CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- aquasec trivy action, aquasecurity trivy-action +1 moreTrivy Action has a script injection via sourced env file in composite action5.9 Medium
- opentext™ directory servicesAn Insecure Deserialization vulnerability has been discovered in OpenText™ Directory Services.9.5 Critical
- linux, linux kernel +1 moredrm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free7.8 High
- linux, linux kernel +1 moreksmbd: add chann_lock to protect ksmbd_chann_list xarray8.8 High
- linuxsched/mmcid: Don't assume CID is CPU owned on mode switch7.8 High
- linux, linux kernel +1 morebus: fsl-mc: fix use-after-free in driver_override_show()7.8 High
- linux, linux kernel +1 morehfs: ensure sb->s_fs_info is always cleaned up5.5 Medium
nssTuxCare,nss-develTuxCare,nss-pkcs11-develTuxCare +2 more +4 moreUpdate of nssNo scoreca-certificatesTuxCareUpdate of ca-certificatesNo scorelinux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +14 more +16 moreUpdate of linux-firmwareNo score- opencfd openfoamAn arbitrary code execution vulnerability exists in the Code Stream directive functionality of...7.8 High
- chaiscriptChaiScript type_info.hpp bare_equal use after free2.0 Low
- ultimatemember ultimate member – user profile, registration, login, member directory, content restriction & membership pluginUltimate Member <= 2.11.1 - Reflected Cross-Site Scripting via Filter Parameters6.1 Medium
- berocket advanced ajax product filtersAdvanced AJAX Product Filters <= 3.1.9.6 - Authenticated (Author+) PHP Object Injection via Live Composer Compatibility8.8 High
- linux, linux kernel +1 moregpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc()5.5 Medium
- linux, linux kernel +1 moreriscv: trace: fix snapshot deadlock with sbi ecall5.5 Medium
- linux, linux kernel +1 morewifi: mac80211: don't WARN for connections on invalid channels5.5 Medium
- jenkinsJenkins has a build information disclosure vulnerability through Run Parameter4.3 Medium
- jenkinsJenkins has a stored XSS vulnerability in node offline cause description8.0 High
- linux, linux kernel +1 morebonding: annotate data-races around slave->last_rx4.7 Medium
- linux, linux kernel +1 moremm, swap: restore swap_space attr aviod kernel panic5.5 Medium
- grandstream gxp1610, gxp1615, gxp1620 +9 more +11 moreGrandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflow9.3 Critical
- bosch rexroth indraworks, bosch rexroth indraworks +1 moreA vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to...7.8 High
- bosch rexroth indraworks, bosch rexroth indraworks +1 moreA vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to...7.8 High
- bosch rexroth indraworks, bosch rexroth indraworks, ua.testclient +1 more +3 moreA vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth...7.8 High
- chaiscriptChaiScript chaiscript_defines.hpp operator use after free2.0 Low
- bosch rexroth indraworks, bosch rexroth indraworks +1 moreA vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth...7.8 High
- nvidia megatron-bridge, nemo megatron bridge +1 moreNVIDIA Megatron Bridge contains a vulnerability in a data shuffling tutorial, where malicious...7.8 High
- nvidia megatron-bridge, nemo megatron bridge +1 moreNVIDIA Megatron Bridge contains a vulnerability in a data merging tutorial, where malicious input...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework Deserializes Untrusted Data7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for all platforms contains a vulnerability in a voice-preprocessing script,...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework for all platforms contains a vulnerability in the ASR Evaluator utility,...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability where malicious data could cause remote code execution8.0 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability where an attacker could cause remote code...7.8 High
- nvidia nemo, nemo framework +1 moreNVIDIA NeMo Framework contains a vulnerability where malicious data created by an attacker could...7.8 High
- amr printer management beta web serviceDirectory Traversal in AMR Printer Management by AMR8.7 High
- systems at work time at workSQL injection in time@work from systems@work8.6 High
- key software solutions inc. inforex- general information management systemReflected XSS in Key Software's INFOREX6.3 Medium
- payara platform serverAdmin Account Takeover via malicious URL payload7.3 High
- huggingface smolagentshuggingface smolagents LocalPythonExecutor requests.post server-side request forgery5.3 Medium
- graylog, graylog web interface +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface5.3 Medium
- graylog, graylog web interface +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface5.3 Medium
- graylog, graylog web interface +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface5.3 Medium
- graylog, graylog web interface +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface5.3 Medium
- graylog, graylog web interface +1 moreReflected Cross-Site Scripting (XSS) vulnerability in Graylog Web Interface5.3 Medium
- graylog, graylog web interface +1 moreImproper Access Control (IDOR) vulnerability in Graylog Web Interface7.1 High
- Show moreLoading…