CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- mattermost confluence, confluence plugin +1 moreCross-Site Scripting (XSS) via Unescaped Display Names in Mattermost Confluence Plugin OAuth2 Flow7.7 High
microcode_ctlTuxCareUpdate of microcode_ctlNo scoremicrocode_ctlTuxCareUpdate of microcode_ctlNo score- bontrofftech medical center portal management systemSourceCodester Medical Center Portal Management System login.php sql injection6.9 Medium
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure6.9 Medium
- eset management agentLocal privilege escalation in ESET Management Agent for Windows8.3 High
- neo4j community edition, neo4j, neo4j enterprise edition +2 moreInsufficient escaping of unicode characters in query log1.1 Low
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L DHCP Client Information information disclosure6.9 Medium
- d-link dir-605l, dir-619l, dlink dir-605l firmware +1 more +3 moreD-Link DIR-605L/DIR-619L Wifi Setting information disclosure6.9 Medium
kubernetes-oldopenSUSESecurity update for kubernetes-oldNo score- itsourcecode school management systemitsourcecode School Management System controller.php sql injection6.9 Medium
- ip-com w30ap, w30ap firmware +1 moreIP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow9.3 Critical
- yoast seo – advanced seo with real-time guidance and built-in aiYoast SEO <= 26.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'yoast-schema' Block Attribute6.4 Medium
- happyfish100 libfastcommonhappyfish100 libfastcommon base64.c base64_decode stack-based overflow4.8 Medium
- portabilis i-educarPortabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization5.3 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System index.php sql injection6.9 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System index.php sql injection6.9 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the file system module. Impact: Successful exploitation of...5.8 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds access vulnerability in the frequency modulation module. Impact: Successful...5.5 Medium
- huawei harmonyosVulnerability of improper permission control in the print module. Impact: Successful exploitation...6.1 Medium
- huawei emui, harmonyos +1 morePermission control vulnerability in the AMS module. Impact: Successful exploitation of this...6.2 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System index.php sql injection6.9 Medium
- huawei emui, harmonyos +1 moreOut-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this...6.0 Medium
- huawei emui, harmonyos +1 moreUAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability...6.5 Medium
- huawei harmonyosIdentity authentication bypass vulnerability in the window module. Impact: Successful...5.9 Medium
- huawei harmonyosVulnerability of improper criterion security check in the card module. Impact: Successful...5.9 Medium
- huawei harmonyosUAF concurrency vulnerability in the graphics module. Impact: Successful exploitation of this...8.4 High
- huawei harmonyosOut-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this...5.9 Medium
- huawei harmonyosPermission control vulnerability in the HDC module. Impact: Successful exploitation of this...6.3 Medium
- huawei harmonyosBuffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this...6.9 Medium
- itsourcecode student management system, school management system +1 moreitsourcecode Student Management System controller.php sql injection6.9 Medium
- huawei harmonyosAddress read vulnerability in the HDC module. Impact: Successful exploitation of this...4.8 Medium
- huawei emui, harmonyos +1 moreAddress read vulnerability in the communication module. Impact: Successful exploitation of this...6.8 Medium
- huawei harmonyosOut-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this...6.2 Medium
- huawei harmonyosType confusion vulnerability in the camera module. Impact: Successful exploitation of this...4.0 Medium
- codesnippetspro code snippetsCode Snippets <= 3.9.4 - Cross-Site Request Forgery to Cloud Snippet Download/Update Actions4.3 Medium
- jackdewey events listing widgetEvents Listing Widget <= 1.3.4 - Authenticated (Author+) Stored Cross-Site Scripting via Event URL Field6.4 Medium
- revmakx wp duplicate – wordpress migration pluginWP Duplicate <= 1.1.8 - Authenticated (Subscriber+) Arbitrary File Upload via 'process_add_site' AJAX Action8.8 High
- fortinet forticlientems, forticlient ems +1 moreAn improper neutralization of special elements used in an sql command ('sql injection')...9.1 Critical
- huawei harmonyosOut-of-bounds write vulnerability in the camera module. Impact: Successful exploitation of this...8.4 High
- huawei harmonyosHeap-based buffer overflow vulnerability in the image module. Impact: Successful exploitation of...7.3 High
- publiccmsSanluan PublicCMS Trade Payment TradePaymentService.java paid improper authorization2.3 Low
- stackideas easydiscuss, stackideas.com easydiscuss extension for joomla +1 moreExtension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla9.2 Critical
- mayurik gas agency management systemSourceCodester Gas Agency Management System createUser.php access control5.3 Medium
- cyberlord92 employee directory – staff directory and listingEmployee Directory <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'form_title' Shortcode Attribute6.4 Medium
- abhiphile fermat, fermat-mcp +1 moreabhiphile fermat-mcp eqn_chart.py eqn_chart code injection5.3 Medium
- jackdewey tune libraryTune Library <= 1.6.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via CSV Import6.4 Medium
- x-raym wavesurfer-wpWaveSurfer-WP <= 2.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'src' Shortcode Attribute6.4 Medium
- cyberlord92 oauth single sign on – sso (oauth client)OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization5.3 Medium
- ravanh orange comfort+ accessibility toolbar for wordpressOrange Confort+ accessibility toolbar for WordPress <= 0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4 Medium
- Show moreLoading…