CVEs published in May 2026
7,396 vulnerabilities, 722 critical, 21 exploited.
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 stored XSS on the SAML login page was possible3.4 Low
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 open redirect in the SAML plugin was possible3.1 Low
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 credentials could be exposed in thread names6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 credentials parameters were exposed via parameter autocompletion4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2025.11.2 exposure of sensitive data via default agent parameters4.3 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 insufficient username validation in the SAML plugin6.5 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1, 2025.11.5 reflected XSS was possible on the repository...6.1 Medium
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 improper permission checks exposed build configuration...7.6 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1 remote code execution was possible via Perforce connection...7.1 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1, 2025.11.5 unauthenticated SSRF via build status was possible7.5 High
- jetbrains teamcityIn JetBrains TeamCity before 2026.1.1 reflected XSS in the keyword filter was possible7.1 High
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13162 information disclosure was possible on fetchApp requests3.4 Low
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13162 information disclosure was possible on Users and Groups...4.3 Medium
- jetbrains youtrackIn JetBrains YouTrack before 2026.1.13162 stored XSS in project notification templates was possible8.7 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command execution was possible via the guest user account8.0 High
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.1.1 command injection was possible via filename completion7.8 High
- patriksimek vm2vm2: NodeVM network builtin exclusions bypass via internal _http_client and _http_server8.6 High
- open-quantum-safe liboqsliboqs: Heap-buffer-overflow in XMSS verification path via OID-controlled parameter mismatch (xmss_commons.c:194)5.3 Medium
- open-quantum-safe liboqsliboqs: XMSS Buffer Overread Bug5.3 Medium
- ni systemlink enterpriseAuthentication Bypass Vulnerability in NI SystemLink Enterprise9.3 Critical
- shopperdotcom shopperShopper: Missing authorization on Product admin Livewire sub-form components6.5 Medium
- patriksimek vm2vm2: NodeVM builtin denylist bypass via process and inspector/promises allows host code execution10.0 Critical
- shopperdotcom shopperShopper: Authorization bypass and RBAC privilege escalation in team settings9.9 Critical
- shopperdotcom shopperShopper: Missing per-action authorization on PaymentMethods, Currencies and Carriers admin tables6.5 Medium
- patriksimek vm2vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass9.8 Critical
- patriksimek vm2vm2: GHSA-8hg8-63c5-gwmx patch bypass: nesting:true without explicit require still allows full RCE10.0 Critical
- patriksimek vm2vm2: Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain8.6 High
- danelec macgregor voyage data recorder (vdr) g4e, macgregor interschalt vdr g4e firmware +1 moreMacGregor Voyage Data Recorder (VDR) G4e Files or Directories Accessible to External Parties6.9 Medium
- danelec macgregor voyage data recorder (vdr) g4e, macgregor interschalt vdr g4e firmware +1 moreMacGregor Voyage Data Recorder (VDR) G4e Use of Hard-coded Credentials8.7 High
- patriksimek vm2vm2: Sandbox escape via unblocked cross-realm Symbol.for keys + missing bridge write-trap symbol checks8.7 High
- danelec macgregor voyage data recorder (vdr) g4e, macgregor interschalt vdr g4e firmware +1 moreMacGregor Voyage Data Recorder (VDR) G4e Use of Password Hash With Insufficient Computational Effort5.9 Medium
- patriksimek vm2vm2: Sandbox Breakout Using Promise Species10.0 Critical
- patriksimek vm2vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js2.1 Low
- patriksimek vm2vm2: Sandbox Escape10.0 Critical
- danelec macgregor voyage data recorder (vdr) g4e, macgregor interschalt vdr g4e firmware +1 moreMacGregor Voyage Data Recorder (VDR) G4e Insufficiently Protected Credentials5.9 Medium
- danelec macgregor voyage data recorder (vdr) g4e, macgregor interschalt vdr g4e firmware +1 moreMacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials8.7 High
- triliumnext triliumTrilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)9.3 Critical
- @clerk nuxt, nuxt nuxt\/nitro-server +1 moreNuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*`6.3 Medium
- jinan usr iot technology limited (pusr) usr-w610 rs232/485 to wi-fi/ethernet converterJinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials9.8 Critical
- fourth frontier frontier x2, frontier x android application, frontier x ios application +2 moreFourth Frontier Frontier X Mobile Application, Frontier X2 Missing Authentication for Critical Function8.8 High
- gotenbergGotenberg: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')7.5 High
- hanxi xiaomusicxiaomusic 0.5.7 Path Traversal via GET /music endpoint8.7 High
- gotenbergGotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes7.5 High
- jxxghp moviepilotMoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint7.0 High
- cp plus cp-unr-108f1 hardware, cp-unr-108f1 system, cp-unr-108f1 web +2 moreCP Plus 8 Ch. Network Video Recorder Cross-site Scripting8.4 High
- dokployDokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint9.9 Critical
- dokployDokploy: Cross-Organization IDOR - Multiple tRPC endpoints missing activeOrganizationId validation5.3 Medium
- gotenbergGotenberg: Path traversal in zip entry name via Windows-style separators in upload filename8.8 High
- dokployDokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline9.6 Critical
- kmw km-ip421, km-ip521 +1 moreKMW CCTV Security Cameras Unverified Password Change9.1 Critical
- Show moreLoading…