CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
kernel-livepatch-MICRO-6-0_Update_16SUSESecurity update for kernel-livepatch-MICRO-6-0_Update_16No score- dotcmsA sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows...9.4 Critical
- cloudflare circlIncorrect calculation in CIRCL secp384r1 CombinedMult2.9 Low
- solarwinds serv-uSolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability9.1 Critical
- solarwinds serv-uSolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability9.1 Critical
- solarwinds serv-uSolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability9.1 Critical
- solarwinds serv-uSolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability9.1 Critical
- unknown responsive lightbox & galleryResponsive Lightbox & Gallery < 2.6.1 - Unauthenticated Stored XSS8.8 High
- muyucmsMuYuCMS Template Management Template.php delete_dir_file path traversal5.1 Medium
- sap se s/4hana (manage payment media), sap s\/4hana uiapfi70, s\/4hana uis4h +2 moreInformation Disclosure vulnerability in S/4HANA (Manage Payment Media)4.3 Medium
- remyandrade modern image gallery appSourceCodester Modern Image Gallery App upload.php cross site scripting5.3 Medium
- admerc document management systemitsourcecode Document Management System edtlbls.php sql injection6.9 Medium
- admerc document management systemitsourcecode Document Management System deluser.php sql injection6.9 Medium
- hummerriskHummerRisk Archive Extraction CommandUtils.java extractZip path traversal5.3 Medium
- hummerriskHummerRisk Cloud Compliance Scanning PlatformUtils.java fixedCommand command injection5.3 Medium
- pimcorePimcore vulnerable to SQL injection via unsanitized filter value in Dependency Dao RLIKE clause6.9 Medium
- zyxel vmg3625-t50b firmware, dx5401-b1 firmware, emg3525-t50b firmware +3 more +5 moreA post-authentication command injection vulnerability in the TR-369 certificate download CGI...7.2 High
- craftcms cms, craft cms +1 moreCloud Metadata SSRF Protection Bypass via IPv6 Resolution5.7 Medium
- zyxel ex3301-t0 firmware, am7510-00 firmware, ax7501-b1 firmware +49 more +51 moreA post-authentication command injection vulnerability in the log file download function of the...8.8 High
- zyxel ex3510-b0 firmware, dx4510-b0 firmware, dx4510-b1 firmware +15 more +17 moreA command injection vulnerability in the UPnP function of the Zyxel EX3510-B0 firmware versions...9.8 Critical
- hummerriskHummerRisk Cloud Task Dry-run CloudTaskService.java CommandUtils.commonExecCmdWithResult command injection5.3 Medium
- hummerriskHummerRisk Cloud Task Scheduler ResourceCreateService.java command injection5.3 Medium
- synology presto clientAn uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672...6.7 Medium
- academysoftwarefoundation openexrOpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp6.5 Medium
- zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +45 more +47 moreA null pointer dereference vulnerability in the Wake-on-LAN CGI program of the Zyxel VMG3625-T50B...4.9 Medium
- zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +51 more +53 moreA null pointer dereference vulnerability in the IP settings CGI program of the Zyxel VMG3625-T50B...4.9 Medium
- a54552239 pearprojectapia54552239 pearProjectApi Backend Task.php dateTotalForProject sql injection5.3 Medium
- alinto sogoAlinto SOGo cross site scripting5.3 Medium
- imagemagickImageMagick: Invalid MSL <map> can result in a use after free5.3 Medium
- imagemagickImageMagick has heap overflow in pcd decoder that leads to out of bounds read.6.5 Medium
- imagemagickImageMagick has possible infinite loop in JPEG encoder when using `jpeg:extent`6.2 Medium
- imagemagickImageMagick has infinite loop when writing IPTCTEXT leads to denial of service via crafted profile6.2 Medium
- imagemagickImageMagick has integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder7.5 High
- imagemagickImageMagick's MSL image stack index not refreshed, leading to leaked images.5.3 Medium
- imagemagickImageMagick has heap buffer over-read in MAP image decoder5.3 Medium
- imagemagickImageMagick has a heap buffer overflow in YUV 4:2:2 decoder5.3 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreMemory allocation with excessive without limits in the internal SVG decoder7.5 High
- imagemagickImageMagick has Use After Free in MSLStartElement in "coders/msl.c"5.3 Medium
- imagemagickImageMagick Has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)6.5 Medium
- imagemagickImageMagick's MSL: Stack overflow in ProcessMSLScript6.2 Medium
- zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +51 more +53 moreA null pointer dereference vulnerability in the account settings CGI program of the Zyxel VMG3625...4.9 Medium
- imagemagickImageMagick SIXEL Decoder Has Signed Integer Overflow, Leading to Memory Corruption5.3 Medium
- imagemagickImageMagick has Memory Leak in coders/ashlar.c5.3 Medium
- datalinkdc dinkyDataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication6.9 Medium
- datalinkdc dinkyDataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery5.3 Medium
- imagemagickImageMagick has MSL attribute stack buffer overflow that leads to out of bounds write.7.4 High
- zyxel vmg3625-t50b firmware, wx3100-t0 firmware, ax7501-b1 firmware +51 more +53 moreA null pointer dereference vulnerability in the certificate downloader CGI program of the Zyxel...4.9 Medium
- imagemagickImageMagick has stack buffer overflow in FTXT reader via oversized integer field7.4 High
- imagemagickImageMagick's Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access5.9 Medium
- imagemagick, red hat enterprise linux 6, enterprise linux 7 extended lifecycle support +2 moreImageMagick's policy bypass through path traversal allows reading restricted content despite secured policy8.6 High
- Show moreLoading…