RouterCVE

Search

Published: All 7d 30d 90d 12m
Severity: All Critical High Medium Low

11,548 CVEs · High severity

Hide EOL products

CVEs (11,548, showing first 500)

Only the first 500 CVEs (by current sort) are shown when searching without a keyword. Add a search term above to narrow the results.

Showing 1–25 of 11,548 (capped at 500)

CVE ID ↓ Severity Patch CVSS Published Description
CVE-2026-9863 HIGH Patched 7.5 2026-06-15 Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch tooling for legacy tar-based client installations. A malicious or comprom…
CVE-2026-9860 HIGH 8.8 2026-06-18 The Offload, AI & Optimize with Cloudflare Images plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.10.2 via the 'account-…
CVE-2026-9856 HIGH 7.1 2026-08-02 A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pre&hellip;
CVE-2026-9848 HIGH 7.5 2026-06-13 The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and including, 6.0.4 The plugin hooks Wo&hellip;
CVE-2026-9843 HIGH 8.1 2026-06-20 The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the view&hellip;
CVE-2026-9842 HIGH 7.5 2026-07-08 The Backstage - Customizer Demo Access plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.4.2. This is due to the plugin ass&hellip;
CVE-2026-9834 HIGH 7.2 2026-07-02 The WP Database Backup – Unlimited Database & Files Backup by Backup for WP plugin for WordPress is vulnerable to OS Command Injection in all versions up to and including 7&hellip;
CVE-2026-9833 HIGH Patched 7.1 2026-07-20 The Tag Groups is the Advanced Way to Display Your Taxonomy Terms WordPress plugin before 2.2.0 does not properly escape one of its AJAX parameters before reflecting it in &hellip;
CVE-2026-9830 HIGH Patched 8.2 2026-07-27 The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespa&hellip;
CVE-2026-9816 HIGH Patched 8.3 2026-08-17 Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fields server-side on insert and archive-import paths which&hellip;
CVE-2026-9800 HIGH Patched 8.1 2026-06-25 A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed&hellip;
CVE-2026-9787 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected &hellip;
CVE-2026-9786 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst&hellip;
CVE-2026-9785 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in&hellip;
CVE-2026-9784 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in&hellip;
CVE-2026-9783 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected&hellip;
CVE-2026-9782 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in&hellip;
CVE-2026-9781 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected inst&hellip;
CVE-2026-9780 HIGH Patched 8.8 2026-06-25 Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected i&hellip;
CVE-2026-9779 HIGH Patched 7.2 2026-06-24 ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu&hellip;
CVE-2026-9778 HIGH Patched 7.2 2026-06-24 ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta&hellip;
CVE-2026-9777 HIGH Patched 7.2 2026-06-24 ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation&hellip;
CVE-2026-9776 HIGH Patched 7.5 2026-06-24 ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive inform&hellip;
CVE-2026-9773 HIGH Patched 8.8 2026-06-24 Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal&hellip;
CVE-2026-9772 HIGH Patched 8.8 2026-06-24 Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected install&hellip;