CVE-2026-16812 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attack

CVE-2026-66012 - SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kernel endpoint

CVE-2026-58630 - Improper access control in Azure App Service allows an unauthorized attacker to elevate privileges o

CVE-2026-57106 - Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elevate privil

CVE-2026-56163 - Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unautho

CVE-2026-62825 - Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate privileges ove

CVE-2026-58275 - Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a netw

CVE-2026-56191 - Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tamp

CVE-2026-42933 - Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerabilit

CVE-2025-71389 - Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because