CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- apple ipados, macos, watchos +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in watchOS 26.3, macOS...8.8 High
- apple macosThis issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe...7.8 High
- apple macosThis issue was addressed with improved data protection. This issue is fixed in macOS Tahoe 26.3....5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3...7.1 High
- apple ipados, ios and ipados, iphone os +2 moreA path handling issue was addressed with improved validation. This issue is fixed in iOS 18.7.5...5.5 Medium
nvidia-modprobeSUSE,nvidia-open-driver-G06-signedSUSE,nvidia-persistencedSUSE +1 more +3 moreSecurity update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cudaNo score- zyddnys manga-image-translatormanga-image-translator Shared API Unsafe Deserialization RCE9.3 Critical
- google keras, red hat openshift ai (rhoai) +1 moreArbitrary File Read in Keras via HDF5 External Datasets7.1 High
- frappe learning, lms +1 moreFrappe LMS affected by unauthorised user was able to access the full list of batch enrolled students1.3 Low
- akutishevsky sf-mcp-serversf-mcp-server has a Command Injection in query_records tool due to unsafe use of child_process.exec7.5 High
- difyClient‑side DOM XSS in the web chat app of Dify when using echarts5.3 Medium
- dani-garcia vaultwardenvaultwarden has Full Cipher Enumeration Ignoring Organization Collection Permissions6.5 Medium
- aiven klawKlaw has an improper authorisation check on /resetMemoryCache7.1 High
- pjsip, pjsip pjproject +1 morePJSIP has a heap buffer overflow in ICE with long username8.1 High
- avideo platform, wwbn avideo +1 moreAVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)8.5 High
- diveshlunker bloodxBloodX 1.0 - Authentication Bypass6.9 Medium
- astppASTPP VoIP 4.0.1 - Remote Code Execution7.7 High
- astppASTPP 4.0.1 VoIP Billing - Database Backup Download8.7 High
- flexera flexnet publisherFlexNet Publisher 11.12.1 - Cross-Site Request Forgery (Add Local Admin)5.1 Medium
- kanboardKanboard is Missing Access Control on Plugin Installation leading to Administrative RCE8.5 High
- top password software msn password recoveryMSN Password Recovery 1.30 - Denial of Service4.6 Medium
- devdojo voyagerVoyager 1.3.0 - Directory Traversal8.7 High
- digitalvolcano software textcrawler proTextCrawler Pro3.1.1 - Denial of Service6.7 Medium
- nsasoft spotmsn, nsauditor spotmsn +1 moreSpotMSN 2.4.6 - 'Name' Denial of Service4.6 Medium
- nsasoft spotim, nsauditor spotim +1 moreSpotIM 2.2 - 'Name' Denial Of Service4.6 Medium
- nsasoft spotie, nsauditor spotie +1 moreSpotIE 2.9.5 - 'Key' Denial of Service4.6 Medium
- nsasoft spotftp, nsauditor spotftp ftp password recovery +1 moreSpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service4.6 Medium
- nsasoft spotftp, nsauditor spotftp ftp password recovery +1 moreSpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service4.6 Medium
- nsasoft spotdialup, nsauditor spotdialup +1 moreSpotDialup 1.6.7 - 'Key' Denial of Service4.6 Medium
- nsasoft sharealarmpro, nsauditor sharealarmpro advanced network access control +1 moreShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service4.6 Medium
- nsasoft remshutdown, nsauditor remshutdown +1 moreRemShutdown 2.9.0.0 - 'Name' Denial of Service4.6 Medium
- nsasoft remshutdown, nsauditor remshutdown +1 moreRemShutdown 2.9.0.0 - 'Key' Denial of Service4.6 Medium
- nsasoft nsauditor office product key finderOffice Product Key Finder 1.5.4 - Denial of Service4.6 Medium
- nsasoft nsauditor networksleuthNetworkSleuth 3.0.0.0 - 'Key' Denial of Service4.6 Medium
- nsasoft netsharewatcher, nsauditor netsharewatcher +1 moreNetShareWatcher 1.5.8.0 - 'Name' Denial Of Service4.6 Medium
- nsasoft netsharewatcher, nsauditor netsharewatcher +1 moreNetShareWatcher 1.5.8.0 - 'Key' Denial of Service4.6 Medium
- nsasoft nbmonitor, nsauditor nbmonitor +1 moreNBMonitor 1.6.6.0 - 'Key' Denial of Service4.6 Medium
- digitalvolcano software duplicate cleaner proDuplicate Cleaner Pro 4 - Denial of Service6.7 Medium
- nsasoft domain name search software, nsauditor dnss domain name search software +1 moreDnss Domain Name Search Software - 'Name' Denial of Service4.6 Medium
- nsasoft domain name search software, nsauditor dnss domain name search software +1 moreDnss Domain Name Search Software - 'Key' Denial of Service4.6 Medium
- nsasoft blueauditorBlueAuditor 1.7.2.0 - 'Name' Denial of Service4.6 Medium
- nsasoft nsauditor backup key recovery recover keys crashed hard disk driveBackup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service4.6 Medium
- top password software zip password recoveryZIP Password Recovery 2.30 - 'ZIP File' Denial of Service4.6 Medium
- top password software msn password recoveryMSN Password Recovery 1.30 - XML External Entity Injection6.7 Medium
- top password software dialup password recoveryTop Password Software Dialup Password Recovery 1.30 - Denial of Service4.6 Medium
- top password software password firefox password recoveryTop Password Firefox Password Recovery 2.8 - Denial of Service4.6 Medium
- digitalvolcano software taskcanvasTaskCanvas 1.4.0 - 'Registration' Denial Of Service4.6 Medium
- nsasoft nsauditor spotoutlookSpotOutlook 1.2.6 - 'Name' Denial of Service4.6 Medium
- nsasoft nsauditor spotdialupSpotDialup 1.6.7 - 'Name' Denial of Service4.6 Medium
- chevere spa cheveretoChevereto 3.13.4 Core - Remote Code Execution9.3 Critical
- Show moreLoading…