CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- No product listedImproper buffer restrictions in the firmware for the TDX Module may allow an escalation of...5.6 Medium
- No product listedIncorrect default permissions for the Intel(R) Optane(TM) PMem management software before...5.4 Medium
- No product listedImproper input validation for some Server Firmware Update Utility(SysFwUpdt) before version 16.0...7.1 High
- No product listedUncontrolled search path in some software installer for some VTune(TM) Profiler software and...5.4 Medium
- No product listedNull pointer dereference in the firmware for some Intel(R) AMT and Intel(R) Standard...8.2 High
- No product listedImproper conditions check for the Intel(R) Optane(TM) PMem management software before versions...5.4 Medium
- fortinet fortiosAn Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet...7.5 High
- fortinet fortiosAn Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200]...5.3 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6...6.7 Medium
- fortinet forticlient, forticlientwindows +1 moreAn Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59]...6.4 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn Improper Verification of Source of a Communication Channel vulnerability [CWE-940]...3.8 Low
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn inconsistent interpretation of http requests ('http request smuggling') vulnerability in...5.2 Medium
- fortinet fortiauthenticatorA missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,...6.8 Medium
- fortinet fortisandboxAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...7.9 High
- casl ability abilityCASL Ability, versions 2.4.0 through 6.7.4, contains a prototype pollution vulnerability.9.8 Critical
- wasm3 project wasm3wasm3 NewCodePage memory leak4.8 Medium
- silabs.com simplicity device managerReflected XSS vulnerability in Simplicity Device Manager tool7.5 High
- ivanti endpoint manager, endpoint manager (epm) +1 moreAn authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote...8.6 High
- ivanti endpoint managerSQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated...6.5 Medium
- capacitor-native-biometriccapacitor-native-biometric - Authentication Bypass via Unvalidated CryptoObject in onAuthenticationSucceeded4.3 Medium
- emmett-framework coreEmmett has an Unhandled CookieError Exception Causing Denial of Service7.5 High
- ckolivas lrzipckolivas lrzip stream.c ucompthread null pointer dereference4.8 Medium
- ergosis security systems computer industry and trade inc. zeus pdksSQLi in Ergosis Security Systems' ZEUS PDKS8.8 High
- dinibh puzzle software solutions patrol tracking systemIDOR in Dinibh Puzzle's Dinibh Patrol Tracking System8.8 High
- sarman soft software and technology services industry and trade ltd. co. cmsAuthentication Bypass in Sarman Soft's CMS8.7 High
- ckolivas lrzipckolivas lrzip stream.c lzma_decompress_buf use after free4.8 Medium
- red hat build of keycloak, build of keycloak 26.4.2 +1 moreKeycloak-services: sensitive headers shown in the http access logs5.0 Medium
- artifex mupdfArtifex MuPDF win_main.c get_system_dpi uncontrolled search path7.3 High
- siemens sinec nms, user management component (umc), user management component +2 moreA vulnerability has been identified in SINEC NMS (All versions), User Management Component (UMC) ...8.5 High
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected...8.5 High
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...7.3 High
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...7.3 High
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...7.3 High
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...7.3 High
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...7.3 High
- siemens simcenter femap, simcenter nastran +1 moreA vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran ...7.3 High
- siemens nx, nx (managed mode) +1 moreA vulnerability has been identified in NX (All versions < V2512). The affected application...7.3 High
- siemens polarion v2404, polarion v2410 +1 moreA vulnerability has been identified in Polarion V2404 (All versions < V2404.5), Polarion V2410 ...6.2 Medium
- siemens syngo.plaza vb30eA vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The...6.3 Medium
- apache hertzbeatApache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions8.8 High
- apache druidApache Druid: Authentication Bypass via LDAP Anonymous Bind9.8 Critical
- roxnor popup builder with gamification, multi-step popups, page-level targeting, and woocommerce triggersPopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletion5.4 Medium
- brianhogg the events calendar shortcode & blockThe Events Calendar Shortcode & Block <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes6.4 Medium
- jeroenpeters1986 name directoryName Directory <= 1.32.0 - Unauthenticated Stored Cross-Site Scripting via Double HTML-Entity Encoding in Submission Form7.2 High
- kstover ninja forms – the contact form builder that grows with youNinja Forms <= 3.14.0 - Unauthenticated Information Disclosure in nf_ajax_submit AJAX Action7.5 High
- apache shiroApache Shiro: Brute force attack possible to determine valid user names1.0 Low
- teknolist computer systems software publishing industry and trade inc. okulistikSSRF in Teknolist Computer's Okulistik9.8 Critical
- wclovers wcfm marketplace – multivendor marketplace for woocommerceWCFM Marketplace <= 3.7.0 - Insecure Direct Object Reference to Unauthenticated Arbitrary Refund Request Creation5.3 Medium
- berabuddies agentflowFlowring｜AgentFlow - Stored Cross-Site Scripting5.1 Medium
- berabuddies agentflowFlowring｜AgentFlow - Reflected Cross-site Scripting5.1 Medium
- Show moreLoading…