N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before...
CVE-2026-86218
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
#severity:critical
共收录 1461 条相关情报。
← 返回所有主题A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown...
CVE-2026-86149
A weakness has been identified in Tenda CP3 27.5.57.101. This issue affects some unknown processing of the file Net/NetC
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function...
CVE-2026-86151
A vulnerability was detected in Tenda CP3 27.5.57.101. The affected element is the function sub_2F77E8 of the file Apis/
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the...
CVE-2026-86148
A security flaw has been discovered in Tenda CP3 27.5.57.101. This vulnerability affects the function SystemAsh of the f
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin...
CVE-2026-86060
RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited chara
RouterOS does not compare the complete RSA public key when matching an SSH authentication request...
CVE-2026-67276
RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows...
CVE-2026-86189
WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated attackers to w
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that...
CVE-2026-86190
WWBN AVideo contains a broken access control vulnerability in videoViewsInfo endpoints that returns complete user record
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for...
CVE-2026-10196
The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot...
CVE-2026-86184
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows un
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that...
CVE-2026-86124
AutoAgent contains an unauthenticated remote code execution vulnerability in the TCP server that binds to all interfaces
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME...
CVE-2026-86121
Cua computer-server versions before 0.3.42 skip authentication when the CONTAINER_NAME environment variable is unset and
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability...
CVE-2026-86119
Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/
Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback...
CVE-2026-86117
Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users in
SQL Chat contains four unauthenticated API endpoints that accept client-supplied database...
CVE-2026-86123
SQL Chat contains four unauthenticated API endpoints that accept client-supplied database connection parameters and exec
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to...
CVE-2024-11080
The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in
Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an...
CVE-2026-75925
Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands
OpenChoreo: cluster-gateway internal proxy performs no caller authentication and is not read-only — data-plane Secret disclosure and arbitrary Kubernetes mutation
CVE-2026-73842
### Summary The OpenChoreo control-plane cluster-gateway exposes internal management APIs (`/api/proxy/`, `/api/exec/`,
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and...
CVE-2026-81939
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing func
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...
CVE-2026-78327
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the Sonic