CVE Field Guide

Critical CVEs

CVE Title Updated Score
CVE-2026-108186 10.11.2026 9.6
CVE-2026-121683 10.11.2026 9.4
CVE-2026-121653 10.11.2026 9.8
CVE-2026-125757 mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer 10.11.2026 9.4
CVE-2026-125758 Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET 10.11.2026 9.1
CVE-2026-82509 V Programming Language net.http TLS Certificate Validation Bypass 10.11.2026 9.1
CVE-2026-112136 10.11.2026 9.2
CVE-2026-119446 Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API token 10.11.2026 9.4
CVE-2026-13312 10.11.2026 9.9
CVE-2026-115646 Partial String Comparison Vulnerability in HiRDB 10.11.2026 9.8
CVE-2026-109795 Missing authorization check in S4CRM 10.11.2026 9.9
CVE-2026-109798 XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) 10.11.2026 9.1
CVE-2026-109803 Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms) 10.11.2026 9.9
CVE-2026-120017 Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) 10.11.2026 10
CVE-2026-125086 D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials 10.11.2026 10
CVE-2026-89126 Memory Corruption vulnerability in SAP Web Dispatcher 10.11.2026 10
CVE-2026-107246 10.11.2026 9.2
CVE-2026-124600 Unencrypted HTTP Traffic Exposing Sensitive User Credentials in GV-Face Android Application v2.2.1 10.11.2026 10
CVE-2026-76964 Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager) 10.11.2026 10
CVE-2026-76965 OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform 10.11.2026 9.9
CVE-2026-89103 Broken Access Control in SAP Gateway 10.11.2026 10
CVE-2026-89119 Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager 10.11.2026 9.6
CVE-2026-125370 Kubero 3.0.0 through 3.1.1 Authentication Bypass via Hardcoded JWT Secret 09.11.2026 9.3
CVE-2026-125383 INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypass 09.11.2026 9.3
CVE-2026-125384 INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder 09.11.2026 9.3
CVE-2026-115934 SQL injection leading to privilege escalation 09.11.2026 9.3
CVE-2026-125120 Mongoose: sanitizeFilter not applied on countDocuments 09.11.2026 9.8
CVE-2026-123815 pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=) 09.11.2026 9.4
CVE-2026-123807 Signal K Server: Unauthenticated path traversal in resources-provider v2 API leads to JWT secret disclosure, admin impersonation and remote code execution 09.11.2026 9.8
CVE-2026-124001 ION-DTN 2.2.1b-4.2.0 Integer Overflow Heap Corruption via DGR 09.11.2026 9.2
CVE-2026-123800 SuperTokens Core: App-scoped API key can overwrite the parent connection URI domain's credentials and take over sibling applications 09.11.2026 9.9
CVE-2026-119756 Tasmota 16.0.0 Heap Out-of-Bounds Write via Device Groups UDP 09.11.2026 9.3
CVE-2026-104989 Pre-authentication remote code execution in Chaos V-Ray Swarm 09.11.2026 9.3
CVE-2026-110468 Remote Code Execution via Unrestricted File Upload in WidzialniCMS 09.11.2026 10
CVE-2026-110469 Remote Code Execution via Unrestricted File Upload in WidzialniCMS 09.11.2026 10
CVE-2026-124079 rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 RCE via Unauthenticated Redis Queue Poisoning 09.11.2026 9.3
CVE-2026-118462 AIS update mechanism executes unverified code 09.11.2026 9.2
CVE-2026-115252 Confection 0.4.0 - 0.4.7 - Unauthenticated RCE via Write Key Option 09.11.2026 10
CVE-2026-123870 [Eclipse CSI - otterdog] Unauthenticated remote code execution via eval() on format-string-injected webhook body when GITHUB_WEBHOOK_SECRET is unset 09.11.2026 9.5
CVE-2026-124585 Chengdu Feiyuxing Technology VW2100/VEC10GP Web Administration webserver add_expmac os command injection 09.11.2026 9.4
CVE-2026-124580 Chengdu Feiyuxing Technology VW2100/VEC10GP Weixin Auth Endpoint webserver handle_wechat_cn_wifi os command injection 09.11.2026 10
CVE-2026-124577 Intelbras SG 2404 PoE L2+ Web Management EXCU_SHELL improper authentication 09.11.2026 9.3
CVE-2026-113363 10.11.2026 9.3
CVE-2026-113364 10.11.2026 9.3
CVE-2026-124560 D-Link DIR-878 HNAP prog.cgi GetCAPTCHAsetting heap-based overflow 09.11.2026 9.3
CVE-2026-119506 WordPress Frontend Admin by DynamiApps plugin <= 3.30.1 - Privilege Escalation vulnerability 09.11.2026 9.1
CVE-2026-6715 Multiple Vulnerabilities in IBM Concert Software 10.11.2026 9.8
CVE-2026-17466 IBM Optim Test Data Management 1.0.0, 1.1.0, and 1.2.0 impacted by Path Traversal, Rate Limiting, and Weak Password Policy vulnerabilities 09.11.2026 9.1
CVE-2026-15266 Multiple Vulnerabilities in IBM Concert Software 10.11.2026 9.8
CVE-2026-114464 Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for October 2026 09.11.2026 9.3
CVE-2026-107331 DataStage on Cloud Pak for Data has several vulnerabilities 08.11.2026 9.9
CVE-2026-101117 IBM WebSphere eXtremes Scale Liberty deployment is affected by Cross Site Scripting(XSS) attacks. 09.11.2026 9.1
CVE-2026-109900 WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability 08.11.2026 9.6
CVE-2026-124427 Craft CMS 5.0.0 before 5.11.2 GraphQL Schema Scope Bypass via prev/next 08.11.2026 9.3
CVE-2026-124438 Scriban before 7.5.2 Delegate Target Exposure via array.map Member Access 08.11.2026 9.1
CVE-2026-124440 Kyverno 1.19.1 Privilege Escalation via apiCall Namespace Clamp Bypass 09.11.2026 9.4
CVE-2026-124445 OpenEMR 7.0.1 before 8.4.0 OneTimeAuth Token Replay and PIN Brute Force 08.11.2026 9.3
CVE-2026-124450 OpenEMR before 8.3.0 Arbitrary File Read/Write via disposeDocument 08.11.2026 9.3
CVE-2026-124463 OpenEMR before 8.3.0 Stored XSS via CAMOS Rx Print View 08.11.2026 9.3
CVE-2026-124469 OpenEMR before 8.3.0 SQL Injection via Fee Sheet warehouse parameter 08.11.2026 9.4
CVE-2026-124490 OpenEMR before 8.3.0 Arbitrary File Read/Write via oe-module-faxsms disposeDocument 08.11.2026 9.4
CVE-2026-124493 SunEditor before 3.4.0 Stored XSS via DocumentType Header textContent 08.11.2026 9.3
CVE-2026-124494 SunEditor before 3.4.0 Stored XSS via &colon; Entity Sanitizer Bypass 08.11.2026 9.3
CVE-2026-123549 OpenAM before 16.1.4 Privilege Escalation via Self-Registration Attribute Bypass 08.11.2026 9.3
CVE-2026-123550 OpenAM before 16.1.4 SAML Authentication Bypass via Unsigned Assertions 09.11.2026 9.3
CVE-2026-123551 OpenAM 14.0.0 before 16.1.4 Session Token Disclosure via Notification WebSocket 08.11.2026 10
CVE-2026-123614 imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow 09.11.2026 9.3
CVE-2026-124060 TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow 09.11.2026 9.4
CVE-2026-124059 TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow 09.11.2026 9.4
CVE-2026-124058 TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow 07.11.2026 9.4
CVE-2026-124057 TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow 07.11.2026 9.4
CVE-2026-123966 Tenda AC19 saveParentControlInfo heap-based overflow 09.11.2026 10
CVE-2026-120984 Keycloak-services: keycloak-services: manage-clients to arbitrary code execution through inline javascript policy import 09.11.2026 9.1
CVE-2026-122041 Checkout Field Editor for WooCommerce (Pro) <= 3.8.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'attachment_id' Parameter via thwcfe_remove_uploaded AJAX Action 07.11.2026 9.1
CVE-2026-104014 Naimur Email OTP Verification for WooCommerce <= 2.1.0 - Unauthenticated Authentication Bypass to Account Takeover via Abandoned Password Reset Finalization 07.11.2026 9.8
CVE-2026-118066 Appointment Booking Plugin <= 5.7.6 - Unauthenticated Authentication Bypass via Account Takeover via 'IS NOT NULL' Sentinel in 'password_reset_token' Parameter 08.11.2026 9.1
CVE-2026-119075 Registration Form for WooCommerce <= 1.1.4 - Unauthenticated Privilege Escalation to 'user_roles' Parameter at Checkout 07.11.2026 9.8
CVE-2026-123961 TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow 09.11.2026 9.4
CVE-2026-123960 TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow 09.11.2026 9.4
CVE-2026-123959 TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow 07.11.2026 9.4
CVE-2026-123958 TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow 07.11.2026 9.4
CVE-2026-123957 TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow 09.11.2026 9.4
CVE-2026-18535 IBM API Connect Denial of Service 08.11.2026 9.6
CVE-2026-16720 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.8
CVE-2026-16884 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-16918 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.3
CVE-2026-16920 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-17049 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-17066 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.1
CVE-2026-17117 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17131 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.3
CVE-2026-17132 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-17134 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-17146 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-17147 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17150 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17158 Multiple Vulnerabilities in IBM API Connect 10.11.2026 9.9
CVE-2026-17239 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17278 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.8
CVE-2026-17292 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.1
CVE-2026-17296 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.6
CVE-2026-17297 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.6
CVE-2026-17298 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-17299 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.6
CVE-2026-17301 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.8
CVE-2026-17313 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.8
CVE-2026-17329 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.3
CVE-2026-17336 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-17338 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.1
CVE-2026-17339 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.1
CVE-2026-17340 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.8
CVE-2026-17342 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17344 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.3
CVE-2026-17353 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.6
CVE-2026-17354 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17359 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17360 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.8
CVE-2026-17392 Multiple Vulnerabilities in IBM API Connect 10.11.2026 9.9
CVE-2026-17394 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.6
CVE-2026-17396 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.6
CVE-2026-17399 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.9
CVE-2026-17402 Multiple Vulnerabilities in IBM API Connect 10.11.2026 9.9
CVE-2026-17403 Multiple Vulnerabilities in IBM API Connect 10.11.2026 9
CVE-2026-17408 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.8
CVE-2026-17409 Multiple Vulnerabilities in IBM API Connect 10.11.2026 9.4
CVE-2026-17410 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.9
CVE-2026-18836 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.3
CVE-2026-18838 Multiple Vulnerabilities in IBM API Connect 07.11.2026 9.4
CVE-2026-123218 IBM Aspera Faspex Authorization Bypass 10.11.2026 9.8
CVE-2026-19803 Printcart Store <= 2.13.2 - Unauthenticated Arbitrary File Upload via nbu_crop_image 'url' Parameter 08.11.2026 9.8
CVE-2026-17362 Multiple Vulnerabilities in IBM API Connect 09.11.2026 9.8
CVE-2026-93754 payever – WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution 08.11.2026 9.8
CVE-2026-109469 Entra Device Registration Elevation of Privilege Vulnerability 06.11.2026 10
CVE-2026-59104 UgCS server HCI authentication bypass with empty credentials 10.11.2026 9.3
CVE-2026-68935 Chartbrew: SSRF to Internal Network via User-Controlled allowPrivateHost Flag on API Connections 06.11.2026 9.1
CVE-2026-54349 Chartbrew SQL injection in dashboard filter substitution 09.11.2026 9.8
CVE-2026-85295 Chartbrew: Full account takeover via JWTs accepted under default CB_SECRET 09.11.2026 9.8
CVE-2026-86005 Chartbrew: Unauthenticated BullMQ Admin Dashboard Exposure in Chartbrew 06.11.2026 9.3
CVE-2026-102530 JupyterLab Desktop: Cross-Site Scripting (XSS) leading to Remote Code Execution on Connect URL 09.11.2026 9.4
CVE-2026-86044 JupyterLab Desktop: One-Click Jupyter Server Token Leak leading to Remote Code Execution 06.11.2026 9.6
CVE-2026-63438 2FAuth: Reverse Proxy Guard Auto-Creates Users With Admin Promotion From Unauthenticated Header Value 06.11.2026 9.8
CVE-2026-63439 2FAuth: Reverse Proxy Guard Trusts Client-Supplied Headers Without Proxy Verification 09.11.2026 9.8
CVE-2026-58490 Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults 09.11.2026 9.8
CVE-2026-124040 CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State 06.11.2026 9.2
CVE-2026-119923 Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser 07.11.2026 9.3
CVE-2026-71495 Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access 09.11.2026 10
CVE-2026-122193 OS command injection in the example SSM documents in Trusted Remote Execution (REX) 06.11.2026 9.3
CVE-2026-123831 07.11.2026 9.6
CVE-2026-123832 07.11.2026 9.6
CVE-2026-123488 Craft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search Endpoint 09.11.2026 9.3
CVE-2026-59105 Universal sysadmin credential vulnerability in Jumis 06.11.2026 9.3
CVE-2026-107622 BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter 06.11.2026 9.8
CVE-2026-114630 ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter 06.11.2026 9.1
CVE-2026-123279 06.11.2026 9
CVE-2026-123294 07.11.2026 9.6
CVE-2026-119516 WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerability 07.11.2026 9.8
CVE-2026-120844 WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.3 - Privilege Escalation vulnerability 06.11.2026 9.8
CVE-2026-118423 WP Libre Form 1.5.0.1 - Unauthenticated RCE via Arbitrary File Upload 06.11.2026 10
CVE-2026-88800 MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion 06.11.2026 9.1
CVE-2026-63017 Subnet Solutions PowerSYSTEM Center Incorrect Authorization 10.11.2026 9.4
CVE-2026-63774 Subnet Solutions PowerSYSTEM Center SQL Injection 10.11.2026 9.4
CVE-2026-77596 Kubeflow Pipelines API server lacks authorization for shared pipeline uploads 05.11.2026 9.6
CVE-2026-111494 Incorrect validation of TLS certificates in the MatchPoint Android app 05.11.2026 9.1
CVE-2026-111490 Insecure direct object reference (IDOR) vulnerability in the MatchPoint API 10.11.2026 9.9
CVE-2026-111489 A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform 10.11.2026 9.9
CVE-2026-119757 BTCPay Server < 2.4.2 LND Macaroon Credential File Disclosure 05.11.2026 9.3
CVE-2026-48705 MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) 05.11.2026 9.3
CVE-2026-85076 Cronicle: Privilege Escalation via Arbitrary Environment Variable Injection through Event Params (Incomplete Fix for CVE-2026-39401) 09.11.2026 9
CVE-2026-46350 dcmjs: DS/IS VALUE REPRESENTATION INPUT VALIDATION BYPASS 09.11.2026 9.1
CVE-2026-102940 OpenEMR: Missing Write ACL Allows Unauthorized Document Reassignment 05.11.2026 9.6
CVE-2026-116790 FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY 09.11.2026 9.1
CVE-2026-116779 FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands 10.11.2026 9.8
CVE-2026-116785 FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling 09.11.2026 9.1
CVE-2026-100358 SuiteCRM: Admin OS RCE via Dropdown Editor PHP Injection 09.11.2026 9.4
CVE-2026-71550 SuiteCRM: LFI to RCE via AOW_WorkFlow 09.11.2026 9.9
CVE-2026-123198 LMFDB before commit 01829bd Unauthenticated Server-Side Template Injection via /knowledge/render/<ID> 05.11.2026 9.3
CVE-2026-54143 OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command execution 09.11.2026 9.8
CVE-2026-54141 OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec` 09.11.2026 9
CVE-2026-119344 Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacks 09.11.2026 9.1
CVE-2026-117691 Keycloak-services: keycloak-services: saml redirect binding signature bypass via percent-encoded parameter names 07.11.2026 9.1
CVE-2026-121489 Apache Juneau: Path traversal in DirectoryResource allows reading files outside the configured root directory 05.11.2026 10
CVE-2026-73099 Apache Juneau: Cross-site request forgery via default-enabled content query-parameter body override 05.11.2026 10
CVE-2026-73100 Apache Juneau: Sensitive request headers logged in cleartext by the default request logger on server errors 05.11.2026 10
CVE-2026-73101 Apache Juneau: Internal exception class and message disclosed via error response header and body regardless of secure defaults 05.11.2026 10
CVE-2026-73116 Apache Juneau: REST client forwards credentials to a different origin when following HTTP redirects 05.11.2026 10
CVE-2026-73117 Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data 05.11.2026 10
CVE-2026-96677 Apache Juneau: Cross-site scripting via unescaped request variables in HTML-doc chrome 05.11.2026 10
CVE-2026-73098 Apache Juneau: Unsafe reflection allows attacker-controlled class initialization during parsing 05.11.2026 10
CVE-2026-100109 Security For WooCommerce 1.0.10 - 1.0.16 - Unauthenticated Privilege Escalation via usfw_create_temporary_user 05.11.2026 9.8
CVE-2026-123025 10.11.2026 9.4
CVE-2026-122992 09.11.2026 9.2
CVE-2026-122302 Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Check 09.11.2026 9.3
CVE-2026-122303 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicy 09.11.2026 9.4
CVE-2026-122304 Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loader 09.11.2026 9.4
CVE-2026-122310 Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPath 09.11.2026 9.4
CVE-2026-122311 Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argument 09.11.2026 9.4
CVE-2026-122313 Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy 09.11.2026 9.4
CVE-2026-122051 Edimax BR-6208AC mp command injection 05.11.2026 10
CVE-2026-115770 Pocket ID: Email verification token remains valid after address change, enabling arbitrary verified-email spoofing 09.11.2026 9.6
CVE-2026-52848 GLPI: MFA bypass 09.11.2026 9.2
CVE-2026-54384 VitaFit Cloud API Authentication Bypass via POST /front/login/sns/ 09.11.2026 9.3
CVE-2026-54378 VitaFit Cloud API Broken Access Control via S3 Token Endpoint 09.11.2026 9.3
CVE-2026-57566 Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy 05.11.2026 9.3
CVE-2026-102894 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover 06.11.2026 9.1
CVE-2026-102895 GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin 10.11.2026 9.8
CVE-2026-97693 Yuxi sandbox isolation failure allows cross-tenant access and internal service compromise 09.11.2026 9.9
CVE-2026-82418 IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL 09.11.2026 9.8
CVE-2026-122013 Comfast CF-WR632AX Multipart webmgnt path traversal 09.11.2026 10
CVE-2025-71457 vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php 05.11.2026 9.3
CVE-2026-113373 Nexus Repository 3 - Disabled or Locked Single Sign-On Users Can Sign In Again 09.11.2026 9.1
CVE-2026-122220 WPO365 LOGIN before 45.2 SAML Replay Protection Bypass 05.11.2026 9.1
CVE-2026-121933 Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication 09.11.2026 10
CVE-2026-107846 bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list 09.11.2026 9.3
CVE-2026-113780 ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary 05.11.2026 9.3
CVE-2026-121932 Linksys E5350 apply.cgi system os command injection 09.11.2026 10
CVE-2026-121931 Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection 09.11.2026 9.4
CVE-2026-121930 Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection 09.11.2026 9.4
CVE-2026-122120 05.11.2026 9
CVE-2026-121952 FreeRDP before 3.32.2 Proxy Out-of-Bounds Write via Bitmap Cache v2 Capability 04.11.2026 9.3
CVE-2026-121953 FreeRDP before 3.32.2 Use-After-Free via rdpgfx Dynamic Virtual Channel Close 04.11.2026 9.3
CVE-2026-121638 WatchGuard AuthPoint Gateway Improper Certificate Validation Allows Man-in-the-Middle Attacks 04.11.2026 9.1
CVE-2026-121639 WatchGuard AuthPoint Gateway Improper Authentication Allows Unauthenticated Denial of Service 04.11.2026 9.2
CVE-2026-121640 WatchGuard AuthPoint Gateway Capture-replay Allows Unauthorized Administrative Actions 04.11.2026 9.1
CVE-2026-122006 09.11.2026 9.8
CVE-2026-121939 Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking 04.11.2026 9.2
CVE-2026-119481 WordPress JetFormBuilder plugin <= 3.6.7.1 - Privilege Escalation vulnerability 04.11.2026 9.8
CVE-2026-65555 WordPress Uncanny Toolkit for LearnDash plugin <= 3.8.2 - Privilege Escalation vulnerability 04.11.2026 9.8
CVE-2026-114424 Code execution through double evaluation in address replacement rules 09.11.2026 9.2
CVE-2026-114425 Forged LFT metadata permits arbitrary file read and deletion 09.11.2026 9.2
CVE-2026-121802 06.11.2026 9.1
CVE-2026-121615 Linksys E5600 Login mesh_login.cgi improper authentication 09.11.2026 10
CVE-2026-121609 Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentials 09.11.2026 10
CVE-2026-121607 Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injection 09.11.2026 10
CVE-2026-121606 Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verification 09.11.2026 10
CVE-2026-121600 TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflow 09.11.2026 9.4
CVE-2026-121598 TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow 04.11.2026 9.4
CVE-2026-121599 TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflow 07.11.2026 9.4
CVE-2026-121597 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow 09.11.2026 9.4
CVE-2026-92189 Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability 06.11.2026 9.8
CVE-2026-114549 NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability 06.11.2026 9.8
CVE-2026-92188 Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability 06.11.2026 9.8
CVE-2026-92190 Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability 06.11.2026 9.8
CVE-2022-29966 Emerson Ovation Missing Authentication for Critical Functionality 06.11.2026 9.3

Latest Updates

CVE Title Updated Score
CVE-2026-105426 10.11.2026 6.7
CVE-2026-123179 10.11.2026 5.5
CVE-2026-123181 10.11.2026 5.5
CVE-2026-105669 10.11.2026 6.7
CVE-2026-124037 Information exposure in Flock Safety Platform public access-list sign-up 10.11.2026
CVE-2026-124038 Uncontrolled XML entity expansion in the Flock Installer app for Android 10.11.2026
CVE-2026-105425 10.11.2026 7.2
CVE-2026-112191 10.11.2026
CVE-2026-124036 Cross-organization access to saved-search alerts in FlockOS 10.11.2026
CVE-2026-86336 Apache TomEE: EJB method authorization is silently skipped on JDK 21+ 10.11.2026
CVE-2026-108186 10.11.2026 9.6
CVE-2026-108187 10.11.2026 8.1
CVE-2026-121683 10.11.2026 9.4
CVE-2026-86531 Apache TomEE: DoS via unbounded request body and multipart handling in embedded HTTP server 10.11.2026
CVE-2026-87758 Apache TomEE: Missing TLS hostname verification in ejbds client connections 10.11.2026
CVE-2026-97849 Apache TomEE: Derby network service listens on all interfaces 10.11.2026
CVE-2026-97867 Apache TomEE: Database credential disclosure via remote JNDI lookup 10.11.2026
CVE-2026-97870 Apache TomEE: Missing authentication for Hessian endpoints in embedded HTTP server 10.11.2026
CVE-2026-97872 Apache TomEE: Authentication bypass of Hessian EJB endpoints due to ignored security settings 10.11.2026
CVE-2026-97874 Apache TomEE: Authentication bypass for Hessian endpoints in non-root web applications 10.11.2026
CVE-2026-97880 Apache TomEE: Authentication bypass in the embedded HTTP server for endpoints protected by HTTP Basic authentication 10.11.2026
CVE-2026-97881 Apache TomEE: Path traversal in embedded HTTP server static resource handling 10.11.2026
CVE-2026-97888 Apache TomEE: Caller identity leaks across requests in embedded HTTP server 10.11.2026
CVE-2026-97890 Apache TomEE: Session fixation in embedded HTTP server 10.11.2026
CVE-2026-111239 Apache TomEE: Code execution by any authenticated user via the SSH administration shell 10.11.2026
CVE-2026-111240 Apache TomEE: Authentication bypass for accounts without a stored password in SQL login module 10.11.2026
CVE-2026-111241 Apache TomEE: Local code execution via predictable passivation files in the shared temporary directory 10.11.2026
CVE-2026-111242 Apache TomEE: Privilege escalation via leaked MicroProfile JWT run-as identity 10.11.2026
CVE-2026-111243 Apache TomEE: Expired MicroProfile JWT tokens accepted with negative clock skew 10.11.2026
CVE-2026-111244 Apache TomEE: Authorization bypass in MicroProfile JWT role checks for JAX-RS resources 10.11.2026
CVE-2026-11315 10.11.2026 4.3
CVE-2026-11316 10.11.2026 8.8
CVE-2026-121653 10.11.2026 9.8
CVE-2026-18128 10.11.2026 6.8
CVE-2026-105813 10.11.2026 6.3
CVE-2026-111245 Apache TomEE: Privilege escalation via WS-Security caller identity leaking between requests 10.11.2026
CVE-2026-111246 Apache TomEE: HTTP sessions shared across web applications in embedded HTTP server 10.11.2026
CVE-2026-111247 Apache TomEE: Privilege escalation via user name matching a role name 10.11.2026
CVE-2026-111248 Apache TomEE: Authentication with the stored password digest in Tomcat user identity store 10.11.2026
CVE-2026-111249 Apache TomEE: Unauthenticated LiveReload endpoint reachable from the network 10.11.2026
CVE-2026-111250 Apache TomEE: Authentication bypass via programmatic authentication in embedded HTTP server 10.11.2026
CVE-2026-111251 Apache TomEE: Unauthenticated server shutdown via the admin port 10.11.2026
CVE-2026-111256 Apache TomEE: Missing authentication for web service endpoints in embedded HTTP server 10.11.2026
CVE-2026-111257 Apache TomEE: Well-known administrative credentials created at startup 10.11.2026
CVE-2026-125747 ZenTao PMS through 22.7 IDOR via Build Module Mutation Methods 10.11.2026
CVE-2026-125748 Parabol before 15.21.2 Missing Authorization via addReactjiToReactable Mutation 10.11.2026
CVE-2026-125749 TaxHacker through 0.8.5 IDOR via Settings Server Actions userId 10.11.2026
CVE-2026-125750 Firekylin through 2.18.1 Improper Authorization via Admin REST API GET Actions 10.11.2026
CVE-2026-125751 Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenById 10.11.2026
CVE-2026-125752 Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus 10.11.2026
CVE-2026-125753 ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints 10.11.2026
CVE-2026-125754 Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 IDOR via ExpenseReport Payment API 10.11.2026
CVE-2026-125755 Nodemailer 3.0.0 before 10.4.1 Recipient Allow-List Bypass via addressparser 10.11.2026
CVE-2026-125756 postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncation 10.11.2026
CVE-2026-125757 mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer 10.11.2026
CVE-2026-125758 Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET 10.11.2026
CVE-2026-125759 Nango before 0.71.3 SQL Injection via Orchestrator Task Group Key 10.11.2026
CVE-2026-111258 Apache TomEE: Security constraint bypass via request routing 10.11.2026
CVE-2026-111259 Apache TomEE: Predictable HTTP session identifiers in embedded server 10.11.2026
CVE-2026-111260 Apache TomEE: Predictable OpenID Connect state and nonce values 10.11.2026
CVE-2026-111261 Apache TomEE: Authentication bypass with empty password in LDAP identity store 10.11.2026
CVE-2026-111262 Apache TomEE: LDAP injection in LDAP identity store 10.11.2026
CVE-2026-111263 Apache TomEE: Missing authentication on EJB web service endpoints deployed in a web application 10.11.2026
CVE-2026-111264 Apache TomEE: Authentication bypass on EJB web service endpoints via HTTP method 10.11.2026
CVE-2026-87756 Apache TomEE: Missing authorization on internal deployer EJBs in default profile 10.11.2026
CVE-2026-86532 Apache TomEE: Username enumeration and timing side channel in JAAS login modules 10.11.2026
CVE-2026-86811 Apache TomEE: Path traversal via stateful EJB passivation 10.11.2026
CVE-2026-87755 Apache TomEE: Stateful session bean hijacking via predictable session identifiers 10.11.2026
CVE-2026-113422 10.11.2026
CVE-2026-121885 Podman: untrusted image labels allow auto-update to restart arbitrary systemd units 10.11.2026
CVE-2026-123082 Docker Desktop logs can expose the Docker Hub access token 10.11.2026
CVE-2026-114359 10.11.2026
CVE-2026-120399 Flightctl-api: flightctl-remote-access: flightctl: unbounded tls handshake in conncontext can block accepting connections 10.11.2026
CVE-2026-124852 Incorrect boundary conditions in the Graphics: CanvasWebGL component 10.11.2026
CVE-2026-124853 Sandbox escape due to incorrect boundary conditions in the Graphics: Text component 10.11.2026
CVE-2026-124854 Privilege escalation in the DOM: Navigation component 10.11.2026
CVE-2026-124855 Sandbox escape in the DOM: Navigation component 10.11.2026
CVE-2026-124856 Incorrect boundary conditions in the Networking: HTTP component 10.11.2026
CVE-2026-124857 Use-after-free in the Graphics: Canvas2D component 10.11.2026
CVE-2026-124858 Use-after-free in the DOM: HTML Parser component 10.11.2026
CVE-2026-124859 Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component 10.11.2026
CVE-2026-124860 Use-after-free in the Audio/Video component 10.11.2026
CVE-2026-124861 Sandbox escape due to use-after-free in the Audio/Video: cubeb component 10.11.2026
CVE-2026-124862 Use-after-free in the DOM: Core & HTML component 10.11.2026
CVE-2026-124863 Use-after-free in the DOM: HTML Parser component 10.11.2026
CVE-2026-124864 Sandbox escape due to use-after-free in the DOM: Service Workers component 10.11.2026
CVE-2026-124865 Use-after-free in the Audio/Video component 10.11.2026
CVE-2026-124866 Use-after-free in the Layout component 10.11.2026
CVE-2026-124867 Use-after-free in the DOM: Editor component 10.11.2026
CVE-2026-124868 Incorrect boundary conditions in the DOM: Core & HTML component 10.11.2026
CVE-2026-124869 Use-after-free in the DOM: Core & HTML component 10.11.2026
CVE-2026-124870 Incorrect boundary conditions in the JavaScript: GC component 10.11.2026
CVE-2026-124871 Use-after-free in the DOM: HTML Parser component 10.11.2026
CVE-2026-124872 Use-after-free in the Cycle Collector component 10.11.2026
CVE-2026-124873 Invalid pointer in the DOM: Editor component 10.11.2026
CVE-2026-124874 Same-origin policy bypass in the Networking: HTTP component 10.11.2026
CVE-2026-124875 Incorrect boundary conditions in the DOM: CSS Object Model component 10.11.2026
CVE-2026-124876 Use-after-free in the CSS Parsing and Computation component 10.11.2026
CVE-2026-124877 Use-after-free in the Layout: Positioned component 10.11.2026
CVE-2026-124878 Use-after-free in the Layout: Positioned component 10.11.2026
CVE-2026-124879 Invalid pointer in the Networking: Cache component 10.11.2026
CVE-2026-124880 Use-after-free in the DOM: Core & HTML component 10.11.2026
CVE-2026-124881 Use-after-free in the CSS Parsing and Computation component 10.11.2026
CVE-2026-124882 Use-after-free in the CSS Parsing and Computation component 10.11.2026
CVE-2026-124883 Use-after-free in the DOM: Core & HTML component 10.11.2026
CVE-2026-124884 Use-after-free in the JavaScript: GC component 10.11.2026
CVE-2026-124885 Use-after-free in the Graphics: Text component 10.11.2026
CVE-2026-124886 Invalid pointer in the Layout: Text and Fonts component 10.11.2026
CVE-2026-124887 Incorrect boundary conditions in the Layout: Text and Fonts component 10.11.2026
CVE-2026-124888 Incorrect boundary conditions in the Layout: Text and Fonts component 10.11.2026
CVE-2026-124889 Use-after-free in the CSS Parsing and Computation component 10.11.2026
CVE-2026-124890 Use-after-free in the DOM: Core & HTML component 10.11.2026
CVE-2026-124891 Incorrect boundary conditions in the DOM: Selection component 10.11.2026
CVE-2026-124892 Use-after-free in the JavaScript: GC component 10.11.2026
CVE-2026-124893 Use-after-free in the DOM: Workers component 10.11.2026
CVE-2026-124894 Use-after-free in the Networking: Cookies component 10.11.2026
CVE-2026-124895 Use-after-free in the Storage: localStorage & sessionStorage component 10.11.2026
CVE-2026-124896 Invalid pointer in the Layout: Text and Fonts component 10.11.2026
CVE-2026-124897 Use-after-free in the JavaScript: GC component 10.11.2026
CVE-2026-124898 Use-after-free in the DOM: Editor component 10.11.2026
CVE-2026-124899 Use-after-free in the Layout: Text and Fonts component 10.11.2026
CVE-2026-124900 Sandbox escape due to use-after-free in the DOM: Service Workers component 10.11.2026
CVE-2026-124901 Other issue in the Networking: JAR component 10.11.2026
CVE-2026-124902 Same-origin policy bypass due to race condition in the Audio/Video component 10.11.2026
CVE-2026-124903 Sandbox escape due to use-after-free in the IPC component 10.11.2026
CVE-2026-124904 Use-after-free in the SVG component 10.11.2026
CVE-2026-124905 Sandbox escape in the DOM: Navigation component 10.11.2026
CVE-2026-124906 Use-after-free in the Graphics: WebRender component 10.11.2026
CVE-2026-124907 Privilege escalation, sandbox escape due to use-after-free in the Graphics: CanvasWebGL component 10.11.2026
CVE-2026-124908 Use-after-free in the CSS Parsing and Computation component 10.11.2026
CVE-2026-124909 Information disclosure in the Private Browsing component 10.11.2026
CVE-2026-124910 Mitigation bypass in the WebExtensions component 10.11.2026
CVE-2026-124911 Clickjacking issue in the Autofill component in Firefox for Android 10.11.2026
CVE-2026-124912 Spoofing issue in the DOM: Security component 10.11.2026
CVE-2026-124913 Site isolation issue in the Networking component 10.11.2026
CVE-2026-124914 Site isolation issue in the DOM: Navigation component 10.11.2026
CVE-2026-124915 Incorrect boundary conditions in the Graphics: WebGPU component 10.11.2026
CVE-2026-124917 Sandbox escape due to use-after-free in the Widget: Gtk component 10.11.2026
CVE-2026-124918 Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component 10.11.2026
CVE-2026-124919 Privilege escalation due to use-after-free in the WebRTC: Networking component 10.11.2026
CVE-2026-124920 Uninitialized memory in the Graphics: WebGPU component 10.11.2026
CVE-2026-124921 Sandbox escape in the Graphics: WebGPU component 10.11.2026
CVE-2026-124922 Use-after-free in the CSS Transitions and Animations component 10.11.2026
CVE-2026-124923 Sandbox escape in the Agent component 10.11.2026
CVE-2026-124924 Incorrect boundary conditions in the Graphics: WebRender component 10.11.2026
CVE-2026-124925 Information disclosure in the Layout component 10.11.2026
CVE-2026-124926 Incorrect boundary conditions in the WebRTC component 10.11.2026
CVE-2026-124927 Site isolation issue in the Graphics: WebRender component 10.11.2026
CVE-2026-124928 Mitigation bypass in the SVG component 10.11.2026
CVE-2026-124929 Information disclosure in the Layout: Form Controls component 10.11.2026
CVE-2026-124930 Information disclosure in the Address Bar component 10.11.2026
CVE-2026-124931 Same-origin policy bypass in the DOM: Core & HTML component 10.11.2026
CVE-2026-124932 Use-after-free in the Graphics component 10.11.2026
CVE-2026-124933 Sandbox escape in the Console component 10.11.2026
CVE-2026-124934 Spoofing issue in the Security component 10.11.2026
CVE-2026-124935 Undefined behavior in the WebRTC: Networking component 10.11.2026
CVE-2026-124936 Spoofing issue in the Address Bar component 10.11.2026
CVE-2026-124937 Other issue in the Media component in Firefox for Android 10.11.2026
CVE-2026-124938 Mitigation bypass in the Add-ons Manager component 10.11.2026
CVE-2026-124939 JIT miscompilation in the JavaScript Engine: JIT component 10.11.2026
CVE-2026-124940 Mitigation bypass in the File Handling component 10.11.2026
CVE-2026-124941 Information disclosure in the Security: RLBox component 10.11.2026
CVE-2026-124942 Invalid pointer in the DOM: Streams component 10.11.2026
CVE-2026-124943 Use-after-free in the Layout component 10.11.2026
CVE-2026-124944 Information disclosure in the Marionette component 10.11.2026
CVE-2026-124945 Invalid pointer in the Layout: Text and Fonts component 10.11.2026
CVE-2026-124946 Invalid pointer in the JavaScript Engine: JIT component 10.11.2026
CVE-2026-124947 Incorrect boundary conditions in the Graphics component 10.11.2026
CVE-2026-124948 Incorrect boundary conditions, use-after-free in the Graphics component 10.11.2026
CVE-2026-124949 Other issue in the SVG component 10.11.2026
CVE-2026-124950 Same-origin policy bypass in the CSS Parsing and Computation component 10.11.2026
CVE-2026-124951 Privilege escalation in the Nimbus Desktop Client component 10.11.2026
CVE-2026-124952 Use-after-free in the Audio/Video component 10.11.2026
CVE-2026-82509 V Programming Language net.http TLS Certificate Validation Bypass 10.11.2026
CVE-2026-12708 Unbounded HTTP/3 Datagram flow map growth in tokio-quiche 10.11.2026
CVE-2026-124747 Busybox: heap buffer overflow in wget ftp resume when the resume offset exceeds the reported file size 10.11.2026
CVE-2026-100962 10.11.2026 5.3
CVE-2026-125744 Missing permission check in ticket layout API 10.11.2026
CVE-2026-125871 MISP sourcecache module SSRF allows fetching arbitrary internal URLs via attribute enrichment 10.11.2026
CVE-2026-16478 Arbitrary Package Installation in TÜBİTAK BİLGEM's pardus-nvidia-installer 10.11.2026 7
CVE-2026-125745 WCK before 2.4.1 Missing Authorization via wck_show_update_form AJAX 10.11.2026
CVE-2026-121267 Incorrect Default Permissions Vulnerability in TÜBİTAK BİLGEM's eta-remote 10.11.2026 7.8
CVE-2026-101275 Insufficient validation of payment status in pretix-adyen 10.11.2026
CVE-2026-125742 7-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction 10.11.2026
CVE-2026-120350 Stored Cross-Site Scripting in the Vaadin Rich Text Editor via an Unescaped Video Embed 10.11.2026
CVE-2026-121191 Improper Access Control Vulnerability in TÜBİTAK BİLGEM's eta-remote 10.11.2026 6.5
CVE-2026-120326 Unescaped Download File Name Allows Content-Disposition Parameter Injection in Vaadin Flow 10.11.2026
CVE-2026-12266 Authenticated Broken Access Control 10.11.2026 7.6
CVE-2026-109097 10.11.2026 8.2
CVE-2026-109830 10.11.2026 7.3
CVE-2026-112136 10.11.2026 8.8
CVE-2026-112137 10.11.2026 5.4
CVE-2026-58114 10.11.2026 7.5
CVE-2026-59082 10.11.2026 7.8
CVE-2026-12574 Server-Side HTML Injection 10.11.2026 8.1
CVE-2026-125706 Gst-plugins-bad: gst-plugins-bad: missing bounds checks in mpeg ps pes header parsing 10.11.2026
CVE-2026-125707 Gst-plugins-bad: gst-plugins-bad: off-by-one write in mxf demuxer temporal offset table 10.11.2026
CVE-2026-125709 Libstdc++: overflow leaves streambuf in inconsistent state on i/o error. 10.11.2026
CVE-2026-125712 Gst-plugins-base: gst-plugins-base: missing bounds checks in rtcp sdes packet parsing 10.11.2026
CVE-2026-125715 10.11.2026 5.3
CVE-2026-12573 Authenticated Command Injection 10.11.2026 8.8
CVE-2026-123717 [Eclipse CSI - otterdog] OS Command Injection and Arbitrary Code Execution 10.11.2026
CVE-2026-12572 SQL Injection 10.11.2026 7.2
CVE-2026-95651 Authentication Bypass 10.11.2026 7.5
CVE-2026-95646 Authenticated Command Injection 10.11.2026 8
CVE-2026-119446 Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API token 10.11.2026
CVE-2026-120286 Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groups 10.11.2026
CVE-2026-120295 Incorrect authorization in the devices page bulk move allows view-role members to move devices into another organization and receive its firmware 10.11.2026
CVE-2026-120730 Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmware 10.11.2026
CVE-2026-120997 Improper session invalidation keeps removed or demoted members' open pages and device consoles working at their old role 10.11.2026
CVE-2026-120999 Improper authentication lets Google sign-in and confirmation links sign users in to accounts registered with their email address by someone else 10.11.2026
CVE-2026-125672 Cockpit: cockpit-storaged: tang keyserver address from an untrusted luks header clevis token reaches curl's argument vector as an option 10.11.2026
CVE-2026-125703 Gst-plugins-bad: gst-plugins-bad: bounds check errors in mxf vanc packet handling 10.11.2026
CVE-2026-125704 Gstreamer: gstreamer: use-after-free in gstreamer core buffer value deserialization 10.11.2026
CVE-2026-124503 sooperset mcp-atlassian io.py validate_safe_path path traversal 10.11.2026
CVE-2026-104619 PackageKit ZYpp rollback vulnerability 10.11.2026 7.8
CVE-2026-60035 Command injection in network auth 10.11.2026
CVE-2026-60036 Command injection in patch activate 10.11.2026
CVE-2026-60037 OpenSSL command injection in device importer 10.11.2026
CVE-2026-60038 OpenSSL command injection in ImportPKCS12 10.11.2026
CVE-2026-60039 Command injection in backup restore 10.11.2026
CVE-2026-60040 DoS in backup creation 10.11.2026
CVE-2026-60041 CSRF in backend 10.11.2026
CVE-2026-60042 Authentication bypass in com_check 10.11.2026
CVE-2026-60043 XSS in backend 10.11.2026
CVE-2026-60044 Static backup password 10.11.2026
CVE-2026-60045 Arbitrary file upload 10.11.2026
CVE-2026-60046 DoS via password reset 10.11.2026
CVE-2026-106007 FraudLabs Pro SMS Verification <= 1.12.1 - Unauthenticated Unrestricted SMS Sending via wp_sms_action_send 10.11.2026 5.3
CVE-2026-106025 Cargo Shipping Location for WooCommerce 4.0.0 - 5.7.1 - Unauthenticated Order Status Manipulation 10.11.2026 5.3
CVE-2026-120012 Information Disclosure vulnerability in SAP Cloud SDK for AI(JavaScript) 10.11.2026 7.5
CVE-2026-120013 Path Traversal in Agent Memory Module of SAP Cloud SDK for Python 10.11.2026 7.5
CVE-2026-125652 Keycloak-services: keycloak-services: client-level mandatory pkce bypass via login-actions entry point 10.11.2026
CVE-2026-100386 Ultra Addons for Contact Form 7 <= 3.5.54 - Unauthenticated Arbitrary File Read via CF7 Field Value in mPDF WriteHTML SVG Parser 10.11.2026 7.5
CVE-2026-120513 Everest Forms <= 3.6.2 - Unauthenticated Arbitrary File Deletion via 'everest_forms_{form_id}_old_{field_id}' Parameter 10.11.2026 8.2
CVE-2026-76877 WPML Multilingual CMS <= 4.9.7 - Unauthenticated Authentication Bypass in Language-per-Domain SSO via 'wpml_sso_token_domain' Parameter 10.11.2026 8.1
CVE-2026-84938 Avada (Fusion) Builder <= 3.16.1 - Unauthenticated Stored Cross-Site Scripting via Form Notification Dynamic-Data action_hook 10.11.2026 7.2
CVE-2026-93427 ARMember Premium <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Registration Custom Field 10.11.2026 7.2
CVE-2026-104676 Zion Builder <= 3.6.17 - Author+ Stored XSS via SVG Upload 10.11.2026
CVE-2026-110516 All in One Visual Composer Addons <= 1.2 - Contributor+ LFI via vca_tabs_style Shortcode Attribute 10.11.2026
CVE-2026-119273 BulletProof Security <= 7.2 - Unauthenticated Sensitive Data Disclosure via Security Log 10.11.2026
CVE-2026-63287 10.11.2026 6.5
CVE-2026-13312 10.11.2026 9.9
CVE-2026-13387 10.11.2026 3.5
CVE-2026-12389 10.11.2026 8.4
CVE-2026-12963 10.11.2026 7.4
CVE-2026-12964 10.11.2026 8
CVE-2026-4762 10.11.2026 8.8
CVE-2026-63288 10.11.2026 8.3
CVE-2026-8372 10.11.2026 8.8
CVE-2026-14918 10.11.2026 5.3
CVE-2026-14542 10.11.2026 6.7
CVE-2026-14543 10.11.2026 3.9
CVE-2026-63282 10.11.2026 6.5
CVE-2026-13409 10.11.2026 4.3
CVE-2026-9063 10.11.2026 6.7
CVE-2026-112125 Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor 10.11.2026 7.3
CVE-2026-115646 Partial String Comparison Vulnerability in HiRDB 10.11.2026 9.8
CVE-2026-86578 Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows 10.11.2026 7.3
CVE-2026-86579 Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows 10.11.2026 8.2
CVE-2026-91754 Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware 10.11.2026 8.1
CVE-2026-91755 Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware 10.11.2026 8.1
CVE-2026-91756 OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware 10.11.2026 8.1
CVE-2026-91757 OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware 10.11.2026 7.1
CVE-2026-91758 Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux 10.11.2026 7.8
CVE-2026-91759 Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux 10.11.2026 7.8
CVE-2026-91760 Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux 10.11.2026 7
CVE-2026-91761 Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux 10.11.2026 8.2
CVE-2026-91762 Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux 10.11.2026 7.9
CVE-2026-91763 Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for Linux 10.11.2026 8.2
CVE-2026-91764 Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux 10.11.2026 8.1
CVE-2026-92863 Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market) 10.11.2026 7
CVE-2026-92864 Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi Dynamic Link Manager EX for AIX (for the Japanese market) 10.11.2026 7.3
CVE-2026-96769 Extend B2B - Companies and Users Management for WooCommerce <= 2.1.4 - Unauthenticated Sensitive Information Exposure in /wp/v2/aio_company REST Endpoint 10.11.2026 5.3
CVE-2026-115640 LimeSurvey Community Edition 7.7.0 - Stored XSS in Central Participants blocklist control 10.11.2026
CVE-2026-125612 DIAEnergie - SQL Injection Vulnerability 10.11.2026 8.8
CVE-2026-88707 10.11.2026
CVE-2026-88708 10.11.2026
CVE-2026-88709 10.11.2026
CVE-2026-88710 10.11.2026
CVE-2026-109797 Cross-tenant sandbox takeover in SAP/astonish 10.11.2026 7.1
CVE-2026-109799 Improper verification of JWT signature in IASContextProvider leads to tenant/user identity spoofing ( sap-cloud-sdk (pip)) 10.11.2026 7.5
CVE-2026-125087 Michael-A-Kuykendall Shimmy Inference API server.rs missing authentication 10.11.2026
CVE-2026-123424 10.11.2026
CVE-2026-123425 10.11.2026
CVE-2026-123426 10.11.2026
CVE-2026-123427 10.11.2026
CVE-2026-123429 10.11.2026
CVE-2026-123430 10.11.2026
CVE-2026-123431 10.11.2026
CVE-2026-123432 10.11.2026
CVE-2026-123435 10.11.2026
CVE-2026-123437 10.11.2026
CVE-2026-123438 10.11.2026
CVE-2026-123439 10.11.2026
CVE-2026-109805 Weak Cryptography in SAP NetWeaver and ABAP Platform (Application Server ABAP) 10.11.2026 6.4
CVE-2026-109793 Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher 10.11.2026 7.5
CVE-2026-109794 Denial of Service vulnerability in SAP NetWeaver Application Server ABAP, ABAP Platform and SAP Web Dispatcher 10.11.2026 7.5
CVE-2026-109795 Missing authorization check in S4CRM 10.11.2026 9.9
CVE-2026-109796 Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform 10.11.2026 4.3
CVE-2026-109798 XML External Entity (XXE) Vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) 10.11.2026 9.1
CVE-2026-109800 Memory Corruption vulnerability in SAP Web Dispatcher 10.11.2026 7.7
CVE-2026-109801 Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit) 10.11.2026 6.5
CVE-2026-109802 Denial of Service (DoS) vulnerability in SAP NetWeaver Application Server for ABAP 10.11.2026 6.5
CVE-2026-109803 Code Injection vulnerability in SAP NetWeaver Knowledge Management (XML Forms) 10.11.2026 9.9
CVE-2026-109804 Information Disclosure in SAP NetWeaver (SAP Message Server) 10.11.2026 7.5
CVE-2026-109806 Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) 10.11.2026 7.5
CVE-2026-109807 Multiple Vulnerabilities in SAP NetWeaver (Internet Graphics Service) 10.11.2026 7.5
CVE-2026-109808 Missing Authorisation Check in SAP Solution Tools Plug-In (ST-PI) 10.11.2026 3.1
CVE-2026-109809 Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit) 10.11.2026 6.5
CVE-2026-109810 CSS Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java) 10.11.2026 6.1
CVE-2026-109811 Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) 10.11.2026 6.5
CVE-2026-120008 Memory Corruption Vulnerability in SAP NetWeaver (Internet Graphics Service) 10.11.2026 8.2
CVE-2026-120009 Code Injection vulnerability in SAP ABAP Developer Tools (AMDP Data Preview) 10.11.2026 7.2
CVE-2026-120010 Memory Corruption vulnerability in SAP NetWeaver Application Server (SAP Message Server) 10.11.2026 7.5
CVE-2026-120014 Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager 10.11.2026 7.6
CVE-2026-120015 Insufficient Input Validation in SAP Host Agent 10.11.2026 7.5
CVE-2026-120016 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Visual Composer 10.11.2026 6.1
CVE-2026-120017 Missing Authentication in SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) 10.11.2026 10
CVE-2026-125086 D-Link M60 emDaemon MQTT Broker mosquitto.conf system hard-coded credentials 10.11.2026
CVE-2026-89125 Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager 10.11.2026 6
CVE-2026-89126 Memory Corruption vulnerability in SAP Web Dispatcher 10.11.2026 10
CVE-2026-89128 Broken Access Control in SAP NetWeaver AS Java (Process Integration Test Tool) 10.11.2026 5.3
CVE-2026-89129 Server-Side Request Forgery in SAP NetWeaver AS Java (Web Services) 10.11.2026 5.8
CVE-2026-89131 Cross Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Enterprise Portal 10.11.2026 4.3
CVE-2026-107240 10.11.2026
CVE-2026-107241 10.11.2026
CVE-2026-107242 10.11.2026
CVE-2026-107243 10.11.2026
CVE-2026-107244 10.11.2026
CVE-2026-107245 10.11.2026
CVE-2026-107246 10.11.2026
CVE-2026-124598 Hardcoded API Key Discovered in GV-Face Android Application v2.2.1 10.11.2026 7.5
CVE-2026-124599 Hardcoded RSA Private Key and Public Key Exposure in GV-Face Android Application v2.2.1 10.11.2026 6.2
CVE-2026-124600 Unencrypted HTTP Traffic Exposing Sensitive User Credentials in GV-Face Android Application v2.2.1 10.11.2026
CVE-2026-124601 Hardcoded API Key Discovered in GV-Access Android Application v1.6.1 10.11.2026 6.2
CVE-2026-124602 Hardcoded RSA Private Key and Public Key Exposure in GV-Access Android Application v1.6.1 10.11.2026 6.2
CVE-2026-124603 Hardcoded API Key Discovered in GV-Cloud Android Application v1.5.1 10.11.2026 6.2
CVE-2026-124604 Hardcoded RSA Private Key and Public Key Exposure in GV-Cloud Android Application v1.5.1 10.11.2026 6.2
CVE-2026-125079 D-Link DCS-6501LH Media Service SystemConfig.ini mydlink_default_sys_info hard-coded credentials 10.11.2026
CVE-2026-125082 sunkaifei FlyCMS Content Rendering detail.html ModelDataService.insertData cross site scripting 10.11.2026
CVE-2026-76964 Memory Corruption Vulnerability in SAP NetWeaver AS ABAP (Internet Communication Manager) 10.11.2026 10
CVE-2026-76965 OS Command Injection vulnerability in ABAP Application Server for SAP NetWeaver and ABAP Platform 10.11.2026 9.9
CVE-2026-76966 Multiple vulnerabilities in Application Server ABAP of SAP NetWeaver and ABAP Platform 10.11.2026 8.9
CVE-2026-76970 Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform 10.11.2026 7.5
CVE-2026-76973 Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform (SAP Message Server) 10.11.2026 7.5
CVE-2026-89103 Broken Access Control in SAP Gateway 10.11.2026 10
CVE-2026-89114 Missing Authentication check in SAP NetWeaver AS Java EDM Application 10.11.2026 7.5
CVE-2026-89115 Information Disclosure vulnerability in SAP Start Service and SAP Microsoft Management Console 10.11.2026 4.4
CVE-2026-89119 Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager 10.11.2026 9.6
CVE-2026-125078 SourceCodester Smart Attendance System with QR Code Scanner login.php session fixiation 10.11.2026
CVE-2026-125077 SourceCodester Smart Attendance System with QR Code Scanner cross-site request forgery 09.11.2026
CVE-2026-125076 SourceCodester Smart Attendance System with QR Code Scanner JSON Endpoint attendance_handler.php missing authentication 09.11.2026
CVE-2026-125360 Storyden through 1.26.16 Privilege Escalation via MANAGE_ROLES Role Assignment 09.11.2026
CVE-2026-125361 Tencent BrowserSkill through 0.4.2 Missing Authentication in Local WebSocket Transport 09.11.2026
CVE-2026-125362 Seahub through 14.0.10 Predictable Share Link Passwords via Batch Endpoint 09.11.2026
CVE-2026-125363 MikroDash before 0.8.79 SSRF via Personal Notification Channels 09.11.2026
CVE-2026-125364 frab through 0.9.1 Privilege Escalation via conference_users_attributes in UsersController 09.11.2026
CVE-2026-125365 DollarDollar through 4.4 Missing Authorization in /add_expense Balance Tampering 09.11.2026
CVE-2026-125366 Omnom through 0.9.0 SSRF via Add Feed /add_feed Route 09.11.2026
CVE-2026-125367 Pico through 4.1.2 SSRF in Feeds Service via run SSH Command 09.11.2026
CVE-2026-125368 OmniAgent Bash Approval Gate Bypass via find -execdir in Safe-Command Allowlist 09.11.2026
CVE-2026-125369 Bitpoll through 0.11.0 Unauthenticated Vote and Comment Disclosure via Unscoped Lookups 09.11.2026
CVE-2026-125370 Kubero 3.0.0 through 3.1.1 Authentication Bypass via Hardcoded JWT Secret 09.11.2026
CVE-2026-125371 Tinyproxy through 1.11.3 Hostname ACL Allow-List Bypass via Suffix Match 09.11.2026
CVE-2026-125372 REBUILD before 4.5.3 Authorization Bypass via Feeds Details and Comments Endpoints 09.11.2026
CVE-2026-125373 IETF Datatracker before 12.83.0 Cross-NomCom Authorization Bypass via Nomcom Views 09.11.2026
CVE-2026-125374 Krayin CRM before 2.2.8 Broken Object Level Authorization via Lead Tag Attach/Detach 09.11.2026
CVE-2026-125375 MrDoc through 1.1.1 Missing Authorization via Project Document Sort Handlers 09.11.2026
CVE-2026-125376 VanBlog through 0.54.0 Private Article Disclosure via Public Password Endpoint 09.11.2026
CVE-2026-125377 Pig before 4.1.2 Missing Authorization Exposes OAuth2 Client Secrets via /client 09.11.2026
CVE-2026-125378 PowerDNS-Admin before 2026.11.0 Missing Authorization via Template Apply Endpoint 09.11.2026
CVE-2026-125379 Movim through 0.35.5 Authorization Bypass via Post::ajaxGetPost Cached Post Read 09.11.2026
CVE-2026-125380 DataRoom through 3.0.0 Incorrect Authorization via /dataRoom/dataset/run/test 09.11.2026
CVE-2026-125381 DataRoom through 3.0.0 SQL Injection via MyBatisService.generateSql 09.11.2026
CVE-2026-125382 Map-OS 5.0.0 to before 5.2.2 Privilege Escalation via /api/v1/usuarios 09.11.2026
CVE-2026-125383 INDOTALENT WHMS before 10.20261109 Hard-Coded JWT Signing Key Authentication Bypass 09.11.2026
CVE-2026-125384 INDOTALENT WHMS before 10.20261109 Default Administrator Credentials via UserAdminSeeder 09.11.2026
CVE-2026-125385 INDOTALENT WHMS before 10.20261109 Path Traversal via FileDocument/GetDocument and FileImage/GetImage 09.11.2026
CVE-2026-125386 langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpoints 09.11.2026
CVE-2026-125387 Faveo Helpdesk through 2.0.3 Cross-Department Ticket Tampering via TicketController 09.11.2026
CVE-2026-125388 Group-Office before 6.8.181, 25.0.116, and 26.0.58 Missing Authorization in Forms Report Download 09.11.2026
CVE-2026-125389 Group-Office before 6.8.181, 25.0.116, and 26.0.58 Stored XSS via filterXSS Bypass 09.11.2026
CVE-2026-125390 Group-Office before 6.8.181, 25.0.116, and 26.0.58 Local File Read via processUploadQueue 09.11.2026
CVE-2026-125391 Webmin through 2.670 OS Command Injection via Samba User Account Options 09.11.2026
CVE-2026-125392 Webmin through 2.670 Stored XSS via BIND8 edit_recs.cgi ALL View 09.11.2026
CVE-2026-125393 MailEnable Enterprise Premium before 10.62 Heap Overflow via IMAP X-FB-FETCH 09.11.2026
CVE-2026-125394 FreeRDP before 3.33.0 Use-After-Free via Stale Brush Cache Pointer 09.11.2026
CVE-2026-125395 Ampache before 8.4.0 Stored XSS via Song Lyrics ID3 Tag 09.11.2026
CVE-2026-125396 Ghostscript before 10.08.0 -dSAFER Bypass via .putgstringcopy .forceput Recovery 09.11.2026
CVE-2026-125397 NocoBase plugin-ai 2.1.0 through 2.2.41 Authorization Bypass via Sub-Agent Username Override 09.11.2026
CVE-2026-125398 Instatic before 0.0.21 Authorization Bypass via Row Author Reassignment Endpoint 09.11.2026
CVE-2026-125399 Fluxion before 6.39 OS Command Injection via Crafted SSID 09.11.2026
CVE-2026-125400 Ettercap through 0.8.4.1 Use-After-Free via PCRE2 Filter Substitution 09.11.2026
CVE-2026-125401 Ettercap through 0.8.4.1 Heap Buffer Overflow via Gadu-Gadu Dissector 09.11.2026
CVE-2026-125402 Ettercap through 0.8.4.1 Heap Out-of-Bounds Read via TLS SNI Parsing 09.11.2026
CVE-2026-125403 Ettercap through 0.8.4.1 Out-of-Bounds Read via sslw_remove_sts 09.11.2026
CVE-2026-125404 Ettercap through 0.8.4.1 Stack Buffer Overflow via WPA CCMP Decryption 09.11.2026
CVE-2026-125405 Ettercap through 0.8.4.1 Out-of-Bounds Read via HTTP NTLM Authentication Parsing 09.11.2026
CVE-2026-125406 Ettercap through 0.8.4.1 Stack Buffer Underwrite via Telnet Dissector Backspace Handling 09.11.2026
CVE-2026-117477 09.11.2026 6.1
CVE-2026-125357 Munin munin-httpd through 2.999.18 Path Traversal via Static File Handler 09.11.2026
CVE-2026-125358 Universal-modder before e88f687 Cross-Site WebSocket Command Execution via HostLink 09.11.2026
CVE-2026-125359 Mediary Scout before 2026.11.05 SSRF via PanSou Search Source Setting 09.11.2026
CVE-2026-125075 SourceCodester Smart Attendance System with QR Code Scanner Admin Account Creation create_admin.php getMessage missing authentication 09.11.2026
CVE-2026-115934 SQL injection leading to privilege escalation 09.11.2026
CVE-2026-125074 SourceCodester Smart Attendance System with QR Code Scanner Password Reset reset_password.php password recovery 09.11.2026
CVE-2026-125118 Mongoose: Prototype pollution via Schema.prototype.virtual() 09.11.2026 6.5
CVE-2026-125119 Mongoose: Connection-level sanitizeFilter not applied 09.11.2026 7.5
CVE-2026-125120 Mongoose: sanitizeFilter not applied on countDocuments 09.11.2026 9.8
CVE-2026-124034 Path traversal in Amazon Braket SDK local hybrid job input data download 09.11.2026 6.4
CVE-2026-124035 Unsafe reflection in Amazon Braket Schemas error mitigation validation 09.11.2026 7.1
CVE-2026-125117 Mongoose walks into inherited properties when hydrating, setting, and merging, allowing overwrites of built-in functions (denial of service) and shared schema state 09.11.2026 8.2
CVE-2026-125116 Mongoose: Discriminator key values matching inherited properties (e.g. __t: 'constructor') bypass schema casting and can poison collections 09.11.2026 4.8
CVE-2026-125113 XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." pattern 09.11.2026 5.3
CVE-2026-125114 Novu: SSRF via conditions filter webhook bypasses validateUrlSsrf() protection 09.11.2026
CVE-2026-125115 Novu: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition 09.11.2026 6.8
CVE-2026-124999 braindecode Hub Integration base.py EEGModuleMixin._from_pretrained path traversal 09.11.2026
CVE-2026-125110 Rack: Rack::Static header_rules bypass via dot-segment normalization mismatch 09.11.2026 5.3
CVE-2026-125111 Rack: Multipart parsing allows DoS via unbounded scan buffer growth 09.11.2026 7.5
CVE-2026-125112 djust: A template binding inherits a context safety grant it never earned (XSS) 09.11.2026
CVE-2026-90585 Renesas RA SCI UART driver: unacknowledged receive-error interrupt causes a permanent interrupt storm and CPU lockup 09.11.2026 4.6
CVE-2026-90586 Xtensa MMU userspace: uninitialized thread page-table pointer leads to out-of-bounds supervisor-mode writes 09.11.2026 7.8
CVE-2026-90587 NULL pointer dereference in the Zephyr USB host stack when a device reports zero configurations 09.11.2026 4.6
CVE-2026-90588 Out-of-bounds read in Zephyr HTTP client debug logging of response header fields 09.11.2026 3.7
CVE-2026-90589 Memory-mapped thread stack is never unmapped when a thread is aborted by another thread, exhausting kernel virtual address space 09.11.2026 5.5
CVE-2026-90590 Permanent loss of transmit capability in the NXP ENET QoS Ethernet driver after an Ethernet link drop 09.11.2026 6.5
CVE-2026-90591 NXP ENET-QOS Ethernet driver re-arms RX descriptors with a clobbered DMA buffer address on packet drop 09.11.2026 7.5
CVE-2026-125108 Rack: Multipart boundary ambiguity guard in Rack::Multipart::Parser can be bypassed with a quoted boundary value, allowing WAF bypass 09.11.2026 3.7
CVE-2026-125109 Rack: Rack::Request#host_with_port (and #base_url / #url) return the raw invalid Host header — incomplete fix of CVE-2026-34835 09.11.2026 4.8
CVE-2026-102643 AsyncSSH: SFTPServer Chroot Escape 09.11.2026 8.8
CVE-2026-77473 AsyncSSH: SFTP Recursive Copy Path Traversal via Unsanitized Server-Supplied Filenames 09.11.2026 6.5