CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUndefined behavior in the DOM: Core & HTML component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the DOM: Bindings (WebIDL) component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Storage: IndexedDB component8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Storage: IndexedDB component10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: WebAssembly component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine: JIT component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender component10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebRender component10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: ImageLib component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: GC component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the WebRTC: Audio/Video component9.8 Critical
- gnome libsoup, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibsoup: libsoup: http request smuggling via duplicate content-length headers3.7 Low
cactiopenSUSEcacti-1.2.30+git231.bca15e70c-1.1 on GA mediaNo score- frangoteam fuxaFUXA has JWT Authentication Bypass via HTTP Referer header spoofing9.8 Critical
- totolink x5000r firmwareTOTOLINK X5000R V9.1.0cu.2415_B20250515 contains a denial-of-service vulnerability in /cgi-bin...7.5 High
- gcomtw gcom epon 1ge firmwarePrivilege escalation and improper access control in GCOM EPON 1GE C00R371V00B01 allows remote...8.8 High
- free5gc udmfree5GC has Null Pointer Dereference in UDM, Leading to Service Panic6.6 Medium
- wonko smolderSmolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions9.1 Critical
- free5gc udmfree5GC has Improper Input Validation in UDM, Leading to Information Exposure6.6 Medium
- free5gc udmfree5GC has Improper Error Handling in UDM, Leading to Information Exposure6.6 Medium
- tenda ac8, ac8 firmware +1 moreTenda AC8 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow8.7 High
- admerc event management systemitsourcecode Event Management System navbar.php cross site scripting5.3 Medium
- admerc event management systemitsourcecode Event Management System index.php sql injection6.9 Medium
- fiserv originate loans peripherals (formerly velocity services) -- print service componentThe Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in...7.7 High
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 145.0.7632.116 allowed an...5.4 Medium
- google chromeOut of bounds read and write in Tint in Google Chrome on Mac prior to 145.0.7632.116 allowed a...9.8 Critical
- google chromeOut of bounds read in Media in Google Chrome prior to 145.0.7632.116 allowed a remote attacker to...9.1 Critical
- craftcms cms, craft cms +1 moreCraft CMS's race condition in Token Service potentially allows for token usage greater than the token limit6.9 Medium
- craftcms cms, craft cms +1 moreCraft CMS has Cloud Metadata SSRF Protection Bypass via DNS Rebinding7.0 High
- craftcms cms, craft cms +1 moreCraft CMS has Stored XSS in Table Field via "HTML" Column Type5.9 Medium
- yt-dlpyt-dlp: Arbitrary Command Injection when using the `--netrc-cmd` option8.8 High
- collerek ormarormar is vulnerable to SQL Injection through aggregate functions min() and max()9.8 Critical
- newapi new api, quantumnous new-api +1 moreNew API has Potential XSS in its MarkdownRenderer component7.6 High
- xingfuggz baykeshopxingfuggz BaykeShop Article Sidebar custom.html cross site scripting4.8 Medium
- draytek vigor 300b, vigor300b firmware +1 moreDrayTek Vigor 300B Web Management uploadlangs cgiGetFile os command injection5.1 Medium
- bluditBludit <= 3.16.1 CSRF in Plugin and Theme Management Endpoints5.1 Medium
- bluditBludit <= 3.16.2 Stored XSS in Post Content5.1 Medium
- newapi new api, quantumnous new-api +1 moreNew API has an SQL LIKE Wildcard Injection DoS via Token Search7.1 High
- withastro astro, astro \@astrojs\/node +1 moreAstro has Full-Read SSRF in error rendering via Host: header injection6.9 Medium
- free5gc amffree5GC has Array Index Out of Bounds in AMF Leading to Denial of Service6.6 Medium
- free5gc go-upffree5GC has Heap Buffer Overflow in UPF Leading to Denial of Service2.7 Low
- erzhongxmu jeewmserzhongxmu JEEWMS JeecgListDemoController.java doAdd cross site scripting5.3 Medium
- free5gc go-upf, smf +1 morefree5GC hasProtocol Compliance Violation in UPF Leading to SMF Service Disruption2.7 Low
- free5gc udrfree5GC UDR's NEF incorrectly returns 500 for missing PFD data (UDR 404) in Nnef_PfdManagement GET request2.7 Low
- traccarTraccar Vulnerable to Authorization Code Theft via Open Redirect in OIDC Provider Endpoints7.3 High
- erzhongxmu jeewmserzhongxmu JEEWMS UEditor getContent.jsp cross site scripting5.3 Medium
- Show moreLoading…