CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- drupal simple hierarchical select (shs), simple hierarchical select project hierarchical select +1 moreSimple Hierarchical Select (Drupal 7) XSS in term-derived output5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to Stored XSS via external-link page cvName2.0 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 is vulnerable to SSRF via RSS Displayer Block2.1 Low
- imagemagickImageMagick - Division by Zero in Binomial Kernel Processing4.8 Medium
Magick.NET-Q16-AnyCPUNuGet,Magick.NET-Q16-arm64NuGet,Magick.NET-Q16-HDRI-AnyCPUNuGet +14 more +16 moreImageMagick: Heap Buffer Over-Write in json and yaml encoder of a single byte due to incorrect fix6.2 Medium- nevware21 ts-utils@nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty7.2 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/delete2.3 Low
- containerdcontainerd user ID handling bypass allows runAsNonRoot evasion7.3 High
- libp2p js-libp2plibp2p: Memory DoS via subscription flood of unique topics7.5 High
- pydantic ai, pydantic-ai, pydantic-ai-slim +2 morePydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)6.8 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/logs/bulk/delete2.3 Low
- msiemens rust onenote file parser, onenote.rs +1 moreRust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory4.4 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/delete2.3 Low
- smithyhq sqladminSQLAdmin: Authorization Bypass on `ajax_lookup`4.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/cache2.3 Low
- symfony twigTwig: Arbitrary PHP code execution via `_self.(<string>)` macro-reference compilation8.7 High
- symfony twigTwig: Sandbox property and method bypass via object-destructuring assignment7.1 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/page/bulk/design2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/event/duplicate2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/dialog/express/association/reorder2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file addFavoriteFolder($id)2.3 Low
- symfony twigTwig: `{% sandbox %}{% include %}` skips checkSecurity() on cached templates (incomplete fix for CVE-2024-45411)6.0 Medium
- repute infosystems bookingpress appointment booking proBookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field9.8 Critical
- symfony twig, twig cssinliner-extra, markdown-extra +2 moreTwig: HTML-output filters in twig/* extras incorrectly declared `is_safe => ['all']`5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file removeFavoriteFolder($id)2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file star()2.3 Low
- symfony twigTwig: Sandbox property allowlist bypass via the `column` filter (array_column on objects)5.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescan()2.3 Low
- symfony twigTwig: `template_from_string()` escapes a SourcePolicy-driven sandbox via synthesized template name7.7 High
- symfony twigTwig: PHP code injection via `{% use %}` template name8.7 High
- symfony twigTwig: Unbounded formatter memoisation in twig/intl-extra keyed on template-controlled arguments5.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file rescanMultiple()2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9 before 9.5.0 is vulnerable to Cross Site Request Forgery (CSRF) at concrete/controllers/backend/file approveVersion()2.3 Low
- symfony twigTwig: The `spaceless` filter implicitly marks its output as safe5.1 Medium
- js-cookie javascript cookie, js-cookie, red hat cryostat 4 on rhel 9 +24 more +26 moreJavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection7.5 High
- concrete cms cms, concretecms concrete cms +1 moreFor Concrete CMS 9.5.0 and below, OAuth 2.0 Authorization-Code Handler Bypasses Account Status2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameter2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to CSRF via the DeleteFile controller2.3 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS below 9.5.0 and below is vulnerable to password change without reauthorization and session-hardening bypass.5.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection6.0 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in surveys when sites are running concurrent public surveys and private surveys6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure in Backend\SummaryTemplate6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in the Express Entry Detail block6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to File Download Authorization Bypass in submit_password()6.3 Medium
- jjnapiork catalyst::plugin::authenticationCatalyst::Plugin::Authentication versions through 0.10024 for Perl is susceptible to timing attacks5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/message_page' allowing unauthenticated read of any conversation message6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in the`/ccm/frontend/conversations/message_detail` endpoint6.3 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR in '/ccm/frontend/conversations/get_rating'6.3 Medium
- webminWebmin < 2.641 Stored XSS via System and Server Status5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.5.0 and below is vulnerable to IDOR combined with a missing authentication gate for endpoint /ccm/system/dialogs/file/usage/{fID}6.3 Medium
- Show moreLoading…