CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- givanz vvvebVvveb < 1.0.8.3 Directory Listing Information Disclosure6.9 Medium
- givanz vvvebVvveb < 1.0.8.3 Stored XSS via Signup Controller5.3 Medium
- verint verba, verba collaboration compliance and quality management platform +1 moreStored XSS in Verba5.3 Medium
- webcon bpsReflected XSS in WEBCON BPS5.1 Medium
- fleetdm fleetFleet: IP spoofing allows bypassing API rate limiting6.9 Medium
- coreshopCoreShop Vulnerable to Remote Code Execution (RCE) via Insecure `pull_request_target` Configuration8.2 High
- strapiStrapi may leak sensitive data via relational filtering due to lack of query sanitization9.2 Critical
- fleetdm fleetFleet vulnerable to OS command injection in software packages6.0 Medium
- fleetdm fleetFleet server may terminate unexpectedly when handling certain gRPC requests8.7 High
- fleetdm fleetFleet Windows MDM Azure AD JWT Authentication Bypass8.2 High
- fleetdm fleetFleet has a rate limiting bypass via untrusted client IP headers6.9 Medium
- fleetdm fleetFleet has a Windows MDM management endpoint authentication bypass8.2 High
- strapi, strapi @strapi/upload +1 moreStrapi Upload Plugin MIME Validation Bypass via Content API5.3 Medium
- postgresqlPostgreSQL REFRESH PUBLICATION allows SQL injection via table name3.7 Low
- postgresqlPostgreSQL refint allows stack buffer overflow and SQL injection8.8 High
- postgresqlPostgreSQL pg_restore_attribute_stats accepts values that cause query planning to read past end of stats array4.3 Medium
- postgresqlPostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion7.5 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 morePostgreSQL discloses MD5-hashed passwords via covert timing channel6.5 Medium
- postgresql, red hat discovery 2, enterprise linux 10 +17 more +19 morePostgreSQL libpq lo_* functions let server superuser overwrite client stack memory8.8 High
- postgresqlPostgreSQL pg_createsubscriber allows SQL injection via subscription name7.2 High
- postgresqlPostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice8.8 High
- postgresqlPostgreSQL timeofday() can disclose portions of server memory4.3 Medium
- postgresql, red hat ansible automation platform 2.2, enterprise linux 10 +16 more +18 morePostgreSQL server undersizes allocations, via integer wraparound8.8 High
- postgresqlPostgreSQL CREATE TYPE does not check multirange schema CREATE privilege5.4 Medium
- yordam information technology consulting, training and electronic systems industry and trade inc. library automation systemIDOR in Yordam Informatics' Library Automation System8.8 High
- stefanprodan podinfopodinfo 6.11.2 Reflected XSS via /echo Endpoint5.1 Medium
- wpengine database backup for wordpressDatabase Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion8.1 High
- wpengine database backup for wordpressDatabase Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Export7.5 High
- wpengine database backup for wordpressDatabase Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Backup Interception7.5 High
- appyap technology and information inc. yaay social media appIDOR in APPYAP's Yaay Social Media App8.8 High
- stel order orderStored Cross-Site Scripting (XSS) vulnerability in Stel Order5.1 Medium
- stel order orderUnsafe Object Reference (IDOR) vulnerability in Stel Order7.1 High
- im park information technology, electronics, press, publishing and advertising, education ltd. co. dijidemiIDOR in Im Park's DijiDemi6.8 Medium
oneringbufcrates.ioDouble-free in `vmem` storage reachable from safe RustNo scoremutringbufcrates.ioDouble-free in `vmem` storage reachable from safe Rust (predecessor of `oneringbuf`)No score- lettrelettre has TLS hostname verification disabled when using Boring TLS backend9.1 Critical
- apache commons configurationApache Commons Configuration: StackOverflowError for YAML input with cycles5.3 Medium
- No product listedSecurity update for ibus-rime, librimeNo score
- No product listedSecurity update for ibus-rime, librimeNo score
- comarch erp optimaPrivilege Escalation in Comarch ERP Optima7.5 High
- comarch erp optimaHardcoded credentials in Comarch ERP Optima8.7 High
- elixir-plug plugUnbounded buffer accumulation in multipart header parsing causes denial of service in plug8.2 High
- simdjsonInteger overflow in simdjson6.9 Medium
- akilli commerce software technologies ltd. co. e-commerce websiteIDOR in Akıllı Ticaret's E-Commerce Pack9.8 Critical
- akilli commerce software technologies ltd. co. e-commerce websiteSQLi in Akıllı Ticaret's E-Commerce Pack9.8 Critical
- infused addons infusedwoo proInfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters9.1 Critical
- wproyal royal addons for elementor – addons and templates kit for elementorRoyal Addons for Elementor <= 1.7.1058 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title_tag' Parameter6.4 Medium
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.5 - Unauthenticated Missing Authorization to Admin Approval Bypass via 'action' Parameter5.3 Medium
- websoudan mw wp formMW WP Form <= 5.1.2 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'post_id' Query Parameter5.3 Medium
- caterhamcomputing cc child pagesCC Child Pages <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'more' Parameter6.4 Medium
- Show moreLoading…