CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- popupbuilder popup builder – create highly converting, mobile friendly marketing popups.Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens5.3 Medium
- printful integration for woocommercePrintful Integration for WooCommerce <= 2.2.11 - Authenticated (Contributor+) Server-Side Request Forgery6.4 Medium
- benjamin zekavica easy svg supportEasy SVG Support <= 4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload4.4 Medium
- wplegalpages cookie banner for gdpr / ccpa – wplp cookie consentCookie Banner, Cookie Consent, Consent Log, Cookie Scanner, Script Blocker (for GDPR, CCPA & ePrivacy) : WP Cookie Consent <= 4.1.2 - Missing Authorization to Sensitive Information Exposure7.5 High
- mailchimp list subscribe formMailchimp List Subscribe Form <= 2.0.0 - Cross-Site Request Forgery to Mailchimp List Change4.3 Medium
- arubadev aruba hispeed cacheAruba HiSpeed Cache <= 3.0.2 - Reflected Cross-Site Scripting6.1 Medium
- smartsupp – live chat, ai shopping assistant and chatbotsSmartsupp – live chat, AI shopping assistant and chatbots <= 3.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting6.4 Medium
- arubadev aruba hispeed cacheAruba HiSpeed Cache <= 3.0.2 - Missing Authorization to Unauthenticated Plugin's Settings Modification6.5 Medium
- horearadu mesmerize companionMesmerize Companion <= 1.6.158 - Missing Authorization Authenticated (Subscriber+) Settings Update4.3 Medium
- cocoteanet cyreneadminCoCoTeaNet CyreneAdmin System Info Endpoint getCount improper authorization5.3 Medium
- cocoteanet cyreneadminCoCoTeaNet CyreneAdmin Image getAvatar path traversal5.3 Medium
- epson printer controller installermacOS Local Privilege Escalation via Improper Authorization Handling in EPSON Printer Controller Installer7.8 High
- admerc event management systemitsourcecode Event Management System manage_register.php sql injection6.9 Medium
- admerc event management systemitsourcecode Event Management System Admin Login ajax.php sql injection6.9 Medium
- admerc event management systemitsourcecode Event Management System manage_booking.php sql injection6.9 Medium
gpsdOSS-FuzzSegv on unknown address in ___interceptor_strtolNo score- seccn dingcheng g10SECCN Dingcheng G10 session_login.cgi qq os command injection9.3 Critical
- gnu inetutilstelnetd in GNU inetutils through 2.7 allows privilege escalation that can be exploited by abusing...7.4 High
- formalmsA user enumeration vulnerability exists in FormaLMS 4.1.18 and below in the password recovery...5.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +11 more +13 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 High
- No product listedBuffer Overflow vulnerability in CDATA FD614GS3-R850 V3.2.7_P161006 (Build.0333.250211) allows an...6.4 Medium
- commscope ruckus network directorIn RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for...9.8 Critical
- commscope ruckus network directorIn Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for...9.8 Critical
- softvision webpdfSoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF...9.1 Critical
- fileflowsFileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in...6.7 Medium
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System uploadFile.html unrestricted upload6.9 Medium
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 moreNotepad++ has an Untrusted Search Path7.3 High
- invoiceplaneInvoicePlane has Stored Cross-Site Scripting (XSS) Issue in Sumex Invoice View4.4 Medium
- tsinghua unigroup electronic archives systemTsinghua Unigroup Electronic Archives System downLoad.html path traversal5.3 Medium
- invoiceplaneInvoicePlane has Stored Cross-Site Scripting Issue in Identifier Formatting5.4 Medium
- orthanc-server orthancOrthanc versions before 1.12.10 are affected by an authorisation logic flaw in the application's...4.7 Medium
- invoiceplaneInvoicePlane has Stored XSS via Product Unit Name in Invoice Item List4.8 Medium
- invoiceplaneInvoicePlane has Stored XSS via Invoice Number in Invoice View and Dashboard4.8 Medium
- invoiceplaneInvoicePlane has Stored XSS via Family Name in Product Form4.8 Medium
- invoiceplaneInvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log Poisoning9.1 Critical
- invoiceplaneInvoicePlane has a Stored Cross-Site Scripting (XSS) issue5.7 Medium
- fabricjs fabric.jsFabric.js Affected by Stored XSS via SVG Export7.6 High
- openclawOpenClaw affected by Stored XSS in Control UI via unsanitized assistant name/avatar in inline script injection5.8 Medium
- openclawOpenClaw hardened the skill download target directory validation6.8 Medium
- openclawOpenClaw's sandbox config hash sorted primitive arrays and suppressed needed container recreation4.8 Medium
- openclawOpenClaw session tool visibility hardening and Telegram webhook secret fallback6.9 Medium
- openclawOpenClaw: Telegram bot token exposure via logs6.9 Medium
- openclawOpenClaw: Docker container escape via unvalidated bind mount config injection7.7 High
- openclawOpenClaw: Unsanitized CWD path injection into LLM prompts8.6 High
- py-pdf pypdfpypdf possibly has long runtimes for malformed FlateDecode streams6.9 Medium
- py-pdf pypdfpypdf has possible long runtimes/large memory usage for large /ToUnicode streams6.9 Medium
- py-pdf pypdfpypdf has a possible infinite loop when processing TreeObject6.9 Medium
- langchain-ai langgraphjsRediSearch Query Injection in @langchain/langgraph-checkpoint-redis6.5 Medium
- isaacs minimatchminimatch has a ReDoS via repeated wildcards with non-matching literal in pattern8.7 High
- Show moreLoading…