CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- sebhildebrandt systeminformation, red hat developer hub +1 moresysteminformation has Command Injection via Unsanitized `locate` Output in `versions()`8.8 High
- ethereum go-ethereum, go ethereum +1 moreGo Ethereum Improperly Validates the ECIES Public Key in RLPx Handshake6.9 Medium
- ethereum go-ethereum, go ethereum +1 moreGo Ethereum affected by DoS via malicious p2p message8.7 High
- ethereum go-ethereum, go ethereum +1 moreGo Ethereum affected by DoS via malicious p2p message6.9 Medium
- refraction-networking utlsuTLS has a Chrome Parrot Fingerprint Vulnerability due to GREASE ECH Cipher Suite Mismatch2.3 Low
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System prinReport.html sql injection5.3 Medium
- librenmsLibreNMS has Time-Based Blind SQL Injection in address-search.inc.php8.8 High
- librenmsLibreNMS has Stored XSS in Alert Rule4.3 Medium
- librenmsLibreNMS: SQL Injection in ajax_table.php spreads through a covert data stream9.3 Critical
- delinea inc. cloud suite and privileged access serviceCloud Suite and Privilege Access Service – SQL Injection5.3 Medium
- delinea inc. cloud suite and privileged access serviceCloud Suite and Privilege Access Service– HTTP request smuggling vulnerability6.9 Medium
- librenmsLibreNMS has Stored XSS in Custom OID - unit parameter missing strip_tags()5.4 Medium
- librenmsLibreNMS has Stored Cross-Site Scripting via unsanitized /port-groups name5.1 Medium
- librenmsLibreNMS vulnerable to Stored Cross-site Scripting through unsanitized /device-groups name5.1 Medium
- librenmsLibreNMS affected by reflected XSS via email field5.3 Medium
- googtech sms-ssmGoogTech sms-ssm API LoginInterceptor.java preHandle improper authorization5.3 Medium
- nokogiriNokogiri before 1.19.1 Unchecked Return Value canonicalize6.9 Medium
- bematech mp-4200Bematech Printer MP-4200 TH Denial of Service8.7 High
- chaosproChaosPro 2.0 - Buffer Overflow8.4 High
- tabs laboratories corporation win10 mailcarrier, tabslab mailcarrier +1 moreWin10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow9.3 Critical
- alloksoft wmv to avi mpeg dvd wmv convertorWMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service8.4 High
- alloksoft wmv to avi mpeg dvd wmv convertorWMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow9.3 Critical
- ayukov nftp clientAyukov NFTP client 1.71 - 'SYST' Buffer Overflow8.6 High
- aida64Aida64 6.10.5200 - Buffer Overflow8.4 High
- sitzungsdienst sd.net rimSD.NET RIM 4.7.3c - 'idtyp' SQL Injection8.8 High
- nikkhokkho fileoptimizerFileOptimizer 14.00.2524 - Denial of Service8.7 High
- webgate inc. control center proControl Center PRO 6.2.9 - Local Stack Based BufferOverflow8.4 High
- bematech mp-4200 thBematech Printer MP-4200 TH Cross-Site Scripting5.1 Medium
- genivia gsoapGenivia gSOAP 2.8 - 'gSOAP' Path Traversal8.7 High
- securimport ismartviewproiSmartViewPro 1.3.34 - Denial of Service4.6 Medium
- diy security sl foscam video management system, foscam video management system +1 moreFoscam Video Management System 1.1.4.9 - 'Username' Denial of Service4.6 Medium
- genivia inc. crystal live http serverGenivia Crystal Live HTTP Server 6.01 - 'Crystal Live HTTP Server' Path Traversal8.7 High
- centova technologies inc. castCentova Cast 3.2.11 - Arbitrary File Download7.1 High
- xmedia recode recodeXMedia Recode 3.4.8.6 - '.m3u' Denial Of Service4.6 Medium
- scadaapp for iosscadaApp for iOS 1.1.4.0 - 'Servername' Denial of Service4.6 Medium
- northwest performance software, inc. ippulseipPulse 1.92 - 'Enter Key' Denial of Service4.6 Medium
- sebhildebrandt systeminformation, red hat developer hub +1 moreSysteminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path8.4 High
- ghostGhost has a SQL Injection in its Content API9.4 Critical
- slyde.js slydeSylde has Improper Control of Generation of Code7.6 High
- google chromeHeap buffer overflow in Media in Google Chrome prior to 145.0.7632.109 allowed a remote attacker...8.8 High
- google chromeInteger overflow in V8 in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to...8.8 High
- google chromeHeap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker...8.8 High
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System downLoad download path traversal5.3 Medium
- mjdm majordomoMajorDoMo Unauthenticated Module Uninstall via Market Endpoint8.7 High
- mjdm majordomoMajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning9.3 Critical
- mjdm majordomoMajorDoMo Unauthenticated SQL Injection in Commands Module8.8 High
- mjdm majordomoMajorDoMo Stored Cross-Site Scripting via Method Parameters to Shoutbox5.3 Medium
- mjdm majordomoMajorDoMo Stored Cross-Site Scripting via Property Set Endpoint5.3 Medium
- mjdm majordomoMajorDoMo Reflected Cross-Site Scripting in command.php5.1 Medium
- mjdm majordomoMajorDoMo Command Injection in rc/index.php via Race Condition9.2 Critical
- Show moreLoading…