CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- bestpractical rtRT: SQL injection via entry_aggregator parameter in JSON search8.8 High
- bestpractical rtRT has broken CSRF protection for authenticated users7.1 High
- bestpractical rtRT: Spreadsheet downloads vulnerable to CSV/formula injection in Microsoft Excel and similar apps4.6 Medium
- struktur libheiflibheif: Heap buffer over-read in SampleAuxInfoReader via crafted HEIF sequence file with mismatched saiz sample count5.1 Medium
taropamIn OCaml-tar before 3.4.0, a crafted archive with ../ path segments in its name allows escaping...9.1 Critical- struktur libheiflibheif allows Out-of-bounds vector access leading to invalid dereference (DoS)6.5 Medium
- tp link systems inc. archer re360 v1, tp-link re305 firmware, re360 firmware +7 more +9 moreAuthentication Logic Vulnerability on Multiple TP-Link Range Extenders8.7 High
- docker desktopDocker Model Runner container-to-host code execution via MLX-LM model_file importlib loading8.8 High
- docker desktopDocker Model Runner container-to-host code execution via unsandboxed trust_remote_code in Python inference backends8.8 High
- goauthentik authentikauthentik: Privilege Escalation via User PATCH: Superuser Group Assignment Bypasses enable_group_superuser8.1 High
- goauthentik authentikauthentik: Non-admin user can retrieve confidential OAuth client_secret via /api/v3/oauth2/access_tokens/7.1 High
- baptistearno typebot.ioTypeBot: WhatsApp Webhook Endpoint Missing Signature Verification6.5 Medium
- lxqt pcmanfm-qtAn issue was discovered in all versions of PCManFM-Qt starting from 1.1.0. When a regular file's...9.3 Critical
- baptistearno typebot.ioTypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter3.1 Low
- docker desktopDocker Desktop Enhanced Container Isolation bypass via --use-api-socket CLI flag8.8 High
- golang.org/x/sys golang.org/x/sys/windowsInvoking integer overflow in NewNTUnicodeString in golang.org/x/sys/windows3.3 Low
- baptistearno typebot.ioTypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint7.1 High
- baptistearno typebot.ioTypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions6.5 Medium
- aws amazon braket python sdkInsecure Deserialization in Amazon Braket SDK Job Results Processing7.5 High
- baptistearno typebot.ioTypeBot: Stored Cross-Site Scripting (XSS) via SVG File Upload On Profile Picture Form8.5 High
- flask-middleware flask-security-tooFlask-Security-Too OAuth reauthentication freshness bypass via cross- user OAuth identity acceptance5.3 Medium
- vovchic17 aiosendaiosend: Deserialization of request body before signature verification (Pre-auth DoS) in webhook handler7.5 High
- baptistearno typebot.ioTypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks7.7 High
- gtsteffaniak filebrowserFileBrowser Quantum: Path Traversal in public share PATCH allows file ops outside shared directory9.3 Critical
- baptistearno typebot.ioTypeBot: Stored XSS via javascript: URI in text bubble links — bot author executes JS on visitors' browsers5.4 Medium
- baptistearno typebot.ioTypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation7.6 High
- lizardbyte sunshineSunshine: Authentication bypass via improper client certificate validation9.8 Critical
- baptistearno typebot.ioTypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls10.0 Critical
- amazon kiro cliTool Execution Without Authorization via Piped Stdin in Kiro CLI8.4 High
- mattermost, mattermost server +1 moreGitHub OAuth Scope Validation5.4 Medium
- baptistearno typebot.ioTypebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Preview8.7 High
- baptistearno typebot.ioTypebot: IDOR in Result Logs Endpoint Allows Cross-Workspace Data Disclosure6.5 Medium
- yeswikiYesWiki: Unauthenticated SQL Injection9.8 Critical
- devolutions serverImproper authorization in the Active Directory browsing feature in Devolutions Server allows a...7.1 High
- devolutions serverMissing authorization in the entry status management feature in Devolutions Server allows a non...5.4 Medium
- devolutions serverImproper access control in the entry activity log feature in Devolutions Server allows an...4.3 Medium
- devolutions serverImproper enforcement of the sealed-entry workflow in the entry sensitive-data retrieval feature...2.7 Low
- devolutions serverImproper access control in the entry documentation and attachment features in Devolutions Server...4.3 Medium
- devolutions serverMissing authorization in the user profile update feature in Devolutions Server allows an...4.3 Medium
- devolutions serverUnverified password change in Devolutions Server allows an attacker to change a user's password...3.1 Low
- devolutions serverImproper input validation in the external authentication provider flow in Devolutions Server...5.0 Medium
- devolutions serverInsufficient logging in the entry export feature in Devolutions Server allows an authenticated...2.4 Low
- devolutions serverAuthorization bypass in the entry duplication feature in Devolutions Server allows an...2.6 Low
- devolutions serverMissing authorization in the vault import feature in Devolutions Server 2026.1.16.0 and earlier...4.3 Medium
- devolutions serverImproper handling of factor key state in the multi-factor authentication management feature in...7.6 High
- dell unisphere for powermax, unisphere 360, unisphere for powermax virtual appliance +2 moreDell Unisphere for PowerMax vApp version prior to 10.0.0.2, contains an authorization bypass...6.5 Medium
- dell ecs, elastic cloud storage +1 moreDell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access...5.9 Medium
- ivanti secure access clientAn improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6...8.8 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9.0 to 9.5.0 is vulnerable to Stored XSS via page name in atomik theme2.1 Low
- dell vxrailDell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail...6.7 Medium
- Show moreLoading…