🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-124443 MEDIUM Frappe Framework before 15.121.1 and 16.x before 16.35.0 contains a broken access control vulnerability in File list and report queries that fails to ... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124442 HIGH AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows users with station WebHooks permission to bypass the UserUrlF... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124441 HIGH Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any resource kind in any namespace by ... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124440 CRITICAL Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124439 HIGH Scriban and Scriban.Signed before 7.5.3 contain uncontrolled recursion flaws in which postfix member, indexer, and call chains bypass ExpressionDepthL... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124438 CRITICAL Scriban before 7.5.2 contains an information disclosure and object manipulation vulnerability that allows template authors to access .NET internals of... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124437 HIGH Scriban before 7.5.3 contains a resource exhaustion vulnerability that allows untrusted template authors to exhaust memory and CPU because builtins li... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124436 HIGH OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by ca... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124435 MEDIUM OpenRemote before 1.32.2 contains a stored cross-site scripting vulnerability that allows authenticated users with write:admin permissions to upload H... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124434 HIGH Grav Lightbox Gallery plugin 1.1.0 before 1.3.2 on Grav 2.x calls any medium method named in image, thumb or thumb_options shortcode values without co... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124433 HIGH phpMyFAQ before 4.1.11 contains an insufficient authorization vulnerability that allows delegated administrators holding only GROUP_DELETE permission ... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124432 MEDIUM phpMyFAQ 4.1.9 before 4.1.11 and 4.2.0 pre-releases before 4.2.0-beta.3 contain an account enumeration vulnerability in the unauthenticated POST /api/... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124431 MEDIUM Craft CMS from 5.10.0 before 5.11.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to browse volumes th... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124430 HIGH Craft CMS from 5.10.0 before 5.11.2 contains a remote code execution vulnerability that allows non-administrator control panel users to obtain HMAC-si... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124429 HIGH Craft CMS from 5.0.0 before 5.11.2 contains a privilege escalation vulnerability that allows unauthenticated public registrants to reclaim deactivated... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124428 HIGH Craft CMS from 5.7.0 before 5.11.2 contains an arbitrary file read vulnerability that allows authenticated control panel users to read SVG files by po... | HIGH | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124427 CRITICAL Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows anonymous GraphQL clients to read out-of-scope section e... | CRITICAL | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124426 MEDIUM Craft CMS from 5.0.0 before 5.11.2 contains an authorization bypass vulnerability that allows unauthenticated attackers to read content from sites out... | MEDIUM | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124425 LOW Parse Server 8.6.109 before 8.6.116 and 9.10.6-alpha.1 before 9.10.7-alpha.2 contains an information disclosure vulnerability in which create or updat... | LOW | ????? | ????? | NVD | 5 days ago |
| CVE-2026-124424 HIGH WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .v... | HIGH | ????? | ????? | NVD | 5 days ago |