CVE-2026-54188

HighCVSS 7.1/10Last modified Oct 26, 2026

Related CVEs from 2026

CVE-2026-541897.1Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.10 versions.CVE-2026-54193.7A flaw was found in gnutls. The PKCS#7 padding check, performed during decryption, was not constant-time. This timing side-channel could allCVE-2026-541906.5Unauthenticated Broken Access Control in Envira Photo Gallery <= 1.12.5 versions.CVE-2026-541917.1Unauthenticated Cross Site Scripting (XSS) in Pods <= 3.3.8 versions.CVE-2026-541927.1Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions.CVE-2026-541937.7Contributor Arbitrary File Deletion in Fusion Builder <= 3.15.4 versions.CVE-2026-541949.8Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions.CVE-2026-541957.1Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.0.1 versions.CVE-2026-541966.8Incorrect Privilege Assignment vulnerability in Jetmonsters JetFormBuilder allows Privilege Escalation. This issue affects JetFormBuilder: CVE-2026-541976.5Unauthenticated Sensitive Data Exposure in GetGenie <= 4.4.1 versions.CVE-2026-541987.1Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.35 versions.CVE-2026-541995.3Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header injection through the request body in the application's link storing
CVE-2026-54188: High severity, CVSS 7.1 | Vulnix