CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- linux, linux kernel +1 moreBluetooth: hci_conn: fix potential UAF in create_big_sync7.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morenet: stmmac: Prevent NULL deref when RX memory exhausted7.5 High
- linux, linux kernel +1 moreusb: ulpi: fix memory leak on ulpi_register() error paths5.5 Medium
- linux, linux kernel +1 moreipmi:si: Return state to normal if message allocation fails5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moredm-thin: fix metadata refcount underflow7.8 High
- linux, linux kernel +1 moreeventfs: Hold eventfs_mutex and SRCU when remount walks events5.5 Medium
- linux, linux kernel +1 morescsi: mpt3sas: Limit NVMe request size to 2 MiB7.8 High
- linux, linux kernel +1 moreselinux: use sk blob accessor in socket permission helpers5.5 Medium
- flowintelFlowIntel external reference URL probe allows server-side request forgery6.2 Medium
- ex-aws ex aws snsex_aws_sns SigningCertURL not validated in verify_message/18.7 High
- d-link corporation dwr-x1820Use of Weak Credentials in D-Link DWR-X1820 router6.0 Medium
- robur albatrossRobur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to...7.1 High
- apache igniteApache Ignite: REST HTTP arbitrary file read vulnerability8.5 High
- shabti frontend admin by dynamiappsFrontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection8.8 High
- 3uu shariff wrapperShariff Wrapper <= 4.6.20 - Authenticated (Contributor+) Cross-Site Scripting6.4 Medium
- follet school solutions destinyReflected Cross-Site Scripting in Follet School Solutions Destiny5.1 Medium
- follet school solutions destinyReflected Cross-Site Scripting in Follet School Solutions Destiny5.1 Medium
- red hat container native virtualization 4.17, container native virtualization 4.18, container native virtualization 4.19 +3 more +5 moreKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read7.7 High
- equalizedigital equalize digital accessibility checker – wcag, ada, eaa and section 508 complianceEqualize Digital Accessibility Checker <= 1.42.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Accessibility Issue Modification via edac_insert_ignore_data AJAX Action4.3 Medium
- themeisle visualizer: tables and charts manager for wordpressVisualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData()…4.3 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking pluginAppointment Booking Calendar <= 1.6.11.8 - Missing Authorization to Unauthenticated Arbitrary Modification via Bulk Appointments REST API Endpoint5.3 Medium
- 10web photo gallery by 10web – mobile-friendly image galleryPhoto Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute6.5 Medium
- smub pdf embedder – pdf viewer & embed pdf files for wordpressPDF Embedder <= 4.9.3 - Authenticated (Contributor+) Information Exposure via Block Editor Page4.3 Medium
- gitlabIncorrect Authorization in GitLab4.3 Medium
- htplugins ht contact form – drag & drop form builder for wordpressHT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field7.2 High
- hasanazizul 3d viewer – 3d model viewer – augmented reality – virtual try on3D Viewer <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Modification via settings REST endpoint4.3 Medium
- croixhaug appointment booking calendar — simply schedule appointments booking pluginAppointment Booking Calendar <= 1.6.11.8 - Unauthenticated SQL Injection via 'append_where_sql' Parameter7.5 High
- davidanderson easy updates managerEasy Updates Manager <= 9.0.20 - Reflected Cross-Site Scripting via 'paged' Parameter6.1 Medium
- smtp2go for wordpress – email made easySMTP2GO for WordPress <= 1.16.0 - Missing Authorization to Authenticated (Subscriber+) Log Read/Truncate4.3 Medium
- yudiz wp contact form 7 db handlerWP Contact Form 7 DB Handler <= 3.0 - Cross-Site Request Forgery to Arbitrary File Deletion via 'contact_form' Parameter8.1 High
- cyberhobo geo mashupGeo Mashup <= 1.13.19 - Missing Authorization to Unauthenticated Plugin Settings Disclosure via 'geo_mashup_content' Parameter5.3 Medium
- a3rev a3 lazy loada3 Lazy Load <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Element6.4 Medium
- peachpay — payments & express checkout for woocommerce (supports stripe, paypal, square, authorize.net, nmi)PeachPay <= 1.120.46 - Cross-Site Request Forgery to Stripe Unlink4.3 Medium
- cssigniterteam gutenbee – gutenberg blocksGutenBee <= 2.20.1 - Authenticated (Author+) Arbitrary File Upload via wp_check_filetype_and_ext Filter8.8 High
- wpeverest user registration & membership – free & paid memberships, subscriptions, content restriction, user profile, custom user registration & login builderUser Registration & Membership <= 5.1.5 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Media Deletion via 'profile-pic-url' Parameter5.3 Medium
- veronalabs slimstat analyticsSlimStat Analytics <= 5.4.11 - Unauthenticated Stored Cross-Site Scripting via User-Agent Header7.2 High
- misp cti-transmuteStored Cross-Site Scripting (XSS) in CTI Transmute Notification Panel via Malicious Convert Names6.3 Medium
- pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 morepip can extract console_scripts and gui_scripts outside installation directory4.1 Medium
- eupago gateway for woocommerce, unknown eupago gateway for woocommerce +1 moreEupago Gateway For Woocommerce < 4.7.2 - Unauthenticated Arbitrary Refund Initiation8.6 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreRpm: command injection in rpmuncompress dountar() via unescaped archive top-level directory name in popen() shell command7.0 High
- smub easy digital downloads – ecommerce payments and subscriptions made easyEasy Digital Downloads <= 3.6.7 - Cross-Site Request Forgery to Payment Account Hijacking via 'square_tokens' Parameter4.3 Medium
- nhadjidimitrov livesmart video chat live video chatLiveSmart Video Chat <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4 Medium
- coderevolution crawlomatic multipage scraper post generatorCrawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute8.8 High
- mr2p meta field block – display custom fields in the block editor without codingMeta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure6.5 Medium
json-2-csvnpmjson-2-csv vulnerable to CSV Injection via the preventCsvInjection optio7.0 High- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: denial of service via malformed authorization header5.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: unauthorized account access via replayed refresh tokens after cluster restart6.8 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: denial of service via malformed ldap password policy response4.9 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.14, build of keycloak 26.6 +2 more +4 moreKeycloak: keycloak: brute-force protection bypass in ciba flow4.3 Medium
- red hat build of keycloak, build of keycloak 26.6, build of keycloak 26.6.6 +2 moreKeycloak: keycloak: privilege escalation via time-of-check to time-of-use (toctou) vulnerability6.5 Medium
- Show moreLoading…