CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

2.205 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-77548 Critical · 9.9 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-77547 Critical · 9.9 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77546 Critical · 9.9 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77543 Critical · 9.9 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Access Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device.
CVE-2026-77542 Critical · 9.1 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UID Enterprise Agent
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device.
CVE-2026-77540 Critical · 9.1 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi OS Server
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
CVE-2026-77539 Critical · 9.1 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi OS Server
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device.
CVE-2026-77537 Critical · 10.0 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-77535 Critical · 9.1 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Network Application
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device.
CVE-2026-77533 Critical · 9.9 CWE-20 Aug 26, 2026
Improper Input Validation in Ubiquiti Inc UniFi Protect Application
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device.
CVE-2026-78237 High · 7.8 CWE-20 Aug 26, 2026
Insufficient input validation in Admin By Request (ABR)
Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.
CVE-2026-18261 Medium · 5.7 CWE-20 Aug 25, 2026
Powerful Surveys - Critical - Unsupported - SA-CONTRIB-2026-092
Vulnerability in Drupal Powerful Surveys. This issue affects Powerful Surveys versions: *.*.
CVE-2026-16643 Medium · 5.7 CWE-20 Aug 25, 2026
Lunr exposed filters - Critical - Unsupported - SA-CONTRIB-2026-086
Vulnerability in Drupal Lunr exposed filters. This issue affects Lunr exposed filters versions: *.*.
CVE-2026-16642 Medium · 5.7 CWE-20 Aug 25, 2026
Email Login OTP - Critical - Unsupported - SA-CONTRIB-2026-085
Vulnerability in Drupal Email Login OTP. This issue affects Email Login OTP versions: *.*.
CVE-2026-16641 Critical · 9.8 CWE-20 Aug 25, 2026
Commerce Elavon - Critical - Unsupported - SA-CONTRIB-2026-084
Vulnerability in Drupal Commerce Elavon. This issue affects Commerce Elavon versions: *.*.
CVE-2026-15088 Medium · 5.7 CWE-20 Aug 25, 2026
Development Environment - Critical - Unsupported - SA-CONTRIB-2026-089
Vulnerability in Drupal Development Environment. This issue affects Development Environment versions: *.*.
CVE-2026-65637 Critical · 9.8 CWE-20 Aug 25, 2026
Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete
Improper Input Validation vulnerability in Apache Tomcat due to incomplete fix for CVE-2026-32990. This issue affects Apache Tomcat: from 11.0.20 through 11.0.24, from 10.1.53 through 10.1.57, from 9.0.115 through 9.0.120. Users are recommended to upgrade to version 11.0.25, 10.1.58 or 9.0.121, which fix the issue.
CVE-2026-79288 Medium · 6.5 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)
CVE-2026-79272 Low · 3.1 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79260 Medium · 6.5 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in Cookies in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79259 Medium · 4.3 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium)
CVE-2026-79255 Low · 3.1 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79253 Medium · 6.5 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in Network in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79251 Medium · 4.3 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79243 Medium · 6.5 CWE-20 Aug 25, 2026
Improper Input Validation in Google Chrome
Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)