CVEs published in February 2026
4,804 vulnerabilities, 449 critical, 20 exploited.
- bigbluebuttonBigBlueButton has Open Redirect vulnerability in ApiController6.1 Medium
- cisco nx-os system software in aci modeCisco NX-OS Software Denial of Service Vulnerability7.4 High
- cisco nx-os system software in aci modeCisco NX-OS Software SNMP Denial of Service Vulnerability7.7 High
- cisco firepower extensible operating system (fxos), secure firewall adaptive security appliance (asa) software, unified computing system (managed) +2 moreCisco UCS Manager and FXOS Software Command Injection Vulnerability6.7 Medium
- hackerbay oneuptimeOneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()10.0 Critical
- cisco firepower extensible operating system (fxos), secure firewall adaptive security appliance (asa) software, unified computing system (managed) +2 moreCisco UCS Manager and FXOS Software Stored Cross-Site Scripting Vulnerability4.8 Medium
- cisco unified computing system (managed)Cisco UCS Manager File Write Vulnerability4.4 Medium
- linksys mr9600, mx4200 +1 moreMissing neutralization in Linksys MR9600, Linksys MX42009.8 Critical
- cisco nx-os software, nx-os system software in aci mode, unified computing system (managed) +2 moreCisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability7.4 High
- cisco unified computing system (managed)Cisco UCS Manager Software Command Injection Vulnerability6.5 Medium
- cisco application policy infrastructure controller (apic)Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability5.5 Medium
- cisco nx-os softwareCisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability7.4 High
- cisco catalyst sd-wan manager, catalyst sd-wan manger +1 moreCisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability5.4 Medium
- cisco catalyst sd-wan manager, catalyst sd-wan controller and manager, sd-wan vbond orchestrator +1 more +3 moreCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability10.0 Critical
- cisco catalyst sd-wan managerCisco Catalyst SD-WAN Manager Information Disclosure Vulnerability7.5 High
- cisco catalyst sd-wan managerCisco Catayst SD-WAN Authentication Bypass Vulnerability9.8 Critical
- cisco catalyst sd-wan managerCisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability8.8 High
- cisco catalyst sd-wan managerA vulnerability in Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker...6.5 Medium
- chia blockchainChia Blockchain RPC Credential rpc_server_base.py _authenticate improper authentication6.3 Medium
- feiyuchuixue sz-boot-parentfeiyuchuixue sz-boot-parent download server-side request forgery2.3 Low
- swaldman mchange-commons-java, mchange commons java, red hat build of apache camel - hawtio 4 +17 more +19 moremchange-commons-java: Remote Code Execution via JNDI Reference Resolution8.9 High
- makeplane planePlane Vulnerable to Full Read SSRF via Favicon Fetching in "Add Link" Feature7.7 High
- makeplane planePlane Vulnerable to Cross-Workspace/Cross-Project Asset Modification via IDOR in ProjectAssetEndpoint.patch4.9 Medium
- ens.domains ethereum name service, ensdomains ens-contracts +1 moreENS DNSSEC Oracle Vulnerable to RSA Signature Forgery via Missing PKCS#1 v1.5 Padding Validation2.7 Low
- esm esm.shesm.sh has SSRF localhost/private-network bypass in `/http(s)` module route8.6 High
- feiyuchuixue sz-boot-parentfeiyuchuixue sz-boot-parent API templates path traversal5.3 Medium
ficklingPyPIFickling has safety check bypass via REDUCE+BUILD opcode sequence5.3 Medium- gardyn home kit, home kit cloud api, home kit mobile application +2 moreAdministrative Credentials Can Be Extracted Through Gardyn API Responses9.3 Critical
- imagemagickImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding6.3 Medium
- esm esm.shesm.sh is vulnerable to full-response SSRF8.7 High
- dart software development kit, dart-lang flutter, sdk +2 moreDart SDK and Flutter SDK have Zip slip in Dart Pub package extraction6.6 Medium
- linksys mr9600, mx4200 +1 moreMissing neutralization in Linksys MR9600, Linksys MX42009.8 Critical
- krakend krakend-ce, krakend-ee +1 moreImproper management of context cancelations1.3 Low
- budibaseBudibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud)9.9 Critical
- linksys mr9600, mx4200 +1 moreMissing authentication in Linksys MR9600, Linksys MX42009.8 Critical
- live-codes livecodesLiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflow8.8 High
- linksys mr9600, mx4200 +1 moreMissing authentication in Linksys MR9600, Linksys MX42006.2 Medium
- honoHono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo8.2 High
- patrickjuchli basic-ftpBasic FTP has Path Traversal Vulnerability in its downloadToDir() method9.1 Critical
- zeroae zae-limiterzae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service4.3 Medium
- progress telerik ui for asp.net ajaxInsufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX5.3 Medium
- color iccdeviccDEV has HBO in CIccTagTextDescription::Release()7.1 High
- color iccdeviccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 2186.2 Medium
- wiresharkBuffer Over-read in Wireshark5.5 Medium
- wiresharkNULL Pointer Dereference in Wireshark4.7 Medium
- wiresharkImproperly Controlled Sequential Memory Allocation in Wireshark4.7 Medium
- feiyuchuixue sz-boot-parentfeiyuchuixue sz-boot-parent API Endpoint upload unrestricted upload5.3 Medium
ca-certificatesTuxCareUpdate of ca-certificatesNo scoregitUbuntugit regressionNo score- feiyuchuixue sz-boot-parentfeiyuchuixue sz-boot-parent Password Reset password default password5.3 Medium
- Show moreLoading…