CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- ibm jazz reporting serviceIBM Jazz Reporting Service Denial of Service3.5 Low
- ibm db2 big sql on cloud pak for dataIBM Db2 Big SQL on Cloud Pak for Data is vulnerable to a denial of service due to lack of throttling on an API5.3 Medium
- openslidesOpenSlides has incorrect access control vulnerability in authentication service8.1 High
- ibm cloud pak system, os image for red hat linux systems +1 moreMultiple Vulnerabilities in IBM Cloud Pak System5.3 Medium
- ibm cloud pak system, os image for red hat linux systems +1 moreMultiple Vulnerabilities in IBM Cloud Pak System5.3 Medium
- group-office group office, intermesh groupoffice +1 moreGroup-Office is vulnerable to SSRF and File Read in WOPI service discovery8.2 High
- group-office group office, intermesh groupoffice +1 moreGroup-Office is vulnerable to RCE due to Command Injection via TNEF Attachment Handler9.4 Critical
- waterfutures epyt-flowEPyT-Flow has unsafe JSON deserialization (__type__)10.0 Critical
- n8nDomain allowlist bypass enables credential exfiltration5.3 Medium
- open5gsOpen5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow6.9 Medium
- ibm common cryptographic architecture, 4769 developers toolkit +1 moreIBM Common Cryptographic Architecture Arbitrary Command Execution9.8 Critical
- ibm cloud pak system, os image for red hat linux systems +1 moreMultiple Vulnerabilities in IBM Cloud Pak System5.3 Medium
openmlscrates.ioopenmls has improper tag validation7.1 High- suse rancherLocal Path Provisioner vulnerable to Path Traversal via parameters.pathPattern9.9 Critical
- openclawOpenClaw Affected by Unauthenticated Local RCE via WebSocket config.apply8.4 High
- lfprojects mcp typescript sdk, modelcontextprotocol typescript-sdk, red hat ansible automation platform 2.6 +2 more@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse7.1 High
- coding-solo godot-mcp, godot mcp +1 moreGodot MCP is vulnerable to Command Injection via unsanitized projectPath7.8 High
- devtronDevtron Attributes API Unauthorized Access Leading to API Token Signing Key Leakage8.7 High
- emqx nanomqNanoMQ $share/ Subscription Validation and Forwarding Parsing Inconsistency: NULL Pointer Increment Causes Crash6.5 Medium
- openclawOpenClaw Vulnerable to Local File Inclusion via MEDIA: Path Extraction6.5 Medium
- alistgo alistAlist vulnerable to Path Traversal in multiple file operation handlers8.8 High
- alistgo alistAlist has Insecure TLS Config9.1 Critical
- autodesk 3ds maxGIF File Parsing Stack Based Buffer Overflow7.8 High
- apollographql apollo server, apollo-server +1 moreApollo Server is vulnerable to denial of service with `startStandaloneServer`7.5 High
- espressif esp-idfESF-IDF Has Memory Safety Vulnerabilities in BLE Provisioning6.3 Medium
- espressif esp-idfESF-IDF Has Use-after-free Vulnerability in BLE Provisioning6.3 Medium
- espressif esp-idfESF-IDF is Vulnerable to WPS Enrollee Fragment Integer Underflow6.3 Medium
- riot-os riotRIOT Vulnerable to Multiple Out-of-Bounds Read When Processing Received 6LoWPAN SFR Fragments8.7 High
- n8nn8n Vulnerable to Command Injection in Community Package Installation9.4 Critical
- budda login disableLogin Disable - Less critical - Access bypass - SA-CONTRIB-2026-0084.3 Medium
- glpi-project glpiGLPI is Vulnerable to Authenticated SQL Injection6.5 Medium
- glpi-project glpiGLPI is vulnerable to session stealing on externally authenticated user change4.3 Medium
- glpi-project glpiGLPI is Vulnerable to SSRF via Webhooks4.1 Medium
- n8nn8n is vulnerable to Python sandbox escape9.4 Critical
- n8nn8n Arbitrary File Write leading to RCE in n8n Merge Node9.4 Critical
- n8nn8n Arbitrary File Write on Remote Systems via SSH Node7.1 High
- n8nn8n is Vulnerable to Stored Cross-Site Scripting via Markdown Rendering in Workflow UI8.5 High
- n8nn8n is Vulnerable to OS Command Injection in Git Node9.4 Critical
- n8nn8n Improper File Access Controls Allow Arbitrary File Read by Authenticated Users9.4 Critical
- n8nn8n Improper CSP Enforcement in Webhook Responses May Allow Stored XSS8.5 High
- n8nn8n Unsafe Buffer Allocation Allows In-Process Memory Disclosure in Task Runner7.7 High
- n8nn8n Has an Expression Escape Vulnerability Leading to RCE9.4 Critical
- autodesk 3ds maxUntrusted Search Path Vulnerability when opening max Files7.8 High
- autodesk 3ds maxStack Based Buffer Overflow in GIF File Parsing8.4 High
- autodesk 3ds maxOut-of-Bounds Write in RGB File Parsing8.4 High
- autodesk 3ds maxRGB File Parsing Memory Corruption8.4 High
- autodesk 3ds maxGIF File Parsing Out-of-Bounds Write8.4 High
- cisco roomos software, telepresence endpoint software (tc/ce) +1 moreCisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability7.5 High
- cisco evolved programmable network manager (epnm), prime infrastructure, evolved programmable network manager +2 moreCisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability4.3 Medium
- cisco prime infrastructureCisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability4.8 Medium
- Show moreLoading…