CVE Watch356,923 in full archive

Vulnerabilities exploitable today

356,923in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,662

New KEV · 24H0

Exploit Today ≥ 701,605

Distribution · last window

Critical
2,543
High
10,564
Medium
6,729
Low
670

Filters

Window

Severity

Flags

Vulnerabilities356,881–356,920 · 356,923

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-19053—

—

——0The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.7h CVE-2026-19074—

—

——0The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings`.7h CVE-2026-19075—

—

——0All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any `aiovg_videos` post (`public/video.php`, `AIOVG_Public_Video::download_video()`), which reads the post's `mp4` meta value and streams that URL's response back to the requester.7h CVE-2026-19077—

—

——0The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing any user whose role an administrator has granted Duplicate Post WordPress plugin before 1.5.5 access to permanently delete arbitrary posts on the site, including those belonging to other users.7h CVE-2026-19089—

—

——0The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthenticated attackers to upload arbitrary files and achieve remote code execution on servers that do not honour the directory's access rules.7h CVE-2026-21058—

—

——0Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.6h CVE-2026-725705.4 MED

—

——0A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-breaking characters. The lib/helper/html.js file does not sanitize filenames before embedding them in HTML templates at line 28, enabling script execution in other users' browsers when they view the file listing.3h CVE-2026-21059—

—

——0Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.6h CVE-2026-21060—

—

——0Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.6h CVE-2026-21061—

—

——0Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability.6h CVE-2026-21062—

—

——0Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.6h CVE-2026-725699.1 CRI

—

——0A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option. The lib/middleware/file-remove.js middleware does not sanitize the req.query.file parameter before using it to construct file system paths, enabling directory traversal via ../ sequences.3h CVE-2026-572796.8 MED

—

——0Cybozu Garoon contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of a user logged in to the product.6h CVE-2026-649408.6 HIG

—

——0Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console. As a result, the attacker may perform any operations available from the management console.6h CVE-2026-21063—

—

——0Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.5h CVE-2026-21064—

—

——0Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.5h CVE-2026-21065—

—

——0Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.5h CVE-2026-21066—

—

——0Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.5h CVE-2026-21067—

—

——0Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.5h CVE-2026-21068—

—

——0Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.5h CVE-2026-21069—

—

——0Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.5h CVE-2026-21070—

—

——0Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.5h CVE-2026-21071—

—

——0Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.5h CVE-2026-725687.1 HIG

—

——0An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port. The getPingExtLength() function in the cluster bus message parser does not validate extension length fields against the actual remaining buffer size, allowing an attacker-controlled packet to cause the parser to read beyond the allocated buffer boundary.3h CVE-2026-725679.8 CRI

—

——0An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The api/api.py wiki-cache endpoint constructs file paths from user-controlled owner, repo, and repo_type fields without sanitization, enabling path traversal. A second unauthenticated endpoint creates directories, and combined these primitives allow arbitrary file write and delete as the root process user.3h CVE-2026-21072—

—

——0Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.5h CVE-2026-21073—

—

——0Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.5h CVE-2026-21074—

—

——0Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.5h CVE-2026-21075—

—

——0Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.5h CVE-2026-21076—

—

——0Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.5h CVE-2026-21077—

—

——0Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.5h CVE-2026-21078—

—

——0Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.5h CVE-2026-21079—

—

——0Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.5h CVE-2026-21080—

—

——0Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.5h CVE-2026-21081—

—

——0Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability.5h CVE-2026-21082—

—

——0Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.5h CVE-2026-21083—

—

——0Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.5h CVE-2026-21084—

—

——0Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.5h CVE-2026-725667.7 HIG

—

——0A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body via the HTTP Request app's Custom Request action. The packages/backend/src/apps/http-request/actions/custom-request/index.js handler passes the user-supplied URL directly to the HTTP client with no SSRF controls, enabling access to internal services and metadata endpoints.3h CVE-2026-725659.8 CRI

—

——0A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator. The APIJSONORM library's AbstractSQLConfig.java applies the per-role allow-list check only on the String form of @having but not on the Map form, allowing a guest user to inject raw SQL fragments and read tables that are configured with get:[] (empty, meaning no role can read them).3h