CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- hyland onbase workflow timer serviceHyland OnBase Timer Service Unauthenticated .NET Remoting RCE9.3 Critical
- kanboardKanboard TaskCreationController::duplicateProjects() endpoint does not validate user permissions for target projects4.3 Medium
- hp inc appHP App – Potential Cross-Site Scripting5.1 Medium
- linux, linux kernel, siemens ruggedcom rst2428p +2 morenvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 morenetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()7.8 High
- uni-yaz flexcity, universal software inc. flexcity/kiosk +1 moreIDOR in Universal Sotware's FlexCity/Kiosk8.3 High
- uni-yaz flexcity, universal software inc. flexcity/kiosk +1 moreAdmin Account Takeover in Universal Sotware's FlexCity/Kiosk8.8 High
- uni-yaz flexcity, universal software inc. flexcity/kiosk +1 moreBusiness Logic Error in Universal Software's FlexCity/Kiosk8.8 High
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: out-of-bounds read in libsoup handle_partial_get() leading to heap information disclosure5.3 Medium
- apache avro, apache software foundation avro java sdk +1 moreApache Avro Java SDK: Code injection on Java generated code7.3 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: gimp: memory corruption due to integer overflow in ico file handling4.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: gimp: denial of service via crafted psp image file3.3 Low
- mattermost, mattermost server +1 moreTime-of-check time-of-use vulnerability in common teams API3.1 Low
- mattermost, mattermost server +1 moreInsufficient Authorization in Mattermost Jira Plugin Allows Unauthorized Access to Post Attachments4.3 Medium
- thales safenet agent for windows logonImproper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon2.5 Low
- metagauss registrationmagicRegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure4.3 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- yokogawa electric corporation vnet/ip interface package, yokogawa vnet\/ip interface package +1 moreA vulnerability has been found in Vnet/IP Interface Package provided by Yokogawa Electric...6.0 Medium
- soliton filezenFileZen contains an OS command injection vulnerability. When FileZen Antivirus Check Option is...8.7 High
agentsnpmReflected Cross-Site Scripting (XSS) vulnerability in AI Playground site6.2 Medium- tp link systems inc. omada app, tp-link aginet, deco +21 more +23 moreInsufficient Certificate Validation in Multiple Mobile Applications Allows Man in the Middle Interception7.7 High
- tp-link omada, tp-link systems inc. omada cloud controller, tp-link aginet +12 more +14 morePermissive Web Security Policy Allows Cross-Origin Access Control Bypass on Omada Cloud Controllers2.0 Low
- gimp, red hat enterprise linux 7, enterprise linux 8 +2 more +4 moreGimp: gimp: application crash (dos) via crafted psd file due to heap-buffer-overflow2.8 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service due to malformed sftp message3.1 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via inefficient regular expression processing2.2 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()6.5 Medium
- libssh, red hat enterprise linux 10, enterprise linux 6 +6 more +8 moreLibssh: libssh: denial of service via improper configuration file handling3.3 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibssh: improper sanitation of paths received from scp servers5.0 Medium
- No product listedA Denial of Service (DoS) vulnerability was discovered in the TON Lite Server before v2024.09....7.5 High
- No product listedA State Pollution vulnerability was discovered in the TON Virtual Machine (TVM) before v2025.04....7.5 High
- No product listedA Stack Overflow vulnerability was discovered in the TON Virtual Machine (TVM) before v2024.10....7.5 High
- No product listedA Null Pointer Dereference vulnerability exists in the TON Virtual Machine (TVM) within the TON...7.5 High
- lavaliteLavaLite CMS 10.1.0 is vulnerable to Incorrect Access Control. An authenticated user with low...8.8 High
- free5gcAn improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows...7.5 High
- free5gcA heap buffer overflow vulnerability in the UPF component of free5GC v4.0.1 allows remote...7.5 High
- free5gcAn array index out of bounds vulnerability in the AMF component of free5GC v4.0.1 allows remote...7.5 High
- opensourcepos open source point of saleA cross-site scripting (XSS) vulnerability in the item management and sales invoice function of...6.5 Medium
- opensourcepos open source point of saleA cross-site scripting (XSS) vulnerability in the Generate Item Barcode function of OpenSourcePOS...6.5 Medium
- opensourcepos open source point of saleAn issue in OpenSourcePOS v3.4.1 allows attackers to execute arbitrary code via returning a...7.4 High
- opensourcepos open source point of saleA cross-site scripting (XSS) vulnerability in the Customers function of OpenSourcePOS v3.4.1...6.5 Medium
- No product listedA zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1...10.0 Critical
- No product listedA SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for...9.8 Critical
- iobit unlockerAn issue in IObit Unlocker v1.3.0.11 allows attackers to cause a Denial of Service (DoS) via a...6.2 Medium
- amd epyc™ 7002 series processors, epyc™ embedded 7002 series processors, ryzen™ 3000 series desktop processors +19 more +21 moreImproper restriction of operations within the bounds of a memory buffer in PCIe® Link could allow...6.0 Medium
- dbook www::oauth, www\ +1 moreWWW::OAuth 1.000 and earlier for Perl uses insecure rand() function for cryptographic functions7.3 High
- websitem 7070 hazır profesyonel web sitesiPRO-7070 Hazır Profesyonel Web Sitesi 1.0 - Authentication Bypass8.8 High
- Show moreLoading…