Lỗ hổng mới
Lỗ hổng nghiêm trọng mới công bố (CVSS ≥ ngưỡng) hoặc đang bị khai thác thực tế (CISA KEV), gom từ NVD, GitHub Advisory, CVE.org, OSV và CISA KEV.
| ID | Tóm tắt | CVSS | Sản phẩm / package | Công bố | Nguồn |
|---|---|---|---|---|---|
| CVE-2026-116245 Truy cập trái phép | pgAdmin 4: Connection services are not restricted in server mode | 8.2 HIGH | pgadmin.org pgAdmin 4 | NVD, CVE.org | |
| CVE-2026-116241 RCE | pgAdmin 4: Import/Export Data query export runs a command through a backslash in a double-quoted identifier | 9.9 CRITICAL | pgadmin.org pgAdmin 4 | NVD, CVE.org | |
| CVE-2026-116239 Truy cập trái phép | pgAdmin 4: An LDAP or Kerberos login is logged in to another account with the same username | 8.5 HIGH | pgadmin.org pgAdmin 4 | NVD, CVE.org | |
| CVE-2026-116238 Truy cập trái phép | pgAdmin 4: The failed login limit can be bypassed, and Flask-Security's own views skip pgAdmin's login and password checks | 8.1 HIGH | pgadmin.org pgAdmin 4 | NVD, CVE.org | |
| CVE-2026-115829 Truy cập trái phép | Secret Server partial login bypass | 8.7 HIGH | Delinea Secret Server | NVD, CVE.org | |
| CVE-2026-115830 Truy cập trái phép | Secret Server JWT issuance error | 8.7 HIGH | Delinea Secret Server | NVD, CVE.org | |
| CVE-2026-61850 Truy cập trái phép | Kargo: Privilege escalation via Project RBAC management in the Kargo API | 9.3 CRITICAL | akuity kargo | NVD, CVE.org | |
| CVE-2026-62302 Truy cập trái phép | MyTube: Unauthenticated Media Access via Static Routes Bypassing Login | 8.7 HIGH | franklioxygen MyTube | NVD, CVE.org | |
| CVE-2026-62284 RCE Lộ dữ liệu | OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy | 8.6 HIGH | osac-project osac-operator | NVD, CVE.org | |
| CVE-2026-78403 RCE Truy cập trái phép | Unauthenticated Stack Buffer Overflow in Sentinel Keys Server | 9.8 CRITICAL | Thalesgroup Sentinel Keys Server | NVD, CVE.org | |
| CVE-2026-118090 RCE | WordPress MasterStudy LMS plugin <= 3.7.55 - PHP Object Injection vulnerability | 8.8 HIGH | Stylemix MasterStudy LMS | NVD, CVE.org | |
| CVE-2026-118086 Truy cập trái phép | WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability | 8.8 HIGH | Hakan Ozevin WP BASE Booking | NVD, CVE.org | |
| CVE-2026-116852 RCE | WordPress Widget Options plugin <= 4.2.5 - Remote Code Execution (RCE) vulnerability | 9.1 CRITICAL | Marketing Fire Widget Options | NVD, CVE.org | |
| CVE-2026-116386 Truy cập trái phép | WordPress SMS Alert Order Notifications plugin <= 4.0.2 - Privilege Escalation vulnerability | 9.8 CRITICAL | Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications | NVD, CVE.org | |
| CVE-2026-90888 RCE | WordPress LeadSnap plugin <= 1.25 - PHP Object Injection vulnerability | 9.8 CRITICAL | leadsnap LeadSnap | NVD, CVE.org | |
| CVE-2026-78527 RCE | WordPress GS Testimonial Slider plugin <= 3.3.10 - PHP Object Injection vulnerability | 8.8 HIGH | GS Plugins GS Testimonial Slider | NVD, CVE.org | |
| CVE-2026-73186 RCE | WordPress Enable Media Replace plugin <= 4.2.2 - PHP Object Injection vulnerability | 8.8 HIGH | ShortPixel Enable Media Replace | NVD, CVE.org | |
| CVE-2026-39738 RCE | WordPress FunnelKit Automations plugin <= 3.8.6.1 - PHP Object Injection vulnerability | 9.8 CRITICAL | FunnelKit FunnelKit Automations | NVD, CVE.org | |
| CVE-2026-119526 RCE | WordPress Royal Event theme <= 2.0 - PHP Object Injection vulnerability | 9.8 CRITICAL | ThemeREX Royal Event | NVD, CVE.org | |
| CVE-2026-62162 Truy cập trái phép | Hydra: Deposit Claim omits Head state-token spending requirement | 8.2 HIGH | cardano-scaling hydra | NVD, CVE.org | |
| CVE-2026-119978 RCE | Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore | 8.5 HIGH | FlowiseAI Flowise | NVD, CVE.org | |
| CVE-2026-105894 Truy cập trái phép | Ak Framework <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Update | 8.8 HIGH | akbilisim Ak Framework | NVD, CVE.org | |
| CVE-2026-115346 RCE | Avada | Website Builder For WordPress & WooCommerce <= 7.16.2 - Unauthenticated Arbitrary File Upload via Avada Form Upload Field | 8.1 HIGH | ThemeFusion Avada | Website Builder For WordPress & WooCommerce | NVD, CVE.org | |
| CVE-2025-8574 Truy cập trái phép | Database Cleaner <= 1.4.7 - Authenticated (Administrator+) Arbitrary Table Deletion | 8.7 HIGH | tigroumeow Database Cleaner: Cleanup, Optimization & Repair | NVD, CVE.org | |
| CVE-2026-61826 Truy cập trái phép Lộ dữ liệu | Bazarr: Plex OAuth API namespace is entirely unauthenticated, allowing config tampering, integration takeover and server-side request forgery | 10.0 CRITICAL | morpheus65535 bazarr | NVD, CVE.org | |
| CVE-2026-115642 Truy cập trái phép | In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in possession of an access-restricted application credential may bypass those restri... | 8.3 HIGH | OpenStack keystonemiddleware | NVD, CVE.org | |
| CVE-2026-119287 Truy cập trái phép | Zuke: Command-form registry descriptors bypass the MCP launch policy | 8.0 HIGH | zuke-build zuke | NVD, CVE.org | |
| CVE-2026-119716 RCE | pybars3 through 0.9.7 Code Injection via Bracketed Path Segments | 8.1 HIGH | wbond pybars3 | NVD, CVE.org | |
| CVE-2026-119717 RCE | pybars4 through 0.9.13 Code Injection via Bracketed Path Segments | 8.1 HIGH | up9inc pybars4 | NVD, CVE.org | |
| CVE-2026-119713 RCE | Paperclip 2026.403.0 before 2026.416.0 RCE via Execution Workspace Cleanup Commands | 8.8 HIGH | paperclipai @paperclipai/server | NVD, CVE.org | |
| CVE-2026-119706 RCE | LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization | 9.8 CRITICAL | InternLM lmdeploy | NVD, CVE.org | |
| CVE-2026-93327 RCE | Unsafe Java Deserialization in Application Integration SubWorkflow tasks allows Remote Code Execution | 9.4 CRITICAL | Google Cloud Application Integration | NVD, CVE.org | |
| CVE-2026-61738 RCE Lộ dữ liệu | SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE) | 10.0 CRITICAL | socfortress CoPilot | NVD, CVE.org | |
| CVE-2026-61737 Truy cập trái phép | ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin | 9.8 CRITICAL | huajian123 ng-antd-admin | NVD, CVE.org | |
| CVE-2026-45144 Truy cập trái phép | Chamilo LMS: Stored XSS in public user-profile fields | 8.9 HIGH | chamilo chamilo-lms | NVD, CVE.org | |
| CVE-2026-61730 Truy cập trái phép Lộ dữ liệu | SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mount | 9.3 CRITICAL | socfortress CoPilot | NVD, CVE.org | |
| CVE-2026-61729 Truy cập trái phép | SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injection | 9.4 CRITICAL | socfortress CoPilot | NVD, CVE.org | |
| CVE-2026-61728 Truy cập trái phép | SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeover | 9.9 CRITICAL | socfortress CoPilot | NVD, CVE.org | |
| CVE-2026-61708 Truy cập trái phép | SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user) | 8.5 HIGH | socfortress CoPilot | NVD, CVE.org | |
| CVE-2026-112905 Truy cập trái phép | Vvveb: Authenticated IDOR on admin/auth-token Allows Admin Privilege Escalation via API Token Theft | 9.0 CRITICAL | givanz Vvveb | NVD, CVE.org | |
| CVE-2026-110799 Truy cập trái phép | Vvveb: Authentication Bypass via PHP Array Injection leading to full Account Takeover | 9.8 CRITICAL | givanz Vvveb | NVD, CVE.org | |
| CVE-2026-119662 Truy cập trái phép | Songloft 2.9.0 before 2.13.6 Hardcoded Admin Credentials in Embedded Backend | 8.8 HIGH | songloft-org songloft | NVD, CVE.org | |
| CVE-2026-119660 Truy cập trái phép | MuseBot before 2.0.0 Authentication Bypass via Hard-Coded Session Key | 9.8 CRITICAL | yincongcyincong MuseBot | NVD, CVE.org | |
| CVE-2026-119654 Truy cập trái phép | DataCap through 2025.1.1 Privilege Escalation via allocationRole Missing Authorization | 8.8 HIGH | devlive-community DataCap | NVD, CVE.org | |
| CVE-2026-91913 RCE | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker ... | 8.8 HIGH | Dell OpenManage Enterprise | NVD, CVE.org | |
| CVE-2026-119572 Truy cập trái phép | Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Provider | 8.7 HIGH | traefik traefik | NVD, CVE.org | |
| CVE-2026-118992 RCE | CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backup | 8.4 HIGH | NVD, CVE.org | ||
| CVE-2026-75882 Truy cập trái phép | Improper access control vulnerability in ESET Encryption products for Windows | 8.5 HIGH | ESET spol. s.r.o. ESET Endpoint Encryption, ESET spol. s.r.o. ESET Full Disk Encryption | NVD, CVE.org | |
| CVE-2026-111505 RCE | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker ... | 8.8 HIGH | Dell OpenManage Enterprise | NVD, CVE.org | |
| CVE-2026-119420 Truy cập trái phép | Lago through 1.55.0 Authentication Bypass via acceptInvite GraphQL Mutation | 8.8 HIGH | getlago lago | NVD, CVE.org |