CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- smoothwall expressSmoothwall Express 3.1 'time.cgi' Cross-Site Scripting5.1 Medium
- smoothwall expressSmoothwall Express 3.1 'hosts.cgi' Cross-Site Scripting5.1 Medium
- smoothwall expressSmoothwall Express 3.1 'dhcp.cgi' Cross-Site Scripting5.1 Medium
- smoothwall expressSmoothwall Express 3.1 'urlfilter.cgi' Cross-Site Scripting5.3 Medium
- smoothwall expressSmoothwall Express 3.1 'proxy.cgi' Cross-Site Scripting5.1 Medium
- wavlink wl-nu516u1Wavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflow8.6 High
- wavlink wl-nu516u1, wl-nu516u1 firmware +1 moreWavlink WL-NU516U1 adm.cgi sub_40785C stack-based overflow7.5 High
- smartertools smartermailSmarterTools SmarterMail before 9526 allows XSS via MAPI requests.7.2 High
- dassault systèmes enoviavpm web accessReflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 198.7 High
- intelbras vip 3260 z iaIntelbras VIP 3260 Z IA OutsideCmd password recovery9.2 Critical
- jingdong jd cloud box ax6600, jdcloud ax6600 firmware +1 moreJingDong JD Cloud Box AX6600 jdcapp_rpc controlDevice get_status privileges management5.3 Medium
- jingdong jd cloud box ax6600, jdcloud ax6600 firmware +1 moreJingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi cast_streen privileges management5.3 Medium
- jingdong jd cloud box ax6600, jdcloud ax6600 firmware +1 moreJingDong JD Cloud Box AX6600 jdcweb_rpc jdcapi web_get_ddns_uptime privileges management5.3 Medium
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpx8.8 High
- mozilla firefox, firefox for ios +1 moreInterrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS4.3 Medium
- kalcaddle kodboxkalcaddle kodbox Media File Preview Plugin VideoResize.class.php run os command injection5.3 Medium
- 3ds solidworks edrawingsOut-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 20267.8 High
- 3ds solidworks edrawingsOut-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 20267.8 High
- 3ds solidworks edrawingsUse of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 20267.8 High
- No product listedGeekAI net_handler.go Download server-side request forgery5.3 Medium
- cskefucskefu File Upload MediaController.java upload cross site scripting5.1 Medium
- cskefucskefu Endpoint MediaController.java server-side request forgery5.3 Medium
- mattermost, mattermost server +1 moreTeam Admin Bypass of Invite Permissions via allow_open_invite Field3.8 Low
- mattermost, mattermost desktop +1 moreArbitrary application execution via unvalidated server-controlled URLs in Help menu7.6 High
- mattermost, mattermost server +1 moreInformation disclosure via channel mentions in posts4.3 Medium
- jeecg bootJeecgBoot Retrieval-Augmented Generation AiragKnowledgeController.java importDocumentFromZip deserialization2.3 Low
- mattermost, mattermost server +1 moreUser profile update exposes password hash and MFA secrets5.7 Medium
- tr7 cyber defense inc. web application firewallOpen Redirect in TR7's Web Application Firewall4.3 Medium
- tushar-2223 hotel-management-systemtushar-2223 Hotel-Management-System HTTP POST Request home.php sql injection5.3 Medium
- zentaoZenTao Editor control.php delete path traversal5.1 Medium
- zentaoZenTao Backup control.php delete path traversal5.3 Medium
- pretix, pretix newsletters, pretix-newsletter +2 moreUnsafe variable evaluation in email templates7.5 High
- pretix, pretix double opt in step, pretix-doistep +2 moreUnsafe variable evaluation in email templates7.5 High
- pretixUnsafe variable evaluation in email templates7.5 High
- efm iptime a6004mxEFM iptime A6004MX timepro.cgi commit_vpncli_file_upload unrestricted upload9.3 Critical
- mattermost, mattermost zoom, server +2 moreMattermost Zoom Plugin channel preference API lacks authorization checks4.3 Medium
- kubysoftStored Cross-Site Scripting vulnerability in Kubysoft5.1 Medium
- kubysoftStored Cross-Site Scripting (XSS) in Kubysoft5.1 Medium
- mattermost, mattermost zoom, server +2 moreMattermost Zoom Plugin allows unauthorized meeting creation and post modification via insufficient API access controls4.3 Medium
- hkuds nanobotNanobot Unauthenticated WhatsApp Session Hijack via WebSocket Bridge10.0 Critical
- kubysoftReflected Cross-Site Scripting (XSS) in Kubysoft4.8 Medium
- mattermost, mattermost server +1 moreAuthentication bypass via userID login when email and username login are disabled5.4 Medium
- zhanghuanhao librarysystem 图书馆管理系统zhanghuanhao LibrarySystem 图书馆管理系统 BookController.java access control6.9 Medium
- wayos fbm-220gWAYOS FBM-220G rc sub_40F820 command injection5.3 Medium
- ligerosmartLigeroSmart index.pl AgentDashboard cross site scripting5.1 Medium
- ligerosmartLigeroSmart index.pl cross site scripting5.1 Medium
- ligerosmartLigeroSmart index.pl cross site scripting5.1 Medium
- yued-fe lulu uiyued-fe LuLu UI run.js child_process.exec os command injection6.9 Medium
- vichan-devel vichanvichan-devel vichan Password Change pages.php unverified password change5.1 Medium
- No product listedTotal VPN win-service.exe unquoted search path7.3 High
- Show moreLoading…