CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- wp directory kit directory kit, wpdirectorykit wp directory kit +1 moreWordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerability9.3 Critical
- connectwise automateThe ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained...8.8 High
- gardyn mobile applicationOTP Bypass in TEİAŞ's Mobile Application6.3 Medium
- gardyn mobile applicationSession Hijacking in TEİAŞ's Mobile Application5.7 Medium
- akinsoft qr menuIDOR in PosCube's QR Menu7.5 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreAn origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreAn origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreAn origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreAn origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreAn origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreAn origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to...7.8 High
- trend micro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA directory traversal vulnerability in the Apex One (on-premise) server could allow a pre...6.7 Medium
- trendmicro apex one, trend micro, inc. trendai apex one (mac) +1 moreAn origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one (mac) +1 moreA time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one (mac) +1 moreA time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service...7.0 High
- trendmicro apex one, trend micro, inc. trendai apex one (mac) +1 moreAn origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreAn origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA link following vulnerability in the Trend Micro Apex One scan engine could allow a local...7.8 High
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA vulnerability in the Trend Micro Apex One management console could allow a remote attacker to...9.8 Critical
- trendmicro apex one, trend micro, inc. trendai apex one, trendai apex one as a service +2 moreA vulnerability in the Trend Micro Apex One management console could allow a remote attacker to...9.8 Critical
- digital operation services wifiburadaOTP Bypass in Digital Operation Services' WifiBurada7.1 High
- zohocorp manageengine adselfservice plus, manageengine datasecurity plus, manageengine recoverymanager plus +2 moreRemote Code Execution8.4 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/rds: handle zerocopy send cleanup before the message is queued7.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 moreipv6: rpl: reserve mac_len headroom when recompressed SRH grows9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morertmutex: Use waiter::task instead of current in remove_waiter()7.8 High
- linux, linux kernel +1 moreaccel/ivpu: Disallow re-exporting imported GEM objects7.8 High
- linux, linux kernel +1 morefbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free7.3 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked5.5 Medium
- linux, linux kernel +1 morenet: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler8.8 High
libcrux-sha3crates.ioPotential Panic in AVX2 SHAKE-2568.2 Highaudiopus_syscrates.ioaudiopus_sys is unmaintainedNo score- bytecodealliance wasmtimeWasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction7.5 High
- best practical request trackerReflected XSS in Request Tracker5.1 Medium
- apache software foundation camel kApache Camel K: Camel K Cross-Namespace Build Deputy Attack8.1 High
- divi engine form builderDivi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'9.8 Critical
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenet/rds: reset op_nents when zerocopy page pin fails7.8 High
- codesys visualizationCODESYS Visualization - Insufficiently Protected Credentials6.9 Medium
els-os-releaseTuxCareUpdate of els-os-releaseNo score- freebsdIncorrect libcap_net limitation list manipulation6.5 Medium
- powerdns authoritativeIncorrect Behaviour of Views with TCP PROXY Requests4.8 Medium
- freebsdRemote code execution via installer Wi-Fi access point scans7.5 High
- powerdns authoritativeConcurrency and locking defects in GSS-TSIG5.9 Medium
- powerdns authoritativeInsufficient Validation of Autoprimary SOA Queries7.5 High
- powerdns authoritativeInsufficient Validation of Names During AXFR6.8 Medium
- powerdns authoritativeInsufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail4.9 Medium
- freebsdselect(2) file descriptor set overflow causes stack overflow8.8 High
- freebsdMissing validation in ptrace(PT_SC_REMOTE)8.4 High
- freebsdHeap overflow in FUSE_LISTXATTR5.5 Medium
- freebsdKernel use-after-free via file descriptor syscalls7.8 High
- Show moreLoading…