CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- hclsoftware connectionsHCL Connections is vulnerable to information disclosure3.5 Low
- silabs.com simplicity sdk, gecko sdkInteger underflow in Secure NCP host2.4 Low
- tassos.gr advanced custom fields, convert forms, engagebox +3 more +5 moreExtension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla9.5 Critical
- silabs.com gecko sdk, simplicity sdk +1 moreECJ-PAKE Integer Underflow Vulnerability in Silicon Labs PSA Crypto and SE Manager APIs2.3 Low
clob-sdkcrates.io`clob-sdk` was removed from crates.io for malicious codeNo scorepolymarkets-rs-clob-clientcrates.io`polymarkets-rs-clob-client` was removed from crates.io for malicious codeNo score- kolay software inc. talenticsSQLi in Kolay Software's Talentics9.8 Critical
- litonice13 master addons for elementor – widgets, extensions, theme builder, popup builder & template kitsMaster Addons For Elementor <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ma_el_bh_table_btn_text'6.4 Medium
- erlang otpTFTP Path Traversal2.3 Low
java-11-openjdkTuxCare,java-11-openjdk-demoTuxCare,java-11-openjdk-develTuxCare +6 more +8 moreUpdate of java-11-openjdkNo score- ricoh company, ltd. ジョブログ集計/分析ソフトウェア ricohジョブログ集計ツールThe installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール versions prior to Ver.1.3.7 contains an issue...8.4 High
- zenitel alphacom xe audio serverAuthenticated Arbitrary File Read via filepath parameter6.5 Medium
- ays pro survey makerWordPress Plugin "Survey Maker" versions 5.1.7.7 and prior contain a cross-site scripting...5.1 Medium
- rachelos werss we-mp-rssrachelos WeRSS we-mp-rss Article fix.py fix_html cross site scripting5.1 Medium
- comfast cf-e7, cf-e7 firmware +1 moreComfast CF-E7 webmggnt mbox-config sub_441CF4 command injection5.3 Medium
- comfast cf-e7, cf-e7 firmware +1 moreComfast CF-E7 webmggnt mbox-config sub_41ACCC command injection5.3 Medium
bn.jsnpm,node-bn.jsDebian,reaperAzure Linux +2 more +4 morebn.js affected by an infinite loop6.9 Medium- jeecg bootJeecgBoot Backend airag_app,1,create_by sql injection5.3 Medium
- flintsh flareFlare has XSS vulnerability in Raw File Preview4.6 Medium
- fujian smart integrated management platform systemFujian Smart Integrated Management Platform System XCamera.ashx sql injection6.9 Medium
- ays pro quiz makerQuiz Maker <= 6.7.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode6.4 Medium
- fujian smart integrated management platform systemFujian Smart Integrated Management Platform System XAccessPermissionPlus.ashx sql injection6.9 Medium
- calibre-ebook calibrecalibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution9.3 Critical
- calibre-ebook calibrecalibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution9.3 Critical
- dromara ruoyi-vue-plusDromara RuoYi-Vue-Plus Workflow deleteByInstanceIds SaServletFilter authorization5.3 Medium
- frappe learning, lms +1 moreFrappe Learning Management System exposes details of unpublished courses to unauthorized users6.9 Medium
- devolutions server, music-assistant music assistant server +1 moreMusic Assistant Server Path Traversal in Playlist Update API Allows Remote Code Execution8.8 High
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to missing authorization. The following products...10.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect cloud agent +2 moreSensitive data disclosure and manipulation due to missing authentication. The following products...9.8 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...10.0 Critical
- acronis cyber protect 15, cyber protect 16, cyber protect +2 moreSensitive data disclosure and manipulation due to improper authentication. The following products...10.0 Critical
- pjsip pjproject, pjsip +1 morePJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer8.1 High
ca-certificatesDebianca-certificates - CA certificates updateNo score- monicahq monicaA Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP...9.1 Critical
- opensourcepos open source point of saleOpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php:...8.8 High
- opensourcepos open source point of saleOpenSourcePOS 3.4.1 has a second order SQL Injection vulnerability in the handling of the...5.3 Medium
- edubusinesssolutions print shop pro webdeskAn issue in edu Business Solutions Print Shop Pro WebDesk v.18.34 allows a remote attacker to...9.8 Critical
- keystorage global facilities management softwareCross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v....7.6 High
- keystorage global facilities management softwareCross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v....8.2 High
- keystorage global facilities management softwareAn issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote...9.4 Critical
- keystorage global facilities management softwareAn issue in Key Systems Inc Global Facilities Management Software v.20230721a allows a remote...7.1 High
- lkw199711 smangaAn Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to...9.4 Critical
- lkw199711 smangaA Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php...9.8 Critical
- sync-in serverSync-in Server has a stored cross-site scripting (XSS) vulnerability6.1 Medium
- prolink prc2402mPROLiNK PRC2402M 20190909 before 2021-06-13 allows live_api.cgi?page=satellite_list OS command...10.0 Critical
- windmillWindmill Exposes Workspace Slack OAuth Client Secrets to Non-Admin Workspace Members2.7 Low
- alex4ssb adb-explorerADB Explorer Vulnerable to RCE via Insufficient Input Validation7.8 High
- tanium interact, tds +1 moreTanium addressed an insertion of sensitive information into log file vulnerability in Interact and TDS.6.5 Medium
- tanium trendsTanium addressed an insertion of sensitive information into log file vulnerability in Trends.6.5 Medium
- tanium tanosTanium addressed an insertion of sensitive information into log file vulnerability in TanOS.5.3 Medium
- Show moreLoading…