CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- kostasmitroglou thesystem, password management application +1 morethesystem 1.0 - 'server_name' SQL Injection7.1 High
- realtek rtk iis codec serviceRTK IIS Codec Service 6.4.10041.133 - 'RtkI2SCodec' Unquote Service Path8.5 High
- wondershare mobilegoMobileGo 8.5.0 - Insecure File Permissions8.5 High
- vm3max nextvpnNextVPN 4.10 - Insecure File Permissions8.5 High
- glpi-project more reporting, pluginsglpi mreporting +1 moremreporting affected by a SQLI on date change4.9 Medium
- newbee-ltd newbee-mallnewbee-mall Unsalted MD5 Password Hashing Enables Offline Credential Cracking9.3 Critical
- newbee-ltd newbee-mallnewbee-mall Default Seeded Administrator Credentials Allow Account Takeover9.3 Critical
- amd vivado™ documentation navigator installation (windows)A DLL hijacking vulnerability in Doc Nav could allow a local attacker to achieve privilege...7.3 High
- amd instinct™ mi210, instinct™ mi250, instinct™ mi300a +5 more +7 moreType confusion in the AMD Secure Processor (ASP) could allow an attacker to pass a malformed...8.4 High
- amd instinct™ mi300a, instinct™ mi300x, instinct™ mi308x +11 more +13 moreDebug code left active in AMD's Video Decoder Engine Firmware (VCN FW) could allow a attacker to...6.3 Medium
- amd radeon™ pro vii, radeon™ vii +1 moreImproper input validation within RAS TA Driver can allow a local attacker to access out-of-bounds...4.6 Medium
- amd athlon™ 3000 series mobile processors with radeon™ graphics, epyc™ 7001 series processors, epyc™ 7002 series processors +36 more +38 moreImproper Access Control in an on-chip debug interface could allow a privileged attacker to enable...8.7 High
- xpertforextradeinc cedipayCediPay Affected by Improper Input Validation in Payment Processing8.8 High
- brightsign os series 4 players, os series 5 players +1 moreBrightSign Players Use of Default Credentials8.6 High
- freepbx api, sangoma freepbx +1 moreFreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes2.0 Low
- xwiki, xwiki xwiki-platform +1 moreXWiki Platform affected by click-jacking through CSS injection in comments5.3 Medium
- traefik, red hat openshift dev spaces 3.27 +1 moreTraefik: TCP readTimeout bypass via STARTTLS on Postgres7.5 High
helmopenSUSESecurity update for helmNo score- php frankenphpFrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files8.9 High
- php frankenphpFrankenPHP leaks session data between requests in worker mode8.7 High
- quic-go webtransport-gowebtransport-go affected by a Memory Exhaustion Attack due to Missing Cleanup of Streams Map5.3 Medium
- quic-go webtransport-gowebtransport-go CloseWithError can block indefinitely5.3 Medium
- quic-go webtransport-gowebtransport-go affected by Memory Exhaustion Attack due to Missing Length Check in WT_CLOSE_SESSION Capsule5.3 Medium
rust1.93SUSESecurity update for rust1.93No scorerust1.93openSUSESecurity update for rust1.93No score- xiaomi technology co., ltd. galaxy fds android sdkXiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM9.1 Critical
- ninjateam fastdup – fastest wordpress migration & duplicatorFastDup – Fastest WordPress Migration & Duplicator <= 2.7.1 - Missing Authorization to Authenticated (Contributor+) Backup Creation and Download8.8 High
- amd instinct™ mi210, instinct™ mi250 +1 moreAn unintended proxy or intermediary in the AMD power management firmware (PMFW) could allow a...7.2 High
- ntn information processing services computer software hardware industry and trade ltd. co. smart panelInsecure File Upload in NTN Informatics' Smart Panel9.8 Critical
- ays-pro secure copy content protection and content lockingSecure Copy Content Protection and Content Locking <= 4.9.8 - Unauthenticated Stored Cross-Site Scripting via X-Forwarded-For Header7.2 High
- farktor e-commerce packageIDOR in Farktor Software's E-Commerce Package6.3 Medium
- postgresql, red hat enterprise linux 10, enterprise linux 9 +1 more +3 morePostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory8.2 High
- farktor e-commerce packageXSS in Farktor Software's E-Commerce Package8.2 High
- farktor e-commerce packageSQLi in Farktor Software's E-Commerce Package9.8 Critical
- switcorp activity log for wordpressActivity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File6.5 Medium
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.97.0 - Unauthenticated Stored Cross-Site Scripting via media[].href Parameter7.2 High
keccakcrates.ioUnsoundness in opt-in ARMv8 assembly backend for `keccak`0.5 Lowkernel-defaultSUSE,kernel-sourceSUSE,kernel-symsSUSE +1 more +3 moreSecurity update for the Linux KernelNo score- solax power pocket wifi 3.0, pocket wifi 4.0, pocket wifi+4gm +2 more +4 moreInsecure Credential Generation for Solax Power Pocket WiFi models MQTT Cloud Connection6.5 Medium
- solax power pocket wifi 3.0, pocket wifi 4.0, pocket wifi+4gm +2 more +4 moreMissing Firmware Authenticity Checks in Solax Power Pocket WiFi models5.3 Medium
- solax power pocket wifi 3.0, pocket wifi 4.0, pocket wifi+4gm +2 more +4 moreMissing Certificate Validation for Solax Power Pocket WiFi models MQTT Cloud Connection9.4 Critical
- wix web applicationReflected Cross-Site Scripting in the Wix web application5.3 Medium
- mateuszgbiorczyk converter for media – optimize images | convert webp & avifConverter for Media – Optimize images | Convert WebP & AVIF <= 6.5.1 - Unauthenticated Server-Side Request Forgery via src4.8 Medium
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +2 moreXSS in Grafana Explore stack trace6.8 Medium
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +2 morePublic Dashboards time range restriction on annotations can be bypassed5.3 Medium
- valmet dna, dna web tools +1 moreValmet DNA Web server arbitrary file read access8.7 High
- unknown prime listing managerPrime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation9.8 Critical
- markdown-itmarkdown-it is has a Regular Expression Denial of Service (ReDoS)6.9 Medium
- qs project qsqs's arrayLimit bypass in comma parsing allows denial of service6.3 Medium
- m-audio m-track duo hdThe installer of M-Track Duo HD version 1.0.0 contains an issue with the DLL search path, which...7.1 High
- Show moreLoading…