CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- it-novum openitcockpitopenITCOCKPIT has Unsafe PHP Deserialization in Gearman Worker Allowing Conditional Object Injection7.5 High
- hp inc samsung multixpress sl-k7400lxr, sl-k7500lxr, sl-k7600lxr, samsung multixpress sl-x7600lxr, sl-x7500lxr, sl-x7400lxr, sl-k4255rx, sl-k4305lx, sl-k4355lx +1 more +3 moreCertain Samsung MultiXpress Multifunction Printers Firmware – Potential Information Disclosure5.3 Medium
- alex4ssb adb explorer, adb-explorer +1 moreADB Explorer is Vulnerable to Arbitrary Directory Deletion via Command-Line Argument7.1 High
- yeqifu warehouseyeqifu warehouse Inport Endpoint InportController.java deleteInport access control5.3 Medium
- yeqifu warehouseyeqifu warehouse Customer Endpoint CustomerController.java deleteCustomer access control5.3 Medium
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- radioinorr svxportalSVXportal <= 2.5 Profile Update Stored XSS5.1 Medium
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds6.8 Medium
- owl opds, owlcyberdefense opds-talon +1 moreUncontrolled Search Path Element in Owl opds8.4 High
- owl opds, owlcyberdefense opds-talon +1 moreUncontrolled Search Path Element in Owl opds8.4 High
- owl opds, owlcyberdefense opds-talon +1 moreUncontrolled Search Path Element in Owl opds8.4 High
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- owl opds, owlcyberdefense opds-talon +1 moreIncorrect Permission Assignment for Critical Resource in Owl opds8.5 High
- owl opds, owlcyberdefense opds-talon +1 moreImproper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds8.7 High
- radioinorr svxportalSVXportal <= 2.5 admin/user_action.php Stored XSS5.1 Medium
- radioinorr svxportalSVXportal <= 2.5 radiomobile_front.php stationid Reflected XSS5.1 Medium
- radioinorr svxportalSVXportal <= 2.5 admin/log.php Search Reflected XSS5.1 Medium
- owl opds, owlcyberdefense opds-talon +1 moreImproper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds9.2 Critical
- radioinorr svxportalSVXportal <= 2.5 log.php Search Reflected XSS5.1 Medium
- cradle e-commercedetronetdip E-commerce function.php get_safe_value cross site scripting5.1 Medium
- cradle e-commercedetronetdip E-commerce Product Management Update authorization5.3 Medium
- softiron hypercloudHyperCloud Improper Refresh Token Validation and Access Token Invalidation Allows Long-Term Unauthorized Access6.2 Medium
- welker odoreyes ecosystem pulse bypass system with xl4 controllerWelker OdorEyes EcoSystem Pulse Bypass System with XL4 Controller Missing Authentication for Critical Function8.2 High
- jinan usr iot technology limited (pusr) usr-w610Jinan USR IOT Technology Limited (PUSR) USR-W610 Missing Authentication for Critical Function7.5 High
- jinan usr iot technology limited (pusr) usr-w610Jinan USR IOT Technology Limited (PUSR) USR-W610 Insufficiently Protected Credentials5.7 Medium
- vmware spring data geode, red hat fuse 7, vmware spring data gemfire +2 moreZip Slip Path Traversal in Snapshot Archive Extraction (Windows-Specific)8.2 High
- yeqifu warehouseyeqifu warehouse Cache Sync CacheController.java syncCache access control5.3 Medium
- oretnom23 simple responsive tourism websiteSourceCodester Simple Responsive Tourism Website Registration Master.php sql injection6.9 Medium
- jinan usr iot technology limited (pusr) usr-w610Jinan USR IOT Technology Limited (PUSR) USR-W610 Cleartext Transmission of Sensitive Information7.5 High
- jinan usr iot technology limited (pusr) usr-w610Jinan USR IOT Technology Limited (PUSR) USR-W610 Weak Password Requirements9.8 Critical
- pixelyoursite – your smart pixel (tag) managerWordPress PixelYourSite – Your smart PIXEL (TAG) Manager plugin <= 11.2.0.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- joomsky js help deskWordPress JS Help Desk plugin <= 3.0.1 - SQL Injection vulnerability8.5 High
- shahjada download manager addons for elementorWordPress Download Manager Addons for Elementor plugin <= 1.3.0 - SQL Injection vulnerability9.3 Critical
- fox-themes whizz pluginsWordPress Whizz Plugins plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- mitchell bennis simple file listWordPress Simple File List plugin <= 6.1.15 - Arbitrary File Download vulnerability6.5 Medium
- themeplugs authorsyWordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- themegoods photomeWordPress PhotoMe theme <= 5.7.1 - Cross Site Scripting (XSS) vulnerability7.1 High
- fox-themes reflectorWordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- tychesoftwares print invoice & delivery notes for woocommerceWordPress Print Invoice & Delivery Notes for WooCommerce plugin <= 5.8.0 - Broken Access Control vulnerability6.5 Medium
- unknown subscribe2WordPress Subscribe2 plugin <= 10.44 - Broken Access Control vulnerability6.5 Medium
- themegoods grand conferenceWordPress Grand Conference theme <= 5.3.4 - Reflected Cross Site Scripting (XSS) vulnerability7.1 High
- wpjobportal wp job portalWordPress WP Job Portal plugin <= 2.4.4 - Broken Access Control vulnerability7.5 High
- leafcolor applay - shortcodesWordPress Applay - Shortcodes plugin <= 3.7 - PHP Object Injection vulnerability9.8 Critical
- mikado-themes pawfriends - pet shop and veterinary wordpress themeWordPress PawFriends - Pet Shop and Veterinary WordPress theme theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerability7.5 High
- mikado-themes pawfriends - pet shop and veterinary wordpress themeWordPress PawFriends - Pet Shop and Veterinary WordPress Theme theme <= 1.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes unlimhostWordPress UnlimHost theme <= 1.2.3 - Local File Inclusion vulnerability8.1 High
- ancorathemes netmixWordPress Netmix theme <= 1.0.10 - Local File Inclusion vulnerability8.1 High
- ancorathemes blabberWordPress Blabber theme <= 1.7.0 - Local File Inclusion vulnerability8.1 High
- ancorathemes saveoWordPress Saveo theme <= 1.1.2 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…