CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- linux, linux kernel +1 moremm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single5.5 Medium
- linux, linux kernel +1 morescsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()7.8 High
- linux, linux kernel +1 morex86/vmware: Fix hypercall clobbers5.5 Medium
- linux, linux kernel +1 morebtrfs: reject new transactions if the fs is fully read-only5.5 Medium
- linux, linux kernel +1 moredrm/amd/pm: Disable MMIO access during SMU Mode 1 reset5.5 Medium
- linux, linux kernel +1 morenilfs2: Fix potential block overflow that cause system hang5.5 Medium
- linux, linux kernel +1 morescsi: qla2xxx: Validate sp before freeing associated memory7.5 High
- linux, linux kernel +1 morescsi: qla2xxx: Delay module unload while fabric scan in progress5.5 Medium
- linux, linux kernel +1 morewifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add8.8 High
- linux, linux kernel +1 morePCI: endpoint: Avoid creating sub-groups asynchronously5.5 Medium
- linux, linux kernel +1 morescsi: qla2xxx: Free sp in error path to fix system crash5.5 Medium
- linux, linux kernel +1 morecrypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode7.1 High
- linux, linux kernel +1 morewifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()5.5 Medium
- linux, linux kernel +1 moremd: suspend array while updating raid_disks via sysfs5.3 Medium
- utt 810 firmwareUTT HiPER 810 / nv810v4 router firmware v1.5.0-140603 was discovered to contain insecure default...9.8 Critical
- fabian scholars tracking systemcode-projects Community Project Scholars Tracking System 1.0 is vulnerable to SQL Injection in...9.8 Critical
- fabian scholars tracking systemcode-projects Scholars Tracking System 1.0 allows an authenticated attacker to achieve remote...8.8 High
- codeastro membership management systemCodeAstro Membership Management System 1.0 contains a missing authentication vulnerability in...9.8 Critical
- codeastro membership management systemCodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in...9.8 Critical
- codeastro membership management systemMissing authentication and authorization in print_membership_card.php in CodeAstro Membership...7.5 High
- projectworlds online time table generatorMissing authentication in /admin/student.php and /admin/teacher.php in ProjectWorlds Online Time...7.5 High
- projectworlds online time table generatorMissing authentication in multiple administrative action scripts under /admin/ in ProjectWorlds...9.1 Critical
- oretnom23 customer support systemSourceCodester Customer Support System 1.0 contains an incorrect access control vulnerability in...9.4 Critical
- phpgurukul hospital management systemPHPGurukul Hospital Management System v4.0 contains a Privilege Escalation vulnerability. A low...8.8 High
- phpgurukul hospital management systemThe 'Medical History' module in PHPGurukul Hospital Management System v4.0 contains an Insecure...6.5 Medium
- phpgurukul hospital management systemPHPGurukul Hospital Management System v4.0 contains a Cross-Site Request Forgery (CSRF)...6.5 Medium
- zoneminderZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application...9.8 Critical
- mayswind ezbookkeepingmayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and...6.5 Medium
- tanium enforce recovery key portalInsecure file permissions in Enforce Recovery Key Portal6.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking clearpass policy managerLocal Privilege Escalation Vulnerability in HPE Aruba Networking Clear Pass Policy Manager OnGuard for Linux7.8 High
- netapp storagegrid (formerly storagegrid webscale)StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single...7.1 High
clawdbotnpm,openclawnpm +1 moreOpenClaw Google Chat spoofing access with allowlist authorized mutable email principal despite sender-ID mismatch2.1 Low- microsoft windows admin centerWindows Admin Center Elevation of Privilege Vulnerability8.8 High
- honeywell 25m ipc, i-hib2pi-ul 2mp ip, ptz wdr 2mp 32m +1 more +3 moreHoneywell CCTV Products Missing Authentication for Critical Function9.3 Critical
- pegasystems pega infinityPega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-site Scripting vulnerability in a user interface component. Requires an administrative user and given extensive access rights…4.8 Medium
- ibm websphere application serverIBM WebSphere Application Server could provide weaker than expected security4.4 Medium
- ibm datastage on cloud pak, datastage on cloud pak for data +1 moreDataStage on Cloud Pak for Data is vulnerable to arbitrary code injection due to runtime environment8.8 High
- jishi node-sonos-http-apijishi node-sonos-http-api TTS Provider mac-os.js Promise os command injection6.9 Medium
- filosottile filippo.io/edwards25519filippo.io/edwards25519 MultiScalarMult function produces invalid results or undefined behavior if receiver is not the identity1.7 Low
- ibm cloud pak systemImproper Access Control and Exposure of Information Through Directory Listing vulnerabilities affect IBM Cloud Pak System[, ]4.3 Medium
- openclawOpenClaw skills.status could leak secrets to operator.read clients5.3 Medium
- openclawOpenClaw Node host system.run rawCommand/command mismatch can bypass allowlist/approvals7.2 High
- openclawOpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)7.5 High
- openclawOpenClaw Gateway tool allowed unrestricted gatewayUrl override7.6 High
- openclawOpenClaw has a local file disclosure via sendMediaFeishu in Feishu extension7.5 High
- openclawOpenClaw macOS deep link confirmation truncation can conceal executed agent message7.1 High
- openclawOpenClaw has Missing Webhook Authentication in Telnyx Provider Allowing Unauthenticated Requests7.5 High
- openclawOpenClaw 2026.1.29-beta.1 < 2026.2.1 - Path Traversal in Plugin Installation via Package Name7.0 High
- openclawOpenClaw < 2026.2.2 - Authorization Bypass via /approve Chat Command7.2 High
- openclawOpenClaw < 2026.2.1 - Bearer Token Leakage via MS Teams Attachment Downloader Suffix Matching5.9 Medium
- Show moreLoading…