoft Office 2016, Microsoft Office LTSC for Mac 2024, Microsoft Office LTSC 2021
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55128
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC for Mac 2021, Microsoft SharePoint Server Subscription Edition, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2024, Microsoft SharePoint Enterprise Server 2016, Microsoft Word 2016, Microsoft Office 2019, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft SharePoint Server 2019, Microsoft Office LTSC 2021
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55127
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft SharePoint Server 2019, Microsoft Word 2016, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft Office 2019, Microsoft SharePoint Server Subscription Edition, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft SharePoint Enterprise Server 2016, Microsoft Office LTSC 2024
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55126
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft
- Product
- Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Enterprise Server 2016
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55125
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office 2016, Microsoft SharePoint Enterprise Server 2016, Microsoft Office 2019, Microsoft SharePoint Server Subscription Edition, Microsoft Office LTSC 2024, Microsoft Office LTSC 2021, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 365 for Mac, Microsoft SharePoint Server 2019
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55124
Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC 2021, Microsoft Office 2019, Microsoft Word 2016, Microsoft Office LTSC for Mac 2021, Microsoft SharePoint Server Subscription Edition, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2024, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft Office 365 for Mac, Microsoft Office LTSC 2024
- Provider severity
- MEDIUM
- Conflicts
- 2
CVE-2026-55123
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC for Mac 2024, Microsoft PowerPoint 2016, Microsoft Office LTSC 2021, Microsoft 365 Apps for Enterprise, Microsoft Office 2019, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2024, Microsoft Office 365 for Mac
- Provider severity
- HIGH
- Conflicts
- 2
CVE-2026-55122
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC 2024, Microsoft Office 2019, Microsoft Office LTSC for Mac 2024, Office Online Server, Microsoft Office LTSC for Mac 2021, Microsoft Office 365 for Mac, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Excel 2016
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55121
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC 2021, Microsoft Office LTSC for Mac 2024, Microsoft Office 2016, Microsoft Office LTSC for Mac 2021, Microsoft SharePoint Server Subscription Edition, Microsoft 365 Apps for Enterprise, Microsoft Office 365 for Mac, Microsoft Office LTSC 2024, Microsoft Office 2019, Microsoft SharePoint Server 2019, Microsoft SharePoint Enterprise Server 2016
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-55120
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.
PUBLISHED
- Vendor
- Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft, Microsoft
- Product
- Microsoft Office LTSC for Mac 2021, Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Office LTSC 2024, Microsoft Office LTSC for Mac 2024, Microsoft PowerPoint 2016, Microsoft Office 365 for Mac
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-5512
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositories by their numeric ID. The mobile upload policy API endpoint did not perform an early authorization check, and validation error messages included the full repository name for repositories the caller did not have access to. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3
PUBLISHED
- Vendor
- GitHub
- Product
- Enterprise Server
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-55119
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Talk Application to escalate privileges within the UniFi Talk Application.
PUBLISHED
- Vendor
- Ubiquiti Inc
- Product
- UniFi Talk Application
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55118
A malicious actor with access to the network,low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.
PUBLISHED
- Vendor
- Ubiquiti Inc
- Product
- UniFi Network Application
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55117
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Access Application to access files on the host device.
PUBLISHED
- Vendor
- Ubiquiti Inc
- Product
- UniFi Access Application
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55116
A malicious actor with access to the network and under certain network configurations could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices.
PUBLISHED
- Vendor
- Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc
- Product
- Enterprise Firewall Core, Enterprise Fortress Gateway, Dream Wall, Cloud Gateways, Express 7, Dream Routers, Dream Machines
- Provider severity
- CRITICAL
- Conflicts
- 1
CVE-2026-55115
A malicious actor with access to the network and low privileges could exploit a Server-Side Request Forgery (SSRF) in UniFi Protect Application to escalate privileges on the host device.
PUBLISHED
- Vendor
- Ubiquiti Inc
- Product
- UniFi Protect Application
- Provider severity
- CRITICAL
- Conflicts
- 0
CVE-2026-55114
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application.
PUBLISHED
- Vendor
- Ubiquiti Inc
- Product
- UniFi Network Application
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55113
A malicious actor with access to the network could exploit a Server-Side Request Forgery (SSRF) vulnerability found in UniFi Talk Application to execute a Denial of Service (DoS) attack and bypass authentication in certain UniFi Talk API endpoints.
PUBLISHED
- Vendor
- Ubiquiti Inc
- Product
- UniFi Talk Application
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55112
A malicious actor with access to the network and low privileges and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi OS with UniFi Protect Application to escalate privileges on the host device.
PUBLISHED
- Vendor
- Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc
- Product
- Dream Wall, Dream Routers, Enterprise Video Recorders, Cloud Gateways, Network Video Recorders, Dream Machines, Cloud Keys
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55111
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi Protect Floodlight devices to access files on the UniFi Protect Floodlight.
PUBLISHED
- Vendor
- Ubiquiti Inc
- Product
- UniFi Protect Floodlight
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55110
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Origin Resource Sharing (CORS) misconfiguration found in UniFi OS to trigger actions in UniFi OS using that user's session.
PUBLISHED
- Vendor
- Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc, Ubiquiti Inc
- Product
- Enterprise Video Recorders, Enterprise Fortress Gateway, Express 7, Network Attached Storage, Dream Wall, Dream Machines, UniFi OS Server, Cloud Gateways, Network Video Recorders, Cloud Keys, Dream Routers, Enterprise Firewall Core
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-5511
In the web management interface of Archer AX72 (SG) v1, the network diagnostic feature improperly handles invalid user input, resulting in limited exposure of diagnostic command usage information. An authenticated attacker with administrative privileges could exploit this issue to confirm the presence of the diagnostic utility and view its valid command-line syntax and options. The exposed information is limited in scope and does not include sensitive system data.
PUBLISHED
- Vendor
- TP-Link Systems Inc.
- Product
- Archer AX72 (SG) v1.0
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-55100
hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, src/Vault.js concatenates unencoded identifier values including name, username, group, role, and version into Vault request paths and query strings instead of using encodeURIComponent() and URLSearchParams, allowing path traversal and query parameter injection. This issue is fixed in version 0.5.2.
PUBLISHED
- Vendor
- kyndryl-open-source
- Product
- hashi-vault-js
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55092
Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the layer content to an arbitrary location on the host filesystem. This vulnerability is fixed in 0.71.1.
PUBLISHED
- Vendor
- aquasecurity
- Product
- trivy
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-5509
An authenticated command injection vulnerability exists in the Archer BE450 v1 and BE7200 v1 router that allows an administrator to execute arbitrary system commands through the web management interface. After successfully authenticating to the admin interface, an attacker can leverage the browser’s developer console by supplying a crafted input that is passed to backend system commands without adequate sanitization. Successful exploitation enables execution of arbitrary commands with elevated
PUBLISHED
- Vendor
- TP-Link Systems Inc., TP-Link Systems Inc.
- Product
- Archer BE7200 V1, Archer BE450 v1
- Provider severity
- HIGH
- Conflicts
- 1
CVE-2026-55084
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. A SQL injection vulnerability was identified in the SqlView API endpoint of the DHIS2 application in the `filter` parameter used by the `/api/sqlViews/{viewId}/data.json` endpoint. An authenticated user with access to a SqlView can inject arbitrary SQL queries inside the `filter` parameter by abusing an expression executed by PostgreSQL and its output is reflected inside the application
PUBLISHED
- Vendor
- dhis2
- Product
- dhis2-core
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55082
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access to provide crafted filter values that were interpolated into generated SQL. An authenticated user with access to SQL View execution could manipulate SQL generated for SQL View filters and potentially access data outside the intended SQL View result set. This is distinct from CVE-2026-55084, which tracks the r
PUBLISHED
- Vendor
- dhis2
- Product
- dhis2-core
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55081
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. The DHIS2 OpenAPI HTML endpoint reflected values from the `scope` query parameter into the generated HTML document without sufficient sanitization. A crafted `scope` value could be rendered as active HTML or JavaScript in the OpenAPI documentation page. An attacker able to get a user to open a crafted OpenAPI HTML URL could execute JavaScript in that user's browser in the DHIS2 origin.
PUBLISHED
- Vendor
- dhis2
- Product
- dhis2-core
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-5508
The WowPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wowpress` shortcode in all versions up to, and including, 1.0.0. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
PUBLISHED
- Vendor
- theyeti
- Product
- WowPress
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-55079
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `NewDataBuilder` in `provisionersdk/proto/dataupload.go` allocated a byte slice using the client-supplied `FileSize` from a `DataUpload` message without an upper-bound check. Although the DRPC wire limit is 4 MiB, the `FileSize` value itself was unconstrained. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 validates `F
PUBLISHED
- Vendor
- coder
- Product
- coder
- Provider severity
- MEDIUM
- Conflicts
- 0
CVE-2026-55078
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `POST /api/v2/files` converts zip uploads to tar in memory via `CreateTarFromZip`, which enforced a per-entry size limit but no aggregate limit on total decompressed output, writing to an unbounded in-memory buffer. Exploitation requires authenticated file-upload access and the impact is limited to availability (denial of serv
PUBLISHED
- Vendor
- coder
- Product
- coder
- Provider severity
- MEDIUM
- Conflicts
- 1
CVE-2026-55077
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resetting an `owner` account's password. It also did not require the current password when an admin reset another user's password. Exploitation requires the privileged `user-admin` role so practical risk is limited to deployments t
PUBLISHED
- Vendor
- coder
- Product
- coder
- Provider severity
- HIGH
- Conflicts
- 0
CVE-2026-55076
Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean (for example the string `"false"`) or omitted it, the assertion failed open and the email was treated as verified. Combined with an unconditional email-based account fallback, this enabled account takeover. The fix in versio
PUBLISHED
- Vendor
- coder
- Product
- coder
- Provider severity
- HIGH
- Conflicts
- 1