CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- 1panel-dev maxkbMaxKB: Webhook Trigger Authentication Bypass7.5 High
- No product listedJeecgBoot selectDepart LoginController.selectDepart access control6.9 Medium
- 1panel-dev maxkbMaxKB: Unauthenticated SSRF via Workflow Template Import6.3 Medium
- 1panel-dev maxkbMaxKB: Unsalted MD5 Password Hashing6.9 Medium
- 1panel-dev maxkbMaxKB: SSRF Bypass in MaxKB OSS URL Fetch due to URL Parsing Discrepancy6.3 Medium
- prolix-oc lumiverseLumiverse: Sign-up nonce race condition allows unauthorized account registration4.8 Medium
- prolix-oc lumiverseLumiverse: Spindle extension install runs untrusted lifecycle scripts before security scan9.1 Critical
- prolix-oc lumiverseLumiverse: SMB `exists()` basename injection via smbclient `!cmd` escape9.1 Critical
- prolix-oc lumiverseLumiverse: TSX component sandbox escape via DOM ref and string-split identifier bypass9.3 Critical
- prolix-oc lumiverseLumiverse: RCE via MCP stdio argument injection9.9 Critical
- oban-bg oban webMissing authorization check on save-job event handler in oban_web5.3 Medium
- oban-bg oban webUnbounded range expansion in cron describe causes memory exhaustion in oban_web5.9 Medium
- No product listedJeecgBoot SysUser userEdit user.getUsername access control5.3 Medium
- silabs.com simplicity sdkAn attacker is able to downgrade the security of a Bluetooth LE connection by deleting an...8.8 High
- xwiki xwiki-platformXWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin5.9 Medium
- magepeople inc. taxi booking manager for woocommerceWordPress Taxi Booking Manager for WooCommerce plugin <= 2.0.1 - Broken Access Control vulnerability5.3 Medium
- bplugins tiktok feedWordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability4.3 Medium
- magepeople inc. wpbookinglyWordPress WpBookingly plugin <= 1.2.9 - Broken Access Control vulnerability4.3 Medium
- itsourcecode student transcript processing systemitsourcecode Student Transcript Processing System index.php sql injection6.9 Medium
- convoypanel panelPterodactyl has a database resource limit bypass via race condition in Client API2.3 Low
- magepeople inc. wptravellyWordPress WpTravelly plugin <= 2.1.5 - Broken Access Control vulnerability6.3 Medium
- itsourcecode student transcript processing systemitsourcecode Student Transcript Processing System trans.php sql injection6.9 Medium
- itsourcecode student transcript processing systemitsourcecode Student Transcript Processing System index.php sql injection6.9 Medium
- gpacGPAC MP4Box media.c Media_GetSample memory leak4.8 Medium
- ibm engineering lifecycle managementIBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Authentication Bypass9.8 Critical
- code100xcode100x Mobile API Authentication Bypass via Header Spoofing8.8 High
- ibm engineering lifecycle managementIBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML external entity injection (XXE) attack7.1 High
- ibm engineering lifecycle managementIBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to Server Post-Auth Remote Code Execution7.2 High
- thingsboardThingsBoard YAML provision getGatewayDockerComposeFile code injection2.3 Low
gpacDebianGPAC MP4Box isom_intern.c MergeFragment null pointer dereference4.8 Medium- factionsecurity factionFaction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates9.8 Critical
- factionsecurity factionFaction: Stored XSS in Assessment Attachment Filename Preview Rendering8.7 High
- factionsecurity factionFaction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering8.7 High
- openvpn connectPrivilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS...9.4 Critical
- ibm http serverIBM HTTP Server is affected by multiple vulnerabilities9.8 Critical
- kareadita kavitaKavita: Pre-Auth Account Takeover9.3 Critical
- kareadita kavitaKavita: IDOR in /api/Download/*5.9 Medium
- kareadita kavitaKavita: No authentication at /api/Reader/image6.9 Medium
- nvidia geforce, gpu display driver, guest driver +2 more +4 moreNVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel driver, where...4.4 Medium
- nvidia virtual gpu managerNVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could...5.8 Medium
- nvidia virtual gpu managerNVIDIA vGPU software contains a vulnerability in the virtual GPU manager, where an attacker could...7.0 High
- sap se gatewayInformation Disclosure vulnerability in SAP Gateway4.3 Medium
- nvidia geforce, gpu display driver, guest driver +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a...7.8 High
- nvidia geforce, gpu display driver, guest driver +3 more +5 moreNVIDIA Display Driver for Windows contains a vulnerability where an attacker could cause a time...7.8 High
- nvidia geforce, gpu display driver, rtx, quadro, nvs +1 more +3 moreNVIDIA Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer,...7.8 High
- nvidia geforce, gpu display driver, rtx, quadro, nvs +1 more +3 moreNVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could...7.8 High
- nvidia geforce, gpu display driver, guest driver +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability where a user could cause an out-of...7.1 High
- ibm web server plug-ins for websphere application server and websphere liberty, websphere application server +1 moreIBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities when using when using Web Server Plug-ins9.8 Critical
- nvidia geforce, gpu display driver, rtx, quadro, nvs +2 more +4 moreNVIDIA Display Driver for Linux contains a vulnerability in the Multi-Instance GPU (MIG)...6.5 Medium
- nvidia geforce, gpu display driver, guest driver +3 more +5 moreNVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could...4.7 Medium
- Show moreLoading…