CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- goautodialGOautodial 4.0 - 'CreateEvent' Persistent Cross-Site Scripting5.1 Medium
- anttiviljami wp server log viewerWP Server Log Viewer 1.0 - 'logfile' Persistent Cross-Site Scripting5.1 Medium
- yoast duplicate-postDuplicate-Post 3.2.3 - Persistent Cross-Site Scripting4.8 Medium
- inoideas inoerpInoERP 0.7.2 - Persistent Cross-Site Scripting5.1 Medium
- kostasmitroglou thesystemthesystem Persistent XSS5.1 Medium
- actfax activefax serverActiveFax Server 6.92 Build 0316 - 'ActiveFaxServiceNT' Unquoted Service Path8.5 High
- zilab software inc remote console serverZilab Remote Console Server 3.2.9 - 'Zilab Remote Console Server' Unquoted Service Path8.5 High
- litemanager team mikogoMikogo 5.2.2.150317 - 'Mikogo-Service' Unquoted Service Path8.5 High
- softalk workgroupmailWorkgroupMail 7.5.1 - 'WorkgroupMail' Unquoted Service Path8.5 High
- blackmoon ftp serverBlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path8.5 High
- phraseanet dam open sourcePhraseanet 4.0.3 Stored XSS via Document Upload5.1 Medium
- plunet businessmanagerStored XSS on Plunet BusinessManager8.6 High
- proctorio secure exam proctor extensionInsufficient Origin Validation in Proctorio Chrome Extension postMessage Handlers3.6 Low
- amd µprof, μprof +1 moreIncorrect permission assignment in AMD µProf may allow a local user-privileged attacker to...7.0 High
- amd vivado™ installation (windows)A DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege...7.3 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +9 more +11 moreA Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow...7.1 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +7 more +9 moreA Time-of-check time-of-use (TOCTOU) race condition in the AMD Secure Processor (ASP) could allow...7.1 High
- amd radeon™ pro v710, radeon™ pro w7000 series graphics products, radeon™ rx 7000 series graphics products +7 more +9 moreImproper input validation in AMD Graphics Driver could allow a local attacker to write out of...6.9 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ pro vii, radeon™ pro w5000 series graphics products +34 more +36 moreInteger Overflow within atihdwt6.sys can allow a local attacker to cause out of bound read/write...7.0 High
- amd radeon™ pro v620, radeon™ pro vii, radeon™ pro w6000 series graphics products +5 more +7 moreImproper handling of parameters in the AMD Secure Processor (ASP) could allow a privileged...8.7 High
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +21 more +23 moreImproper input validation in AMD Graphics Driver could allow an attacker to supply a specially...8.8 High
- amd radeon™ pro v710Improper Hardware reset flow logic in the GPU GFX Hardware IP block could allow a privileged...6.0 Medium
- amd radeon™ pro v520, radeon™ pro v620, radeon™ pro v710 +14 more +16 moreThe integer overflow vulnerability within AMD Graphics driver could allow an attacker to bypass...5.5 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "dali"), athlon™ 3000 series mobile processors with radeon™ graphics (formerly codenamed "picasso"), radeon™ pro w5000 series graphics products +25 more +27 moreA DLL hijacking vulnerability in the AMD Software Installer could allow an attacker to achieve...7.8 High
- open-metadata openmetadataLeaky JWTs in OpenMetadata exposing highly-privileged bot users7.6 High
- python pillow, red hat openshift lightspeed, ai inference server +24 more +26 morePillow has an out-of-bounds write when loading PSD images8.6 High
- metis cyberspace technology sa dfsUnauthenticated Remote Command Execution via Web Console in METIS DFS9.8 Critical
- metis cyberspace technology sa wicUnauthenticated Remote Root Shell Access via Web Console in METIS WIC9.8 Critical
- metis cyberspace technology sa wicUnauthenticated Data Export and Source Code Disclosure via /dbviewer/ in METIS WIC7.5 High
- logo software industry and trade inc. j-platformImproper Access Control in Logo Software's Logo j-Platform9.8 Critical
- schneider eelctric ecostruxure building operation workstation, schneider electric ecostruxure building operation webstation +1 moreCWE‑94: Improper Control of Generation of Code vulnerability exists that could cause execution of...7.0 High
- schneider eelctric ecostruxure building operation workstation, schneider electric ecostruxure building operation webstation +1 moreCWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could...7.0 High
- e-kalite software hardware engineering design and internet services industry and trade ltd. co. turboardReflected XSS in E-Kalite Software Hardware Engineering's Turboard9.4 Critical
- plunet businessmanagerRefleccted XSS on Plunet BusinessManager8.7 High
- tomdever wpforo forumwpForo Forum <= 2.4.13 - Authenticated (Subscriber+) PHP Object Injection8.8 High
- qnap media streaming add-onMedia Streaming add-on1.7 Low
- qnap media streaming add-onMedia Streaming add-on2.0 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central4.9 Medium
- qnap qts, quts hero +1 moreQTS, QuTS hero5.1 Medium
- qnap qsync centralQsync Central1.3 Low
- qnap qsync centralQsync Central1.3 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap quts hero, qts +1 moreQuTS hero0.6 Low
- dinosoft business solutions erpImproper Access Control in Dinosoft Business Solutions' Dinosoft ERP9.8 Critical
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- qnap qsync centralQsync Central0.6 Low
- Show moreLoading…