CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- albrecht jung gmbh & co. kg jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server 1.1.1050 - 'JUNG Smart Visu Server' Missing Authentication8.7 High
- albrecht jung gmbh & co. kg jung smart visu server, jung-group smart visu server firmware +1 moreJUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting Syntax8.7 High
- latepoint – calendar booking plugin for appointments and eventsLatePoint – Calendar Booking Plugin for Appointments and Events <= 5.2.6 - Missing Authorization to Booking Details Exposure5.3 Medium
- dell update package, update package framework +1 moreDell Update Package (DUP) Framework, versions 23.12.00 through 24.12.00, contains an Improper...8.2 High
- dell idrac service module, idrac service module for linux +1 moreDell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service...7.8 High
- hashicorp shared libraryArbitrary code execution in React server-side rendering of untrusted MDX content8.8 High
- scriptsbundle adforestAdForest <= 6.0.12 - Authentication Bypass9.8 Critical
- haproxy aloha, haproxy, haproxy enterprise +2 moreHAProxy Community Edition 3.0 through 3.3 before 3.3.3 lacks a length check for the NEW_TOKEN...4.8 Medium
- No product listedgrub-btrfs through 2026-01-31 (on Arch Linux and derivative distributions) allows initramfs OS...5.4 Medium
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL missing validation of multibyte character length executes arbitrary code8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary code8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code8.8 High
- postgresqlPostgreSQL oidvector discloses a few bytes of memory4.3 Medium
- fit2cloud cordys crmCordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list)...9.8 Critical
- haloAn issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a...7.5 High
- No product listedlty628 aidigu v1.9.1 is vulnerable to Cross Site Scripting (XSS) exists in the /setting/ page...6.1 Medium
- ourway webfsdwebfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request. This is due to the filename...9.8 Critical
- opensourcepos open source point of saleA cross-site scripting (XSS) vulnerability in the Item Kits function of OpenSourcePOS v3.4.1...5.5 Medium
- p2r3 bareironp2r3 Bareiron commit: 8e4d4020d is vulnerable to Buffer Overflow, which allows unauthenticated...7.5 High
- p2r3 bareironp2r3 bareiron commit: 8e4d4020d contains an Out-of-bounds Read, which allows unauthenticated...7.5 High
- No product listedAn issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an...4.3 Medium
- No product listedCross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker...9.0 Critical
- No product listedA heap buffer overflow in the processRequest function of Open TFTP Server MultiThreaded v1.7...7.5 High
- No product listedA stack overflow in the ZBarcode_Encode function of Monkeybread Software MBS DynaPDF Plugin v21.3...7.5 High
owncloud-clientopenSUSElibowncloudsync-devel-6.0.3-1.1 on GA mediaNo score- No product listedAn issue in filosoft Comerc.32 Commercial Invoicing v.16.0.0.3 allows a local attacker to execute...7.8 High
- infoblox niosIn Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.8.8 High
- infoblox niosIn Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via...7.7 High
@farmfe/corenpm@farmfe/core is Missing Origin Validation in WebSocket6.5 Mediumnvidia-modprobeSUSE,nvidia-open-driver-G06-signedSUSE,nvidia-persistencedSUSE +1 more +3 moreSecurity update for nvidia-modprobe.cuda, nvidia-open-driver-G06-signed, nvidia-persistenced.cudaNo score- apple macosA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...5.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...7.5 High
- apple ipados, macos, ios and ipados +1 more +3 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7...4.6 Medium
- apple macos, visionos +1 moreA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple macosA privacy issue was addressed by moving sensitive data to a protected location. This issue is...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS...4.4 Medium
- apple ipados, macos, safari +19 more +21 moreThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...5.5 Medium
- apple ipados, macos, tvos +3 more +5 moreA logging issue was addressed with improved data redaction. This issue is fixed in watchOS 26.3,...7.5 High
- apple macosAn injection issue was addressed with improved validation. This issue is fixed in macOS Sequoia...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4,...5.3 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Sequoia...6.0 Medium
- apple ipados, macos, visionos +2 more +4 moreA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple ipados, macos, tvos +5 more +7 moreA memory corruption issue was addressed with improved state management. This issue is fixed in...7.8 High
- apple ipados, ios and ipados, iphone os +2 moreAn inconsistent user interface issue was addressed with improved state management. This issue is...4.6 Medium
- apple macosA privacy issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4,...5.5 Medium
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA permissions issue was addressed with additional restrictions. This issue is fixed in watchOS 26...7.1 High
- apple ipados, ios and ipados, iphone os +2 moreA privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.3 and...4.6 Medium
- apple macosA permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS...5.5 Medium
- Show moreLoading…