Kavin Jindal Notepad++ 8.9.6 - Arbitrary Code Execution
remote windows CVE-2026-48778

Daniel Miranda YAMCS yamcs-core 5.12.7 - No Rate Limiting
webapps multiple CVE-2026-44596

Daniel Miranda YAMCS yamcs-core 5.12.7 - User Enumeration
webapps multiple CVE-2026-44595

Daniel Miranda YAMCS yamcs-core 5.12.7 - LDAP Injection
webapps multiple CVE-2026-42568

nu11secur1ty Microsoft - NTLMv2 Hash Capture
remote windows CVE-2026-32202

cardosource MikroORM 7.0.13 - SQL Injection
webapps multiple CVE-2026-44680

Diamorphine Prodigy Commerce 3.3.0 - Local File Inclusion
webapps multiple CVE-2026-0926

Diamorphine Langflow 1.3.0 - Remote Code Execution
webapps multiple CVE-2026-0770

cardosource Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution
webapps multiple CVE-2026-1830

Jose Rivas ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion
local multiple CVE-2026-46522

Mina Nageh Salalma ZTE Routers - Unauthenticated Denial of Service
local multiple CVE-2026-34473

Mina Nageh Salalma ZTE ZXHN H188A V6 - Authentication Bypass
local multiple CVE-2026-34472

Mina Nageh Salalma ZTE H298A / H108N - Unauthenticated Credential Exposure
local multiple CVE-2026-34474

nu11secur1ty Linux Kernel - Local Privilege Escalation
local linux CVE-2026-46300;CVE-2026-43500;CVE-2026-43284

cardosource MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution
webapps php CVE-2026-42471

Ünsal Furkan Harani Wing FTP Server 8.1.3 - Authenticated Remote Code Execution
remote multiple CVE-2026-44403