CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- nsasoft nsauditor backup key recoveryBackup Key Recovery 2.2.5 - 'Name' Denial of Service4.6 Medium
- allok soft video converterAllok Video Converter 4.6.1217 - Stack Overflow (SEH)8.4 High
- allok soft rm rmvb to avi mpeg dvd converterAllok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)8.4 High
- troglobit redirRedir 3.3 - Denial of Service8.7 High
- torrentrockyou torrent flv converterTorrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite)6.7 Medium
- nsasoft nsauditor gtalk password finderGTalk Password Finder 2.2.1 - 'Key' Denial of Service4.6 Medium
- nsasoft nsauditor apkf product key finderAPKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service4.6 Medium
- keepass password safeKeePass 2.44 - Denial of Service (PoC)4.6 Medium
- weird solutions bootp turboBOOTP Turbo 2.0 - Denial of Service (SEH)6.7 Medium
- torrentrockyou torrent 3gp converterTorrent 3GP Converter 1.51 - Stack Overflow (SEH)8.4 High
- ka ming cheung p2pwificam2 for iosP2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service4.6 Medium
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Information Disclosure (User Enumeration)8.7 High
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)8.5 High
- getoutline outlineOutline has a suspended user authentication bypass via WebSocket connections6.9 Medium
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file modification and privilege escalation via unvalidated tar archive entries7.0 High
- red hat enterprise linux 6, hardened images, siemens ruggedcom rst2428p +2 moreBusybox: busybox: arbitrary file overwrite and potential code execution via incomplete path sanitization7.0 High
- getoutline outlineOutline is vulnerable to privilege escalation vulnerability in document sharing7.6 High
- getoutline outlineOutline Affected an Arbitrary File Read via Path Traversal in JSON Import5.5 Medium
- milvusMilvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise9.8 Critical
- go-vikunja vikunjaVikunja Affected by XSS Via Task Preview8.6 High
- statamic cms, statamic +1 moreStatmatic affected by privilege escalation via stored cross-site scripting8.7 High
- google chromeInappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a...4.3 Medium
- google chromeInappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a...5.4 Medium
- google chromeUse after free in Ozone in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who...8.8 High
- google chromeInappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a...6.5 Medium
- google chromeRace in DevTools in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced...7.5 High
- google chromeInappropriate implementation in PictureInPicture in Google Chrome prior to 145.0.7632.45 allowed...6.5 Medium
- google chromeInappropriate implementation in Animation in Google Chrome prior to 145.0.7632.45 allowed a...6.5 Medium
- google chromeInsufficient policy enforcement in Frames in Google Chrome prior to 145.0.7632.45 allowed a...6.5 Medium
- google chromeInappropriate implementation in WebGPU in Google Chrome prior to 145.0.7632.45 allowed a remote...8.8 High
- google chromeHeap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker...8.8 High
- google chromeUse after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to...8.8 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Denial of Service in Advanced DNS Security Feature6.6 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +2 morePAN-OS: Improper Validation of Terminal Server Agent Certificate1.3 Low
- dalibo postgresql anonymizerImproper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges8.0 High
- dalibo postgresql anonymizerImproper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 148.0 High
- beyris ui iconsUI Icons - Critical - Cross-site Scripting - SA-CONTRIB-2026-0106.1 Medium
- statamic cms, statamic +1 moreStatamic's missing authorization allows access to assets4.3 Medium
- drupal quick editQuick Edit - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-0095.4 Medium
- moomoo product options and price calculation formulas for woocommerce – uni cpo (premium)Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) <= 4.9.60 - Missing Authorization to Unauthenticated Arbitrary Attachment and Dropbox File Deletion5.8 Medium
- zlan information technology co. zlan5143dZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function9.3 Critical
- zlan information technology co. zlan5143dZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function9.3 Critical
- minigal nano, rybber minigal nano +1 moreMiniGal Nano <= 0.3.5 Path Traversal via dir Parameter6.9 Medium
- minigal nano, rybber minigal nano +1 moreMiniGal Nano <= 0.3.5 Reflected XSS via dir Parameter5.1 Medium
- google libjxllibjxl: Uninitialized memory read in decoder due to incorrect optimization in patch handling2.3 Low
- google libjxl, red hat enterprise linux 10, enterprise linux 7 +2 more +4 morelibjxl: Out-of-bounds write in grayscale color transformation when using LCMS28.7 High
- ahdinosaur set-inPrototype pollution in set-in9.4 Critical
- langchain community, langchain-ai langchainjs +1 more@langchain/community affected by SSRF Bypass in RecursiveUrlLoader via insufficient URL origin validation4.1 Medium
- pion dtlsPion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key5.9 Medium
- kevinpapst kimaiKimai 2- persistent cross-site scripting (XSS)5.1 Medium
- Show moreLoading…