CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- getsimplecms-ce, getsimple-ce getsimple cms +1 moreGetSimpleCMS-CE < 3.3.22 Stored XSS via components.php4.8 Medium
- rikyoz bit7zbit7z has a path traversal vulnerability5.5 Medium
- daguDagu: Path traversal in DAG creation allows arbitrary YAML file write outside DAGs directory7.1 High
ficklingPyPIFickling: OBJ opcode call invisibility bypasses all safety checks8.6 High- statamic cms, statamic +1 moreStatamic is vulnerable to account takeover via password reset link injection9.3 Critical
- gofiber fiberFiber has a Denial of Service Vulnerability via Route Parameter Overflow5.5 Medium
- gofiber fiberFiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation7.5 High
- insat masterscada, masterscada buk-ts +1 moreInSAT MasterSCADA BUK-TS OS Command Injection9.3 Critical
- insat masterscada, masterscada buk-ts +1 moreInSAT MasterSCADA BUK-TS SQL Injection9.3 Critical
- gofiber fiberFiber has an Arbitrary File Read in Static Middleware on Windows7.7 High
- claris filemaker serverA cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to...6.1 Medium
- netikus eventsentryEventSentry < 6.0.1.20 Web Reports Unverified Password Change8.6 High
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5, contain a Client-Side Enforcement of...2.7 Low
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of...5.4 Medium
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5, contain an Unrestricted Upload of File...7.2 High
- dell wyse management suiteDell Wyse Management Suite, versions prior to WMS 5.5, contain a Missing Authorization...8.8 High
- devolutions serverImproper access control in multiple DVLS REST API endpoints in Devolutions Server 2025.3.14.0...6.5 Medium
- devolutions serverA permission cache poisoning vulnerability in Devolutions Server allows authenticated users to...4.3 Medium
- joinmastodon mastodonMastodon has SSRF via unvalidated FASP Provider base_url4.6 Medium
- genetec update serviceLocal privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows...5.8 Medium
- genetec update serviceLocal admin could to leak information from the Genetec Update Service configuration web page. An...5.8 Medium
- nvidia delegated license service, dls component of nvidia license system +1 moreNVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an...4.3 Medium
- nvidia cumulus linux, nvos, cumulus linux ga +1 more +3 moreNVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low...7.3 High
- nvidia cumulus linux, nvos, cumulus linux ga +1 more +3 moreNVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low...8.0 High
- nvidia cumulus linux, nvos, cumulus linux ga +1 more +3 moreNVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low...8.0 High
- tattile s.r.l. smart+, tattile anpr mobile firmware, axle counter firmware +17 more +19 moreTattile Smart+ / Vega / Basic <= 1.181.5 Insufficient Session Token Expiration8.7 High
- tattile s.r.l. smart+, tattile anpr mobile firmware, axle counter firmware +17 more +19 moreTattile Smart+ / Vega / Basic <= 1.181.5 Default Credentials9.3 Critical
- tattile s.r.l. smart+, tattile anpr mobile firmware, axle counter firmware +17 more +19 moreTattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure8.7 High
- acquia mauticSQL Injection in Contact Activity API Sorting7.6 High
- beyond altec doclinkDocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE10.0 Critical
- linksys mr9600, mx4200, mr9600 firmware +1 more +3 morePath Traversal vulnerability in Linksys MR9600, Linksys MX42006.6 Medium
- joinmastodon mastodonMastodon may allow unconfirmed FASP to make subscriptions4.8 Medium
- trellix endpoint hx agent (xagent), endpoint security +1 moreA vulnerability identified in the Trellix HX Agent driver file fekern.sys allowed a threat actor...6.2 Medium
- zauberzeug niceguiNiceGUI has XSS via Code Injection6.1 Medium
- piwigoPiwigo Vulnerable to User Enumeration via Password Reset Endpoint5.5 Medium
- piwigoPiwigo's secret key can be brute forced2.7 Low
- caddyserver caddyCaddy: Unicode case-folding length expansion causes incorrect split_path index (SCRIPT_NAME/PATH_INFO confusion) in FastCGI transport8.9 High
- caddyserver caddyCaddy vulnerable to cross-origin config application via local admin API /load (caddy)6.9 Medium
- caddyserver caddyCaddy: MatchHost becomes case-sensitive for large host lists (>100), enabling host-based route/auth bypass7.7 High
- caddyserver caddyCaddy: MatchPath %xx (escaped-path) branch skips case normalization, enabling path-based route/auth bypass7.7 High
- caddyserver caddyCaddy's mTLS client authentication silently fails open when CA certificate file is missing or malformed8.8 High
- caddyserver caddyCaddy's improper sanitization of glob characters in file matcher may lead to bypassing security protections6.9 Medium
- linuxfoundation nats-servernats-server websockets are vulnerable to pre-auth memory DoS5.9 Medium
- finka finka-faktura, finka-fk, finka-kpr +4 more +6 moreHard-coded database credentials in Finka software8.6 High
- microchip time provider 4100, timeprovider 4100 firmware +1 moreUnsigned upgrade package5.7 Medium
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Missing Login Rate Limiting6.9 Medium
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Base64-encoded Password Stored in Cookie8.7 High
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch Hard-coded RC4 Encryption Key8.7 High
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch CSRF5.1 Medium
- binardat ltd. 10g08-0800gsm network switch, binardat 10g08-0800gsm firmware +1 moreBinardat 10G08-0800GSM Network Switch XSS5.1 Medium
- Show moreLoading…