CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- date ical project ical, drupal date ical +1 moreDate iCal - Critical - Information disclosure - SA-CONTRIB-2026-0379.8 Critical
- colorbox inline project inline, drupal colorbox inline +1 moreColorbox Inline - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-0365.4 Medium
- drupal translate drupal with gtranslate, gtranslate +1 moreTranslate Drupal with GTranslate - Less critical - DOM clobbering / link manipulation - SA-CONTRIB-2026-0352.7 Low
- adcisolutions node view permissionsNode View Permissions - Moderately critical - Access bypass - SA-CONTRIB-2026-0343.7 Low
- teamviewer dex (on-premises)Lack of Server-side validation in Instruction Input in TeamViewer DEX Platform (On-Premises)6.3 Medium
- significant-gravitas autogpt, agpt autogpt platform +1 moreAutoGPT has missing Docker log rotation on platform containers that allows host disk-exhaustion DoS5.1 Medium
- anthropic claude desktop, anthropics claude-code +1 moreClaude Desktop: Local Privilege Escalation via Directory Junction in CoworkVMService8.5 High
- anthropic claude desktop, anthropics claude-code +1 moreClaude Desktop: SSH Host Key Verification Bypass Allows Man-in-the-Middle Attack on Remote Sessions7.4 High
- siyuan-note siyuanSiYuan: Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution9.0 Critical
- siyuan-note siyuanSiYuan: SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs7.2 High
- wger-project wgerwger before 2.5 Uncontrolled Resource Consumption via date_sequence7.1 High
- intranda goobi-viewer-coreGoobi viewer: Unauthenticated Solr Streaming Expression Proxy9.8 Critical
- cliuniget: Command Injection in tool.Check Leading to Arbitrary Code Execution7.8 High
- siyuan-note siyuanSiYuan: Broken access control in SiYuan publish-mode Readers can enumerate metadata4.3 Medium
- siyuan-note siyuanSiYuan: Broken access control in SiYuan `/api/tag/getTag` — Reader role can mutate `Conf.Tag.Sort` and persist to disk4.3 Medium
- obot-platform obotobot before v0.21.1 Authorization Bypass via /mcp-connect9.3 Critical
- cnighswonger claude-code-cache-fixclaude-code-cache-fix: Local code execution via Python triple-quote injection in tools/quota-statusline.sh8.6 High
- nautobotNautobot: GitRepository.current_head field should not be writable through REST API7.1 High
- nautobotNautobot: Webhook definitions could be used for server-side request forgery (SSRF)8.5 High
- nautobotNautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS)6.5 Medium
- nautobotNautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference5.4 Medium
- traefik, red hat openshift dev spaces 3.29, openshift gitops +2 moreTraefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false6.4 Medium
- go-git go-billygo-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion6.5 Medium
- langchain-ai langsmith-sdkLangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning7.1 High
- sebhildebrandt systeminformation, red hat cryostat 4, multicluster engine for kubernetes +4 more +6 moresysteminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name7.8 High
- linux, linux kernel +1 moreliveupdate: luo_file: remember retrieve() status5.5 Medium
- linux, linux kernel +1 moreusb: xhci: Prevent interrupt storm on host controller error (HCE)5.5 Medium
- linux, linux kernel +1 moreata: libata-core: Disable LPM on ST1000DM010-2EP1025.5 Medium
- linux, linux kernel +1 morearm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults5.5 Medium
- linux, linux kernel +1 morenouveau/gsp: drop WARN_ON in ACPI probes5.5 Medium
- linux, linux kernel +1 moremmc: core: Avoid bitfield RMW for claim/retune flags5.5 Medium
- linux, linux kernel +1 moreKVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated5.5 Medium
- linux, linux kernel +1 moresched_ext: Disable preemption between scx_claim_exit() and kicking helper work5.5 Medium
- linux, linux kernel +1 morenet-shapers: don't free reply skb after genlmsg_reply()7.8 High
- linux, linux kernel +1 moreASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition5.5 Medium
- linux, linux kernel +1 morenet: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect5.5 Medium
- linux, linux kernel +1 moreASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put5.5 Medium
- linux, linux kernel +1 moredrm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL5.5 Medium
- linux, linux kernel +1 moreiio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas()7.8 High
- aria2 project aria2, aria2c +1 morearia2c Improper Certificate Validation4.8 Medium
- protobufjs project protobufjs, protobufjs protobuf.js +1 moreprotobufjs: Denial of Service via unbounded recursive JSON descriptor expansion5.3 Medium
- joomsky j2 jobsJoomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby7.1 High
- powie whois domain checkPowie's WHOIS Domain Check 0.9.31 Persistent Cross-Site Scripting5.1 Medium
- joomsky j2 jobsJoomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby7.1 High
- iobit uninstallerIObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation8.5 High
- kuicms php eeKuicms Php EE 2.0 Persistent Cross-Site Scripting via bbs reply5.1 Medium
- drive-software atomic alarm clockAtomic Alarm Clock 6.3 Stack Overflow via SEH Unicode8.6 High
- www.huawei.com hg630 v2 routerHuawei HG630 V2 Router Authentication Bypass via Serial Number8.7 High
- fabrikar com fabrikJoomla com_fabrik 3.9.11 Directory Traversal via image.php8.7 High
- hdwplayer com hdwplayerJoomla com_hdwplayer 4.2 SQL Injection via search.php8.8 High
- Show moreLoading…