Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-83559 |
7.4 (4.0)
|
Apache Wicket: JavaScriptUtils#escapeQuotes does not e… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:19:47.951Z | 2026-11-01T22:19:47.951Z |
| CVE-2026-83539 |
7.4 (4.0)
|
Apache Wicket: XSS in SmartLinkLabel and SmartLinkMult… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:18:13.427Z | 2026-11-01T22:18:13.427Z |
| CVE-2026-82956 |
7.6 (4.0)
|
Apache Wicket: XSS in AjaxNewWindowNotifyingBehavior v… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:16:45.576Z | 2026-11-01T22:16:45.576Z |
| CVE-2026-82898 |
2.1 (4.0)
|
Apache Wicket: A cross-origin listener invocation stop… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:14:06.838Z | 2026-11-01T22:14:06.838Z |
| CVE-2026-82840 |
7.2 (4.0)
|
Apache Wicket: The session id is renewed only on the f… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:05:07.392Z | 2026-11-01T22:05:07.392Z |
| CVE-2026-82705 |
6.3 (4.0)
|
Apache Wicket: The configured authorization strategy i… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:03:23.040Z | 2026-11-01T22:03:23.040Z |
| CVE-2026-82704 |
6.9 (4.0)
|
Apache Wicket: A listener is invoked on a page instanc… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:01:51.169Z | 2026-11-01T22:01:51.169Z |
| CVE-2026-82559 |
2.3 (4.0)
|
Apache Wicket: WebSocket messages are processed agains… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T22:00:24.598Z | 2026-11-01T22:00:24.598Z |
| CVE-2026-82558 |
2.3 (4.0)
|
Apache Wicket: WebSocketBehavior delivers client messa… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T21:58:28.610Z | 2026-11-01T21:58:28.610Z |
| CVE-2026-82557 |
6.9 (4.0)
|
Apache Wicket: A disabled or invisible form submitting… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T21:56:01.071Z | 2026-11-01T21:56:01.071Z |
| CVE-2026-82115 |
6.3 (4.0)
|
Apache Wicket: The configured authorization strategy i… |
Apache Software Foundation |
Apache Wicket |
2026-11-01T21:42:45.222Z | 2026-11-01T21:42:45.222Z |
| CVE-2026-120274 |
5.1 (4.0)
4.7 (3.1)
4.7 (3.0)
|
beecue FastBee Groovy Script Executor script code injection |
beecue |
FastBee |
2026-11-01T21:00:27.286Z | 2026-11-01T21:00:27.286Z |
| CVE-2026-13575 |
N/A
|
HTTP::Session versions before 0.54 for Perl allow memc… |
|
|
2026-11-01T10:46:36.389Z | 2026-11-01T20:05:00.738Z |
| CVE-2026-83596 |
8.8 (3.1)
|
Webkitgtk: validate the full featurelist array once in… |
WebKit |
WebKit |
2026-08-31T20:46:24.116Z | 2026-11-01T19:54:42.980Z |
| CVE-2026-120242 |
4.8 (4.0)
2.4 (3.1)
2.4 (3.0)
|
Ruijie RG-ES205GC Cloud Management set_cloud_serverUrl… |
Ruijie |
RG-ES205GC |
2026-11-01T19:00:20.951Z | 2026-11-01T19:00:20.951Z |
| CVE-2026-120241 |
8.7 (4.0)
7.5 (3.1)
7.5 (3.0)
|
Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi b… |
Ruijie |
RG-ES205GC |
2026-11-01T18:45:15.676Z | 2026-11-01T18:45:15.676Z |
| CVE-2026-120240 |
9.4 (4.0)
9.9 (3.1)
9.9 (3.0)
|
WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 … |
WAVLINK |
WN553X1-B |
2026-11-01T18:30:11.233Z | 2026-11-01T18:30:11.233Z |
| CVE-2026-120239 |
9.4 (4.0)
9.9 (3.1)
9.9 (3.0)
|
WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os com… |
WAVLINK |
WN553X1-B |
2026-11-01T18:00:18.146Z | 2026-11-01T18:00:18.146Z |
| CVE-2026-120238 |
9.4 (4.0)
9.9 (3.1)
9.9 (3.0)
|
WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command… |
WAVLINK |
WN553X1-B |
2026-11-01T17:45:17.440Z | 2026-11-01T17:45:17.440Z |
| CVE-2026-116563 |
5.4 (3.1)
|
Photo Gallery, Sliders, Proofing and Themes <= 4.5.4 -… |
smub |
Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery |
2026-10-31T05:33:06.334Z | 2026-11-01T17:44:30.899Z |
| CVE-2026-109234 |
7.2 (3.1)
|
Meow Lightbox <= 5.6.4 - Unauthenticated Stored Cross-… |
tigroumeow |
Meow Lightbox |
2026-10-31T05:33:06.702Z | 2026-11-01T17:44:30.757Z |
| CVE-2026-109997 |
7.2 (3.1)
|
Ninja Forms <= 3.15.5 - Unauthenticated Stored Cross-S… |
kstover |
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder |
2026-10-31T05:33:07.391Z | 2026-11-01T17:44:30.605Z |
| CVE-2026-116520 |
7.2 (3.1)
|
PPWP <= 1.9.26 - Unauthenticated Stored Cross-Site Scr… |
buildwps |
PPWP – Password Protect Pages |
2026-10-31T05:33:08.490Z | 2026-11-01T17:44:30.459Z |
| CVE-2026-111254 |
7.2 (3.1)
|
W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cros… |
boldgrid |
W3 Total Cache |
2026-10-31T06:44:13.577Z | 2026-11-01T17:44:30.300Z |
| CVE-2026-111109 |
6.1 (3.1)
|
Webmention <= 5.10.1 - Unauthenticated Stored Cross-Si… |
pfefferle |
Webmention |
2026-10-31T06:44:14.112Z | 2026-11-01T17:44:30.159Z |
| CVE-2026-107653 |
7.2 (3.1)
|
SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site … |
surecart |
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments |
2026-10-31T06:44:15.724Z | 2026-11-01T17:44:30.025Z |
| CVE-2026-120019 |
5.4 (3.1)
|
W3 Total Cache <= 2.10.7 - Unauthenticated Stored Cros… |
boldgrid |
W3 Total Cache |
2026-10-31T06:44:16.137Z | 2026-11-01T17:44:29.877Z |
| CVE-2026-119089 |
7.2 (3.1)
|
ThirstyAffiliates <= 3.12.1 - Unauthenticated Stored C… |
supercleanse |
ThirstyAffiliates – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin |
2026-10-31T06:44:17.036Z | 2026-11-01T17:44:29.749Z |
| CVE-2026-116522 |
7.2 (3.1)
|
Relevanssi <= 4.28.5 - Unauthenticated Stored Cross-Si… |
comesio |
Relevanssi – A Better Search |
2026-10-31T06:44:17.433Z | 2026-11-01T17:44:29.607Z |
| CVE-2026-116546 |
6.4 (3.1)
|
WP Job Portal <= 2.7.0 - Authenticated (Subscriber+) S… |
wpjobportal |
WP Job Portal – AI-Powered Recruitment System for Company or Job Board website |
2026-10-31T06:44:17.810Z | 2026-11-01T17:44:29.475Z |