CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- traccarTraccar Vulnerable to Stored Cross-Site Scripting (XSS) via Malicious SVG File Upload8.7 High
- traccarTraccar vulnerable to Path Traversal and External Control of File Name or Path6.5 Medium
- jeff starr simple ajax chatWordPress Simple Ajax Chat plugin <= 20251121 - Sensitive Data Exposure vulnerability5.3 Medium
- traccarTraccar Missing Origin Validation in WebSockets7.1 High
- roxnor elementskit elementor addons – advanced widgets & templates addons for elementorElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint9.3 Critical
- aruba.it aruba hispeed cacheAruba HiSpeed Cache < 3.0.5 CSRF in Multiple Administrative AJAX Actions5.1 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery6.9 Medium
- shuoren smart heating integrated management platformShuoRen Smart Heating Integrated Management Platform ExampleNodeService.asmx unrestricted upload6.9 Medium
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 9 +2 moreValkey has Pre-Authentication DOS from malformed RESP request7.5 High
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +2 more +4 moreMalformed Valkey Cluster bus message can lead to Remote DoS7.5 High
- lfprojects valkey, red hat enterprise linux 10, enterprise linux 10.0 extended update support +1 more +3 moreValkey Affected by RESP Protocol Injection via Lua error_reply8.5 High
- tenable security centerImproper Access Control5.7 Medium
- shenzhen tenda technology co., ltd. tenda f3, tenda f3 firmware +1 moreTenda F3 Plaintext Credential Exposure in Configuration Download7.1 High
- shenzhen tenda technology co., ltd. tenda f3, tenda f3 firmware +1 moreTenda F3 CSRF in Web Management Interface5.1 Medium
- shenzhen tenda technology co., ltd. tenda f3, tenda f3 firmware +1 moreTenda F3 Reflected Script Execution via Missing nosniff Header5.1 Medium
- shenzhen tenda technology co., ltd. tenda f3, tenda f3 firmware +1 moreTenda F3 Clickjacking in Web Management Interface5.1 Medium
- zscaler zia admin ui, internet access admin portal +1 moreZIA Admin UI Input Validation Bug7.6 High
- zscaler zia admin ui, internet access admin portal +1 moreUnauthorized information retrieval in ZIA Admin UI5.5 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow7.2 High
- tenable security centerIndirect Object Reference (IDOR) in Security Center2.1 Low
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G formP2PLimitConfig strcpy buffer overflow8.7 High
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G formPolicyRouteConf strcpy buffer overflow8.7 High
- dell repository managerDell Repository Manager (DRM), versions prior to 3.4.8, contains an Uncontrolled Search Path...7.3 High
- hcl software zie for webSession Token Exposure via URL Query Parameters5.9 Medium
- tiandy video surveillance system 视频监控平台Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery5.3 Medium
- pidetucitaReflected Cross-Site Scripting in PideTuCita5.1 Medium
- sote soteshopReflected Cross-Site scripting (XSS) in SOTE's SOTESHOP5.1 Medium
- munyweki student result management systemSourceCodester Student Result Management System drop_user.php denial of service6.9 Medium
- munyweki student result management systemSourceCodester Student Result Management System Bulk Import import_users.php access control6.9 Medium
- manantial de ideas infoticketingSQL injection in Infoticketing9.3 Critical
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G formTaskEdit_ap strcpy buffer overflow8.7 High
- apache camel, apache software foundation camel leveldb, red hat build of apache camel for spring boot 4 +3 more +5 moreApache Camel LevelDB: Deserialization of Untrusted Data in Camel LevelDB8.8 High
- apache camelApache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy9.1 Critical
- utt hiper 810g, 810g firmware +1 moreUTT HiPER 810G setSysAdm strcpy buffer overflow8.6 High
- fastapiadminFastApiAdmin Scheduled Task API controller.py user_avatar_upload_controller unrestricted upload5.3 Medium
- fastapiadminFastApiAdmin Scheduled Task API controller.py upload_file_controller unrestricted upload5.3 Medium
- fastapiadminFastApiAdmin Scheduled Task API controller.py upload_controller unrestricted upload5.3 Medium
- zohocorp manageengine adselfservice plusSQL Injection8.3 High
- fastapiadminFastApiAdmin Download Endpoint controller.py download_controller information disclosure5.3 Medium
- fastapiadminFastApiAdmin Custom Documentation Endpoint init_app.py reset_api_docs information disclosure6.9 Medium
- aliasvaultAliasVault App Backup aliasvault.xml backup2.0 Low
- a466350665 smart-ssoa466350665 Smart-SSO Role Edit UserController.java save cross site scripting4.8 Medium
- a466350665 smart-ssoa466350665 Smart-SSO Login login.html cross site scripting5.3 Medium
- datapizza ai, datapizza-labs datapizza-ai +1 moredatapizza-labs datapizza-ai cache.py RedisCache deserialization2.1 Low
- datapizza ai, datapizza-labs datapizza-ai +1 moredatapizza-labs datapizza-ai Jinja2 Template prompt.py ChatPromptTemplate special elements used in a template engine5.1 Medium
- automattic mongooseCesanta Mongoose Poly1305 Authentication Tag tls_chacha20.c mg_chacha20_poly1305_decrypt signature verification6.3 Medium
- eai technologies erp f2eAI Technologies｜ERP - DLL Hijacking8.5 High
- automattic mongooseCesanta Mongoose TCP Sequence Number net_builtin.c getpeer verification of source6.3 Medium
- automattic mongooseCesanta Mongoose DNS Transaction ID dns.c mg_sendnsreq random values6.3 Medium
- wisdomgarden tronclassWisdomGarden｜Tronclass - Insecure Direct Object Reference6.5 Medium
- Show moreLoading…