Vulnerability database

9,730 matching CVEs.

WordPress onlyExploited (CISA KEV)With public PoC

CVESoftwareSignalsCVSSPublished

CVE-2026-120280Summary: A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted eleme…EPSS 2.0%9.3critical02 Nov 2026

CVE-2026-120277Summary: A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0.…EPSS 2.5%9.3critical02 Nov 2026

CVE-2026-120276Summary: A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnera…EPSS 3.2%9.3critical02 Nov 2026

CVE-2026-95863Summary: Improper neutralization of input during web page generation in Apache Wicket. A…7.6high01 Nov 2026

CVE-2026-87718Summary: Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy…2.3low01 Nov 2026

CVE-2026-84231Summary: Improper neutralization of input during web page generation in Apache Wicket. o…7.4high01 Nov 2026

CVE-2026-84177Summary: Incorrect behavior order in Apache Wicket: a file path is validated before the f…6.3medium01 Nov 2026

CVE-2026-84172Summary: Files accessible to external parties in Apache Wicket. org.apache.wicket.markup…6.3medium01 Nov 2026

CVE-2026-84170Summary: Allocation of resources without limits or throttling in Apache Wicket. org.apac…8.3high01 Nov 2026

CVE-2026-83594Summary: Memory allocation with an excessive size value in Apache Wicket. org.apache.wic…8.3high01 Nov 2026

CVE-2026-83559Summary: Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.cor…7.4high01 Nov 2026

CVE-2026-83539Summary: Improper neutralization of input during web page generation in Apache Wicket. o…7.4high01 Nov 2026

CVE-2026-82956Summary: Improper neutralization of input during web page generation in Apache Wicket. o…7.6high01 Nov 2026

CVE-2026-111089Summary: Apache Wicket reads texts from the application's resource bundles — a localized…7.6high01 Nov 2026

CVE-2026-82898Summary: Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol…2.1low01 Nov 2026

CVE-2026-82840Summary: Session fixation in Apache Wicket. org.apache.wicket.authroles.authentication.A…7.2high01 Nov 2026

CVE-2026-82705Summary: Missing authorization in Apache Wicket. org.apache.wicket.authorization.IAuthor…6.3medium01 Nov 2026

CVE-2026-82704Summary: Missing authorization in Apache Wicket. org.apache.wicket.core.request.handler.…6.9medium01 Nov 2026

CVE-2026-82559Summary: Insufficient session expiration in Apache Wicket. org.apache.wicket.protocol.ws…2.3low01 Nov 2026

CVE-2026-82558Summary: Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSo…2.3low01 Nov 2026

CVE-2026-82557Summary: Missing authorization in Apache Wicket. org.apache.wicket.markup.html.form.Form…6.9medium01 Nov 2026

CVE-2026-82115Summary: Missing authorization in Apache Wicket. org.apache.wicket.protocol.ws.api.WebSo…6.3medium01 Nov 2026

CVE-2026-120242Summary: A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208…1.9low01 Nov 2026

CVE-2026-120241Ruijie RG-ES205GC7.7high01 Nov 2026

CVE-2026-120238Summary: A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects t…EPSS 1.7%8.6high01 Nov 2026