CVE-2026-0311 - A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a

CVE-2026-55684 - WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/soc

CVE-2026-55683 - WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the unauthenticated web/html/soc

CVE-2026-55682 - WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the auto-prepended web/html/segu

CVE-2026-55681 - WeGIA is a web manager for charitable institutions. Prior to 3.8.6, an authenticated user with acces

CVE-2026-55680 - WeGIA is a web manager for charitable institutions. Prior to 3.8.6, unauthenticated POST requests to

CVE-2026-55679 - WeGIA is a web manager for charitable institutions. Prior to 3.8.6, the pre-installation web/instala

CVE-2026-55498 - FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operatio

CVE-2026-55387 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-55386 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-55385 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-55384 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-55383 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-55382 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-55381 - InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create profe

CVE-2026-54703 - Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, t

CVE-2026-54702 - Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, t

CVE-2026-54701 - Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, M

CVE-2026-54566 - Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.29, M

CVE-2026-110669 - A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function delet

CVE-2026-110668 - A weakness has been identified in cemtan sar2html 4.0.0. Affected by this issue is the function inde

CVE-2026-110310 - A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by alter

CVE-2026-102986 - Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the pu

CVE-2026-102985 - Plane is an open-source project management tool. In 1.3.1 and earlier, ProjectMemberViewSet.partial_

CVE-2026-102980 - Plane is an open-source project management tool. Prior to 1.4.0, PageVersionEndpoint in apps/api/pla

CVE-2026-0321 - Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated at

CVE-2026-85714 - Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. P

CVE-2026-82402 - Gogs is an open source self-hosted Git service. Prior to 0.15.0+dev, an unauthenticated attacker can

CVE-2026-82153 - Dell OS Recovery Tool, versions prior to 2.4.4, contains an Insecure Storage of Sensitive Informatio

CVE-2026-73261 - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack ena

CVE-2026-73260 - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate

CVE-2026-73252 - Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack select

CVE-2026-63626 - Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2

CVE-2026-55787 - Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_

CVE-2026-55786 - Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4,

CVE-2026-55167 - LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings)

CVE-2026-54525 - Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, M

CVE-2026-53999 - Radius is a cloud-native, portable application platform that makes app development easier for teams

CVE-2026-110775 - Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows

CVE-2026-110774 - Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allo

CVE-2026-110773 - GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler th

CVE-2026-110772 - Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::Bul

CVE-2026-110771 - Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated cust

CVE-2026-110770 - Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthent

CVE-2026-110769 - holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connecto

CVE-2026-110768 - holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Tele

CVE-2026-110767 - Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob

CVE-2026-110766 - Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated user

CVE-2026-110765 - FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook

CVE-2026-110764 - AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-s

CVE-2026-110763 - lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerabi

CVE-2026-110762 - bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated v

CVE-2026-110761 - ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authent

CVE-2026-110667 - A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an u

CVE-2026-110666 - A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the fi

CVE-2026-110536 - A vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the f

CVE-2026-110248 - Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMake

CVE-2026-109506 - Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in

CVE-2026-104143 - DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated use

CVE-2026-104142 - DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated use

CVE-2026-104141 - DataEase is an open source data visualization and analysis tool. Authenticated users with datasource

CVE-2026-103974 - lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d

CVE-2026-103930 - cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream i

CVE-2026-102944 - cpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() remov

CVE-2026-102899 - Sentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML

CVE-2026-102756 - DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated use

CVE-2026-102755 - DataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated use

CVE-2026-102748 - Dgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers admini

CVE-2026-102682 - Pipecat is an open-source Python framework for building real-time voice and multimodal conversationa

CVE-2026-102479 - In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x de

CVE-2026-102471 - In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the

CVE-2026-102460 - In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a s

CVE-2026-102354 - BentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloud

CVE-2026-100406 - dbt enables data analysts and engineers to transform their data using the same practices that softwa

CVE-2026-92160 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92159 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92158 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92157 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92156 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92155 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92154 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92152 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92150 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-88164 - Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privil

CVE-2026-86856 - A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair c

CVE-2026-86849 - A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missin

CVE-2026-86848 - A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a g

CVE-2026-86847 - A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialize

CVE-2026-86846 - A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index t

CVE-2026-86845 - A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session po

CVE-2026-86567 - A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IO

CVE-2026-86566 - A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length i

CVE-2026-86461 - The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload i

CVE-2026-79957 - ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endp

CVE-2026-77371 - Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query r

CVE-2026-76083 - Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data sour

CVE-2026-55573 - e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controll

CVE-2026-55572 - e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and

CVE-2026-54554 - FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.

CVE-2026-42093 - Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the

CVE-2026-110777 - A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH

CVE-2026-109527 - The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers

CVE-2026-108484 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-108483 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-108480 - Missing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Conf

CVE-2026-108395 - The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and

CVE-2026-108390 - Hestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.

CVE-2026-108151 - Improper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta

CVE-2026-107350 - Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the pa

CVE-2026-107349 - An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cau

CVE-2026-107348 - Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.2

CVE-2026-106465 - The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but neve

CVE-2026-106464 - `_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length -

CVE-2026-105066 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-104103 - Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior

CVE-2026-103975 - Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDr

CVE-2026-103415 - When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second C

CVE-2026-103414 - The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that

CVE-2026-103081 - Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boo

CVE-2026-102476 - In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client

CVE-2026-102077 - An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engin

CVE-2026-101983 - A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Ju

CVE-2026-101982 - A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Network

CVE-2026-101981 - A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks

CVE-2026-101979 - A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evol

CVE-2026-101976 - An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos

CVE-2026-101975 - A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos O

CVE-2026-101972 - An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Netw

CVE-2026-101964 - A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos O

CVE-2026-101963 - An Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Juno

CVE-2026-101962 - An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon

CVE-2026-101961 - A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Netwo

CVE-2026-101959 - A Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protoc

CVE-2026-101954 - An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session h

CVE-2026-101952 - An Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd

CVE-2026-101949 - A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju

CVE-2026-100413 - SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Hel

CVE-2026-0322 - A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS

CVE-2026-96596 - Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar m

CVE-2026-94200 - Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3,

CVE-2026-93637 - An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unau

CVE-2026-93635 - LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated at

CVE-2026-92153 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-92151 - F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde

CVE-2026-86565 - A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descripto

CVE-2026-86563 - A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to

CVE-2026-86562 - A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap

CVE-2026-77564 - Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, ta

CVE-2026-77524 - KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a name

CVE-2026-76519 - A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could

CVE-2026-75085 - The STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet le

CVE-2026-75084 - The CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio

CVE-2026-75083 - The receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_

CVE-2026-67418 - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and

CVE-2026-59951 - The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MC

CVE-2026-33798 - A Stack-based Buffer Overflow vulnerability in the srxpfe of Juniper Networks Junos OS and Junos OS

CVE-2026-33796 - A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks

CVE-2026-33795 - A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos O

CVE-2026-33792 - A Stack-based Buffer Overflow vulnerability in the srxpfe process of Juniper Networks Junos OS on SR

CVE-2026-33789 - A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks

CVE-2026-19673 - ethernet_recv() in subsys/net/l2/ethernet/ethernet.c validates only that the first net_buf of a rece

CVE-2026-15102 - ADP Desktop SDK contains a vulnerability where sensitive information is transmitted in clear text. E

CVE-2026-109439 - Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authe

CVE-2026-105659 - Uncontrolled Resource Consumption vulnerability in mtrudel bandit allows an unauthenticated remote a

CVE-2026-105236 - Improper Certificate Validation vulnerability in the ssl application in Erlang/OTP allows a client t

CVE-2026-103994 - A Heap-based Buffer Overflow vulnerability in the VXLAN Gateway Daemon (vgd) of Juniper Networks Jun

CVE-2026-103993 - An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos

CVE-2026-103946 - An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Ne

CVE-2026-102185 - A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemo

CVE-2026-102184 - An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (

CVE-2026-102183 - An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (

CVE-2026-102182 - A Stack-based Buffer Overflow vulnerability in the kmd component of Juniper Networks Junos OS on MX

CVE-2026-102180 - A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks

CVE-2026-102179 - An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos

CVE-2026-102178 - A Stack-based Buffer Overflow vulnerability in the BGP routing daemon of Juniper Networks Junos OS a

CVE-2026-102177 - An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos

CVE-2026-102176 - A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK se

CVE-2026-102175 - A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks

CVE-2026-102174 - A Stack-based Buffer Overflow vulnerability in the iked IKE key-management daemon of Juniper Network

CVE-2026-102087 - An Incomplete List of Disallowed Inputs vulnerability in the routing protocol daemon (rpd) of Junipe

CVE-2026-102086 - A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Serie

CVE-2026-102085 - An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Netw

CVE-2026-102084 - An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper

CVE-2026-102083 - An Improper Resource Locking vulnerability in the UTM processing of Juniper Networks Junos OS on SRX

CVE-2026-102082 - An Improper Handling of Missing Special Element vulnerability in the SSL plugin of Juniper Networks

CVE-2026-102081 - A Missing Release of Memory after Effective Lifetime vulnerability in the packet forwarding engine (

CVE-2026-102080 - An Improper Resource Locking vulnerability in the clock synchronization daemon (clksyncd) of Juniper

CVE-2026-102079 - An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low pr

CVE-2026-102078 - A Use After Free vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on

CVE-2026-102072 - An Improper Handling of Highly Compressed Data vulnerability in the gRPC library used by na-grpcd of

CVE-2026-102071 - A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos O

CVE-2026-102070 - A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Jun

CVE-2026-102069 - A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices

CVE-2026-102068 - A Stack-based Buffer Overflow vulnerability in the kernel of Juniper Networks Junos OS Evolved allow

CVE-2026-102067 - An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (

CVE-2026-102066 - A Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (r

CVE-2026-102065 - An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (

CVE-2026-102064 - A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos O

CVE-2026-102063 - A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos o

CVE-2026-102062 - An Use of Externally-Controlled Format String vulnerability in the ipfd daemon of Juniper Networks J

CVE-2026-102061 - A Stack-based Buffer Overflow vulnerability in the phone-home daemon (phcd) of Juniper Networks Juno

CVE-2026-102060 - A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Serie

CVE-2026-102059 - An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulner

CVE-2026-102058 - A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evo

CVE-2026-102057 - A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS allow

CVE-2026-102056 - An Out-of-bounds Read vulnerability in the cfmd process of Juniper Networks Junos OS and Junos OS Ev

CVE-2026-102055 - A Stack-based Buffer Overflow vulnerability in the cfmd process of Juniper Networks Junos OS on MX S

CVE-2026-102054 - An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Ju

CVE-2026-102053 - An Improper Release of Memory Before Removing Last Reference vulnerability in the l2ald process of J

CVE-2026-102052 - A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and J

CVE-2026-102051 - An Improper Release of Memory Before Removing Last Reference vulnerability in the l2cpd process of J

CVE-2026-102050 - A Stack-based Buffer Overflow vulnerability in the l2cpd daemon of Juniper Networks Junos OS and Jun

CVE-2026-102049 - A Stack-based Buffer Overflow vulnerability in the l2cpd process of Juniper Networks Junos OS and Ju

CVE-2026-102048 - An Allocation of Resources Without Limits or Throttling vulnerability in the l2cpd process of Junipe

CVE-2026-102047 - An Improper Validation of Consistency within Input vulnerability in the l2cpd process of Juniper Net

CVE-2026-102046 - A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsctp.ko of Juniper Netw

CVE-2026-102045 - An Out-of-bounds Write Out-of-bounds Write vulnerability in lacpd of Juniper Networks Junos OS Evolv

CVE-2026-102044 - A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evo

CVE-2026-102043 - A Numeric Truncation Error vulnerability in the rpd process of Juniper Networks Junos OS and Junos O

CVE-2026-102042 - A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evo

CVE-2026-102041 - A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos

CVE-2026-102040 - A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and

CVE-2026-102039 - A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos O

CVE-2026-102037 - An XML Injection vulnerability in the Unified Threat Management daemon (utmd) of Juniper Networks Ju

CVE-2026-102036 - An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS an

CVE-2026-102035 - A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS E

CVE-2026-102034 - A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Ev

CVE-2026-102033 - An Improper Validation of Specified Quantity in Input vulnerability in l2ald of Juniper Networks Jun

CVE-2026-102032 - A Missing Release of Memory after Effective Lifetime vulnerability in the l2ald process of Juniper N

CVE-2026-102031 - An OS Command Injection vulnerability in TACACS of Juniper Networks Junos OS Evolved allows a low-pr

CVE-2026-102030 - An Incomplete Cleanup vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evo

CVE-2026-102029 - A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju

CVE-2026-102028 - A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju

CVE-2026-102027 - An Incorrect Calculation of Buffer Size vulnerability in the routing protocol daemon (rpd) of Junipe

CVE-2026-102026 - An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon

CVE-2026-102025 - A Mismatched Memory Management Routines vulnerability in the routing protocol daemon (rpd) process o

CVE-2026-102024 - An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Juno

CVE-2026-102023 - A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authe

CVE-2026-102022 - A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos O

CVE-2026-102021 - A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Ju

CVE-2026-102020 - A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evo

CVE-2026-102019 - An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Ne

CVE-2026-102018 - A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos O

CVE-2026-102017 - An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Ev

CVE-2026-102016 - An Improper Validation of Specified Quantity in Input vulnerability in the rpd process of Juniper Ne

CVE-2026-102015 - A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos

CVE-2026-102014 - A Stack-based Buffer Overflow vulnerability in the authd process of Juniper Networks Junos OS allows

CVE-2026-102013 - A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Ju

CVE-2026-102012 - A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved all

CVE-2026-102011 - A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO al