CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- silabs simplicity software development kit, silabs.com emberznet sdk +1 moreTruncated 802.15.4 packet leads to denial of service5.3 Medium
- o6 automation gmbh open62541Out-of-bounds Write in o6 Automation GmbH Open625416.8 Medium
- webpackwebpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior3.7 Low
- webpackwebpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects3.7 Low
- tanium appliance, tanos +1 moreTanium addressed an unauthorized code execution vulnerability in Tanium Appliance.7.8 High
- tanium appliance, tanos +1 moreTanium addressed an improper output sanitization vulnerability in TanOS.6.6 Medium
- tanium engageTanium addressed a local privilege escalation vulnerability in Engage.6.6 Medium
- tanium discoverTanium addressed an improper input validation vulnerability in Discover.6.3 Medium
- tanium deployTanium addressed an improper access controls vulnerability in Deploy.4.3 Medium
- tanium patchTanium addressed an improper access controls vulnerability in Patch.4.3 Medium
- enforceTanium addressed an improper link resolution before file access vulnerability in Enforce.5.0 Medium
- tanium deployTanium addressed an improper input validation vulnerability in Deploy.8.8 High
- tanium connectTanium addressed an uncontrolled resource consumption vulnerability in Connect.4.3 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.9 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.9 Medium
- tanium appliance, tanos +1 moreTanium addressed an improper input validation vulnerability in Tanium Appliance.2.7 Low
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.3 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.3 Medium
- tanium threat responseTanium addressed an information disclosure vulnerability in Threat Response.4.3 Medium
- tanium benchmarkTanium addressed an incorrect default permissions vulnerability in Benchmark.6.5 Medium
- tanium complyTanium addressed an incorrect default permissions vulnerability in Comply.6.5 Medium
- tanium discoverTanium addressed an incorrect default permissions vulnerability in Discover.6.5 Medium
- tanium partner integrationTanium addressed an incorrect default permissions vulnerability in Partner Integration.6.5 Medium
- tanium patchTanium addressed an incorrect default permissions vulnerability in Patch.6.5 Medium
- tanium performanceTanium addressed an incorrect default permissions vulnerability in Performance.6.5 Medium
- tanium reputationTanium addressed an improper access controls vulnerability in Reputation.4.3 Medium
- tanium appliance, tanos +1 moreTanium addressed an improper certificate validation vulnerability in Tanium Appliance.3.7 Low
- tanium enforceTanium addressed an incorrect default permissions vulnerability in Enforce.6.5 Medium
- tanium interactTanium addressed an improper access controls vulnerability in Interact.3.1 Low
github.com/dunglas/frankenphpGoFrankenPHP has delayed propagation of security fixes in upstream base images9.8 Critical- agentfront enclaveEnclave has a sandbox escape via infinite recursion and error objects6.4 Medium
- tp-link systems inc. tapo h100 v1, tapo p100 v1, tp-link tapo h100 firmware +1 more +3 moreImproper Certificate Validation in TP-Link Tapo H100 and P100 Allows Man-in-the-Middle Attack7.5 High
- zauberzeug niceguiNiceGUI's XSS vulnerability in ui.markdown() allows arbitrary JavaScript execution through unsanitized HTML content6.1 Medium
- pgadmin 4, pgadmin.org pgadmin 4 +1 moreRestore restriction bypass via key disclosure vulnerability (pgAdmin 4)7.4 High
- tp link systems inc. tl-wr845n v4, tl-wr850n v3, tp-link systems inc. archer mr200 v5.2 +6 more +8 moreLAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N5.9 Medium
- moxa uc-1200a series, uc-1222a firmware, uc-2222a-t-ap firmware +33 more +35 moreMoxa Arm-based industrial computers running Moxa Industrial Linux Secure use a device-unique...7.0 High
- moxa uc-1200a series, uc-1222a firmware, uc-2222a-t-ap firmware +33 more +35 moreA physical attack vulnerability exists in certain Moxa industrial computers using TPM-backed LUKS...7.0 High
- p5 fnip-4xsh, fnip-8x16a +1 moreP5 FNIP-8x16A/FNIP-4xSH 1.0.20, 1.0.11 - Stored Cross-Site Scripting (XSS)5.1 Medium
- php-fusion, php-fusion phpfusion +1 morePHP-Fusion 9.03.50 panels.php - Cross-Site Scripting (XSS)5.1 Medium
- edimax technology ew-7438rpn-v3 mini, edimax ew-7438rpn mini firmware +1 moreEdimax Technology EW-7438RPn-v3 Mini 1.27 - Unauthorized Access: Wi-Fi Password Disclosure8.7 High
- edimax ew-7438rpn mini firmware, edimax technology ew-7438rpn mini +1 moreEdimax Technology EW-7438RPn-v3 Mini 1.27 - Cross-Site Request Forgery (CSRF) to Command Execution5.1 Medium
- hrsaleHRSALE 1.1.8 - Cross-Site Request Forgery (Add Admin)5.1 Medium
- exagate sysguard 6001Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin)5.1 Medium
- ge intelligent platforms, inc. proficyscada for iosProficySCADA for iOS 5.0.25920 - 'Password' Denial of Service4.6 Medium
- 10-strike software network inventory explorer10-Strike Network Inventory Explorer 8.54 - 'Add' Local Buffer Overflow (SEH)8.4 High
- aida64, finalwire everest +1 moreEverest 5.50.2100 - 'Open File' Denial of Service4.6 Medium
- odin-secure-ftp-expert odin secure ftp expertOdin Secure FTP Expert 7.6.3 - 'Site Info' Denial of Service4.6 Medium
- 10-strike software network inventory explorer10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)8.4 High
- php fusion fusion, php-fusion phpfusion +1 morePHP-Fusion 9.03.50 - 'panels.php' Eval Injection8.6 High
- emtec zoc terminalZOC Terminal v7.25.5 - 'Private key file' Denial of Service6.7 Medium
- Show moreLoading…