CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- budibaseBudibase: SCIM endpoints lack role-based authorization, BASIC users CRUD tenant users9.9 Critical
- budibaseBudibase: Snowflake private key returned unmasked from datasource API to BASIC users7.7 High
- budibaseBudibase: SSRF via User-Controlled queryId in Automation Execute Query Step5.1 Medium
- budibaseBudibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protection7.7 High
- No product listedTeamSpeak 3 Server clientek Handshake assertion6.9 Medium
- budibaseBudibase: Stored XSS in Text component: BASIC users execute JS in admin session via MarkdownViewer innerHTML + CDN+srcdoc CSP bypass8.1 High
- budibaseBudibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign9.0 Critical
- budibaseBudibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schema7.5 High
- pimcorePimcore: Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction8.0 High
- budibaseBudibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL8.1 High
- sensiolabs symfonySymfony: UrlGenerator Route-Requirement Bypass via Unanchored Regex Alternation → Off-Site //host URL Injection2.3 Low
- budibaseBudibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata8.5 High
- sensiolabs symfonySymfony: Identity Spoofing via Unanchored DN Regex in X509Authenticator9.1 Critical
- No product listedTeamSpeak 3 Server ECC Key heap-based overflow6.9 Medium
- error311 fileriseFileRise: TOTP Bypass via Setup Endpoint Disclosing Existing Secret7.4 High
- botan project botanBotan: Quadratic complexity decoding BER indefinite length encodings6.9 Medium
- No product listedTeamSpeak 3 Server Connection State Management process_resend_queue use after free5.3 Medium
nssTuxCare,nsprTuxCare,nspr-develTuxCare +10 more +12 moreUpdate of nssNo score- nx console, nrwl nx-console +1 moreCompromised Nx Console version 18.95.09.3 Critical
- bizswoop account manager for woocommerceWordPress Account Manager for WooCommerce plugin <= 2.1.2 - Broken Access Control vulnerability4.3 Medium
- labredescefetrj wegiaWeGIA: Middleware whitelist bypass → open redirect via InternoControle.nextPage5.4 Medium
- labredescefetrj wegiaWeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.php5.9 Medium
- mamunur rashid the post gridWordPress The Post Grid plugin <= 7.9.2 - Broken Access Control vulnerability4.3 Medium
- erlang otp, erlang\/otp, red hat hardened images +3 more +5 morenameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification7.6 High
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Unsanitized vhost names allow for XSS in management UI5.6 Medium
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ MQTT Topic Permission Authorization Bypass5.3 Medium
- gradio-app gradioGradio < 6.15.0 Cookie Injection via Shared Proxy Client7.6 High
- roxnor elementskit elementor addons liteWordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability5.3 Medium
- roxnor elementskit elementor addons liteWordPress ElementsKit Elementor addons Lite plugin <= 3.9.6 - Broken Access Control vulnerability4.3 Medium
- prasad kirpekar wp meta and date removerWordPress WP Meta and Date Remover plugin <= 2.3.6 - Broken Access Control vulnerability4.3 Medium
- dearhive dearflipWordPress DearFlip plugin <= 2.4.27 - Broken Access Control vulnerability4.3 Medium
- arjun thakur duplicate page and postWordPress Duplicate Page and Post plugin <= 2.9.5 - SQL Injection vulnerability8.5 High
- justin kruit advanced custom fields: font awesome fieldWordPress Advanced Custom Fields: Font Awesome Field plugin <= 5.0.2 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- wp media adminimizeWordPress Adminimize plugin <= 1.11.11 - Broken Access Control vulnerability4.3 Medium
- webminWebmin before 2.640 does not safely construct a filename for saving of an attachment within the...9.4 Critical
- avaiga taipyTaipy 4.1.1 Path Traversal via ElementLibrary.get_resource()8.7 High
- pretixInsecure direct object reference3.8 Low
- facebook for woocommerceWordPress Facebook for WooCommerce plugin <= 3.7.0 - Open Redirection vulnerability4.7 Medium
- webminWebmin before 2.640 allows mailboxes/detach.cgi XSS via an SVG document attachment that is viewed...6.1 Medium
- benbodhi svg supportWordPress SVG Support plugin <= 2.5.14 - Broken Access Control vulnerability4.3 Medium
- libvnc libvncserverLibVNCClient Tight Gradient decoding allows malicious server-triggered heap/stack OOB writes8.8 High
- agent0ai agent-zeroAgent Zero < 1.15 Stored XSS via image_get API Endpoint5.3 Medium
- mattermost legal hold, mattermost +1 morePath traversal in Mattermost Legal Hold plugin via unsanitized file name from federated peer allows arbitrary file write.8.0 High
- 3clyp50 agent-zeroAgent Zero < 1.15 Path Traversal File Read via image_get API7.1 High
- ibm business automation workflow containers and traditional, business automation workflow +1 moreIBM Business Automation Workflow information leak4.3 Medium
- dataojitori nocturne memoryEmpty API_TOKEN disables authentication on network-reachable HTTP/SSE transport8.7 High
- jenkins multijob, jenkins project multijob plugin +1 moreJenkins Multijob Plugin has a cross-site request forgery (CSRF) vulnerability4.3 Medium
- jenkins buildgraph-view, jenkins project buildgraph-view plugin +1 moreJenkins buildgraph-view Plugin does not escape the build URL5.5 Medium
- jenkins job import, jenkins project job import plugin +1 moreJenkins Job Import Plugin does not perform a permission check in an HTTP endpoint4.3 Medium
- jenkins project github integration plugin, kostyasha github integration +1 moreJenkins GitHub Integration Plugin has a cross-site request forgery (CSRF) vulnerability4.3 Medium
- Show moreLoading…