CVE Find is a real-time vulnerability database indexing 424 068 security flaws (CVE) from MITRE, NVD, CISA KEV, CWE and CAPEC. 4972 new CVEs were published in the last 7 days.
Data aggregated from: MITRE Corporation (CVE, CWE, CAPEC), National Vulnerability Database – NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).
| CVE ID | Published | Description | Score | Severity | |
|---|---|---|---|---|---|
CVE-2026-125784 |
2026-11-11 12h19 +00:00 |
Cross-Site Request Forgery (CSRF) vulnerability in Magnigenie RestroPress restropress allows Cross S... Cross-Site Request Forgery - CSRF |
8.8 |
High |
|
CVE-2026-119615 |
2026-11-11 12h19 +00:00 |
The Reset Database plugin for WordPress is vulnerable to privilege escalation in versions up to, and... Improper Privilege Management |
8.8 |
High |
|
CVE-2026-103883 |
2026-11-11 12h18 +00:00 |
The 6Storage Rentals plugin for WordPress is vulnerable to Authentication Bypass leading to Administ... Authorization problems |
8.8 |
High |
|
CVE-2026-78287 |
2026-11-11 11h17 +00:00 |
Improper Control of Generation of Code ('Code Injection') vulnerability in Staggs STAGGS staggs allo... Code Injection |
10 |
Critical |
|
CVE-2026-112174 |
2026-11-11 09h47 +00:00 |
Local privilege escalation vulnerability in Iperius Backup 8.8.3, due to insufficient separation bet... Improper Privilege Management |
9.3 |
Critical |
|
CVE-2026-126617 |
2026-11-11 09h17 +00:00 |
SQL injection in the database layer of Progressive Robot hMailServer 6.0.0-B1 through 6.2.18, when t... SQL Injection |
8.8 |
High |
|
CVE-2026-18769 |
2026-11-11 08h20 +00:00 |
A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because ... |
8.5 |
High |
|
CVE-2026-76981 |
2026-11-11 08h17 +00:00 |
Zoho Corporation ManageEngine ADAudit Plus versions below 8711 are vulnerable to an authenticat... SQL Injection |
8.8 |
High |
|
CVE-2026-12062 |
2026-11-11 07h38 +00:00 |
Zoho Corporation ManageEngine ADAudit Plus versions below 8703 are vulnerable to an authenticat... SQL Injection |
8.8 |
High |
|
CVE-2026-96414 |
2026-11-11 07h01 +00:00 |
In affected versions of Octopus Server, insufficient integrity protection of authentication cookies,... |
8.7 |
High |