| CVE-2026-120223 | LOW | 3.1 | A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of… | 2026-11-01 |
| CVE-2026-120263 | NA | N/A | When `[oauth2_client].ACCOUNT_LINKING` is set to `auto` (not the default) and registration is enabled, the lin… | 2026-11-01 |
| CVE-2026-120224 | CRITICAL | 9.9 | A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_b… | 2026-11-01 |
| CVE-2026-120225 | CRITICAL | 9.1 | A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the fu… | 2026-11-01 |
| CVE-2026-13575 | NA | N/A | HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HT… | 2026-11-01 |
| CVE-2026-120226 | LOW | 3.3 | A security vulnerability has been detected in Hangzhou Xiongmai Technology P2PAPI.dll 1.3.3.32 on Windows. Aff… | 2026-11-01 |
| CVE-2026-120227 | CRITICAL | 9.9 | A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the… | 2026-11-01 |
| CVE-2026-120306 | CRITICAL | 9.9 | Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Bu… | 2026-11-01 |
| CVE-2026-120307 | CRITICAL | 9.9 | The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns th… | 2026-11-01 |
| CVE-2026-120308 | CRITICAL | 9.9 | A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the … | 2026-11-01 |
| CVE-2026-117680 | NA | N/A | Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywor… | 2026-11-01 |
| CVE-2026-120228 | CRITICAL | 9.9 | A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 o… | 2026-11-01 |
| CVE-2026-120229 | CRITICAL | 9.1 | A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 o… | 2026-11-01 |
| CVE-2026-120230 | CRITICAL | 9.9 | A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component … | 2026-11-01 |
| CVE-2026-120231 | CRITICAL | 9.9 | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_41… | 2026-11-01 |
| CVE-2026-120232 | HIGH | 8.8 | A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is … | 2026-11-01 |
| CVE-2026-119480 | MEDIUM | 6.5 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock Jet… | 2026-11-01 |
| CVE-2026-120233 | MEDIUM | 5.3 | A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.58. This affects an unknown function of … | 2026-11-01 |
| CVE-2026-120234 | MEDIUM | 4.3 | A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.58. This impacts the function e.text of the c… | 2026-11-01 |
| CVE-2026-120235 | MEDIUM | 4.3 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.58. Affected is the function pars… | 2026-11-01 |
| CVE-2026-120338 | CRITICAL | 10.0 | Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, … | 2026-11-01 |
| CVE-2026-62048 | CRITICAL | 9.3 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid W… | 2026-11-01 |
| CVE-2026-66570 | HIGH | 7.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss… | 2026-11-01 |
| CVE-2026-120236 | MEDIUM | 6.3 | A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.58. Affected by this vulnerability is an unknow… | 2026-11-01 |
| CVE-2026-74759 | NA | N/A | Google::Auth versions 0.12 for Perl allow server side request forgery via unvalidated credential_source URLs i… | 2026-11-01 |
| CVE-2026-74760 | NA | N/A | Google::Auth versions from 0.11 through 0.12 for Perl accept an authorization code from any local process beca… | 2026-11-01 |
| CVE-2026-120237 | MEDIUM | 4.3 | A flaw has been found in ag-ui-protocol ag-ui up to 0.0.58. Affected by this issue is the function isInterrupt… | 2026-11-01 |
| CVE-2026-120238 | CRITICAL | 9.9 | A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the … | 2026-11-01 |
| CVE-2026-120239 | CRITICAL | 9.9 | A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419D… | 2026-11-01 |
| CVE-2026-120240 | CRITICAL | 9.9 | A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 … | 2026-11-01 |
| CVE-2026-120241 | HIGH | 7.5 | A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P … | 2026-11-01 |
| CVE-2026-120242 | LOW | 2.4 | A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210… | 2026-11-01 |
| CVE-2026-120274 | MEDIUM | 4.7 | A vulnerability was identified in beecue FastBee up to 2.1.0. Affected by this issue is some unknown functiona… | 2026-11-01 |
| CVE-2026-82115 | NA | N/A | Missing authorization in Apache Wicket.
org.apache.wicket.protocol.ws.api.WebSocketMessageBroadcastHandler, t… | 2026-11-01 |
| CVE-2026-82557 | NA | N/A | Missing authorization in Apache Wicket.
org.apache.wicket.markup.html.form.Form resolves the component that s… | 2026-11-01 |
| CVE-2026-82558 | NA | N/A | Missing authorization in Apache Wicket.
org.apache.wicket.protocol.ws.api.WebSocketBehavior, through which Wi… | 2026-11-01 |
| CVE-2026-82559 | NA | N/A | Insufficient session expiration in Apache Wicket.
org.apache.wicket.protocol.ws.WebSocketSettings#newWebSocke… | 2026-11-01 |
| CVE-2026-82704 | NA | N/A | Missing authorization in Apache Wicket.
org.apache.wicket.core.request.handler.ListenerRequestHandler invokes… | 2026-11-01 |
| CVE-2026-82705 | NA | N/A | Missing authorization in Apache Wicket.
org.apache.wicket.authorization.IAuthorizationStrategy declares isRes… | 2026-11-01 |
| CVE-2026-82840 | NA | N/A | Session fixation in Apache Wicket.
org.apache.wicket.authroles.authentication.AuthenticatedWebSession is the … | 2026-11-01 |
| CVE-2026-82898 | NA | N/A | Incorrect order of security checks in Apache Wicket.
org.apache.wicket.protocol.http.ResourceIsolationRequest… | 2026-11-01 |
| CVE-2026-111089 | NA | N/A | Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and … | 2026-11-01 |
| CVE-2026-120275 | MEDIUM | 5.5 | A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8. This affects an un… | 2026-11-01 |
| CVE-2026-82956 | NA | N/A | Improper neutralization of input during web page generation in Apache Wicket.
org.apache.wicket.ajax.AjaxNewW… | 2026-11-01 |
| CVE-2026-83539 | NA | N/A | Improper neutralization of input during web page generation in Apache Wicket.
org.apache.wicket.extensions.ma… | 2026-11-01 |
| CVE-2026-83559 | NA | N/A | Improper encoding or escaping of output in Apache Wicket.
org.apache.wicket.core.util.string.JavaScriptUtils#… | 2026-11-01 |
| CVE-2026-83594 | NA | N/A | Memory allocation with an excessive size value in Apache Wicket.
org.apache.wicket.markup.html.form.upload.re… | 2026-11-01 |
| CVE-2026-84170 | NA | N/A | Allocation of resources without limits or throttling in Apache Wicket.
org.apache.wicket.markup.html.form.upl… | 2026-11-01 |
| CVE-2026-84172 | NA | N/A | Files accessible to external parties in Apache Wicket.
org.apache.wicket.markup.html.PackageResourceGuard dec… | 2026-11-01 |
| CVE-2026-84177 | NA | N/A | Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends the attribute… | 2026-11-01 |