CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- oisf suricataSuricata detect/transform: use-after-free in decompress transforms5.9 Medium
- oisf suricataSuricata detect/transform: use-after-free in dotprefix transform5.9 Medium
- openstack keystoneOpenStack Keystone's federated token rescoping mechanism doesn't propagate the original token's expiry to the newly issued token6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Incorrect Authorization issue6.0 Medium
- openstack keystone, red hat openstack platform 13 (queens), openstack platform 16.2 +2 more +4 moreOpenStack Keystone has an Authorization Bypass6.0 Medium
- openstack keystoneOpenStack Keystone doesn't verify that the user supplied in the authentication request matches the owner of the application credential6.0 Medium
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the IPSec VPN feature of InHand Networks IR302...9.8 Critical
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the WireGuard VPN feature of InHand Networks IR302...9.8 Critical
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the ZeroTier VPN feature of InHand Networks IR302...9.8 Critical
- inhandnetworks ir302 firmware, ir305 firmware, ir315 firmware +1 more +3 moreA command injection vulnerability exists in the Admin Access feature of InHand Networks IR302...9.8 Critical
- No product listedAn issue in SMSGate sms-core<=2.1.13.6 allows a remote attacker to execute arbitrary code via the...7.3 High
- No product listedAn issue in Responsive File Manager Responsive FileManager Version 9.14.0 allows a remote...8.0 High
- No product listedAn arbitrary file upload vulnerability in the pages/admin.uploadmapimg.php component of...7.3 High
- No product listedAn issue in SourceBans Material Admin before v.1.1.6 (3ecd95e) allows attackers to manipulate...7.3 High
- wpeverest everest forms – contact form, payment form, quiz, survey & custom form builderEverest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder <= 3.4.7 - Missing Authorization to Authenticated (Subscriber+) Email Sending4.3 Medium
- oscal-compass compliance-trestlecompliance-trestle Remote Fetching Mechanism has an Arbitrary File Write via Cache Path Traversal7.1 High
- frangoteam fuxaFUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations7.5 High
- kata-containersKata guest escape: runtime-rs guest-root to host-root escape via virtiofs9.2 Critical
- spaceapplications yamcsYamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection9.1 Critical
- spaceapplications yamcsYamcs: Remote Code Execution via Mission Database algorithm override9.8 Critical
- pimcorePimcore: CustomReports Share Bypass7.1 High
- pimcorePimcore: WordExport Authorization Bypass for Unauthorized Document Export6.4 Medium
- microsoft ufoMicrosoft UFO accepts cross-device TASK_END messages by session_id only, allowing peer task-result injection5.9 Medium
- microsoft ufoMicrosoft UFO shared WebSocket handler state causes cross-client response hijacking6.3 Medium
- microsoft ufoMicrosoft UFO WebSocket role spoofing allows authenticated peer task hijacking8.8 High
- microsoft ufoMicrosoft UFO uses untrusted task_name in log paths, allowing authenticated path traversal and log file creation outside the logs directory8.1 High
- microsoft ufoMicrosoft UFO reuses client-supplied WebSocket session IDs and replays stale task results to new authenticated requesters5.3 Medium
- google mcp toolbox for databasesMCP Toolbox for Databases vulnerable to DNS rebinding attacks9.4 Critical
- asyncssh project asyncsshAsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username8.2 High
- eemeli yaml, sensiolabs symfony +1 moreSymfony: YAML Parser ReDoS via Catastrophic Backtracking in Parser::cleanup() Regex8.7 High
- eemeli yaml, sensiolabs symfony +1 moreSymfony: YAML Parser Exponential Memory Allocation via Recursive Collection-Alias Expansion ("Billion Laughs")8.7 High
- sensiolabs symfonySymfony: [Yaml] Harden the parser when handling untrusted input8.2 High
- microsoft ufoOS Command Injection in Microsoft UFO Shell Action Replay via Stored Session JSON7.8 High
- marcantondahmen automadAutomad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint7.5 High
- sensiolabs symfony, symfony monolog-bridge +1 moreSymfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener8.3 High
- sensiolabs symfony, symfony http-kernel, security-http +2 moreSymfony: HEAD Request Bypasses methods: ['GET'] Filter in #[IsGranted] / #[IsSignatureValid] / #[IsCsrfTokenValid]8.3 High
- sensiolabs symfony, symfony security-http +1 moreSymfony: Cas2Handler Derives CAS service URL from Client Host Header → Cross-Service Ticket Replay7.6 High
- cache symfonySymfony: SQL Injection in PdoAdapter::doClear() via Unsanitized $prefix6.3 Medium
- sensiolabs symfony, symfony twig-bridge, web-profiler-bundle +2 moreSymfony: Stored XSS in WebProfiler CodeExtension::fileExcerpt() — Unescaped Non-PHP File Rendering2.0 Low
- sensiolabs symfony, symfony dom-crawler +1 moreSymfony: XXE (Local File Disclosure) in DomCrawler::addXmlContent() via validateOnParse = true8.7 High
- go standard library mime, sensiolabs symfony +1 moreSymfony: Email Header Injection via Non-Token Characters in Mime Parameter Names6.3 Medium
- sensiolabs symfony, symfony security-http +1 moreSymfony: OidcTokenHandler Accepts JWTs Missing aud/iss/exp Claims8.8 High
- tanium connectTanium addressed an unauthorized code execution vulnerability in Connect.8.8 High
- sensiolabs symfony, symfony mailer +1 moreSymfony: Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address8.7 High
- symfonySymfony: Email Header / SMTP Command Injection via CRLF in Symfony\Component\Mime\Address6.3 Medium
- mcdope pam usbpam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent8.2 High
- mcdope pam usbpam_usb: PINENTRY_FALLBACK_APP environment variable allows arbitrary command execution7.8 High
- mcdope pam usbpam_usb: NULL pointer dereference from UDisks device fields causes PAM crash and login denial-of-service4.6 Medium
- mcdope pam usbpam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption7.9 High
- hclsoftware bigfix remote control serverHCL BigFix Remote Control Server WebUI is affected by a misconfigured Content Security Policy4.0 Medium
- Show moreLoading…