By year

Vulnerabilities disclosed in 2026

CVEs published in 2026 with SEC.co analysis.

5720 published vulnerabilities · page 1 of 58

• CVE-2026-43984HIGH 8.9

  Tautulli, a Python monitoring application for Plex Media Server, contains a stored cross-site scripting (XSS) vulnerability in versions before 2.17.1. The flaw allows low-privilege users—including guest accounts when enabled—to inject malicious code into application logs via an unauthenticated endpoint. When an administrator views the logs, the injected code executes in their browser without restriction, giving attackers control within the admin's session. This is a privilege escalation and lateral attack vector that requires only guest-level access to trigger.

• CVE-2026-52798HIGH 8.9

  Gogs, a self-hosted Git service, contains a stored cross-site scripting (XSS) vulnerability in how it handles Jupyter notebook (.ipynb) file previews. While the server sanitizes notebook content through an API endpoint, the client-side rendering process re-processes this content without proper security controls, allowing malicious links with JavaScript schemes to execute when clicked. An attacker can craft a malicious notebook file that, when viewed by a victim in Gogs, triggers arbitrary JavaScript execution within the Gogs application context. This vulnerability requires user interaction (clicking a link) and authenticated access to upload or view the notebook, but the impact is severe because it operates within the Gogs origin with full application privileges.

• CVE-2016-20075HIGH 8.8

  WordPress Ultimate Product Catalog version 3.8.6 has a file upload weakness that lets authorized site users with contributor, editor, author, or administrator access upload dangerous files—specifically PHP code—through the plugin's custom fields feature. Once uploaded, these files land in a publicly accessible directory where an attacker can execute them, gaining full control over the website and server. The vulnerability requires someone with legitimate site access to exploit it, but the impact is severe.

• CVE-2018-25388HIGH 8.8

  HaPe PKH 1.1 has a file upload security flaw that lets authenticated users upload and execute malicious files on servers running the software. An attacker with valid login credentials can bypass the application's file type checks and upload PHP scripts through several administrative interfaces, leading to arbitrary code execution. This is a post-authentication vulnerability, meaning the attacker must already have system access, but once inside, they can take full control of the affected server.

• CVE-2018-25409HIGH 8.8

  SIM-PKH version 2.4.1 contains a file upload vulnerability that allows authenticated users to upload and execute malicious PHP code on the server. An attacker with valid credentials can exploit the file upload functionality to place executable scripts in a web-accessible directory, leading to complete compromise of the affected system. This is a post-authentication attack, meaning the attacker must first obtain legitimate access to the application.

• CVE-2019-25758HIGH 8.8

  Joomla! Component vBizz version 1.0.7 has a file upload flaw that lets authenticated users upload and execute PHP files on the server. An attacker with valid login credentials can bypass upload restrictions through the profile picture feature, placing executable code in the web-accessible uploads directory. This enables complete server compromise.

• CVE-2024-24909HIGH 8.8

  Dell OpenManage Integration with Microsoft Windows Admin Center contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary code and escalate privileges on affected systems. The vulnerability exists in the gateway plugin component and requires valid credentials to exploit, but once authenticated, an attacker can run code with elevated privileges.

• CVE-2025-11993HIGH 8.8

  The WooCommerce Infinite Scroll and Ajax Pagination plugin contains a security flaw that allows authenticated WordPress users (including low-privilege subscribers) to inject malicious PHP objects through the plugin's import settings feature. While the plugin itself doesn't provide a direct attack path, if other plugins or themes on the same WordPress installation have known gadget chains, an attacker could exploit this vulnerability to delete files, steal data, or run arbitrary code. The vulnerability affects all versions up to and including 1.8.

• CVE-2025-14772HIGH 8.8

  CVE-2025-14772 is an authorization bypass flaw in ABB T-MAC Plus versions up to 4.0-24 that allows authenticated users to escalate their privileges beyond their intended permissions. An attacker who has already gained login credentials can manipulate user-controlled keys to circumvent access controls, gaining unauthorized access to sensitive functions or data they should not be able to reach. This is a post-authentication vulnerability requiring valid credentials to exploit, but poses significant risk because privilege escalation enables lateral movement and further system compromise within industrial control environments where T-MAC Plus is deployed.

• CVE-2025-15656HIGH 8.8

  Mojoomla School Management contains a privilege escalation vulnerability stemming from improper assignment of user permissions. An authenticated attacker with basic user-level access can exploit this flaw to gain elevated privileges within the application, potentially obtaining administrative capabilities. The vulnerability affects all versions from the earliest tracked through version 93.2.0, making it a broad exposure for deployments that have not yet patched.

• CVE-2025-24284HIGH 8.8

  CVE-2025-24284 is a sandbox escape vulnerability in macOS that allows a malicious or compromised application to break out of Apple's application sandbox and gain unauthorized access to system resources. An attacker with local access—or through a compromised app—could circumvent Apple's security boundaries to execute privileged actions outside the intended application container. The flaw was resolved in macOS Sequoia 15.4 through improved authorization checks.

• CVE-2025-53345HIGH 8.8

  ThimPress Thim Core contains a missing authorization vulnerability that allows authenticated users to execute arbitrary code by installing a malicious plugin. An attacker with legitimate user access can bypass security checks intended to restrict plugin installation, enabling them to deploy and run arbitrary code on the affected WordPress installation. This is a post-authentication attack that significantly expands an attacker's capability once they have gained initial user credentials.

• CVE-2025-66391HIGH 8.8

  A vulnerability in Citrix Cloud allows users with read-only account permissions to initiate sensitive operations they should not be able to perform. Specifically, an attacker with read-only access can trigger password reset workflows and receive one-time passwords sent to attacker-controlled email addresses, effectively taking over user accounts. This represents a significant privilege escalation flaw where access controls fail to properly restrict who can initiate administrative workflows.

• CVE-2025-69130HIGH 8.8

  A PHP Object Injection vulnerability exists in the Entrepreneur - Booking for Small Businesses WordPress theme in versions 3.1.3 and earlier. An authenticated user with minimal privileges can inject malicious serialized PHP objects into the subscriber functionality, potentially leading to remote code execution. This is particularly dangerous because the attack requires only user-level access—not administrator rights—making it exploitable by subscribers or low-privilege contributors on affected WordPress installations.

• CVE-2025-71322HIGH 8.8

  PickleScan is a security tool designed to inspect Python pickle files and block dangerous code execution. Before version 0.0.33, it had a critical oversight: it failed to block the pty.spawn function, which allows spawning new processes. An attacker can exploit this gap by crafting a malicious pickle file that uses pty.spawn to run arbitrary commands when PickleScan processes it. The vulnerability is particularly dangerous because it requires minimal interaction—just opening a file—and can be delivered remotely.

• CVE-2026-0132HIGH 8.8

  A heap buffer overflow vulnerability exists in the modem component affecting Google Android devices. An attacker with local network access or authenticated privileges can trigger an out-of-bounds memory write that potentially allows arbitrary code execution on the device. No user interaction is required for exploitation, making this a serious threat to affected Android systems.

• CVE-2026-0139HIGH 8.8

  CVE-2026-0139 is a critical vulnerability in Android's Modem component that allows an authenticated attacker to execute arbitrary code remotely without needing any special system privileges. The flaw stems from missing bounds validation in memory write operations, permitting an out-of-bounds write that can be weaponized for complete system compromise. No user action is required to trigger the vulnerability—an attacker with valid credentials can initiate the exploit automatically.

• CVE-2026-0146HIGH 8.8

  CVE-2026-0146 is a memory safety defect in Android's video codec processing layer that permits an authenticated attacker to write data beyond allocated buffer boundaries. The vulnerability resides in metadata parsing during video decoding and requires no user interaction—an attacker with local system privileges can trigger malicious video streams to overwrite kernel or system memory, potentially executing arbitrary code with elevated permissions. The absence of bounds validation on a critical parsing function creates a direct path from untrusted video input to kernel-level code execution.

• CVE-2026-0147HIGH 8.8

  CVE-2026-0147 is a memory safety vulnerability in Android's MFC (Media Framework Component) that allows an authenticated attacker to write data beyond allocated buffer boundaries. The flaw resides in metadata parsing logic and can be exploited remotely without user interaction to execute arbitrary code. This is a serious vulnerability because it bridges the gap between standard user privileges and full system compromise through a relatively straightforward attack path.

• CVE-2026-0148HIGH 8.8

  A flaw in Android's video decoding component allows an attacker with basic network access and valid user credentials to execute arbitrary code on a device without requiring any additional privileges or user interaction. The vulnerability stems from improper handling of numeric values during video stream processing, which can cause the system to write data beyond intended memory boundaries. This is a critical remote code execution risk affecting the media processing pipeline.

• CVE-2026-0149HIGH 8.8

  CVE-2026-0149 is a heap buffer overflow vulnerability in Android's RTP (Real-time Transport Protocol) session handling code. An attacker with local network access and basic authentication credentials can send a specially crafted RTCP packet that causes the RtpSendRtcpPacket function to write beyond allocated memory boundaries. This out-of-bounds write allows arbitrary code execution with the privileges of the affected process, requiring no user interaction or additional escalation. The vulnerability affects authenticated attackers on the same network as the target device.

• CVE-2026-0151HIGH 8.8

  A vulnerability in Google Android's graphics interface code allows an attacker with basic authentication credentials to remotely trigger an out-of-bounds memory write by sending a specially crafted input that causes an integer overflow. The flaw leads directly to remote code execution without requiring any elevated privileges or user interaction. Attackers can exploit this over a network to gain unauthorized code execution on affected devices.

• CVE-2026-0154HIGH 8.8

  A memory corruption vulnerability in Android's modem firmware can be triggered remotely via malformed SIP REFER requests, causing the modem to crash and potentially allowing arbitrary code execution. An attacker with network access and basic authentication credentials can exploit this without needing the target user to take any action. The vulnerability affects the telephony subsystem and carries a high severity rating.

• CVE-2026-0160HIGH 8.8

  A vulnerability in Android's text RTP payload decoder allows an authenticated attacker to write data beyond the bounds of an allocated memory buffer, potentially leading to remote code execution. The flaw requires that an attacker already have some level of authentication to the system, but once that prerequisite is met, no additional user interaction is needed to trigger the exploit. The vulnerability stems from missing validation logic that should restrict how much data is written during the decoding process.

• CVE-2026-0161HIGH 8.8

  A vulnerability exists in Android's RTP (Real-time Transport Protocol) session handling that allows an authenticated attacker to write data beyond the bounds of allocated memory. An integer overflow in the numberOfReportBlocks function causes a buffer to be undersized, enabling an attacker to corrupt memory and gain elevated privileges on the device. The attack requires valid credentials but no special user interaction, making it a practical concern in environments where network access is partially restricted.

• CVE-2026-0162HIGH 8.8

  A flaw in Android's audio SDP (Session Description Protocol) parser allows an authenticated attacker to corrupt memory on a device by sending a specially crafted audio payload. The vulnerability stems from the parser confusing one data type for another, which can be exploited to run arbitrary code without needing special privileges. The attacker only needs valid credentials to the affected system—they don't need to trick a user into performing any action.

• CVE-2026-0164HIGH 8.8

  A flaw in Android's Modem component allows an attacker with network access and valid system privileges to write data beyond allocated memory boundaries, potentially leading to remote code execution. The vulnerability requires no user interaction and does not need elevated execution privileges to trigger, making it a serious concern for devices that expose modem access to network-facing services.

• CVE-2026-10002HIGH 8.8

  A use-after-free memory flaw in PDFium, the PDF rendering engine embedded in Google Chrome, allows attackers to corrupt heap memory by tricking users into opening a specially crafted PDF file. The vulnerability affects Chrome versions before 148.0.7778.216 and requires user interaction to trigger. An attacker exploiting this could achieve code execution with the same privileges as the Chrome process.

• CVE-2026-10007HIGH 8.8

  Google Chrome versions prior to 148.0.7778.216 contain a use-after-free memory safety flaw in SVG rendering that allows attackers to execute arbitrary code within the browser's sandbox by tricking users into visiting a malicious webpage. An attacker needs only to craft a deceptive HTML page and convince a user to open it—no special privileges or complex interaction are required beyond the initial click.

• CVE-2026-10013HIGH 8.8

  A use-after-free vulnerability exists in Google Chrome's WebCodecs component that could allow an attacker to run malicious code within Chrome's sandbox by tricking a user into visiting a specially crafted website. The vulnerability affects Chrome versions before 148.0.7778.216 and requires user interaction (clicking a link or visiting a page) to be exploited. While the code execution occurs within the sandbox, this still represents a significant security risk as sandbox escapes are a known attack progression path.

• CVE-2026-10015HIGH 8.8

  Google Chrome versions before 148.0.7778.216 contain an integer overflow vulnerability in the WTF (Web Template Framework) component that allows attackers to execute arbitrary code within the browser's sandbox environment. An attacker can exploit this by tricking a user into visiting a specially crafted webpage, leading to potential code execution with the privileges of the browser process.

• CVE-2026-10016HIGH 8.8

  A use-after-free flaw exists in Google Chrome's DOM implementation that allows an attacker to execute code within the browser's sandbox by tricking a user into visiting a malicious website. The vulnerability affects Chrome versions before 148.0.7778.216 and requires user interaction (clicking a link or opening a page) but does not require any special permissions or account privileges.

• CVE-2026-10019HIGH 8.8

  A vulnerability in Google Chrome's ANGLE graphics library (versions before 148.0.7778.216) allows attackers to trick users into visiting a malicious webpage that leaks sensitive data from other websites the user is currently viewing. The flaw stems from improper handling of large numbers in memory calculations, which an attacker can exploit to read cross-origin information that should remain isolated. Users on Windows, macOS, and Linux systems running affected Chrome versions are at risk.

• CVE-2026-10021HIGH 8.8

  Google Chrome versions before 148.0.7778.216 contain a vulnerability in USB input handling that allows attackers to execute arbitrary code on a user's computer by tricking them into visiting a malicious website. The flaw stems from insufficient validation of untrusted data, meaning Chrome doesn't properly check or sanitize input before processing it through the USB subsystem. An attacker would need to craft a deceptive HTML page and convince a user to visit it, but once clicked, the attack requires no special privileges and can fully compromise the affected system.

• CVE-2026-10062HIGH 8.8

  A stack-based buffer overflow vulnerability was discovered in the TRENDnet TEW-432BRP router (firmware version 3.10B20) affecting the route configuration function. An authenticated attacker can send specially crafted requests containing oversized IP, netmask, or gateway parameters to the /goform/formSetRoute endpoint, causing a buffer overflow that enables complete compromise of the device. The vulnerability requires valid login credentials but has been publicly disclosed. Critically, this device reached end-of-life in 2009—over 15 years ago—and the vendor has confirmed no patches or fixes will be developed.

• CVE-2026-10063HIGH 8.8

  A stack-based buffer overflow vulnerability exists in the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20) that allows authenticated attackers to remotely crash the device or potentially execute arbitrary code. The flaw is in the WPS (Wi-Fi Protected Setup) configuration function and can be triggered by sending a specially crafted request with an oversized PIN parameter. Critically, this router model reached end-of-life in 2009—over 15 years ago—and TRENDnet has confirmed they will not be providing patches or fixes.

• CVE-2026-10065HIGH 8.8

  Shibby Tomato 1.28 contains a stack-based buffer overflow vulnerability in the UPS data retrieval function of its web interface. An authenticated attacker can manipulate the Date parameter to overflow a buffer on the stack, potentially executing arbitrary code on the affected device. Since Shibby Tomato is no longer maintained and has been superseded by FreshTomato, this vulnerability affects legacy installations that have not migrated to the actively supported successor.

• CVE-2026-10066HIGH 8.8

  A stack-based buffer overflow vulnerability exists in Shibby Tomato firmware versions up to 1.28, specifically in the UPS Service component (tomatoups.cgi). An authenticated attacker with remote network access can trigger this flaw to potentially execute arbitrary code, compromise confidentiality and integrity, or cause denial of service. Notably, Shibby Tomato is no longer maintained; the project has been superseded by FreshTomato. Organizations still running unsupported Shibby Tomato instances face ongoing risk from this flaw without vendor patching.

• CVE-2026-10067HIGH 8.8

  Shibby Tomato version 1.28 contains a stack-based buffer overflow vulnerability in the multimon.cgi component that allows authenticated attackers to execute arbitrary code remotely. The vulnerability exists in the sub_90F0 function and can be triggered through network requests without user interaction. Since Shibby Tomato is no longer maintained and has been superseded by FreshTomato, patches are not available from the original maintainers.

• CVE-2026-10119HIGH 8.8

  A stack-based buffer overflow vulnerability exists in the TRENDnet TEW-432BRP router (firmware version 3.10B20) in the MAC filter configuration function. An authenticated attacker can send a specially crafted request to overflow the stack via the filter_name parameter, potentially allowing code execution on the device. This affects only legacy hardware that has been end-of-life since 2009—the vendor has explicitly stated no patches will be released due to the product's age and lack of ongoing support.

• CVE-2026-10120HIGH 8.8

  A stack-based buffer overflow exists in the TRENDnet TEW-432BRP wireless router running firmware version 3.10B20. An attacker with network access and valid credentials can send a specially crafted request to the firewall configuration function, causing a buffer overflow that crashes the device or potentially executes arbitrary code. The vendor has confirmed the product reached end-of-life in 2009 and will not issue patches. Public exploit code is available.

• CVE-2026-10121HIGH 8.8

  A stack-based buffer overflow vulnerability has been discovered in the TRENDnet TEW-432BRP wireless router running firmware version 3.10B20. The flaw exists in the URL filter configuration function and can be triggered by sending a specially crafted request containing an oversized keyword list parameter. An attacker with network access and valid credentials can exploit this remotely to crash the device or potentially execute arbitrary code. TRENDnet has confirmed the product reached end-of-life in 2009 and will not be issuing patches.

• CVE-2026-10122HIGH 8.8

  A stack-based buffer overflow vulnerability exists in the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20) within the protocol filter configuration function. An attacker with network access and valid login credentials can send a specially crafted request to overflow a buffer on the router's stack, potentially executing arbitrary code. TRENDnet has confirmed this product reached end-of-life 15 years ago and will not provide patches. While the exploit details are publicly available, this vulnerability poses limited enterprise risk due to the device's age and likely scarcity in production environments.

• CVE-2026-10123HIGH 8.8

  A stack-based buffer overflow vulnerability exists in the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20) affecting the domain filtering function. An authenticated attacker can exploit this by manipulating domain filter parameters to overflow the stack, potentially gaining control of the device. Notably, this product reached end-of-life in 2009 and is no longer supported by the vendor, meaning no patches will be issued.

• CVE-2026-10124HIGH 8.8

  A stack-based buffer overflow has been discovered in Shibby Tomato, a Linux router distribution, affecting versions up to 1.28. The vulnerability exists in the RIP (Routing Information Protocol) daemon's IPv4 handling function and allows authenticated attackers to overflow memory on the system stack, potentially leading to code execution. The flaw has been publicly disclosed, and exploit code is available. Critically, Shibby Tomato is no longer maintained by its original developers, having been superseded by FreshTomato. This means no security patches will be released for affected installations.

• CVE-2026-10125HIGH 8.8

  A stack-based buffer overflow exists in Edimax BR-6478AC version 1.23 routers when processing PPPoE setup requests. An authenticated attacker can send a crafted request with an oversized username parameter to the formPPPoESetup endpoint, causing the router to crash or potentially execute arbitrary code. The vulnerability requires login credentials but poses significant risk since routers are often accessible from the internet and public exploit code is available.

• CVE-2026-10126HIGH 8.8

  A buffer overflow vulnerability exists in Edimax BR-6478AC version 1.23 that allows authenticated users to crash the device or potentially execute arbitrary code. The flaw is in the QoS settings handler and can be triggered by sending a specially crafted request with an oversized value in the selSSID parameter. An attacker with valid router credentials can exploit this remotely without user interaction. Public exploit code is available, elevating the practical risk.

• CVE-2026-10158HIGH 8.8

  A stack-based buffer overflow has been discovered in the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20). An authenticated attacker can send a specially crafted request to the port forwarding configuration interface, exploiting improper input validation on the server_name parameter. This can lead to remote code execution on the device. The vulnerability is particularly concerning because exploit code has already been released publicly. However, the affected product reached end-of-life in 2009 and the vendor has stated they cannot provide patches.

• CVE-2026-10159HIGH 8.8

  A stack-based buffer overflow vulnerability has been discovered in the TRENDnet TEW-432BRP wireless router (version 3.10B20), specifically in the system log configuration function. An attacker with network access and valid credentials can send a specially crafted request to trigger a memory overflow, potentially executing arbitrary code on the device. The vendor has confirmed the product reached end-of-life in 2009 and will not be patching this issue.

• CVE-2026-10160HIGH 8.8

  A stack-based buffer overflow vulnerability exists in the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20). An authenticated attacker can exploit this flaw by manipulating the 'start_wizard' parameter sent to the router's web interface, potentially allowing remote code execution. The vendor has confirmed this product reached end-of-life in 2009 and will not issue patches.

• CVE-2026-10161HIGH 8.8

  A stack-based buffer overflow exists in the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20) in a network-accessible configuration function. An authenticated attacker can send a specially crafted request to the `/goform/formResetStatistic` endpoint with a malicious `status_statistic` parameter that overflows memory and corrupts the stack, potentially leading to code execution or denial of service. The device has been out of support since 2009, and the vendor has explicitly stated they cannot patch this issue.

• CVE-2026-10162HIGH 8.8

  TRENDnet's TEW-432BRP wireless router (version 3.10B20) contains a stack-based buffer overflow vulnerability in its password-setting function. An authenticated attacker can send specially crafted input to the formSetPassword endpoint to overflow memory and potentially execute code on the device. The device has been end-of-life since 2009, and the vendor explicitly will not release patches. While the attack requires login credentials, the high CVSS score reflects the severity of potential compromise.

• CVE-2026-10163HIGH 8.8

  A buffer overflow vulnerability exists in Edimax BR-6478AC version 1.23 that allows authenticated users to crash the router or potentially execute code by sending specially crafted requests to the USB account configuration endpoint. An attacker with login credentials can exploit this flaw remotely without further user interaction. The vulnerability has already been publicly disclosed, increasing the likelihood of active exploitation.

• CVE-2026-10164HIGH 8.8

  A buffer overflow vulnerability exists in Edimax BR-6478AC router firmware version 1.23 that allows authenticated users to execute arbitrary code on the device. The flaw resides in the USB folder sharing feature and can be triggered by sending a specially crafted request with an oversized ShareName or SelectName parameter. Because the vulnerability requires valid credentials and the exploit has already been disclosed publicly, the risk of active exploitation is elevated.

• CVE-2026-10165HIGH 8.8

  Edimax BR-6478AC wireless routers running firmware version 1.23 contain a critical flaw in their network configuration interface. An authenticated attacker can send a specially crafted network request to overflow the device's memory, potentially gaining complete control over the router. The vulnerability requires an existing user account but no additional interaction from administrators, making it a practical concern for organizations deploying these devices.

• CVE-2026-10179HIGH 8.8

  A stack-based buffer overflow vulnerability affects the TRENDnet TEW-432BRP wireless router running firmware version 3.10B20. An authenticated attacker can send a specially crafted request to the wireless encryption settings function, causing a memory overflow that could lead to remote code execution. The router has been end-of-life since 2009, and the vendor has stated they cannot fix the issue due to the product's age.

• CVE-2026-10181HIGH 8.8

  A stack-based buffer overflow vulnerability affects the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20). An authenticated remote attacker can exploit this by manipulating the 'submit-url' parameter in the /goform/formSysCmd endpoint, potentially leading to code execution or system crash. However, this device has been end-of-life since 2009, and the vendor has stated it will not be patching the issue due to the product's age.

• CVE-2026-10183HIGH 8.8

  A stack-based buffer overflow exists in the TRENDnet TEW-432BRP wireless router (firmware version 3.10B20) in the WLAN configuration handler. An authenticated attacker can send a specially crafted request to the `/goform/formWlanSetup` endpoint with an oversized 'enrollee' parameter, causing the application to crash or potentially execute arbitrary code on the device. The vendor confirms this product reached end-of-life in 2009 and will not issue patches.

• CVE-2026-10188HIGH 8.8

  A stack-based buffer overflow vulnerability exists in Tenda W12 firmware version 3.0.0.7(4763). An authenticated remote attacker can exploit this flaw by manipulating the staMac parameter passed to the cgistaKickOff function in the HTTP daemon (/bin/httpd), potentially executing arbitrary code with elevated privileges. Public exploit code is available, elevating the practical risk of this vulnerability.

• CVE-2026-10189HIGH 8.8

  A stack-based buffer overflow vulnerability exists in Tenda W12 firmware version 3.0.0.7(4763). The flaw is in the web server's time configuration function, which fails to properly validate user input in the 'sec' parameter. An authenticated attacker can exploit this over the network to crash the device or execute arbitrary code with the privileges of the web server process. Public exploit code is available, increasing practical risk.

• CVE-2026-10191HIGH 8.8

  A stack-based buffer overflow exists in Tenda W12 firmware version 3.0.0.7(4763) within the Wi-Fi MAC filter configuration function. An authenticated attacker can exploit this by sending a specially crafted MAC address list parameter to the web interface, causing memory corruption that may lead to code execution, information disclosure, or service disruption. The vulnerability is reachable over the network and exploit code has been made publicly available.

• CVE-2026-10192HIGH 8.8

  A stack-based buffer overflow vulnerability exists in Tenda W12 firmware version 3.0.0.7(4763). An authenticated attacker can send a specially crafted time-setting request to the web interface that causes a memory corruption condition, potentially allowing arbitrary code execution on the affected device. Public exploit code is available, increasing the practical risk.

• CVE-2026-10206HIGH 8.8

  D-Link DI-8400 routers contain a stack-based buffer overflow vulnerability in the /dbsrv.asp file that can be exploited by authenticated attackers to gain complete control of the device. By manipulating a specific parameter, an attacker with valid credentials can overflow memory on the router and execute arbitrary code remotely. This vulnerability affects firmware versions up to 16.07.26A1, and proof-of-concept code is publicly available, raising the risk of active exploitation.

• CVE-2026-10259HIGH 8.8

  H3C Magic B0 devices running firmware up to version 100R002 contain a remotely exploitable vulnerability in their web interface. An authenticated attacker can send a specially crafted request to the SetMobileAPInfoById function that causes a stack-based buffer overflow, potentially allowing them to execute arbitrary code on the affected device. Public exploit details are already available, elevating the practical risk.

• CVE-2026-10270HIGH 8.8

  D-Link DI-7001 MINI routers running firmware version 19.09.19A1 and earlier contain a stack-based buffer overflow in the web API debug interface. An attacker with valid login credentials can send a specially crafted request to the /httpd_debug.asp endpoint that overflows a buffer, potentially allowing arbitrary code execution on the device. Exploit code has been publicly disclosed, elevating near-term risk.

• CVE-2026-10292HIGH 8.8

  A stack-based buffer overflow exists in UTT HiPER 1200GW network devices running firmware version 2.5.3-170306 and earlier. The vulnerability resides in the task editing form handler and is exploitable by authenticated remote attackers. An attacker with valid credentials can send a specially crafted request that overflows a buffer, potentially allowing arbitrary code execution on the device. Public exploit code is available, increasing the risk of active exploitation.

• CVE-2026-10293HIGH 8.8

  A stack-based buffer overflow vulnerability exists in UTT HiPER 1200GW networking devices (versions up to 2.5.3-170306). An attacker with valid login credentials can send a specially crafted request to the firewall configuration endpoint that causes the device to overflow its memory, potentially leading to code execution, data theft, or denial of service. Public exploit code is available, elevating the practical risk.

• CVE-2026-10591HIGH 8.8

  Amazon Kiro IDE before version 0.11 contains a flaw in its file write functionality that fails to properly restrict which directories and files can be modified. An attacker can exploit this by sending specially crafted instructions that trick the IDE into writing files to sensitive paths—such as VS Code configuration files that execute automatically when a folder is opened. This could allow remote code execution without requiring the user to authenticate or take risky steps beyond opening a project folder.

• CVE-2026-10711HIGH 8.8

  CVE-2026-10711 is a missing authentication vulnerability in CafePlus (versions 12.05.03 and earlier) that allows unauthenticated attackers on the same network to access critical functions without proper authorization controls. An attacker could exploit this to read sensitive data, modify system settings, or disrupt service availability. The vulnerability requires network-level access but no user interaction, making it a serious risk in connected environments where CafePlus is deployed.

• CVE-2026-10882HIGH 8.8

  Google Chrome contains a use-after-free vulnerability in its network handling code that can allow attackers to execute arbitrary code on a user's system. The flaw affects Chrome versions prior to 149.0.7827.53 and is triggered when a victim visits a specially crafted webpage. Because successful exploitation requires user interaction (visiting a malicious site), the attack surface is primarily limited to social engineering scenarios, though the browser's ubiquity makes this a meaningful threat.

• CVE-2026-10883HIGH 8.8

  A type confusion vulnerability in Google Chrome's ANGLE graphics library allows attackers to corrupt heap memory through specially crafted web pages. The flaw requires user interaction (visiting a malicious site) but can lead to complete system compromise—confidentiality, integrity, and availability are all at risk. Chrome versions before 149.0.7827.53 are affected.

• CVE-2026-10885HIGH 8.8

  A use-after-free vulnerability exists in Chrome for iOS that allows attackers to execute arbitrary code on an iPhone or iPad by tricking users into visiting a malicious webpage. The flaw affects Google Chrome on iOS versions before 149.0.7827.53. Because it requires user interaction (clicking a link or viewing a page) but needs no special privileges, it poses a meaningful risk to mobile users, particularly if weaponized through social engineering or drive-by downloads.

• CVE-2026-10888HIGH 8.8

  Google Chrome versions before 149.0.7827.53 contain a use-after-free memory vulnerability in the Cast Streaming feature that allows attackers on your local network to run arbitrary code on affected machines. An attacker doesn't need valid credentials or user interaction to exploit this—just the ability to send crafted network traffic to a vulnerable Chrome instance. This is a serious vulnerability because it bridges network access to code execution on systems within the same network segment.

• CVE-2026-10890HIGH 8.8

  Google Chrome contains a use-after-free vulnerability in its Cast functionality that could allow an attacker on your local network to corrupt the browser's memory and potentially execute malicious code. The flaw affects Chrome versions prior to 149.0.7827.53 and requires no user interaction to trigger—an attacker simply needs to send specially crafted network traffic to exploit it. This is a local network attack vector, meaning the attacker must be on the same network segment as the target system.

• CVE-2026-10891HIGH 8.8

  A use-after-free vulnerability in Google Chrome's graphics (GFX) component allows an attacker to corrupt Chrome's memory by tricking a user into visiting a malicious webpage. Once the memory is compromised, the attacker could read sensitive data, modify page content, or crash the browser. The issue affects Chrome on Linux systems running versions before 149.0.7827.53.

• CVE-2026-10893HIGH 8.8

  A use-after-free memory vulnerability exists in Google Chrome's Chromoting remote desktop feature that could allow an attacker to run malicious code on a victim's computer through specially crafted network traffic. The flaw affects Chrome versions before 149.0.7827.53 and requires user interaction to trigger. The vulnerability has been assigned a CVSS score of 8.8 (High severity).

• CVE-2026-10895HIGH 8.8

  A use-after-free vulnerability in Chrome's Ozone component allows attackers to run arbitrary code on a user's computer by tricking them into visiting a malicious website. The flaw exists in versions of Chrome before 149.0.7827.53 and requires user interaction (clicking a link, visiting a page) but no special privileges. Once exploited, an attacker gains full control over the affected browser process and potentially the underlying system.

• CVE-2026-10896HIGH 8.8

  A use-after-free vulnerability in Chrome for iOS allows attackers to execute arbitrary code on affected devices when a user visits a malicious website. The flaw exists in memory management within Chrome's iOS implementation and does not require any special user interaction beyond visiting a crafted HTML page. Google has assigned this a Critical severity rating within Chromium's internal severity scale, and CVSS scoring reflects it as HIGH (8.8).

• CVE-2026-10897HIGH 8.8

  Google Chrome versions prior to 149.0.7827.53 contain a flaw in how the GPU rendering engine handles certain HTML constructs. An attacker can craft a malicious web page that, when visited by a user, exploits this flaw to break out of Chrome's security sandbox—the isolation layer that normally prevents malicious code from accessing the underlying operating system. This is a serious issue because sandbox escapes give attackers direct access to your computer's resources, files, and credentials.

• CVE-2026-10902HIGH 8.8

  A use-after-free memory vulnerability exists in Chrome's Ozone component that allows attackers to execute arbitrary code by tricking users into visiting a specially crafted webpage. The flaw requires user interaction (clicking a link or visiting a site) but poses a critical threat because successful exploitation grants full control over the browser process and potentially the underlying system.

• CVE-2026-10903HIGH 8.8

  A use-after-free vulnerability exists in Google Chrome's WebRTC implementation that allows an attacker to execute arbitrary code within Chrome's sandbox by convincing a user to visit a malicious website. The vulnerability affects Chrome versions prior to 149.0.7827.53 and can lead to complete compromise of the browser process, including reading sensitive data, modifying content, and disrupting availability.

• CVE-2026-10904HIGH 8.8

  Google Chrome versions prior to 149.0.7827.53 contain a flaw in the V8 JavaScript engine that allows attackers to break out of the browser sandbox and run malicious code with full privileges. An attacker can exploit this by tricking a user into visiting a specially crafted website. Once triggered, the vulnerability bypasses Chrome's security boundary—the sandbox that normally isolates web content from the rest of the system—giving an attacker direct access to execute arbitrary code on the victim's machine.

• CVE-2026-10907HIGH 8.8

  A memory safety vulnerability in Google Chrome's ANGLE rendering library allows an attacker to craft a malicious webpage that, when visited by a user, could corrupt the browser's memory heap. This out-of-bounds write flaw can lead to code execution with the privileges of the user running Chrome. The vulnerability requires user interaction—someone must visit the compromised or attacker-controlled page—but needs no special browser configuration or user permissions to trigger the exploit.

• CVE-2026-10910HIGH 8.8

  Google Chrome contains a type confusion vulnerability in its V8 JavaScript engine that allows an attacker to execute arbitrary code within the browser's sandbox by sending a specially crafted HTML page to a user. The vulnerability requires user interaction (clicking a link or visiting a malicious site) but no special privileges. Once exploited, an attacker gains the ability to run code inside the sandbox, potentially leading to data theft, credential capture, or lateral movement to the underlying system.

• CVE-2026-10913HIGH 8.8

  A use-after-free vulnerability exists in the ANGLE graphics library component of Google Chrome on Windows. An attacker can craft a malicious HTML page that, when visited by a user, triggers memory corruption within Chrome's sandbox environment. While the sandbox limits direct system compromise, successful exploitation allows arbitrary code execution within that sandboxed context, potentially leading to data theft, credential capture, or lateral movement attempts. The vulnerability requires user interaction (visiting a malicious page) but no special privileges.

• CVE-2026-10914HIGH 8.8

  A use-after-free vulnerability in ANGLE (the graphics abstraction layer used by Chrome on Windows) allows an attacker to execute code within Chrome's sandbox by tricking a user into visiting a malicious website. The vulnerability affects Chrome versions before 149.0.7827.53 and requires user interaction (visiting a crafted HTML page) but does not require any special privileges. Once exploited, the attacker gains the capabilities of the Chrome sandbox process, which is a significant security boundary but still constrains their access compared to the host system.

• CVE-2026-10922HIGH 8.8

  CVE-2026-10922 is a same-origin policy bypass vulnerability in Google Chrome's Developer Tools that allows an attacker to access data or perform actions they normally shouldn't be able to. The flaw stems from inadequate validation of untrusted input, meaning malicious network traffic can exploit it if a user performs certain interactions with the DevTools interface. While the attack requires user interaction, it carries significant impact—unauthorized access to sensitive information, unauthorized modifications, or disruption of services are all possible. The vulnerability affects Chrome versions prior to 149.0.7827.53 across Windows, macOS, and Linux systems.

• CVE-2026-10923HIGH 8.8

  A use-after-free memory flaw in Google Chrome's web app installation feature for Android allows a local attacker to crash the browser or execute arbitrary code by providing a malicious file. The vulnerability affects Chrome versions before 149.0.7827.53 and requires user interaction (opening or installing a crafted app). While the attack requires local access and user involvement, the consequences—including full system compromise through code execution—make this a significant risk for Android users.

• CVE-2026-10926HIGH 8.8

  A use-after-free vulnerability exists in Google Chrome's Cast functionality that allows an attacker positioned on the same local network to execute arbitrary code on an affected system. The flaw requires no user interaction and can be triggered through specially crafted network traffic. This is a local network attack with high impact—an attacker gaining code execution can read sensitive data, modify system files, and disrupt operations.

• CVE-2026-10928HIGH 8.8

  A script injection vulnerability in Google Chrome's Headless mode allows attackers to execute arbitrary code on a user's system through a malicious HTML page. The flaw requires user interaction—specifically, the victim must open a crafted webpage in an affected Chrome version—but once triggered, an attacker gains the same privileges as the user running the browser, including the ability to read files, modify data, or install malware.

• CVE-2026-10932HIGH 8.8

  Google Chrome for Android contains a use-after-free vulnerability in its UI handling that allows an attacker to send a malicious HTML page to a user. If the user opens it, the flaw can corrupt Chrome's memory and potentially give the attacker control over the browser. The vulnerability was present in Chrome versions before 149.0.7827.53 on Android devices.

• CVE-2026-10935HIGH 8.8

  A type confusion vulnerability in Google Chrome's V8 JavaScript engine allows attackers to execute arbitrary code within the browser's sandbox by tricking users into visiting a malicious website. The vulnerability affects Chrome versions prior to 149.0.7827.53 and requires user interaction (clicking a link or visiting a page). While the code executes within the sandbox, successful exploitation could allow attackers to read, modify, or delete user data accessible to the browser.

• CVE-2026-10936HIGH 8.8

  A type confusion flaw in Chrome's V8 JavaScript engine allows attackers to execute arbitrary code within the browser's sandbox by tricking users into viewing a specially crafted webpage. The vulnerability requires user interaction (clicking a link or visiting a site) but no authentication or special privileges. Successful exploitation could give an attacker the ability to run malicious code with the same permissions as the Chrome process.

• CVE-2026-10939HIGH 8.8

  A use-after-free vulnerability exists in Google Chrome's WebRTC component that allows an attacker to execute arbitrary code within Chrome's sandbox by tricking a user into visiting a malicious webpage. The vulnerability affects Chrome versions prior to 149.0.7827.53 across Windows, macOS, and Linux. While the exploit requires user interaction (clicking a link or visiting a site), the impact is severe: an attacker gains code execution within the browser process.

• CVE-2026-10941HIGH 8.8

  A memory access vulnerability in the Skia graphics engine used by Google Chrome allows attackers to run malicious code within Chrome's sandbox by tricking users into visiting a specially crafted webpage. The attack requires user interaction (clicking a link or visiting a site) but needs no special privileges. While the code runs in a sandbox environment, successful exploitation could compromise data confidentiality, integrity, and availability within that isolated context.

• CVE-2026-10943HIGH 8.8

  A use-after-free vulnerability exists in Google Chrome's WebRTC component that allows attackers to execute arbitrary code within the browser's sandbox. An attacker can exploit this by crafting a malicious HTML page that, when visited by a user, triggers the vulnerability. Although the code execution occurs in a sandbox (limiting direct system access), the vulnerability has a CVSS score of 8.8, indicating it poses a significant risk to confidentiality, integrity, and availability. Chrome versions before 149.0.7827.53 are affected.

• CVE-2026-10945HIGH 8.8

  A use-after-free vulnerability exists in Google Chrome's PDF handling that allows attackers to execute code within Chrome's sandbox if they can trick a user into performing specific UI interactions with a malicious PDF file. The vulnerability affects Chrome versions prior to 149.0.7827.53 across Windows, macOS, and Linux systems.

• CVE-2026-10947HIGH 8.8

  A use-after-free bug in Google Chrome's WebRTC implementation allows attackers to execute arbitrary code within the browser's sandbox by serving a specially crafted webpage. The vulnerability affects Chrome versions before 149.0.7827.53 and requires user interaction—the victim must visit a malicious page—but once triggered, it grants an attacker near-complete control over the isolated browser process. This is a memory safety issue where freed memory is incorrectly accessed, a common source of high-impact browser exploits.

• CVE-2026-10948HIGH 8.8

  A use-after-free vulnerability exists in Google Chrome's WebRTC implementation that allows attackers to run malicious code within the browser's sandbox by tricking users into visiting a crafted webpage. The attacker needs user interaction (clicking a link or visiting a malicious site) but requires no special privileges or system access to exploit it. Once triggered, the vulnerability grants full read, write, and execution capabilities within the sandboxed Chrome process.

• CVE-2026-10951HIGH 8.8

  A use-after-free flaw in Chrome's Autofill feature on iOS allows attackers to corrupt device memory if a user is tricked into performing specific interactions with a malicious webpage. The vulnerability requires user interaction but can lead to complete system compromise—reading sensitive data, modifying files, or crashing the browser.