CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- No product listedAn issue was discovered in Pacom Unison Client 5.13.1. Authenticated users can inject malicious...8.8 High
- No product listedA missing authentication mechanism in the web management API components of Shenzhen Zhibotong...8.1 High
- No product listedA lack of session validation in the web API component of Shenzhen Zhibotong Electronics ZBT...6.5 Medium
- No product listedA path traversal vulnerability in the check_token function of Shenzhen Zhibotong Electronics ZBT...10.0 Critical
- No product listedA path-traversal vulnerability in the logout functionality of Shenzhen Zhibotong Electronics ZBT...5.3 Medium
- cipplanner cipaceUnrestricted Upload of File with Dangerous Type vulnerabilities exist in the rich text editor and...8.8 High
- cipplanner cipaceVulnerabilities in the My Account and User Management components in CIPPlanner CIPAce before 9.17...8.8 High
- cipplanner cipaceA Use of Single-factor Authentication vulnerability in the Authentication component of CIPPlanner...4.3 Medium
- cipplanner cipaceVulnerabilities in the File Download and Get File handler components in CIPPlanner CIPAce before...7.5 High
- statping-ngAn issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted...7.5 High
- statping-ngAn issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted...5.3 Medium
- statping-ngAn issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted...5.3 Medium
- statping-ngAn issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted...7.5 High
- albrecht jung gmbh & co. kg jung smart panel 5.1 knxJUNG Smart Panel 5.1 KNX Unauthenticated Path Traversal6.9 Medium
- doramart doracmsDoraCMS <= 3.1 UEditor Remote Image Fetch SSRF6.9 Medium
- langchain-ai langchain, langchain core +1 moreLangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages3.7 Low
- cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 morecryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves8.2 High
- significant-gravitas autogpt, agpt autogpt platform +1 moreRedos (Regular Expression Denial of Service) at Code Extraction Block in significant-gravitas/autogpt6.5 Medium
- zoll epcr ios mobile applicationZOLL ePCR IOS Mobile Application Insertion of Sensitive Information into Externally-Accessible File or Directory6.7 Medium
- aveva pi data archive pi serverUncaught Exception vulnerability in AVEVA PI Data Archive8.7 High
- aveva pi to connect agentInsertion of Sensitive Information into Log File vulnerability in AVEVA PI to CONNECT Agent5.7 Medium
- ge vernova enervistaEnervista UR Setup DLL Hijacking4.6 Medium
- ge vernova enervistaEnervista UR Setup Directory Traversal Vulnerability2.9 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ embedded r1000 series processors, ryzen™ embedded r2000 series processors +1 more +3 moreA buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to...7.3 High
- amd ryzen™ 7000 series desktop processors, ryzen™ 7045 series mobile processors with radeon™ graphics, ryzen™ 8000 series desktop processors +3 more +5 moreA Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow...4.6 Medium
- amd ryzen™ 4000 series desktop processors, ryzen™ 4000 series mobile processors with radeon™ graphics, ryzen™ 5000 series desktop processors with radeon™ graphics +3 more +5 moreInsufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an...5.4 Medium
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro w5000 series graphics products +14 more +16 moreImproper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading...1.8 Low
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro v520, radeon™ pro v620 +19 more +21 moreImproper system call parameter validation in the Trusted OS may allow a malicious driver to...7.1 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, ryzen™ 3000 series desktop processors, ryzen™ 3000 series mobile processors with radeon™ graphics +20 more +22 moreInsufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy...4.8 Medium
- adobe lightroom, lightroom desktop +1 moreLightroom Desktop | Out-of-bounds Write (CWE-787)7.8 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Out-of-bounds Read (CWE-125)5.5 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 9004 series processors, epyc™ embedded 9004 series processors (formerly codenamed "genoa") +32 more +34 moreImproper input validation in the SMM handler could allow an attacker with Ring0 access to write...7.0 High
- amd epyc™ 9004 series processors, epyc™ 9005 series processors, epyc™ embedded 9004 series processors (formerly codenamed "genoa") +15 more +17 moreImproper input validation in the SMM communications buffer could allow a privileged attacker to...4.6 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreInsufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush...4.5 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreImproper handling of error condition during host-induced faults can allow a local high-privileged...1.8 Low
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreA use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated...4.6 Medium
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreInsufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to...4.0 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors, ryzen™ 9000 series desktop processors +7 more +9 moreImproper isolation of shared resources on a system on a chip by a malicious local attacker with...4.8 Medium
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreMissing Checks in certain functions related to RMP initialization can allow a local admin...1.8 Low
- amd epyc™ 9005 series processorsImproper bound check within AMD CPU microcode can allow a malicious guest to write to host memory...5.3 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreImproper handling of overlap between the segmented reverse map table (RMP) and system management...6.8 Medium
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreImproper access control in secure encrypted virtualization (SEV) could allow a privileged...6.9 Medium
- amd epyc™ 8004 series processors, epyc™ 9004 series processors, epyc™ embedded 9004 series processors +2 moreImproper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU...5.9 Medium
- amd epyc™ 7001 series processors, epyc™ 7002 series processors, epyc™ 7003 series processors +17 more +19 moreImproper input validation in system management mode (SMM) could allow a privileged attacker to...7.1 High
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreImproper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow...5.9 Medium
- amd epyc™ 7003 series processors, epyc™ 8004 series processors, epyc™ 9004 series processors +6 more +8 moreImproper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to...6.7 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreInsufficient Granularity of Access Control in SEV firmware could allow a privileged user with a...4.6 Medium
- amd epyc™ 9005 series processors, epyc™ embedded 9005 series processors +1 moreImproper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a...5.9 Medium
- mongodb inc go driverHeap Out-of-Bounds Read in Go Driver GSSAPI C Wrappers enables application crash or information leak6.9 Medium
- mongodb inc ruby driverUnsafe Reflection in Mongoid::Criteria.from_hash6.9 Medium
- Show moreLoading…