Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
0.0 NA
CVE-2026-7701 — Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference

A security vulnerability has been detected in Telegram Desktop up to 6.7.5. This vulnerability affects the function RequestButton of the file Telegram/SourceFiles/boxes/url_auth_box.cpp of the compon…

| Memory Corruption
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7700 — langflow-ai langflow LambdaFilterComponent lambda_filter.p eval code injection

A weakness has been identified in langflow-ai langflow up to 1.8.4. This affects the function eval of the file src/lfx/src/lfx/components/llm_operations/lambda_filter.p of the component LambdaFilterC…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7699 — Dromara MaxKey StrUtils.java StrUtils.checkSqlInjection sql injection

A security flaw has been discovered in Dromara MaxKey up to 3.5.13. Affected by this issue is the function StrUtils.checkSqlInjection of the file StrUtils.java. Performing a manipulation of the argum…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
7.5 HIGH
CVE-2026-7698 — Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo.…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
5.8 MEDIUM
CVE-2026-7697 — AMTT Hotel Broadband Operation System cardhand_submit.php sql injection

A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0. Affected is an unknown function of the file /manager/card/cardhand_submit.php. This manipulation of the argument ID causes…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7696 — Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform uploadH5F…

A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This impacts an unknown function of the file /SubstationWEBV2/main/uploadH5Files. T…

Remote | Authentication
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
7.5 HIGH
CVE-2026-7695 — Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform elecMaxMi…

A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. This affects an unknown function of the file /SubstationWEBV2/main/elecMaxMinA…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
7.5 HIGH
CVE-2026-7694 — Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System elecMaxMi…

A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0. The impacted element is an unknown function of the file /SubstationWEBV2/main/elecMaxMi…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7692 — Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection

A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. The affected element is the function ping_ddns of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument DDNS re…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7691 — Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection

A security vulnerability has been detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. Impacted is the function set_sys_cmd of the file /cgi-bin/adm.cgi. Such manipulation of the argument command lea…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7690 — Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection

A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes …

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
3.7 LOW
CVE-2026-7689 — Dolibarr ERP CRM Online Signature security.lib.php dol_verifyHash signature verification

A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library htdocs/core/lib/security.lib.php of the component Online Si…

Remote | Cryptography
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
5.0 MEDIUM
CVE-2026-7688 — Dolibarr ERP CRM Shipments API Endpoint expedition.class.php _checkValForAPI sql injection

A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endp…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7687 — langflow-ai langflow Full Builtins code_parser.py CodeParser.parse_callable_details comma…

A vulnerability was determined in langflow-ai langflow up to 1.8.4. Affected by this issue is the function CodeParser.parse_callable_details of the file src/lfx/src/lfx/custom/code_parser/code_parser…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
5.5 MEDIUM
CVE-2026-7686 — eyeo Adblock Plus Legacy Premium Activation premium.preload.js postMessage access control

A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome. Affected by this vulnerability is the function postMessage of the file premium.preload.js of the component Legacy Premium Activa…

Remote | Authorization
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
9.0 HIGH
CVE-2026-7685 — Edimax BR-6208AC setWAN buffer overflow

A vulnerability was detected in Edimax BR-6208AC up to 1.02. Affected is an unknown function of the file /goform/setWAN. Performing a manipulation of the argument pptpDfGateway  results in buffer ove…

Remote | Memory Corruption
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
9.0 HIGH
CVE-2026-7684 — Edimax BR-6428nC setWAN buffer overflow

A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway  leads to buffe…

Remote | Memory Corruption
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7683 — Edimax BR-6428nC Web setWAN command injection

A weakness has been identified in Edimax BR-6428nC up to 1.16. This affects an unknown function of the file /goform/setWAN of the component Web Interface. This manipulation of the argument pppUserNam…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
6.5 MEDIUM
CVE-2026-7682 — Edimax BR-6208AC L2TP Mode setWAN command injection

A security flaw has been discovered in Edimax BR-6208AC 1.02. The impacted element is the function setWAN of the file /goform/setWAN of the component L2TP Mode. The manipulation of the argument L2TPU…

Remote | Injection
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
0.0 NA
CVE-2026-5337 — Frontend File Manager Plugin <= 23.6 - Subscriber+ Arbitrary Download Access via IDOR

During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack. This vulnerability ex…

| Authorization
May 03, 2026 May 03, 2026
May 03, 2026
May 03, 2026
Showing 20 of 5641 Results