CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- clamav clambcClamAV ClamBC < 0.103.0-rc - 'ClamBC' Executable Regular Expression Error8.6 High
- centova technologies inc. castCentova Cast 3.2.12 - Denial of Service7.1 High
- inettools for iosiNetTools for iOS 8.20 - 'Whois' Denial of Service6.7 Medium
- nsasoft spotauditor, nsauditor spotauditor +1 moreSpotAuditor 5.3.2 - 'Base64' Denial Of Service6.7 Medium
- ghia-camip ghia camipGHIA CamIP 1.2 for iOS - 'Password' Denial of Service6.7 Medium
- dokuwikiDokuwiki 2018-04-22b - Username Enumeration6.9 Medium
- kiteworks owncloudOwnCloud 8.1.8 - Username Disclosure5.3 Medium
- nsasoft spotauditor, nsauditor spotauditor +1 moreSpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)8.4 High
- nsasoft product key explorer, nsauditor product key explorer +1 moreProduct Key Explorer 4.2.0.0 - 'Name' Denial of Service6.7 Medium
- bullwark momentum series jawsBullwark Momentum Series JAWS 1.0 - 'Momentum Series JAWS' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8.7 High
- internet-soft ftp commander proFTP Commander Pro 8.03 - Local Stack Overflow8.4 High
- avs4you avs audio converterAVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow8.4 High
- bimesoft surfoffline professionalSurfOffline Professional 2.2.0.103 - 'Project Name' Denial of Service (SEH)6.7 Medium
- internet-soft ftp navigatorFTP Navigator 8.03 - 'Custom Command' Denial of Service (SEH)6.7 Medium
- xnsoft xnconvertXnConvert 1.82 - Denial of Service6.7 Medium
- mersenne prime95Prime95 Version 29.8 build 6 - Buffer Overflow (SEH)8.4 High
- thrive smart homeThrive Smart Home 1.1 - 'Smart Home' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')8.8 High
- ricoh web image monitorRICOH Web Image Monitor 1.09 - HTML Injection5.1 Medium
- heatmiser netmonitorHeatmiser Netmonitor 3.03 - HTML Injection5.1 Medium
- heatmiser netmonitorHeatmiser Netmonitor 3.03 - Hardcoded Credentials9.3 Critical
- internet-soft ftp navigatorFTP Navigator 8.03 - Stack Overflow (SEH)8.4 High
- amitkolloldey elearning-scriptelearning-script 1.0 - Authentication Bypass8.8 High
- internet-soft domain quester proDomain Quester Pro 6.02 - Stack Overflow (SEH)8.4 High
- avs4you avs audio converterAVS Audio Converter 9.1.2.600 - Stack Overflow8.4 High
- suse harvesterNeuVector scanner insecurely handles passwords as command arguments3.8 Low
- cesargb laravel-magiclinkLaravel MagicLink: Insecure Deserialization of MagicLink Actions Leads to Remote Code Execution8.8 High
- surrealdbSurrealDB before v2.6.1 Denial of Service via scripting6.0 Medium
- jm33-m0 emp3r0remp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection)9.3 Critical
- intego log reporterIntego Log Reporter TOCTOU Local Privilege Escalation8.5 High
- intego personal backupIntego Personal Backup Task File Privilege Escalation8.5 High
- directus, directus @directus/api +1 moreDirectus Affected by User Enumeration via Password Reset Timing Attack5.3 Medium
- pendulum-project ntpd-rsntpd-rs affected by excessive CPU load from malformed packets6.9 Medium
- fastgptCross-Site Request Forgery (CSRF) in FastGPT6.9 Medium
- thecfu scraparrScraparr Readarr Integration exposes sensitive values as metric labels.9.1 Critical
- airleader gmbh masterAirleader Master Unrestricted Upload of File with Dangerous Type9.3 Critical
- yokecd yokeArbitrary WASM Code Execution via AnnotationOverrideFlight Injection in Yoke ATC8.8 High
- yokecd yokeUnauthenticated Admission Webhook Endpoints in Yoke ATC7.5 High
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (__import__)9.4 Critical
- opennav nav2, ros-navigation navigation2 +1 moreCritical Heap Out-of-bounds Access in `pf_cluster_stats()` via Malicious /initialpose Covariance -- Potential Remote Code Execution9.3 Critical
- oxygenz clipbucket, macwarrior clipbucket-v5 +1 moreClipBucket v5 enables internal network scans via an SSRF vulnerability5.0 Medium
- silabs.com silicon labs matterInteger Wraparound DoS in Silicon Labs Matter Implementation6.0 Medium
- linuxfoundation inspektor gadget, inspektor-gadget +1 moreInspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode6.9 Medium
- arduino app lab, arduino-app-lab +1 moreArduino App Lab has Improper Data Validation in Internal Terminal Interface6.9 Medium
- 84codes lavinmqLavinMQ is missing vhost access control7.1 High
- 84codes lavinmqLavinMQ has incomplete shovel configuration validation8.6 High
- goauthentik authentikauthentik has a Signature Verification Bypass via SAML Assertion Wrapping8.8 High
- goauthentik authentikauthentik has a forward authentication bypass with broken cookie8.6 High
- goauthentik authentikauthentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint9.1 Critical
- element-hq matrix-tools, ess-helm +1 moreESS Community Helm Chart has a weak server key generation method9.2 Critical
- kostasmitroglou thesystem, password management application +1 morethesystem App 1.0 - 'username' SQL Injection7.1 High
- Show moreLoading…