CVE-2026-82525 - Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vulnerability that all

CVE-2026-75036 - A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evalu

CVE-2026-75035 - A flaw was found in Rancher Manager. When a non-administrative caller supplied a label selector nami

CVE-2026-75034 - A flaw was found in Rancher Manager. The SAML assertion replay protection introduced by the fix for

CVE-2026-71963 - Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote code execution vulner

CVE-2026-57445 - Gardens v2 is a modular governance framework that enables communities to create and manage multiple

CVE-2026-55658 - Gardens v2 is a modular governance framework that enables communities to create and manage multiple

CVE-2026-53924 - Gardens v2 is a modular governance framework that enables communities to create and manage multiple

CVE-2026-53720 - pymonocypher uses cython to wrap the Monocypher C library. Prior to version 4.0.2.8, the argon2i_32

CVE-2026-50554 - Note Mark is an open-source note-taking application. Prior to version 0.19.5, GET /api/books/{bookID

CVE-2026-48486 - Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (Po

CVE-2026-85230 - A persistent unsafe URL injection vulnerability exists in the MISP dashboard ButtonWidget configurat

CVE-2026-85227 - MISP contains a reflected Cross-Site Scripting (XSS) vulnerability in the event attribute filtering

CVE-2026-85226 - MISP contains an authorization flaw in the OnDemand correlation engine where correlations were calcu

CVE-2026-85221 - MISP contains an improper TLS certificate validation vulnerability in CurlClient. The CurlClient::$v

CVE-2026-85216 - MISP contains an authentication bypass vulnerability in its LDAP and LinOTP authentication component

CVE-2026-85214 - vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users

CVE-2026-85213 - Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints

CVE-2026-85212 - CRMEB contains an authentication bypass vulnerability in the verifyAuth() method of SystemRoleServic

CVE-2026-85211 - Label Studio fails to apply organization filters when resolving storage URIs for tasks and projects

CVE-2026-85210 - Oppia's AdminRoleHandler GET endpoint in core/controllers/admin.py is decorated with open_access, al

CVE-2026-85199 - Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in t

CVE-2026-85183 - Taipy configures its socket.io server with wildcard CORS origin and credential flag enabled, allowin

CVE-2026-85182 - vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to t

CVE-2026-85181 - CAT uses Java String.hashCode as the sole integrity check for session cookies without server-side ke

CVE-2026-85180 - Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenti

CVE-2026-85179 - Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch

CVE-2026-85178 - Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/vault/key/{providerKey

CVE-2026-85177 - CRMEB through 6.0.0 fails to validate message ownership in the edit_message handler of MessageSystem

CVE-2026-85176 - DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to

CVE-2026-85135 - A security flaw has been discovered in ILIAS up to 9.21/10.9/11.2. This affects the function ilObjMe

CVE-2026-84989 - ntopng is a web-based network traffic monitoring application. In versions 6.7.0 through 6.7.260717,

CVE-2026-84971 - Improper handling of an unexpected value size in the decryption path of a client-side encryption lib

CVE-2026-84970 - A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON

CVE-2026-84969 - A memory-handling error in the BSON-to-JSON conversion helpers of the MongoDB C Driver can write a s

CVE-2026-75033 - A flaw was found in Rancher Manager. Project Secrets were propagated into a namespace based only on

CVE-2026-71404 - A flaw was found in Rancher Manager. The GlobalRole controller derived the target ClusterRole name f

CVE-2026-71403 - A flaw was found in Rancher Manager. The /v3/users update path did not enforce immutability of a Use

CVE-2026-63694 - Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of

CVE-2026-56128 - pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Schedules

CVE-2026-56127 - pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Firewall: Rules: Ed

CVE-2026-56126 - pfSense Plus before 26.07 and CE before 2.9.0 allow authenticated users with the Status: Monitoring

CVE-2026-35160 - Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of

CVE-2026-85110 - A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of th

CVE-2026-85109 - A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of

CVE-2026-84815 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i

CVE-2026-82180 - In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate

CVE-2026-80515 - In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects ev

CVE-2026-6071 - A remote code execution security issue exists in the affected products when parsing DOE files that c

CVE-2025-12737 - The administrative operations within the Carbon Console do not adequately validate specific user-sup

CVE-2026-9854 - A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools c

CVE-2026-9853 - A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the

CVE-2026-9852 - A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data t

CVE-2026-85175 - SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath

CVE-2026-85174 - SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file wh

CVE-2026-85173 - n8n versions before 2.36.2 contain a missing per-project authorization vulnerability in the Insights

CVE-2026-85172 - n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request

CVE-2026-85171 - n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi,

CVE-2026-85170 - n8n versions before 1.123.73, 2.35.4, and 2.36.2 pass message content in the Gmail (v1) and Brevo no

CVE-2026-85169 - n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox escape in the $fromAI

CVE-2026-85168 - n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution vulnerability in th

CVE-2026-85167 - n8n before 2.35.4 and 2.36.x before 2.36.2 contain a query injection vulnerability in the Elasticsea

CVE-2026-85166 - n8n before 2.35.4 and 2.36.x before 2.36.2 does not validate credential references in the inline wor

CVE-2026-85165 - n8n versions before 2.36.2 contain an expression sandbox bypass vulnerability where free identifiers

CVE-2026-85164 - WWBN AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the set

CVE-2026-85163 - AVideo through commit c91b5975d contains a server-side request forgery vulnerability in the EPG pars

CVE-2026-85162 - AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in plugin/Live/s

CVE-2026-85161 - AVideo through commit c91b5975d contains a cross-site request forgery vulnerability in removePoster.

CVE-2026-85160 - AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerabili

CVE-2026-85159 - AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in userLogin

CVE-2026-85158 - AVideo through commit c91b5975d contains a reflected cross-site scripting vulnerability in videoEmbe

CVE-2026-85157 - WWBN AVideo contains a broken access control vulnerability in the unauthenticated feed/index.php end

CVE-2026-85156 - WWBN AVideo fails to properly validate access controls on the public channel page, allowing unauthen

CVE-2026-85155 - WWBN AVideo contains a SQL injection vulnerability in the sort column parameter of the get.json.php

CVE-2026-85154 - WWBN AVideo contains an authentication failure vulnerability where the video_id_hash credential is a

CVE-2026-85150 - A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occ

CVE-2026-85124 - @fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request paths for backslash

CVE-2026-85107 - A vulnerability was found in NousResearch hermes-agent 0.18.0. This vulnerability affects the functi

CVE-2026-85106 - A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchL

CVE-2026-85105 - A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _s

CVE-2026-85100 - A vulnerability was detected in 2FastLabs agent-squad up to 1.1.4. Affected by this vulnerability is

CVE-2026-85093 - Cheshire Cat AI's GET /memory/collections/{collection_id}/points endpoint fails to apply per-user fi

CVE-2026-85092 - LiME through 1.12.0 fails to validate the disk acquisition output path and does not use O_NOFOLLOW w

CVE-2026-85091 - zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate()

CVE-2026-85090 - FreeRDP before 3.31.0 contains a heap out-of-bounds read vulnerability in the general_ChromaV1ToYUV4

CVE-2026-85089 - FreeRDP versions 3.0.0 through 3.30.0 (before 3.31.0) transmit uninitialized heap memory in Save Ses

CVE-2026-85084 - Out-of-bounds Write and Improper Validation of Array Index vulnerability in Samsung Open Source Tize

CVE-2026-85040 - A weakness has been identified in ZhongBangKeJi CRMEB up to 6.0.0. Affected by this vulnerability is

CVE-2026-85031 - A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of th

CVE-2026-85030 - A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. Th

CVE-2026-85022 - A vulnerability was identified in langgenius dify 1.13.0. Affected by this vulnerability is the func

CVE-2026-85021 - A vulnerability was determined in langgenius dify 1.13.0. Affected is the function router.replace of

CVE-2026-84832 - SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged RE

CVE-2026-84831 - SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi

CVE-2026-84830 - SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows a

CVE-2026-82918 - XG VisionTerminal, XG-X VisionTerminal, LJ Series Terminal-Software and WI Series Terminal-Software

CVE-2026-80757 - In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permiss

CVE-2026-80756 - In the Linux kernel, the following vulnerability has been resolved: selinux: do not cancel a policy

CVE-2026-80755 - In the Linux kernel, the following vulnerability has been resolved: selinux: reject a permission va

CVE-2026-80754 - In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - fix F55

CVE-2026-80753 - In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a mo

CVE-2026-80752 - In the Linux kernel, the following vulnerability has been resolved: Input: psxpad-spi - set driver

CVE-2026-80751 - In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: mfg: initia

CVE-2026-80750 - In the Linux kernel, the following vulnerability has been resolved: pmdomain: mediatek: fix remaini

CVE-2026-80749 - In the Linux kernel, the following vulnerability has been resolved: drm/connector/hdmi: Fix out of

CVE-2026-80748 - In the Linux kernel, the following vulnerability has been resolved: mmc: loongson2: Fix sg iteratio

CVE-2026-80747 - In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add bounds check fo

CVE-2026-80746 - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: dispcc-eliza: Fix di

CVE-2026-80745 - In the Linux kernel, the following vulnerability has been resolved: regulator: fp9931: Fix VPOS/VNE

CVE-2026-80744 - In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables_offload: s

CVE-2026-80743 - In the Linux kernel, the following vulnerability has been resolved: ASoC: xilinx: formatter_pcm: pa

CVE-2026-80742 - In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't send zero-byte

CVE-2026-80741 - In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix out-of-bounds read

CVE-2026-80740 - In the Linux kernel, the following vulnerability has been resolved: drm/log: Fix infinite loop when

CVE-2026-80739 - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: TC, Check if flow is

CVE-2026-80738 - In the Linux kernel, the following vulnerability has been resolved: bpf: Check sk_state before sk_p

CVE-2026-80737 - In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize

CVE-2026-80736 - In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth grou

CVE-2026-80735 - In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by

CVE-2026-80734 - In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping

CVE-2026-80733 - In the Linux kernel, the following vulnerability has been resolved: net: remove WARN_ON_ONCE() from

CVE-2026-80732 - In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge

CVE-2026-80731 - In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-

CVE-2026-80730 - In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix crash passing

CVE-2026-80729 - In the Linux kernel, the following vulnerability has been resolved: mm/huge_memory: initialise work

CVE-2026-80728 - In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix apertur

CVE-2026-80727 - In the Linux kernel, the following vulnerability has been resolved: x86/mce: Set up the polling tim

CVE-2026-80726 - In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear ro

CVE-2026-80465 - A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.3), M

CVE-2026-80254 - Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited

CVE-2026-80253 - An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker

CVE-2026-79679 - Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Serv

CVE-2026-78304 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-78080 - Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid

CVE-2026-78069 - Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2S

CVE-2026-78065 - Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDO

CVE-2026-78064 - Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in

CVE-2026-78000 - Joomla Extension - j2commerce.com - Reflected XSS via `filter_tag`, `pricefrom` and `priceto` in J2S

CVE-2026-77999 - Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirm

CVE-2026-76642 - util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running

CVE-2026-76178 - A stored Cross-Site Scripting (XSS) vulnerability in the notification template functionality of the

CVE-2026-76177 - Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=tele_activate endpoint

CVE-2026-76176 - SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to impro

CVE-2026-76175 - SQL injection vulnerability in the del_check parameter of the /ocsreports/?function=save_query_list

CVE-2026-76174 - Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admin_

CVE-2026-74769 - Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vuln

CVE-2026-74768 - Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Server-Side Request Forgery (

CVE-2026-73600 - Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnera

CVE-2026-71224 - A stack overflow vulnerability was found in gfs2-utils. The metadata walk code in metawalk.c uses al

CVE-2026-71222 - A heap out-of-bounds read vulnerability was found in gfs2-utils. The ea_num_ptrs field from on-disk

CVE-2026-71221 - A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value fro

CVE-2026-71220 - A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field

CVE-2026-71219 - A stack overflow vulnerability was found in gfs2-utils. The hash table traversal code in metawalk.c

CVE-2026-68860 - Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layou

CVE-2026-3852 - The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortc

CVE-2026-3416 - The API Publisher component previously used a non-cryptographic pseudorandom number generator (PRNG)

CVE-2026-2573 - The GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor plugin for Wo

CVE-2026-17539 - RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short interval

CVE-2026-15933 - OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. An authenticate

CVE-2026-15926 - Rejected reason: Red Hat Product Security has determined that this CVE ID is not needed

CVE-2021-43614 - Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to reso

CVE-2021-43613 - An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashe

CVE-2021-38489 - HDD password plaintext is stored in a UEFI variable.

CVE-2026-84888 - A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the f

CVE-2026-84887 - A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unk

CVE-2026-84886 - A vulnerability was determined in simular-ai Agent-S up to 0.3.2. Affected by this vulnerability is

CVE-2026-84885 - A vulnerability has been found in simular-ai Agent-S 0.3.1/0.3.2. This impacts an unknown function o

CVE-2026-84851 - An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remo

CVE-2026-84394 - fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting

CVE-2026-66049 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-66048 - Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2026-84857 - A flaw has been found in sigoden aichat up to 0.30.4. This affects an unknown function of the file s

CVE-2026-84856 - A vulnerability was detected in rowboatlabs rowboat up to 0.9.1. The impacted element is the functio

CVE-2026-84852 - A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affec

CVE-2026-84452 - Windows ML CLI is a command line tool for building portable, performant, and high-quality AI models

CVE-2026-84292 - fast-uri serializes the port component of a URI without validating it. When recomposing the authorit

CVE-2026-82524 - UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated ad

CVE-2026-78662 - Previously, a channel registered in the mux's chanList is not usable until it is established. A mali

CVE-2026-75137 - UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows loca

CVE-2026-75136 - UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulnerability that allows

CVE-2026-75135 - UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerability that allows loca

CVE-2026-75134 - SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability

CVE-2026-56855 - Previously, after a channel has been established, a malicious peer could send crafted messages that

CVE-2023-20577 - A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enabl

CVE-2023-20576 - Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM dat

CVE-2026-84841 - A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects

CVE-2026-84840 - A vulnerability was identified in tsi-coop tsi-dpdp-cms up to 0.5.0. This affects an unknown part of

CVE-2026-84839 - A vulnerability was determined in tsi-coop tsi-dpdp-cms up to 0.5.0. Affected by this issue is some

CVE-2026-84382 - HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in

CVE-2026-84381 - HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in

CVE-2026-19117 - Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against

CVE-2026-84833 - A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Af

CVE-2026-84380 - HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, Request._prepare() in src/httpx

CVE-2026-84379 - HTTPX2 is a next generation HTTP client for Python. Prior to 2.11.0, FileField.render_headers() in s

CVE-2026-84378 - HTTPX2 is a next generation HTTP client for Python. From 2.5.0 until 2.10.0, the HTTPX2 Server-Sent

CVE-2026-84377 - LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to versi

CVE-2026-82522 - libjxl before 0.12 contains an integer underflow vulnerability in the container box parser that allo

CVE-2026-77125 - A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group managemen

CVE-2026-77124 - In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/scr

CVE-2026-77123 - Nexus Repository 3 contains a sensitive information disclosure vulnerability in the capability read

CVE-2026-77122 - An authorization flaw in the REST API repository details endpoint (GET /service/rest/v1/repositories

CVE-2026-77121 - A user account with permission to deploy artifacts to a hosted Maven repository could upload a POM f

CVE-2026-66786 - A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-

CVE-2026-55221 - Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up t

CVE-2026-53706 - PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to versi

CVE-2026-53671 - PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to versi

CVE-2026-53670 - PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to versi

CVE-2026-53649 - Joro is a web exploitation framework. Prior to version 1.1.1, Joro's default proxy mode exposes a lo

CVE-2026-49833 - DSpace open source software is a repository application which provides durable access to digital res

CVE-2026-49832 - DSpace open source software is a repository application which provides durable access to digital res

CVE-2026-49831 - DSpace open source software is a repository application which provides durable access to digital res

CVE-2026-49830 - DSpace open source software is a repository application which provides durable access to digital res

CVE-2026-49249 - Boruta is a standalone authorization server that aims to implement OAuth 2.0 and Openid Connect up t

CVE-2026-84811 - agentverus-scanner fails to analyze compiled Python bytecode files in companion code directories, al

CVE-2026-84810 - claude-skill-antivirus fails to analyze executable files when scanning local skill directories, read

CVE-2026-84809 - Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis

CVE-2026-84376 - Astro is a web framework for content-driven websites. Prior to 7.2.4, Astro stripped a configured no

CVE-2026-82404 - TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decodi

CVE-2026-79756 - Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4

CVE-2026-79755 - Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4

CVE-2026-79754 - Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to

CVE-2026-55421 - Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commi

CVE-2026-53636 - Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commi

CVE-2026-53635 - Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commi

CVE-2026-52833 - Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5

CVE-2026-52832 - Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5

CVE-2026-52831 - Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4

CVE-2026-45730 - Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0

CVE-2026-20355 - Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption fun

CVE-2026-20354 - Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions (S/MIME) decryption fun

CVE-2026-20281 - A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Vide

CVE-2026-20280 - As part of Cisco's ongoing commitment to proactive security and product quality, the&nbsp;Cisco IOS

CVE-2026-20279 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR So

CVE-2026-20278 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR So

CVE-2026-20277 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR So

CVE-2026-20276 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR So

CVE-2026-20275 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR So

CVE-2026-20274 - As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR So

CVE-2026-20212 - A vulnerability in the Silicon One integration for Cisco Nexus 9000 Series Switches could allow an u

CVE-2026-84838 - A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to e

CVE-2026-84837 - A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing th

CVE-2026-84677 - Jenkins update-center2 3.18.3 and earlier does not escape plugin-provided values (plugin names, desc

CVE-2026-84676 - Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job confi

CVE-2026-84675 - OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able

CVE-2026-84674 - Missing permission checks in Jenkins XebiaLabs XL Deploy Plugin 26.1.0 and earlier allow attackers w

CVE-2026-84673 - Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's

CVE-2026-84672 - Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra

CVE-2026-84671 - Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary loca

CVE-2026-84670 - Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can b

CVE-2026-84669 - A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Ite