Pavan N KeepInMind 0.8.4.2 - Stored XSS
webapps multiple CVE-2026-9271

Parsa Rezaie Khiabanloo KNX visualisering - Broken Access Control
webapps multiple

Kent Apostol WordPress Plugin WPZOOM Portfolio 1.4.21 - Reflected Cross-Site Scripting (XSS)
webapps multiple CVE-2026-49069

doany1 OpenEMR 7.0.2 - Arbitrary File Read
webapps multiple CVE-2026-24849

cardosource WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection
webapps multiple CVE-2026-3180

Diamorphine WordPress OrderConvo 14 - Path Traversal
webapps multiple CVE-2025-10162

Daniel Miranda YAMCS yamcs-core 5.12.7 - No Rate Limiting
webapps multiple CVE-2026-44596

Daniel Miranda YAMCS yamcs-core 5.12.7 - User Enumeration
webapps multiple CVE-2026-44595

Daniel Miranda YAMCS yamcs-core 5.12.7 - LDAP Injection
webapps multiple CVE-2026-42568

cardosource MikroORM 7.0.13 - SQL Injection
webapps multiple CVE-2026-44680

Diamorphine Prodigy Commerce 3.3.0 - Local File Inclusion
webapps multiple CVE-2026-0926

Diamorphine Langflow 1.3.0 - Remote Code Execution
webapps multiple CVE-2026-0770

cardosource Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution
webapps multiple CVE-2026-1830

Jose Rivas ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion
local multiple CVE-2026-46522

Mina Nageh Salalma ZTE Routers - Unauthenticated Denial of Service
local multiple CVE-2026-34473

Mina Nageh Salalma ZTE ZXHN H188A V6 - Authentication Bypass
local multiple CVE-2026-34472