GHSA-gh5x-9h83-m96f / CVE-2026-72755: Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation,...
Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation,...
GHSA-c7mv-9fcf-6w45 / CVE-2026-70379: When the vSolution Matrix feature is enabled, affected devices may make current screen content...
When the vSolution Matrix feature is enabled, affected devices may make current screen content...
GHSA-hhw6-cj52-7w4w / CVE-2026-115966: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
GHSA-wc5q-3mff-vvxv / CVE-2026-33521: There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may...
There is s denial of service vulnerability in Esri ArcGIS Server versions 12.0 and prior that may...
GHSA-g9fm-vqgf-6f8x / CVE-2026-33520: There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1...
There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 12.1...
GHSA-q5fq-jxrm-v2jf / CVE-2026-116461: A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an...
A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an...
GHSA-wqr6-p8fh-96xh / CVE-2026-116398: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
GHSA-hjvv-pqmr-47w6 / CVE-2026-33522: Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update...
Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update...
GHSA-8w68-9h8m-jw4f / CVE-2026-116463: A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function...
A vulnerability was identified in FastStone Image Viewer up to 8.5. Affected is the function...
GHSA-fqp9-jcg9-vhfv / CVE-2026-116634: OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows...
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows...
GHSA-924q-7grr-82mf / CVE-2026-105626: HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that...
HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that...
GHSA-9hxx-3hjf-wggm / CVE-2026-71455: Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech...
Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech...
CVEs
CVE-2026-71455EPSS 0
GitHub Advisories · unreviewedCritical
GHSA-34qg-vwfc-f4rm / CVE-2026-10757: There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows...There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on Windows...
GHSA-9hfv-x99h-pmv8 / CVE-2026-112839: Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer...
Missing Authorization vulnerability in VillaTheme Customer Coupons for WooCommerce woo-customer...
GHSA-5jgf-46qp-g9jf / CVE-2026-105608: HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh...
HashiCorp Consul and Consul Enterprise are vulnerable to an authorization bypass in service mesh...
GHSA-378c-wr7c-cmxq / CVE-2026-71456: Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows...
Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows...
CVEs
CVE-2026-71456EPSS 1Oracle
GHSA-pwf8-p9pr-c446 / CVE-2026-116403: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')...
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')...
GHSA-24wx-f8xj-7p3w / CVE-2026-116596: Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing...
Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing...
CVEs
CVE-2026-116596EPSS 3
GHSA-mm8x-fpq4-pj4q / CVE-2026-116396: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...
GHSA-hq2c-jhr8-9ffr / CVE-2026-116612: A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can...
A flaw was found in GStreamer Editing Services (gst-editing-services). A GES project file can...