Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium6.5The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a s…CVE-2026-1542 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%Feb 28, 2026
Low2.0Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hex_core (hex_api modules), hexpm hex (mix_hex_api modules), erlang rebar3…CVE-2026-21619 · erlang · rebar3 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.6%Feb 27, 2026
High8.6IM-LogicDesigner module of intra-mart Accel Platform contains insecure deserialization issue.CVE-2026-27776 · intra-mart · accel platform · CVE.org · NIST NVDFeb 27, 2026
High8.4Deserialization of untrusted data in the LanguageModel class of Flair from versions 0.4.1 to latest are vulnerable to arbitrary code execution when loading a malicious model.CVE-2026-3071 · CVE.org · NIST NVDFeb 26, 2026
High7.2Deserialization of Untrusted Data vulnerability in Stylemix uListing ulisting allows Object Injection.This issue affects uListing: from n/a through <= 2.2.0.CVE-2026-28138 · CVE.org · NIST NVDFeb 26, 2026
High8.9c3p0, a JDBC Connection pooling library, is vulnerable to attack via maliciously crafted Java-serialized objects and instances.CVE-2026-27830 · CVE.org · NIST NVDFeb 26, 2026
Medium6.6LangGraph Checkpoint defines the base interface for LangGraph checkpointers.CVE-2026-27794 · CVE.org · NIST NVD · Check PointFeb 25, 2026
High8.9mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote valu…CVE-2026-27727 · mchange · mchange commons java · CVE.org · NIST NVDFeb 25, 2026
Critical10.0Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe usi…CVE-2026-26222 · beyond · altec doclink · CVE.org · NIST NVDFeb 24, 2026
High7.7The Print Service component of Fiserv Originate Loans Peripherals (formerly Velocity Services) in unsupported version 2021.2.4 (build 4.7.3155.0011) uses deprecated .N…CVE-2026-21665 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Feb 23, 2026
High8.8Deserialization of Untrusted Data vulnerability in Apache Camel LevelDB component.CVE-2026-25747 · apache · camel · CVE.org · NIST NVD · ApacheFeb 23, 2026
Low1.2A vulnerability has been found in datapizza-labs datapizza-ai 0.0.2.CVE-2026-2970 · datapizza · datapizza ai · CVE.org · NIST NVDFeb 23, 2026
Low2.0A vulnerability was detected in funadmin up to 7.1.0-rc4.CVE-2026-2898 · funadmin · funadmin · CVE.org · NIST NVDFeb 22, 2026
High8.1Zumba Json Serializer is a library to serialize PHP variables in JSON format.CVE-2026-27206 · CVE.org · NIST NVD · PHPFeb 21, 2026
High8.8GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability.CVE-2026-2037 · gfi · archiver · CVE.org · NIST NVDFeb 20, 2026
High8.8GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability.CVE-2026-2036 · gfi · archiver · CVE.org · NIST NVDFeb 20, 2026
High8.8openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.CVE-2026-24892 · it-novum · openitcockpit · CVE.org · NIST NVD · NagiosFeb 20, 2026
High7.5openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.CVE-2026-24891 · it-novum · openitcockpit · CVE.org · NIST NVD · NagiosFeb 20, 2026
Critical9.8Deserialization of Untrusted Data vulnerability in leafcolor Applay - Shortcodes applay-shortcodes allows Object Injection.This issue affects Applay - Shortcodes: from…CVE-2026-22384 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Feb 20, 2026
High8.8Deserialization of Untrusted Data vulnerability in Dotstore Woocommerce Category Banner Management banner-management-for-woocommerce allows Object Injection.This issue…CVE-2026-22354 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.5%Feb 20, 2026
High8.8Deserialization of Untrusted Data vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow slider-responsive-slideshow allows Object In…CVE-2026-22346 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Feb 20, 2026
High8.8Deserialization of Untrusted Data vulnerability in A WP Life Image Gallery – Lightbox Gallery, Responsive Photo Gallery, Masonry Gallery new-image-gallery allows Objec…CVE-2026-22345 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Feb 20, 2026
Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Lorem Ipsum | Books & Media Store lorem-ipsum-books-media-store allows Object Injection.This issue affects…CVE-2025-69405 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Feb 20, 2026
Critical9.8Deserialization of Untrusted Data vulnerability in ThemeREX Extreme Store extremestore allows Object Injection.This issue affects Extreme Store: from n/a through <= 1.5.10.CVE-2025-69404 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Feb 20, 2026
Critical9.8Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor…CVE-2025-69382 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Feb 20, 2026