CVE-2026-107738 - SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, ChmFile::GetCharZ() narrows f

CVE-2026-107737 - SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, and in pre-release 3.7.0.2036

CVE-2026-107736 - SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap() asks GDI+ t

CVE-2026-107735 - SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, InitializePolicies() starts t

CVE-2026-107734 - SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTe

CVE-2026-107733 - SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdE

CVE-2026-107732 - SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and

CVE-2026-107731 - SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, four independently reachable range-

CVE-2026-107730 - SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp

CVE-2026-107729 - SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, src/MobiDoc.cpp narrows the untrust

CVE-2026-107728 - Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExt

CVE-2026-107727 - Strawberry GraphQL is a library for creating GraphQL APIs. From 0.312.3 until 0.327.2, the legacy gr

CVE-2026-107651 - A flaw was found in Eye of GNOME (eog). A heap-based buffer overflow exists in the PNG metadata read

CVE-2026-105674 - TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a

CVE-2026-105673 - An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming se

CVE-2026-105672 - TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS J

CVE-2026-100197 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-89091 - A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection insta

CVE-2026-87980 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive i

CVE-2026-84891 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to obtain sensitive

CVE-2026-84875 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary

CVE-2026-84249 - IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary man

CVE-2026-84247 - IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of s

CVE-2026-84246 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary

CVE-2026-84230 - IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due t

CVE-2026-84209 - IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL

CVE-2026-84198 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary

CVE-2026-84058 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Micr

CVE-2026-84057 - IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary com

CVE-2026-84035 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary

CVE-2026-84032 - IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle att

CVE-2026-82900 - IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary file

CVE-2026-82895 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary

CVE-2026-81932 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthent

CVE-2026-80381 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthori

CVE-2026-75875 - IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary

CVE-2026-107831 - Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attacker

CVE-2026-107830 - Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /ac

CVE-2026-107829 - Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as

CVE-2026-107828 - Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated att

CVE-2026-107801 - Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated

CVE-2026-107800 - Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated

CVE-2026-107799 - Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated

CVE-2026-107798 - jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnera

CVE-2026-107797 - Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/

CVE-2026-107796 - Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vuln

CVE-2026-107793 - Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.delete

CVE-2026-107792 - Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability

CVE-2026-107726 - Hazelcast is a unified real-time data platform combining stream processing with a fast data store. P

CVE-2026-107725 - Hazelcast is a unified real-time data platform combining stream processing with a fast data store. P

CVE-2026-107724 - fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4, fast-jwt can classify raw seri

CVE-2026-107723 - fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier

CVE-2026-107722 - fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 until 6.3.0, fast-jwt can mis

CVE-2026-107721 - fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier

CVE-2026-107720 - fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.1, fast-jwt createVerifier

CVE-2026-107719 - fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.4, the fast-jwt createVerif

CVE-2026-107718 - AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2

CVE-2026-107717 - Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Promp

CVE-2026-107716 - Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks Direc

CVE-2026-107715 - The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize s

CVE-2026-107714 - The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::

CVE-2026-107406 - Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in

CVE-2026-107399 - The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize a

CVE-2026-105275 - Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its

CVE-2026-105269 - Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An

CVE-2026-104628 - Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vu

CVE-2025-71428 - Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike()

CVE-2026-95116 - An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the read

CVE-2026-79842 - An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7

CVE-2026-78407 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-78406 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-78401 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-78399 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 

CVE-2026-78388 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-62181 - Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-19878 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-19498 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-19494 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-19493 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-19491 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-19482 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 

CVE-2026-18740 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-17189 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-16916 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-16830 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-16823 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-12109 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-12091 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-11939 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-11936 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 

CVE-2026-11930 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 

CVE-2026-11888 - IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3

CVE-2026-11318 - Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.insta

CVE-2026-107782 - System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc

CVE-2026-107781 - Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a server-side reques

CVE-2026-107780 - Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains an OS command inject

CVE-2026-107779 - Dromara Skyeye through commit 003549ae5615bd114ba5bb8ddf6a8e8ead97c321 contains a missing authentica

CVE-2026-107778 - MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_c

CVE-2026-107708 - MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ

CVE-2026-107397 - Indico is an event management system that uses Flask-Multipass, a multi-backend authentication syste

CVE-2026-107318 - @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server.

CVE-2026-106435 - The MongoDB Python Driver's binary accelerator can read outside a buffer when an application decodes

CVE-2026-102368 - Affected Tapo device firmware stores device-specific cryptographic material in plaintext within nonv

CVE-2026-101024 - Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its

CVE-2026-84275 - IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionali

CVE-2026-84274 - IBM Guardium Data Protection 12.2.2 is affected by a sensitive information exposure vulnerability. D

CVE-2026-84272 - IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-co

CVE-2026-84271 - IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch inst

CVE-2026-84250 - IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-code

CVE-2026-84245 - IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper co

CVE-2026-84244 - IBM Guardium Data Protection 12.2 IBM Security Guardium Data Protection is vulnerable to stored cros

CVE-2026-82344 - IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP T

CVE-2026-82335 - IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the M

CVE-2026-82334 - IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in th

CVE-2026-107707 - Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimiza

CVE-2026-107706 - Dolibarr ERP CRM before 24.0.2 contains an incorrect authorization vulnerability in htdocs/core/ajax

CVE-2026-107705 - Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash() th

CVE-2026-107608 - Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib

CVE-2026-107396 - Indico is an event management system that uses Flask-Multipass, a multi-backend authentication syste

CVE-2026-107395 - Indico is an event management system that uses Flask-Multipass, a multi-backend authentication syste

CVE-2026-107394 - Indico is an event management system that uses Flask-Multipass, a multi-backend authentication syste

CVE-2026-107393 - FreeScout is a self-hosted help desk and shared mailbox. Prior to 1.8.235, when APP_CLOUDFLARE_IS_US

CVE-2026-107392 - music-metadata is a metadata parser for audio and video media files. Prior to 11.15.0, the DSF parse

CVE-2026-107391 - music-metadata is a metadata parser for audio and video media files. In the public development revis

CVE-2026-107390 - music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parse

CVE-2026-107389 - music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska

CVE-2026-106436 - The BSON encoder in the MongoDB PHP Driver does not check some return values after a document exceed

CVE-2026-106432 - The BSON encoder in the MongoDB PHP Driver converts a string length to a 32-bit value without valida

CVE-2026-106126 - A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposu

CVE-2026-104076 - TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing auth

CVE-2026-104075 - TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain an authenticat

CVE-2026-95209 - An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of

CVE-2026-88648 - Incomplete X.509 implementation in GnuTLS v3.8.13 allows attackers controlling a subordinate Certifi

CVE-2026-84290 - IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by an improper validation of user-supplied

CVE-2026-84278 - IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root

CVE-2026-84276 - IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-con

CVE-2026-67693 - An issue in gnutls v.3.8.13 allows an attacker to obtain sensitive information via failing to reject

CVE-2026-40804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-107704 - The image_optimizer Ruby gem 1.3.0 through 1.9.0 contains an OS command injection vulnerability in I

CVE-2026-107703 - @enmaso/node-convert through 1.0.0 contains an OS command injection vulnerability in convert.js that

CVE-2026-107701 - dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modif

CVE-2026-107700 - dot-access 0.0.3 through 1.0.0 contains a code injection vulnerability that allows remote attackers

CVE-2026-107699 - ppt2png through 0.0.6 contains an OS command injection vulnerability that allows attackers to execut

CVE-2026-107388 - music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the ID3v2 par

CVE-2026-107387 - music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 par

CVE-2026-107386 - amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the p

CVE-2026-107385 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-107384 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-107383 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-107382 - MariaDB Connector/Node.js is used to connect applications developed on Node.js to MariaDB and MySQL

CVE-2026-107325 - Improper validation of a BSON array length in the MongoDB Go Driver can cause an out-of-bounds index

CVE-2026-107324 - An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic

CVE-2026-107322 - An incomplete list of disallowed inputs in Amazon Agent Plugins for AWS databases-on-aws plugin befo

CVE-2026-106438 - An incorrect calculation in Decimal128 string parsing in the MongoDB C Driver can accept certain ove

CVE-2026-106437 - The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-by

CVE-2026-106434 - The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payl

CVE-2026-106433 - Improper state management in MongoDB libmongocrypt can cause provider-specific data to be treated as

CVE-2026-106431 - An off-by-one error in the BSON bulk document writer in the MongoDB C Driver can write one zero byte

CVE-2026-106430 - The MongoDB C++ Driver discards content after an embedded NUL byte in certain field and collection n

CVE-2026-106429 - An integer underflow in the KMS endpoint-parsing logic of MongoDB libmongocrypt can cause an allocat

CVE-2026-106428 - An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one

CVE-2026-105570 - Docker Sandboxes compared OAuth token-endpoint hostnames case-sensitively when deciding whether to m

CVE-2026-105452 - Docker Sandboxes could forward a client-supplied credential alongside a credential injected by the h

CVE-2026-101998 - Docker Sandboxes could fail open while masking credentials in protected proxy responses. When a resp

CVE-2026-97147 - In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object wit

CVE-2026-95210 - Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates cont

CVE-2026-95184 - Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certif

CVE-2026-93861 - In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a

CVE-2026-93860 - In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context a

CVE-2026-93858 - In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_comma

CVE-2026-62171 - Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-62170 - Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-107702 - QloApps through 1.7.0 contains an authorization bypass vulnerability in AdminHotelRoomsBookingContro

CVE-2026-107698 - FFmpeg before 7.1.4 and 8.0.x before 8.0.2 contains a server-side request forgery vulnerability in f

CVE-2026-107697 - FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers

CVE-2026-107696 - FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rts

CVE-2026-107695 - FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote at

CVE-2026-107380 - savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer's isHrefSafeValue() validat

CVE-2026-107379 - savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD wi

CVE-2026-107378 - CairoSVG is an SVG converter based on Cairo, a 2D graphics library. Prior to 2.9.1, rendering an att

CVE-2026-107377 - datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.8

CVE-2026-107376 - webonyx graphql-php is a PHP implementation of the GraphQL specification. Prior to 15.32.3, GraphQL\

CVE-2026-107375 - JHipster is a development platform to quickly generate, develop, and deploy modern web applications

CVE-2026-107362 - Malcolm file-upload component ships the upstream FilePond PHP server (pqina/filepond-server-php) lar

CVE-2026-107361 - The Arkime live capture service (arkime-live) in Malcolm runs with network_mode: host, exposing port

CVE-2026-107337 - The Malcolm kiosk Flask application exposes a POST /script_call/<script> endpoint with zero authenti

CVE-2026-107336 - Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-i

CVE-2026-107335 - Malcolm's upload-processing pipeline (scripts/safe-extract.py) enforces entry-count, nesting-depth,

CVE-2026-107334 - Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may

CVE-2026-107333 - Malcolm's nginx based reverse proxy contains a URL path normalization inconsistency between its Lua

CVE-2026-107332 - Insecure file permissions in the CodeCatalyst connection handler in AWS Toolkit for VS Code before 4

CVE-2026-107303 - JHipster is a development platform to quickly generate, develop, and deploy modern web applications

CVE-2026-107302 - msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder rea

CVE-2026-88647 - A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fall

CVE-2026-62167 - Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-62166 - Rejected reason: This CVE is a duplicate of another CVE.

CVE-2026-62163 - Rejected reason: Reason: This candidate is a duplicate of CVE-2026-60089.

CVE-2026-61801 - The `github.com/moby/sys/user` package provides Go utilities for parsing and looking up entries in U

CVE-2026-50055 - A policy-enforcement flaw in Zimbra Collaboration Suite allows an authenticated user to bypass disab

CVE-2026-50054 - An authorization flaw in Zimbra Collaboration Suite’s GrantRightsRequest allows an attacker with acc

CVE-2026-10631 - An authorization bypass in the EWS FindItem handler of Zimbra Collaboration Suite 10.1.0 through 10.

CVE-2026-107709 - A path traversal vulnerability exists in Bower decompress-zip through version 0.3.3. The vulnerabili

CVE-2026-107301 - msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing ms

CVE-2026-107300 - msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming d

CVE-2026-107299 - msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming d

CVE-2026-107298 - msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and m

CVE-2026-107297 - msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming d

CVE-2026-107296 - msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a nega

CVE-2026-107295 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107294 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107293 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107292 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107291 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107290 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-105436 - Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object In

CVE-2026-104078 - Obsidian Desktop before 1.14.0 contains a filter bypass vulnerability in the bundled MathJax 3.2.2 S

CVE-2026-104077 - Obsidian Desktop before 1.14.0 contains a remote code execution vulnerability that allows attackers

CVE-2026-95208 - An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2

CVE-2026-19585 - HashiCorp go-getter versions before 1.8.10 and go-getter/v2 versions before 2.2.5 are vulnerable to

CVE-2026-107678 - FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av_encryption_init_info_free() in

CVE-2026-107677 - FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows atta

CVE-2026-107676 - FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plu

CVE-2026-107675 - FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp

CVE-2026-107660 - FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability i

CVE-2026-107289 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107288 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-107287 - Pydantic AI is a Python agent framework for building applications and workflows with Generative AI.

CVE-2026-106177 - A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local pri

CVE-2026-9209 - mJobTime through build 15.7.3.32 contains an unauthenticated SQL execution vulnerability in the Logi

CVE-2026-95125 - libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafte

CVE-2026-93034 - SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder uncondit

CVE-2026-93017 - The `insights-operator-gather` ClusterRole grants the operator's service account read access to secr

CVE-2026-14999 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14992 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14988 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14905 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14888 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14509 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14508 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14507 - IBM DataPower Gateway 11.0.0.0 through 11.0.0.2 could allow a remote authenticated attacker to cause

CVE-2026-14502 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14497 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14496 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14273 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-14269 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-13258 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-13257 - IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10,

CVE-2026-12859 - Missing Authorization vulnerability in Caz Informatics Services Trade Inc. Advancity ALMS Cloud allo

CVE-2026-107640 - Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/use

CVE-2026-107639 - ILIAS before 9.24, 10.x before 10.12 and 11.x before 11.5 contains an argument injection vulnerabili