HackZoneLabs News
Newsletter

CVE records

39918 records, newest first. We hold CVEs that were published recently, that are in the CISA KEV catalogue, or that an article mentions.

CVETitlePublishedTop scoreKEV
CVE-2026-122003Abilities Bridge < 1.4.2 - Administrator Account Creation via CSRF12 Nov 20268.8
CVE-2026-121498Askany < 2.2.1 - Unauthenticated Chat Session Disclosure and Modification via IDOR12 Nov 20264.8
CVE-2026-119040Defender Security < 6.4.1 - 2FA Bypass via Unthrottled OTP Verification12 Nov 20267.5
CVE-2026-119039Defender Security 4.9.0 - 6.4.0 - Unauthenticated IP Address Spoofing via Smart IP Detection12 Nov 20265.3
CVE-2026-118531Directorist < 8.11.1 - Subscriber+ Listing Moderation Bypass via REST Status Update12 Nov 20263.1
CVE-2026-118421WP Directory Kit < 1.6.3 - Listing Admin+ SQL Injection via 'order_by' Parameter12 Nov 20266.8
CVE-2026-110959Descope < 1.2.0 - Unauthenticated Account Takeover12 Nov 20269.8
CVE-2026-110072Photo Gallery by 10Web < 1.8.49 - Contributor+ Stored XSS via watermark_url Shortcode Attribute12 Nov 20266.8
CVE-2026-110041Crop-Thumbnails < 1.10.0 - Author+ Arbitrary Attachment Read and Overwrite via crop REST Endpoints12 Nov 20263.8
CVE-2026-106027Oxygen MyData for WooCommerce 3.0.0 - 3.0.8 - Unauthenticated Arbitrary Order Completion via EveryPay Status Callback12 Nov 20265.3
CVE-2026-10110712 Nov 20268.6
CVE-2026-11143612 Nov 20264.4
CVE-2026-11143512 Nov 20267.4
CVE-2026-11143412 Nov 20265.6
CVE-2026-11143312 Nov 20268.6
CVE-2026-7695412 Nov 20269.8
CVE-2026-8510112 Nov 20268.6
CVE-2026-8826612 Nov 20264.3
CVE-2026-8155912 Nov 20264.3
CVE-2026-8155812 Nov 20264.3
CVE-2026-7773812 Nov 20264.3
CVE-2026-7485012 Nov 20264.3
CVE-2026-1941412 Nov 20264.3
CVE-2026-8509812 Nov 20265.3
CVE-2026-12499312 Nov 20265.3
CVE-2026-9237912 Nov 20265.4
CVE-2026-8155712 Nov 20265.4
CVE-2026-1983312 Nov 20265.4
CVE-2026-1365612 Nov 20265.4
CVE-2026-1520112 Nov 20265.9
CVE-2026-8780112 Nov 20266.5
CVE-2026-1655012 Nov 20266.5
CVE-2026-1519812 Nov 20266.5
CVE-2026-8634312 Nov 20266.8
CVE-2026-7578512 Nov 20267.2
CVE-2026-1863312 Nov 20267.5
CVE-2026-8158412 Nov 20268.1
CVE-2026-1904812 Nov 20268.1
CVE-2026-1859612 Nov 20268.1
CVE-2026-7485712 Nov 20268.8
CVE-2026-1879212 Nov 20268.8
CVE-2026-1367212 Nov 20268.8
CVE-2026-11768712 Nov 20267.3
CVE-2026-114556MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability12 Nov 20267.4
CVE-2026-114558OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114568OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114567OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114566OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114565OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8
CVE-2026-114564OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability12 Nov 20267.8