CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- cp0204 quark-auto-saveQuark Drive (quark-auto-save) < 0.8.5 Stored XSS via System Configuration5.1 Medium
- cp0204 quark-auto-saveQuark Drive (quark-auto-save) < 0.8.5 Mass Assignment via POST /update8.7 High
- hclsoftware bigfix scm reportingHCL BigFix SCM Reporting is affected by vulnerabilities in jQuery8.3 High
- grafana, grafana oss +1 moreIDOR in Annotations API allows unprivileged users to DELETE annotation4.3 Medium
- grafana, grafana oss +1 moreGrafana Data Source Plugin: DoS (OOM) via Negative Interval Injection in $__timeGroup Macro6.5 Medium
- grafana, grafana oss +1 moreGrafana plugin resources can lead to unbounded memory allocation6.5 Medium
- grafana, grafana oss +1 moreAuth Proxy IPv6 whitelist bypass7.4 High
- grafana, grafana oss +1 moreSQL Expressions Read File From Disk6.3 Medium
- grafana, grafana oss +1 moreBAC in Snapshot API allows deletion of unauthorized dashboard snapshots6.5 Medium
- grafana oss, grafana +1 moreUsers can generate Service Account tokens after permissions removal5.9 Medium
- grafana, grafana oss +1 moreDashboard Import Overwrites ACL — Editor Privilege Escalation to Dashboard Admin7.1 High
- grafana, grafana oss +1 moreGrafana Live push endpoint allows unbounded memory allocation leading to OOM6.5 Medium
- grafana, grafana oss +1 moreViewer-triggered race condition in Grafana Live leads to complete server crash6.5 Medium
- palo alto networks prisma sd-wan ion, paloaltonetworks prisma sd-wan +1 morePrisma SD-WAN: Denial of Service (DoS) Vulnerability Through IPv6 Crafted Packet4.9 Medium
- nesquena hermes-webuiHermes WebUI < 0.51.44 Path Traversal via Session Import Endpoint6.0 Medium
- palo alto networks prisma access agentPrisma Access Agent: Improper Certificate Validation Vulnerability6.2 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: SQL Injection Vulnerability6.1 Medium
- palo alto networks prisma sd-wan ion, paloaltonetworks prisma sd-wan +1 morePrisma SD-WAN: Improper Certificate Validation Vulnerability5.2 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: Multiple Authorization Bypass Vulnerabilities5.1 Medium
- palo alto networks prisma access agentPrisma Access Agent: Information Disclosure Vulnerabilities4.3 Medium
- palo alto networks trust protection foundationTrust Protection Foundation: Sensitive Information Disclosure Vulnerability4.5 Medium
- palo alto networks prisma access agentPrisma Access Agent: Local Privilege Escalation Vulnerability5.9 Medium
- palo alto networks prisma access agentPrisma Access Agent Endpoint DLP: Authorization Bypass Vulnerabilities5.9 Medium
- arqit symmetric key agreement platformArqit SKA-Platform Improper Handling of Parameters Vulnerability3.8 Low
- ninenines cowlibDecompression Bomb in cow_spdy:inflate/2 Allows Memory Exhaustion via Crafted SPDY Frame8.2 High
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Certificate Validation Bypass Vulnerabilities4.9 Medium
- arqit symmetric key agreement platformArqit SKA-Platform Enables Access to Debug Information5.3 Medium
- palo alto networks chronosphere chronocollector, paloaltonetworks chronosphere collector +1 moreChronosphere Chronocollector Information Disclosure Vulnerability4.9 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks globalprotect uwp app +2 moreGlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway5.2 Medium
- ninenines cowboyUnbounded buffer accumulation in multipart header parsing causes denial of service in cowboy8.2 High
- palo alto networks broker vmBroker VM: Improper Input Validation in Broker VM Certificate and Key Fields1.1 Low
- palo alto networks globalprotect app, paloaltonetworks globalprotect, palo alto networks global protect app +2 moreGlobalProtect App: Local Privilege Escalation Vulnerabilities5.9 Medium
- arqit symmetric key agreement platformArqit SKA-Platform Vulnerable to Key Exposure8.7 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface4.4 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: GlobalProtect Authentication Bypass Vulnerabilities7.8 High
- palo alto networks prisma browserPrisma Browser: Access and Data Rule Bypass5.8 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching4.8 Medium
- palo alto networks wildfire wf-500 and wf-500-b, paloaltonetworks pan-os +1 moreWildFire WF-500 and WF-500-B: Arbitrary File Read and Delete Vulnerability in WildFire Appliance (WF-500, WF-500-B)5.0 Medium
- zoom roomsUntrusted search path in the installer for Zoom Rooms for Windows before version 7.0.0 may allow...7.8 High
- alinto sogo sogoA cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.76.1 Medium
- zoom communications workplace vdi plugin, zoom workplace virtual desktop infrastructure +1 moreExternal Control of File Name or Path in the Zoom Workplace VDI Plugin Windows Universal...7.8 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authenticated Admin Command Injection Vulnerability6.1 Medium
- palo alto networks prisma browserPrisma Browser: Code Injection Enables Security Controls Bypass7.3 High
- zoom workplaceProtection Mechanism Failure in Zoom Workplace for iOS before version 7.0.0 may allow an...1.8 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing6.6 Medium
- palo alto networks prisma browserPrisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass7.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 morePAN-OS: Remote Code Execution (RCE) in IKEv2 Processing7.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution7.2 High
- patriksimek vm2, red hat ansible automation platform 2.1, developer hub +2 morevm2: Sandbox Breakout Using Async Generator9.8 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more +4 morePAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled7.2 High
- Show moreLoading…