CVE ID : CVE-2026-27470 Published : Feb. 21, 2026, 8:16 a.m. | 28 minutes ago Description : ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and…
CVE-2026-27471 – ERP: Document access through endpoints due to missing validation
CVE ID : CVE-2026-27471 Published : Feb. 21, 2026, 7:16 a.m. | 1 hour, 28 minutes ago Description : ERP is a free and open source Enterprise Resource Planning tool. In versions up to…
CVE-2026-27458 – LinkAce: Stored XSS in Atom Feed via CDATA Escape in List Description
CVE ID : CVE-2026-27458 Published : Feb. 21, 2026, 7:16 a.m. | 1 hour, 28 minutes ago Description : LinkAce is a self-hosted archive to collect website links. Versions 2.4.2 and below have a…
CVE-2026-27452 – ASN.1 TypeScript Library: Decoding an INTEGER could leak the underlying ArrayBuffer
CVE ID : CVE-2026-27452 Published : Feb. 21, 2026, 7:16 a.m. | 1 hour, 28 minutes ago Description : ASN.1 TypeScript ESM library, including codecs for Basic Encoding Rules (BER) and Distinguished Encoding Rules…
CVE-2026-27206 – Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize()
CVE ID : CVE-2026-27206 Published : Feb. 21, 2026, 7:16 a.m. | 1 hour, 28 minutes ago Description : Zumba Json Serializer is a library to serialize PHP variables in JSON format. In versions…
CVE-2026-27212 – Swiper has a Prototype Pollution Vulnerability
CVE ID : CVE-2026-27212 Published : Feb. 21, 2026, 6:17 a.m. | 27 minutes ago Description : Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions…
CVE-2026-27211 – Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse
CVE ID : CVE-2026-27211 Published : Feb. 21, 2026, 6:17 a.m. | 27 minutes ago Description : Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to…
CVE-2026-27198 – Formwork Improperly Manages Privileges During User Creation
CVE ID : CVE-2026-27198 Published : Feb. 21, 2026, 6:17 a.m. | 27 minutes ago Description : Formwork is a flat file-based Content Management System (CMS). In versions 2.0.0 through 2.3.3, the application…
CVE-2026-27197 – Sentry: Improper Authentication on SAML SSO process allows user identity linking
CVE ID : CVE-2026-27197 Published : Feb. 21, 2026, 5:17 a.m. | 1 hour, 27 minutes ago Description : Sentry is a developer-first error tracking and performance monitoring tool. Versions 21.12.0 through 26.1.0 have…
CVE-2026-27196 – Statamic affected by privilege escalation via stored Cross-site Scripting
CVE ID : CVE-2026-27196 Published : Feb. 21, 2026, 5:17 a.m. | 1 hour, 27 minutes ago Description : Statmatic is a Laravel and Git powered content management system (CMS). Versions 5.73.8 and below…