CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Plaintext Password Exposure8.6 High
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Predictable Session Identifiers9.3 Critical
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Hard-coded Credentials9.3 Critical
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Traceroute CLI Command Injection8.7 High
- actualbudget actualActualBudget server is Missing Authentication for SimpleFIN and Pluggy AI bank sync endpoints9.2 Critical
- sonicwall sonicosA post-authentication Out-of-bounds Read vulnerability in SonicOS allows a remote attacker to...4.9 Medium
- wwbn avideoAVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php8.6 High
- sonicwall sonicosA post-authentication NULL Pointer Dereference vulnerability in SonicOS allows a remote attacker...4.9 Medium
- sonicwall sonicosA post-authentication Format String vulnerability in SonicOS allows a remote attacker to crash a...4.9 Medium
- sonicwall sonicosMultiple post-authentication stack-based buffer overflow vulnerabilities in the SonicOS...4.9 Medium
- exiftool project exiftoolexiftool PNG File MacOS.pm SetMacOSTags os command injection5.3 Medium
- intelbras tip 635g, tip 635g firmware +1 moreIntelbras TIP 635G Ping os command injection5.3 Medium
- payloadcms payloadPayload has Server-Side Request Forgery (SSRF) in External File URL Uploads6.5 Medium
- cpsd cryptopro secure disk, cpsd it services gmbh cryptopro secure disk for bitlocker +1 moreIntegrity Validation Bypass in CryptoPro Secure Disk for BitLocker6.8 Medium
- mindsdbMindsDB has Path Traversal in /api/files Leading to Remote Code Execution8.8 High
- bleon-ethical api-gateway-deployapi-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution9.2 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreMemory safety bugs fixed in Firefox 148 and Thunderbird 1489.8 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: Text component9.1 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer in the DOM: Core & HTML component9.8 Critical
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component5.4 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure, mitigation bypass in the Settings UI component7.5 High
- mozilla firefox, thunderbird +1 moreRace condition in the JavaScript: GC component4.2 Medium
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the JavaScript: WebAssembly component7.5 High
- mozilla firefox, thunderbird +1 moreSpoofing issue in the WebAuthn component in Firefox for Android9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the DOM: Core & HTML component8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreJIT miscompilation in the JavaScript: WebAssembly component9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreUse-after-free in the JavaScript: GC component9.8 Critical
- mozilla firefox, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreInformation disclosure due to uninitialized memory in Firefox and Firefox Focus for Android7.5 High
- mozilla firefox, firefox for ios +1 moreSpoofed web content presented under trusted domains using scripted navigation on Firefox iOS9.8 Critical
- hitachi energy relion reb500, hitachienergy reb500 firmware +1 moreA vulnerability exists in REB500 for an authenticated user with low-level privileges to access...7.6 High
- hitachi energy relion reb500, hitachienergy reb500 firmware +1 moreA vulnerability exists in REB500 for an authenticated user with Installer role to access and...7.4 High
- slican ipl, ipm, ipu +5 more +7 morePHP Function Injection in Slican NPC/IPL/IPM/IPU9.3 Critical
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreIEC 60870-5-104: Potential Denial of Service impact on reception of invalid U-format frame....8.7 High
- hitachi energy rtu500 series cmu firmware, hitachienergy rtu520 firmware, rtu530 firmware +2 more +4 moreRTU500 web interface: An unprivileged user can read user management information. The information...5.3 Medium
- apache supersetApache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering5.3 Medium
- apache supersetApache Superset: Improper Neutralization of Special Elements used in a SQL Command5.3 Medium
- apache supersetApache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass7.1 High
- apache supersetApache Superset: Sensitive Data Exposure via REST API (disabled by default)2.3 Low
- apache supersetApache Superset: SQLLab Read-Only Bypass on PostgreSQL7.1 High
rpc-checkcrates.io`rpc-check` was removed from crates.io for malicious codeNo score- bytecodealliance wasmtimeWasmtime can panic when adding excessive fields to a `wasi:http/types.fields` instance6.9 Medium
- bytecodealliance wasmtimeWasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion6.9 Medium
- bytecodealliance wasmtimeWasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future6.9 Medium
- apache airflowApache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli6.5 Medium
- docker desktopOut of bounds read vulnerability in grpcfuse kernel module6.8 Medium
- apache airflowApache Airflow: SSTI to Code Execution in Airflow through Shared DB Information8.4 High
- wso2 api manager, identity server +1 moreA local user can be impersonated when using federated authentication with Silent JIT Provisioning.7.7 High
kernel-livepatch-MICRO-6-0_Update_16SUSESecurity update for kernel-livepatch-MICRO-6-0_Update_16No score- Show moreLoading…