CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- berabuddies agentflowFlowring｜Agentflow - Arbitrary File Upload8.7 High
- berabuddies agentflowFlowring｜Agentflow - Missing Authenticaton9.3 Critical
- berabuddies agentflowFlowring｜Agentflow - Authentication Bypass9.3 Critical
- flowring docpediaFlowring｜Docpedia - SQL Injection8.7 High
- flowring docpediaFlowring｜Docpedia - SQL Injection8.7 High
- axis camera station proAn insecure direct object reference allowed a non-admin user to modify or remove certain data...5.7 Medium
- axis camera station proAn AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view...4.6 Medium
- axis camera station proA server-side injection was possible for a malicious admin to manipulate the application to...4.5 Medium
- axis camera station proAXIS Camera Station Pro contained a flaw to perform a privilege escalation attack on the server...7.8 High
- axis osThe VAPIX API mediaclip.cgi that did not have a sufficient input validation allowing for a...7.1 High
- techjewel fluent forms – customizable contact forms, survey, quiz, & conversational form builderFluent Forms <= 6.1.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via AI Form Builder Module6.4 Medium
- sap business server pages, sap se business server pages application (taf applauncher) +1 moreOpen Redirection vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)6.1 Medium
- sap strategic enterprise management, sap se strategic enterprise management (balanced scorecard in bsp application) +1 moreMissing Authorization Check in SAP Strategic Enterprise Management (Balanced Scorecard in BSP Application)4.3 Medium
- sap se s/4hana defense & security (disconnected operations), sap s\/4hana defense \& security +1 moreMissing authorization check in SAP S/4HANA Defense & Security (Disconnected Operations)4.3 Medium
- sap businessobjects enterprise, sap se businessobjects enterprise (central management console) +1 moreCross Site Scripting (XSS) vulnerability in SAP BusinessObjects Enterprise (Central Management Console)4.8 Medium
- sap businessobjects business intelligence platform, sap se businessobjects business intelligence platform (admintools) +1 moreDenial of service (DOS) vulnerability in SAP BusinessObjects Business Intelligence Platform (AdminTools)6.5 Medium
- sap document management system, erp, s4core +2 moreMultiple vulnerabilities in BSP Applications of SAP Document Management System6.1 Medium
- sap solution tools plug-in, sap se solution tools plug-in (st-pi) +1 moreMissing Authorization check in SAP Solution Tools Plug-In (ST-PI)7.7 High
- sap commerce cloudInformation Disclosure vulnerability in SAP Commerce Cloud5.3 Medium
- sap se netweaver and abap platform (application server abap), sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 moreMemory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)3.1 Low
- sap business one, sap se business one (b1 client memory dump files) +1 moreInformation Disclosure Vulnerability in SAP Business One (B1 Client Memory Dump Files)5.8 Medium
- sap se business workflow, sap basis +1 moreMissing authorization check in SAP Business Workflow5.2 Medium
- sap supply chain management, advanced planning and optimization +1 moreDenial of service (DOS) in SAP Supply Chain Management7.7 High
- sap se fiori app (manage service entry sheets - lean services), sap s4core +1 moreMissing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services)4.3 Medium
- sap se netweaver as abap and abap platform, sap basis +1 moreXML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform8.8 High
- sap netweaver application server javaCRLF Injection vulnerability in SAP NetWeaver Application Server Java3.4 Low
- sap netweaver, sap se netweaver (jms service) +1 moreInsecure Deserialization vulnerability in SAP NetWeaver (JMS service)4.4 Medium
- sap commerce cloudRace condition vulnerability in SAP Commerce Cloud5.9 Medium
- d-link dcs-931l, dlink dcs-931l firmware +1 moreD-Link DCS-931L setSysAdmin os command injection8.6 High
- sap se support tools plug-in, sap solution tools plug-in +1 moreMissing Authorization check in a function module in SAP Support Tools Plug-In4.3 Medium
- sap se netweaver application server abap and abap platform, sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform9.6 Critical
- sap businessobjects business intelligence platformOpen Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform7.3 High
- sap document management system, erp, s4core +2 moreMultiple vulnerabilities in BSP Applications of SAP Document Management System6.1 Medium
- sap se businessobjects bi platform, sap businessobjects business intelligence platform +1 moreDenial of service (DOS) in SAP BusinessObjects BI Platform7.5 High
- sap se crm and sap s/4hana (scripting editor), sap netweaver application server abap, s\/4hana +1 more +3 moreCode Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)9.9 Critical
- sap se abap based sap systems, sap solution tools plug-in +1 moreMissing Authorization Check in ABAP based SAP systems5.0 Medium
- sap se businessobjects bi platform, sap businessobjects business intelligence platform +1 moreDenial of service (DOS) vulnerability in SAP BusinessObjects BI Platform7.5 High
- sap se netweaver application server abap and sap s/4hana, sap basis +1 moreMissing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA6.5 Medium
- aardappel lobsteraardappel lobster Parsing parser.h ParseStatements memory corruption4.8 Medium
amphp/http-serverPackagistamphp/http-server affected by HTTP/2 DDoS vulnerability5.3 MediumbitcoinrbRubyGemsBitcoinrb Vulnerable to Command injection via RPC2.0 LowmongooseOSS-FuzzHeap-buffer-overflow in mg_mqtt_next_propNo scoretinyusbOSS-FuzzUNKNOWN READ in getTypeCacheHashTableBucketNo score- aardappel lobsteraardappel lobster wfc.h WaveFunctionCollapse memory corruption4.8 Medium
- dun munge, debian linux, red hat ai inference server 3.3 +16 more +18 moreMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgery7.7 High
- microsoft .net, .net 10.0, .net 8.0 +1 more +3 more.NET Spoofing Vulnerability7.5 High
- gnu gnutls, red hat enterprise linux 10, enterprise linux 6 +5 more +7 moreGnutls: gnutls: remote denial of service via crafted clienthello with invalid psk binder7.5 High
- No product listedAn issue in mquickjs before commit 74b7e (2026-01-15) allows a local attacker to cause a denial...5.5 Medium
tcpreplayUbuntuAn issue inTcpreplay v4.5.1 allows a local attacker to cause a denial of service via a crafted...5.5 Medium- wclovers wcfm membership – woocommerce memberships for multivendor marketplaceWCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.11.8 - Insecure Direct Object Reference to Update Membership Payment4.3 Medium
- Show moreLoading…