CVE-2026-63506 - Tina is a headless content management system. Prior to @tinacms/auth 1.1.4 and next-tinacms-azure 15

CVE-2026-62997 - Kedro-Datasets provides data connectors for Kedro. From version 5.0.0 until 9.5.0, kedro_datasets_ex

CVE-2026-20360 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Das

CVE-2026-20352 - A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthe

CVE-2026-20350 - A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could

CVE-2026-20344 - A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an au

CVE-2026-20343 - A vulnerability in a critical API for Cisco Secure FMC Software could allow an unauthenticated, remo

CVE-2026-20342 - A vulnerability in a specific file download API of Cisco Secure FMC Software could allow an authenti

CVE-2026-20340 - A vulnerability in Cisco Secure FMC Software could allow an authenticated, remote attacker to execut

CVE-2026-20336 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20335 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20334 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20333 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20332 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20323 - A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and

CVE-2026-20309 - A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could

CVE-2026-20300 - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to conduct SQL injection

CVE-2026-20295 - A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and

CVE-2026-20290 - A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firew

CVE-2026-20287 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity

CVE-2026-20286 - A vulnerability in the web-based management interface of Cisco Identify Services Engine (ISE) could

CVE-2026-20285 - A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Ci

CVE-2026-20284 - A vulnerability in the SXP REST API of Cisco ISE could allow an authenticated, remote attacker to co

CVE-2026-20283 - A vulnerability in the IPsec Open API endpoint of Cisco ISE could allow an authenticated, remote att

CVE-2026-20282 - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on

CVE-2026-20250 - A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security A

CVE-2026-20249 - A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv

CVE-2026-20248 - A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Applia

CVE-2026-20247 - A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to conduct SQL injectio

CVE-2026-20235 - A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, rem

CVE-2026-20222 - A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (AS

CVE-2026-20154 - A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewa

CVE-2026-20135 - A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software

CVE-2026-20121 - A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco S

CVE-2026-20120 - A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco S

CVE-2026-20072 - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, rem

CVE-2026-20071 - A vulnerability in the SSID bring-your-own-device (BYOD) onboarding workflow of Cisco ISE could allo

CVE-2025-56566 - MikroTik firmware 7.19.4 stores sensitive authentication credentials and network state in cleartext

CVE-2025-56565 - DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentic

CVE-2025-56563 - A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1.0.

CVE-2026-92808 - A server-side request forgery (SSRF) vulnerability exists in the UnifiedLogin service of Altium Ente

CVE-2026-92526 - A flaw has been found in itsourcecode Leave Management System 1.0. This affects an unknown function

CVE-2026-92475 - A weakness has been identified in GPAC 26.08-DEV. This impacts the function wait_for_header_and_pars

CVE-2026-92474 - A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline_get_proto

CVE-2026-89084 - HP has identified potential security vulnerabilities in the HP Advance software that may enable elev

CVE-2026-89083 - HP has identified potential security vulnerabilities in the HP Advance software that may enable elev

CVE-2026-89082 - HP has identified potential security vulnerabilities in the HP Advance software that may enable elev

CVE-2026-88592 - kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF). The cross-origin file proxy

CVE-2026-87976 - Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bu

CVE-2026-87116 - Tanium addressed a server-side request forgery vulnerability in Threat Response.

CVE-2026-87113 - Tanium addressed an improper access controls vulnerability in Threat Response.

CVE-2026-87105 - Tanium addressed a SQL injection vulnerability in Threat Response.

CVE-2026-87076 - Tanium addressed an information disclosure vulnerability in Discover.

CVE-2026-87026 - Tanium addressed an improper access controls vulnerability in Threat Response.

CVE-2026-87024 - Tanium addressed a SQL injection vulnerability in Asset.

CVE-2026-86865 - Tanium addressed a SQL injection vulnerability in Asset.

CVE-2026-86831 - Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network P

CVE-2026-86089 - Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Conn

CVE-2026-82561 - Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Proc

CVE-2026-81870 - OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.

CVE-2026-81866 - Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API me

CVE-2026-76646 - A remote attacker could cause excessive resource consumption by supplying specially crafted request

CVE-2026-76423 - A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remot

CVE-2026-70469 - Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and

CVE-2026-62949 - AsyncSSH is a Python package which provides an asynchronous client and server implementation of the

CVE-2026-20361 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Das

CVE-2026-20341 - A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software cou

CVE-2026-20330 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20329 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20326 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Das

CVE-2026-20325 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Das

CVE-2026-20324 - A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Managem

CVE-2026-20322 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Das

CVE-2026-20242 - A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (

CVE-2026-20237 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity

CVE-2026-20211 - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary comm

CVE-2026-20194 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity

CVE-2026-20192 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity

CVE-2026-20176 - A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary comm

CVE-2026-20130 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity

CVE-2026-92729 - SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytic

CVE-2026-92473 - A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command

CVE-2026-92472 - A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gf_node_deact

CVE-2026-92418 - A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. Th

CVE-2026-92417 - A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_me

CVE-2026-91106 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91105 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91104 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91103 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91102 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91101 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91100 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91099 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91098 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-91097 - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find

CVE-2026-86071 - Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in s

CVE-2026-86043 - Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the o

CVE-2026-86003 - CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-ove

CVE-2026-82399 - CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-ove

CVE-2026-81876 - HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in J

CVE-2026-81875 - HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in J

CVE-2026-81176 - Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't

CVE-2026-79298 - An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 al

CVE-2026-77360 - oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards.

CVE-2026-75516 - The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w

CVE-2026-75025 - Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue where Mattermost Desktop did not suffic

CVE-2026-73462 - On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping con

CVE-2026-73457 - Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampli

CVE-2026-73456 - Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampli

CVE-2026-73443 - On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthentic

CVE-2026-73442 - On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication cred

CVE-2026-68536 - Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core. Older unsupported version

CVE-2026-63325 - Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to version

CVE-2026-63225 - Redocly CLI makes OpenAPI validation, linting, and documentation workflows easier. Prior to @redocly

CVE-2026-63126 - Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0

CVE-2026-59823 - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.

CVE-2026-46352 - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M

CVE-2026-38999 - A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey

CVE-2026-92720 - Kubero through 3.1.1 fails to apply authentication guards to the notifications API endpoints, allowi

CVE-2026-92719 - Quickwit through 0.9.0 fails to validate the host and scheme of the queue_url parameter in SQS file

CVE-2026-92718 - Nuclei versions before 3.11.1 cache template signature verification based only on file modification

CVE-2026-92717 - Covenant through 0.6 registers the CovenantHub SignalR hub without an Authorize attribute, allowing

CVE-2026-92716 - Shuffle through 2.2.1 contains a cross-tenant privilege escalation vulnerability in the HandleApiGen

CVE-2026-92605 - IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for n

CVE-2026-92604 - Scirius through 3.8.0 contains an arbitrary file write vulnerability in the PCAP filestore upload en

CVE-2026-92416 - A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smf_n4

CVE-2026-92413 - A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by t

CVE-2026-92406 - A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted ele

CVE-2026-88593 - kkFileView 5.0.0 through 5.0.2 allows reflected XSS via the /onlinePreview endpoint. The OnlinePrevi

CVE-2026-85387 - Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer token alone and did

CVE-2026-84397 - Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could

CVE-2026-69147 - vLLM is an inference and serving engine for large language models. Prior to 0.28.0, request bodies f

CVE-2026-51990 - An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker t

CVE-2026-47094 - SIMAC MyPHR 1.1 contains an insecure direct object reference (IDOR) vulnerability that allows authen

CVE-2026-18120 - Concrete CMS before 9.5.3 exposed a legacy Express entry search endpoint that returned entry result

CVE-2026-92603 - ContiNew Admin through 4.1.0 contains an authorization bypass vulnerability in the personal message

CVE-2026-92602 - TDuck survey form through version 5.3 fails to validate webhook URLs or verify form ownership in the

CVE-2026-92601 - Guns through 8.3.5 contains an improper access control vulnerability in SysNoticeController where re

CVE-2026-92600 - Guns through 8.3.5 contains an information disclosure vulnerability in SysUserController where /sysU

CVE-2026-92405 - A security vulnerability has been detected in SourceCodester Inventory and Monitoring System 1.0. Th

CVE-2026-92402 - A security flaw has been discovered in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bb

CVE-2026-92401 - A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. Th

CVE-2026-92399 - A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handle_ws_frame

CVE-2026-92398 - A vulnerability was found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this issue is some unk

CVE-2026-87031 - n Concrete CMS 9.2.0 through 9.5.3, the REST API user creation endpoint (POST /ccm/api/1.0/users, th

CVE-2026-87028 - Concrete CMS 9 through 9.5.3 did not confirm that a board InstanceItem submitted to the custom-slot

CVE-2026-86359 - Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerab

CVE-2026-86358 - Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vu

CVE-2026-85756 - SSH.NET is a Secure Shell (SSH) library for .NET. Prior to 2026.0.0, ScpClient places caller-supplie

CVE-2026-85732 - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, the parseLink function in regist

CVE-2026-85731 - oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of

CVE-2026-85386 - Concrete CMS before 9.5.4 did not sanitize XML and XSLT documents uploaded through a public Form Blo

CVE-2026-85385 - Concrete CMS below 9.5.4 did not validate the user timezone value (uTimezone) on write and rendered

CVE-2026-84993 - MikroORM is a TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map pattern

CVE-2026-76420 - A vulnerability in the internal configuration of the Apache JServ Protocol (AJP)&nbsp;connector for

CVE-2026-71182 - Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Befo

CVE-2026-71181 - Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Befo

CVE-2026-71180 - Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulner

CVE-2026-71179 - Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Sp

CVE-2026-69200 - node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to node-opcua-client 2.145.

CVE-2026-68904 - node-opcua is an OPC UA implementation for TypeScript and Node.js. From 2.0.0 until 2.170.0, node-op

CVE-2026-59974 - Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of

CVE-2026-59944 - Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.

CVE-2026-57173 - vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the input_audio

CVE-2026-42784 - A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates

CVE-2026-20331 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Ad

CVE-2026-20307 - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, rem

CVE-2026-20306 - A vulnerability in the REST API of Cisco ISE and ISE-PIC could allow an authenticated, remote attack

CVE-2026-20305 - A vulnerability in the diagnostic tools of Cisco ISE and ISE-PIC could allow an authenticated, remot

CVE-2026-20234 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity

CVE-2026-92627 - A heap-use-after-free vulnerability exists in H5T__conv_f_f() in src/H5Tconv.c in HDF5 before 1.14.2

CVE-2026-92626 - Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service.

CVE-2026-92625 - Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service.

CVE-2026-92615 - A flaw was found in flightctl. The configureRepoHTTPSClient() function in the device-render worker b

CVE-2026-92397 - A vulnerability has been found in Ruijie RG-EW3000GX EW_3.0(1)B11P380. Affected by this vulnerabilit

CVE-2026-92385 - A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected eleme

CVE-2026-90999 - Sentry Seer is vulnerable to a multi-stage trust-boundary violation that allows unauthenticated atta

CVE-2026-76104 - Dell ObjectScale, versions prior to 4.4.0.0, contains an Incorrect Permission Assignment for Critica

CVE-2026-70416 - Dell ObjectScale, versions prior to 4.4.0.0, contains a Deserialization of Untrusted Data vulnerabil

CVE-2026-61595 - djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered pe

CVE-2026-61593 - djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered pe

CVE-2026-26947 - Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains

CVE-2026-19607 - A flaw was found in the first-broker-login flow of the keycloak-services component. This component h

CVE-2026-17526 - Keycloak is an open-source identity and access management solution. A vulnerability was discovered w

CVE-2025-59953 - LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in ver

CVE-2025-43936 - Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnera

CVE-2026-92616 - FileRise before version 3.28.0 contains a privilege escalation vulnerability that allows authenticat

CVE-2026-92571 - Rejected reason: CVE ID reserved in error and not assigned to a vulnerability. The correct CVE ID is

CVE-2026-92570 - reNgine through 2.2.0 contains an authorization bypass vulnerability in the GetFileContents API endp

CVE-2026-92569 - Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolControl

CVE-2026-92568 - MLRun through 1.11.0 contains a server-side request forgery vulnerability in the WebhookNotification

CVE-2026-92567 - TDuck survey form through version 5.0 contains an authorization bypass vulnerability in the POST /us

CVE-2026-92566 - DataGear through 6.0.0 contains a server-side request forgery vulnerability in the /dataSet/preview/

CVE-2026-92565 - Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedur

CVE-2026-92395 - @fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted re

CVE-2026-92383 - A security vulnerability has been detected in PbootCMS up to 3.2.24. This vulnerability affects the

CVE-2026-92381 - A weakness has been identified in PbootCMS up to 3.2.22. This affects the function decode_string of

CVE-2026-92380 - A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRem

CVE-2026-92366 - A vulnerability was determined in code-projects Matrimonial System 1.0. This affects an unknown part

CVE-2026-92087 - @fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies

CVE-2026-89031 - Adenion Blog2Social plugin for WordPress before 9.1.0 allows low-privileged users to modify the sche

CVE-2026-88976 - Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.11, and in the discontinued 54.0.0-

CVE-2026-88064 - Backstage is an open framework for building developer portals. Prior to 1.14.6 and from 1.15.0 until

CVE-2026-84997 - react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 0.

CVE-2026-84860 - ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authorization Bypass Spring Security g

CVE-2026-84859 - ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Blind SQL Injection The

CVE-2026-84858 - ScadaLTS 2.8.1-release-candidate build 0 is affected by an Authenticated Remote Code Execution via S

CVE-2026-82964 - Improper preservation of permissions in the Avast sandbox minifilter driver (aswSnx.sys) on Windows

CVE-2026-82410 - Pocketbase is an open source web backend written in go. Prior to 0.22.48 and 0.39.7, PocketBase's pa

CVE-2026-80274 - If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative serve

CVE-2026-79651 - A flaw was found in the theme localization endpoints of the keycloak-services component, which is th

CVE-2026-77412 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readField in read.go reads the lengt

CVE-2026-77411 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an em

CVE-2026-77410 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go pr

CVE-2026-77409 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.dispatch in channel.go, conf

CVE-2026-77408 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the writeShortstr function in write.

CVE-2026-77407 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainAuth values defined in auth.go

CVE-2026-77406 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go accepts ne

CVE-2026-77405 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, tlsConfigFromURI in uri.go creates t

CVE-2026-77404 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, URI.String in uri.go concatenates Ce

CVE-2026-77403 - RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Connection.openTune in connection.go

CVE-2026-77401 - Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications

CVE-2026-77119 - A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgr

CVE-2026-76825 - RestrictedPython is a tool that helps define a subset of the Python language for accepting program i

CVE-2026-76163 - If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an attacker

CVE-2026-75029 - In a query response, an attacker may send `named` multiple copies of a record that should only exist

CVE-2026-74909 - Keycloak provides a policy enforcer to protect applications by matching incoming web requests agains

CVE-2026-63671 - MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component.

CVE-2026-63128 - RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's statef

CVE-2026-63127 - RMCP is an official Rust SDK for the Model Context Protocol. Prior to 2.0.0, the rmcp crate's OAuth

CVE-2026-61709 - OpenFGA is an authorization and permission engine built for developers. Prior to 1.18.1, the ListUse

CVE-2026-19668 - A BIND recursive resolver may experience excessive resource consumption if it encounters large numbe

CVE-2026-19666 - On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is

CVE-2026-19033 - For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided

CVE-2026-18212 - A flaw was found in the SAML Redirect Binding implementation of Keycloak, an open-source identity an

CVE-2025-36591 - Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains

CVE-2026-92469 - zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the f

CVE-2026-92468 - zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vulnerability in the s

CVE-2026-92467 - zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in

CVE-2026-92466 - zlt2000 microservices-platform through 6.0.0 contains a missing authorization vulnerability where th

CVE-2026-92365 - A vulnerability was found in vllm-project vllm up to 0.29.0. Affected by this issue is some unknown

CVE-2026-92364 - A vulnerability has been found in itsourcecode Leave Management System 1.0. Affected by this vulnera

CVE-2026-92363 - A flaw has been found in ag-ui-protocol ag-ui 1.0. Affected is an unknown function of the file src/s

CVE-2026-92362 - A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the fi

CVE-2026-92141 - Jenkins Keycloak Authentication Plugin 2.4.1 and earlier does not restrict the redirect URL after lo

CVE-2026-92140 - Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push

CVE-2026-92139 - Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webho

CVE-2026-92138 - The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier re

CVE-2026-92137 - Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configure

CVE-2026-92136 - Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-C