cve.bz

OWASP A08:2025 Software or Data Integrity Failures vulnerabilities, newest first, page 26

Filter

The records that name a CWE MITRE's catalog puts in this OWASP Top 10 category. What the category is: A08:2025 at MITRE.

Its weaknesses: 14

CWE-345, CWE-353, CWE-426, CWE-427, CWE-494, CWE-502, CWE-506, CWE-509, CWE-565, CWE-784, CWE-829, CWE-830, CWE-915, CWE-926

  1. 6.2CVE-2026-20470EPSS 0.2%

    In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Pa…

  2. 8.7CVE-2026-59641EPSS 0.2%

    In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcmail-fips …

  3. 7.7CVE-2026-3245EPSS 0.7%

    A deserialization vulnerability in PRISMAproduction Version 6.5 or earlier that may lead to arbitrary code execution.

  4. 6.6CVE-2026-16062EPSS 0.6%

    The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not prevent the deserialization of user-controlled input in some of its event content fields, allowing users with Contributor-level access and above to inject PH…

  5. 7.0CVE-2026-67307EPSS 0.2%

    Wazuh 5.0.0-beta1 (fixed in 5.0.0-beta3) does not validate or override the cluster_name and cluster_node fields in inventory-sync Start FlatBuffer messages, while validating only the agentid against the authenticated agent identity. This a…

  6. 7.5CVE-2026-18536EPSS 0.2%

    Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::RawSource::RandomOrg and Data::Entropy::RawSource::RandomnumbersInfo remote sources are accessed over plain HTTP. The Data::Entr…

  7. 3.5CVE-2026-10827EPSS 0.2%

    The Spectra Legacy WordPress plugin before 2.20.0 does not validate or escape several block style attributes before using them to build the CSS it outputs on the front end, allowing users with the Contributor role and above to inject arbi…

  8. 9.3CVE-2026-68771EPSS 1.1%

    ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserializ…

  9. 5.3CVE-2026-28145EPSS 0.2%

    Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State. This issue affects MasterStudy LMS: from n/a through 3.7.39.

  10. 8.5CVE-2026-10079EPSS 0.2%

    A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permissi…

  11. 7.5CVE-2026-12720EPSS 0.5%

    The Kirki WordPress plugin before 6.0.13 does not restrict which classes may be instantiated when it deserialises data that unauthenticated users can store, leading to PHP Object Injection that is triggered when an administrator later rev…

  12. 8.5CVE-2026-11536EPSS 0.6%

    IBM WebSphere Application Server 9.0, and 8.5 is affected by a remote code execution vulnerability in the SOAP/JMX connector.

  13. 9.8CVE-2026-15976EPSS 0.6%

    SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization o…

  14. 9.8CVE-2026-15969EPSS 1.0%

    SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.

  15. 9.8CVE-2026-12118EPSS 0.8%

    IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.

  16. 7.7CVE-2026-57859EPSS 0.5%

    e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted payload in the use…

  17. 7.5CVE-2026-1360EPSS 1.2%

    The BuddyPress plugin for WordPress is vulnerable to Deserialization of Untrusted Data in all versions up to, and including, 14.5.0 This is due to the `bp_unserialize_profile_field()` function using `@unserialize()` without the `allowed_cl…

  18. 9.2CVE-2026-67595EPSS 0.8%

    VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that…

  19. 8.4CVE-2026-12436EPSS 0.5%

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user to modify CI/CD configuration …

  20. 2.3CVE-2026-62995EPSS 0.1%

    joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. in versions 1.7.1 and prior, joserfc accepts JWTs with trailing padding (==) which are not conforming to the JOSE …

  21. 7.6CVE-2026-59247EPSS 0.2%

    Insufficient Verification of Data Authenticity vulnerability in Gleam allows an adversary in the middle to substitute forged Hex package contents during dependency resolution. During dependency resolution Gleam fetches package metadata fr…

  22. 10.0CVE-2026-65883EPSS 0.8%

    Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby remote code execution.

  23. 8.3CVE-2026-58163EPSS 0.7%

    Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Use…

  24. 9.8CVE-2026-18072ExploitEPSS 3.0%

    The Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … plugin for WordPress is vulnerable to Authentication Bypass via a Hardcoded Backdoor in version 10.8.7. The vulnerability exists because the `_arve_uc_init()…

  25. 9.8CVE-2026-14974EPSS 0.7%

    IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

  26. 9.8CVE-2026-14512EPSS 1.0%

    IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication or execute arbitrary code.

  27. 8.6CVE-2026-48395EPSS 0.3%

    Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this iss…

  28. 8.2CVE-2026-48391EPSS 0.3%

    Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitati…

  29. 8.6CVE-2026-48388EPSS 0.3%

    Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. An attacker could have exploited this vulnerability by pla…

  30. 7.3CVE-2026-8164EPSS 0.2%

    Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijacking. This issue affects ArkSigner Desktop Client: from v2.2.16.10 through 1706202…

  31. 9.8CVE-2026-66713EPSS 1.7%

    Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component  in Apache Software Foundation Apache Axis2/Java through 2.0.0 on Apache Tomcat  (only when Tribes clustering is enabled, which is off by default) all…

  32. 10.0CVE-2026-11756EPSS 0.8%

    A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

  33. 8.8CVE-2026-65617EPSS 0.6%

    A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.

  34. 7.5CVE-2026-12383EPSS 0.3%

    A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permissive access controls (permission_classes=[AllowAny], authentication_classes=[]) and relies solely on the Subject HTTP header value for mTL…

  35. 9.8CVE-2026-63077KEVExploitEPSS 95%

    In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

  36. 9.4CVE-2026-66398EPSS 0.4%

    phpMyFAQ before v4.1.6 contains a remote code execution vulnerability in the configuration API that allows authenticated administrators with CONFIGURATION_EDIT and ATTACHMENT_ADD privileges to write arbitrary PHP files by manipulating the …

  37. 8.8CVE-2026-15962EPSS 0.5%

    The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscr…

  38. 8.7CVE-2026-60134EPSS 0.6%

    Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges.

  39. 7.3CVE-2026-16519EPSS 0.2%

    A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries (DLLs) from an unsafe search path, allowing a local attacker to place a malicious DLL …

  40. 7.8CVE-2026-66141EPSS 0.1%

    Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.

  41. 9.9CVE-2026-50517EPSS 1.7%

    Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network.

  42. 6.5CVE-2026-39155EPSS 0.2%

    Knot DNS before 3.4.10 and 3.5.x before 3.5.4 contains a vulnerability in mod-onlinesign where the next NSEC owner name can be computed incorrectly. This can create an overly broad authenticated denial interval, allowing downstream validat…

  43. 8.7CVE-2026-21655EPSS 0.5%

    Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnson Controls Victor Application Server allows capec-586. This issue affects victor: before 8.0; CCure 9000: before …

  44. 7.5CVE-2026-15615EPSS 0.2%

    Logto omits validation of the SAML <Conditions> element, enabling attackers to strip time and audience restrictions and replay assertions indefinitely.

  45. 9.1CVE-2026-15612EPSS 0.2%

    Logto bypasses OIDC nonce validation when the nonce claim is absent from the id_token, enabling replay of authentication tokens and weakening session-binding.

  46. 8.6CVE-2026-65908EPSS 0.2%

    In JetBrains PyCharm before 2026.1.4, 2026.2 arbitrary code execution via malicious Python executable was possible on untrusted project open

  47. 7.2CVE-2026-65497EPSS 0.5%

    Administrator PHP Object Injection in Complianz <= 7.5.0 versions.

  48. 7.5CVE-2026-65493EPSS 0.4%

    Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.

  49. 7.8CVE-2026-64811EPSS 0.2%

    In JetBrains IntelliJ IDEA before 2026.2 arbitrary code execution was possible before granting project trust via development container configuration

  50. 8.4CVE-2026-64809EPSS 0.2%

    In JetBrains PhpStorm before 2026.2 arbitrary code execution was possible before granting project trust via the configured interpreter