All CVEs — page 40 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• HIGH 7.4CVE-2026-82375public exploit available2026-09-28
• HIGH 7.7CVE-2026-82348public exploit available2026-09-28
• HIGH 7.3CVE-2026-101013public exploit available2026-09-28
• HIGH 7.3CVE-2026-101012public exploit available2026-09-28
• MEDIUM 4.7CVE-2026-101011public exploit available2026-09-28
• MEDIUM 4.7CVE-2026-101010public exploit available2026-09-28
• MEDIUM 6.8CVE-2026-930002026-09-28
• MEDIUM 5.3CVE-2026-929962026-09-28
• MEDIUM 5.3CVE-2026-894112026-09-28
• MEDIUM 6.4CVE-2026-893032026-09-28
• MEDIUM 5.3CVE-2026-893002026-09-28
• MEDIUM 5.4CVE-2026-888282026-09-28
• MEDIUM 5.3CVE-2026-868382026-09-28
• MEDIUM 6.5CVE-2026-847442026-09-28
• HIGH 8.4CVE-2026-101009public exploit available2026-09-28
• CRITICAL 9.1CVE-2026-101008public exploit available2026-09-28

  The flaw allows command injection through the manipulation of the split_file_path argument in the merge_split_file function of aaPanel BaoTa up to 11.8.0, enabling remote code execution.

• HIGH 8.4CVE-2026-101007public exploit available2026-09-28
• MEDIUM 4.3CVE-2026-1010062026-09-28
• HIGH 7.3CVE-2026-101005public exploit available2026-09-28
• UNSCOREDCVE-2026-1007512026-09-28
• UNSCOREDCVE-2026-1007502026-09-28
• MEDIUM 5.3CVE-2026-1010042026-09-28
• MEDIUM 5.3CVE-2026-101003public exploit available2026-09-28
• CRITICAL 9.9CVE-2026-101002public exploit available2026-09-28

  The flaw allows for os command injection via the url argument in the network_tools function, enabling remote attackers to execute arbitrary commands.

• UNSCOREDCVE-2026-87723public exploit available2026-09-28