CVE ID : CVE-2026-26030 Published : Feb. 19, 2026, 5:24 p.m. | 38 minutes ago Description : Semantic Kernel, Microsoft’s semantic kernel Python SDK, has a remote code execution vulnerability in versions prior…
CVE-2026-26016 – Pterodactyl Panel Allows Cross-Node Server Configuration Disclosure via Remote API Missing Authorization
CVE ID : CVE-2026-26016 Published : Feb. 19, 2026, 5:24 p.m. | 38 minutes ago Description : Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior…
CVE-2026-25998 – strongMan vulnerable to private credential recovery due to key and counter reuse
CVE ID : CVE-2026-25998 Published : Feb. 19, 2026, 5:24 p.m. | 38 minutes ago Description : strongMan is a management interface for strongSwan, an OpenSource IPsec-based VPN. When storing credentials in the…
CVE-2026-24834 – Kata Container to Guest micro VM privilege escalation
CVE ID : CVE-2026-24834 Published : Feb. 19, 2026, 5:24 p.m. | 38 minutes ago Description : Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines…
CVE-2026-2274 – Arbitrary File Read and SSRF in Google AppSheet
CVE ID : CVE-2026-2274 Published : Feb. 19, 2026, 3:21 p.m. | 41 minutes ago Description : A SSRF and Arbitrary File Read vulnerability in AppSheet Core in Google AppSheet prior to 2025-11-23…
CVE-2026-25755 – jsPDF has PDF Object Injection via Unsanitized Input in addJS Method
CVE ID : CVE-2026-25755 Published : Feb. 19, 2026, 3:16 p.m. | 46 minutes ago Description : jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the…
CVE-2026-25535 – jsPDF Affected by Client-Side/Server-Side Denial of Service via Malicious GIF Dimensions
CVE ID : CVE-2026-25535 Published : Feb. 19, 2026, 3:16 p.m. | 46 minutes ago Description : jsPDF is a library to generate PDFs in JavaScript. Prior to 4.2.0, user control of the…
CVE-2025-71250 – SPIP < 4.4.9 Insecure Deserialization
CVE ID : CVE-2025-71250 Published : Feb. 19, 2026, 2:58 p.m. | 1 hour, 4 minutes ago Description : SPIP before 4.4.9 allows Insecure Deserialization in the public area through the table_valeur filter and…
CVE-2025-71243 – SPIP Saisies Plugin < 5.11.1 Remote Code Execution
CVE ID : CVE-2025-71243 Published : Feb. 19, 2026, 2:58 p.m. | 1 hour, 4 minutes ago Description : The ‘Saisies pour formulaire’ (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical…
CVE-2025-9953 – SQLi in Database Software’s Databank Accreditation Software
CVE ID : CVE-2025-9953 Published : Feb. 19, 2026, 11:55 a.m. | 7 minutes ago Description : Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd. Databank Accreditation…