CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- zkteco ssc335-gc2063-face-0b77 solution cameraUnauthenticated Export Service in ZKTeco CCTV Cameras9.1 Critical
- kieback & peter ddc4002, ddc4002e, ddc4020e +8 more +10 moreKieback & Peter DDC Building Controllers Cross-site Scripting5.3 Medium
- dell powerflex manager, powerflex manager (appliance), powerflex manager (rack) +2 more +4 moreDell PowerFlex Manager, version(s) <=4.6.2, contain(s) an Exposure of Information Through...7.5 High
- mispMISP OIDC authentication bypass via automatic email-based account linking under insecure IdP configurations6.0 Medium
- beyaz bilgisayar software design industry and trade ltd. co. cityplusReflected XSS in Beyaz Computer's CityPLus7.6 High
- progress moveit automationAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation4.3 Medium
- ledger bitcoin appLedger Bitcoin App 2.1.0 Address Derivation Error via Miniscript4.1 Medium
- progress moveit automationIncorrect default permissions vulnerability in Progress Software MOVEit Automation6.5 Medium
- progress moveit automationAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation5.3 Medium
- progress moveit automationUncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation5.9 Medium
- mediaarea mediainfolibMediaArea MediaInfoLib Channel Splitting heap-based buffer overflow vulnerability7.8 High
tlsopamIn OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate...7.4 HightlsopamIn OCaml-TLS before 2.1.0, the client implementation does insufficient checks of the certificate...9.1 Critical- symfony twigTwig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface8.7 High
- hclsoftware dominoiqHCL DominoIQ is affected by broken access control6.5 Medium
- phenixdigital phoenix storybookCross-session PubSub topic injection via URL parameter in phoenix_storybook2.3 Low
- phenixdigital phoenix storybookUnauthenticated remote code execution via HEEx template injection in phoenix_storybook playground9.5 Critical
- phenixdigital phoenix storybookUnauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook8.2 High
- microsoft malware protection engineMicrosoft Defender Remote Code Execution Vulnerability8.1 High
- microsoft windows admin center in azure portal, windows admin center +1 moreWindows Admin Center in Azure Portal Elevation of Privilege Vulnerability7.8 High
- microsoft defender, malware protection engine +1 moreMicrosoft Defender Elevation of Privilege Vulnerability7.8 High
- microsoft defender, defender antimalware platform +1 moreMicrosoft Defender Denial of Service Vulnerability4.0 Medium
- yith woocommerce product add-onsWordPress YITH WooCommerce Product Add-Ons plugin <= 4.29.0 - SQL Injection vulnerability7.6 High
- themeisle visualizerWordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- magepeople inc. wpbookinglyWordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability6.5 Medium
- wp chill image photo gallery final tiles gridWordPress Image Photo Gallery Final Tiles Grid plugin <= 3.6.11 - Broken Access Control vulnerability4.3 Medium
- sitemio information technologies trade ltd. co. wisecpCSRF in Sitemio's WISECP8.0 High
- add-ons.org pdf for elementor forms + drag and drop template builderWordPress PDF for Elementor Forms + Drag And Drop Template Builder plugin <= 5.5.1 - Broken Access Control vulnerability5.0 Medium
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header3.7 Low
- hcl bigfix service management (sm), hcltech bigfix service management +1 moreHCL BigFix Service Management (SM) is susceptible to a Configuration – 'Insecure Use of Base Image Version'4.0 Medium
- mesalvo meona client, meona server +1 moreInsufficient Verification of Data Authenticity vulnerability in Mesalvo Meona Client Launcher...2.3 Low
- mesalvo meona client, meona server +1 moreCleartext Storage of Sensitive Information in Memory vulnerability in Mesalvo Meona Client...4.4 Medium
- mesalvo meona client, meona server +1 moreImproper Access Control vulnerability in Mesalvo Meona Client Launcher Component, Mesalvo Meona...7.8 High
- No product listedSecurity update for buildahNo score
- No product listedSecurity update for dockerNo score
- No product listedSecurity update for distributionNo score
- No product listedSecurity update for runcNo score
- No product listedSecurity update for buildahNo score
- revolution slider slider revolutionSlider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream'5.3 Medium
- dell smartfabric storage softwareDell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization...6.4 Medium
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: unbounded ldap controls count in get_ldapmessage_controls_ext() causes cpu and heap amplification (remote dos)7.5 High
- brainstormforce surecartSurecart - SQL Injection9.3 Critical
- awesomemotive nextgen galleryNextGEN Gallery - SQL Injection9.3 Critical
- acyba acymailing – an ultimate newsletter plugin and marketing automation solution for wordpressAcyMailing <= 10.8.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation via 'acymailing_router'8.8 High
- simonholliday anomify ai – anomaly detection and alertingAnomify AI <= 0.3.6 - Cross-Site Request Forgery4.3 Medium
- unknown decent commentsDecent Comments < 3.0.2 - Unauthenticated Email Address Disclosure5.8 Medium
- unknown email encoderEmail Encoder < 2.4.7 - Unauthenticated Stored XSS6.1 Medium
- memcachedIn memcached before 1.6.42, password data for SASL password database authentication has a timing...8.1 High
- memcached, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreIn memcached before 1.6.42, username data for SASL password database authentication has a timing...8.1 High
- wupsales ai chatbot & workflow automation by aiwuAI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header6.4 Medium
- Show moreLoading…