CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- flos freeware notepad2Flos Freeware Notepad2 Msimg32.dll uncontrolled search path7.3 High
- metagauss registrationmagicRegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation4.3 Medium
- comfast cf-e4, cf-e4 firmware +1 moreComfast CF-E4 HTTP POST Request mbox-config command injection5.1 Medium
- opencc jflowopencc JFlow Workflow WF_Admin_AttrFlow.java Imp_Done xml external entity reference5.3 Medium
- comfast cf-n1 v2, cf-n1 firmware +1 moreComfast CF-N1 V2 mbox-config sub_44AB9C command injection5.3 Medium
- comfast cf-n1 v2, cf-n1 firmware +1 moreComfast CF-N1 V2 mbox-config sub_44AC4C command injection5.3 Medium
- tosei self-service washing machineTosei Self-service Washing Machine tosei_datasend.php command injection6.9 Medium
- lintsinghua deepauditlintsinghua DeepAudit IP Address embedding_config.py server-side request forgery5.3 Medium
- mindsdbMindsDB File Upload security.py clear_filename server-side request forgery5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi AddMac command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi DeleteMac command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 login.cgi command injection5.3 Medium
- wavlink wl-wn579a3, wl-wn579a3 firmware +1 moreWavlink WL-WN579A3 wireless.cgi multi_ssid command injection5.3 Medium
- free5gcFree5GC PFCP UDP Endpoint denial of service6.9 Medium
- open5gsOpen5GS MME mme_s11_handle_create_session_response denial of service6.9 Medium
- open5gsOpen5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion6.9 Medium
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreLibsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources6.5 Medium
- ritwickdey live serverAn issue in Visual Studio Code Extensions Live Server v5.7.9 allows attackers to exfiltrate files...4.3 Medium
- shd101wyy markdown preview enhancedAn issue in Visual Studio Code Extensions Markdown Preview Enhanced v0.8.18 allows attackers to...8.8 High
- formulahendry coderunnerAn issue in the code-runner.executorMap setting of Visual Studio Code Extensions Code Runner v0...7.8 High
- open5gsOpen5GS MME esm-build.c memory corruption6.9 Medium
- open5gsOpen5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption6.9 Medium
- jung enet smart home server, jung-group enet smart home +1 moreJUNG eNet SMART HOME server 2.2.1/2.3.1 Privilege Escalation via setUserGroup8.7 High
- jung enet smart home server, jung-group enet smart home +1 moreJUNG eNet SMART HOME server 2.2.1/2.3.1 Account Takeover via resetUserPassword8.7 High
- jung enet smart home server, jung-group enet smart home +1 moreJUNG eNet SMART HOME server 2.2.1/2.3.1 Arbitrary User Deletion via deleteUserAccount7.1 High
- jung enet smart home server, jung-group enet smart home +1 moreJUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default Credentials9.3 Critical
- deciso opnsenseOPNsense 19.1 Reflected XSS via system_advanced_sysctl.php4.8 Medium
- deciso opnsenseOPNsense 19.1 Reflected XSS via proxy endpoint5.1 Medium
- deciso opnsenseOPNsense 19.1 Reflected XSS via monit interface5.1 Medium
- deciso opnsenseOPNsense 19.1 Reflected XSS via vpn_ipsec_settings.php5.1 Medium
- deciso opnsenseOPNsense 19.1 Stored XSS via firewall_rules_edit.php5.1 Medium
- deciso opnsenseOPNsense 19.1 Reflected XSS via diag_traceroute.php5.1 Medium
- deciso opnsenseOPNsense 19.1 Reflected XSS via diag_ping.php5.1 Medium
- deciso opnsenseOPNsense 19.1 Reflected XSS via interfaces_vlan_edit.php5.1 Medium
- deciso opnsenseOPNsense 19.1 Stored XSS via system_advanced_sysctl.php5.1 Medium
- deciso opnsenseOPNsense 19.1 Reflected XSS via diag_backup.php4.8 Medium
- arangodb community editionArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface4.8 Medium
- open5gsOpen5GS SMF types.c ogs_gtp2_parse_tft denial of service6.9 Medium
- unidocs ezpdf drm reader, ezpdf reader +1 moreUnidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path7.3 High
- micca auto electronics co., ltd. car alarm system ke700Micca KE700 Brute-force vulnerability due to low entropy6.4 Medium
- micca auto electronics co., ltd. car alarm system ke700Micca KE700 Acceptance of previously used rolling codes8.4 High
- micca auto electronics co., ltd. car alarm system ke700Micca KE700 Cleartext transmission of key fob ID5.7 Medium
- bosch infotainment system ecuEnabling SSH server on Infotainment ECU6.8 Medium
- bosch infotainment system ecuStack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8 High
- bosch infotainment system ecuStack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8 High
- bosch infotainment system ecuAbsence of Kernel Module Signature Verification on Linux System of Infotainment ECU6.7 Medium
- bosch infotainment system ecuStack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU8.8 High
- bosch infotainment system ecuStack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU9.3 Critical
- bdthemes element pack – widgets, templates & addons for elementorElement Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read6.5 Medium
- Show moreLoading…