CVE-2026-53999 | High | 7.7 | 2026-10-14 | Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-native apps. Prior to 0.58.0, the Kubernetes… |
CVE-2026-101897 | | | 2026-10-14 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. From 1.20.0 until 1.21.1, t… |
CVE-2026-83837 | High | 7.8 | 2026-10-13 | Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-70148 | Medium | 6.5 | 2026-10-13 | Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. |
CVE-2026-93294 | Medium | 6.3 | 2026-10-13 | A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs beyond those Grafana needs, with the da… |
CVE-2026-109373 | High | 8.1 | 2026-10-12 | ZITADEL 3.0.0 before 4.19.2 contains an authentication bypass vulnerability in the Login V2 UI that allows unauthenticated attackers to obtain other users' ses… |
CVE-2026-108261 | Critical | 9.3 | 2026-10-09 | Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview route in packages/tinacms/src/admin/index… |
CVE-2026-107336 | Medium | 6.5 | 2026-10-08 | Malcolm's front nginx reverse proxy defines a "Dashboards → Arkime shortcut" location using a case-insensitive regex matcher but a case-sensitive rewrite. A re… |
CVE-2026-107282 | | | 2026-10-07 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.13 and 2.16… |
CVE-2026-107232 | High | 7.5 | 2026-10-07 | The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. Prior to 3.0.12 on 3.x an… |
CVE-2026-102255 | Critical | 10.0 | 2026-10-07 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path… |
CVE-2026-106487 | Low | 3.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.21.10, the @backstage/plugin-kubernetes-backend package is affected by unsupported ca… |
CVE-2026-106462 | Medium | 6.4 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.54.6, scaffolder source-control actions may not consistently enforce intended credent… |
CVE-2026-94205 | Critical | 9.8 | 2026-10-06 | Gitea Actions decided whether a fork pull request run needed approval based on the user who triggered the event rather than the pull request author. For `pull_… |
CVE-2026-106427 | Medium | 5.4 | 2026-10-06 | Confused deputy in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged pa… |
CVE-2026-106359 | Medium | 4.3 | 2026-10-06 | Confused deputy in DeviceBoundSessionCredentials in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HT… |
CVE-2026-106326 | Medium | 4.4 | 2026-10-06 | Confused deputy in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker to bypass system access restrictions into a privileged pag… |
CVE-2026-106301 | High | 8.1 | 2026-10-06 | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system… |
CVE-2026-106286 | Medium | 6.5 | 2026-10-06 | Confused deputy in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium… |
CVE-2026-106266 | Medium | 6.5 | 2026-10-06 | Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web or… |
CVE-2026-106228 | High | 8.3 | 2026-10-06 | Confused deputy in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execut… |
CVE-2026-106221 | High | 8.3 | 2026-10-06 | Confused deputy in WebAPKs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin p… |
CVE-2026-106188 | High | 7.1 | 2026-10-06 | Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privilege… |
CVE-2026-55270 | High | 7.8 | 2026-10-05 | In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no… |
CVE-2026-28648 | High | 7.8 | 2026-10-05 | In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution priv… |
CVE-2026-93320 | | | 2026-10-05 | BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootf… |
CVE-2026-103922 | Critical | 9.3 | 2026-10-01 | Capacitor is a cross-platform native runtime for web applications. From 6.0.0 until 6.2.2, 7.6.9, 8.3.5, 8.4.3, and 8.5.1, the Android and iOS WebView navigati… |
CVE-2026-95361 | Medium | 4.3 | 2026-09-29 | Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a c… |
CVE-2026-95328 | Medium | 6.5 | 2026-09-29 | Confused deputy in Mobile in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker leveraging social engineering to obtain sensitive info… |
CVE-2026-101907 | | | 2026-09-28 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect policy. An… |
CVE-2026-101905 | | | 2026-09-28 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies request opti… |
CVE-2026-72668 | High | 7.3 | 2026-09-26 | Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent Builder can lead to privilege escalation. A non-administrative user able to edit… |
CVE-2026-100706 | Critical | 9.9 | 2026-09-26 | kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the per-namespace cl… |
CVE-2026-100625 | High | 7.1 | 2026-09-26 | Capgo (capgo.app) exposes a native build TUS upload proxy (supabase/functions/_backend/public/build/upload.ts) that authorizes a caller against a single build… |
CVE-2026-75886 | High | 7.2 | 2026-09-23 | A flaw was found in openshift/console. An unauthenticated remote attacker can exploit a misconfiguration in the CatalogdHandler, which lacks proper authenticat… |
CVE-2026-77255 | High | 8.6 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, the Jira update_issue attachments argumen… |
CVE-2026-77246 | High | 7.4 | 2026-09-22 | MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, an HTTP transport deployment with READ_ON… |
CVE-2026-69399 | Critical | 10.0 | 2026-09-17 | Azure Arc Elevation of Privilege Vulnerability |
CVE-2026-50022 | Medium | 5.8 | 2026-09-17 | Metacat is data repository software that helps researchers preserve, share, and discover data. Prior to 3.4.2, MetacatSolrIndex.query forwards the client-contr… |
CVE-2026-45723 | Low | 2.7 | 2026-09-17 | Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/sch… |
CVE-2026-61793 | | | 2026-09-17 | Nuxt OG Image generates OG Images with Vue templates in Nuxt. From 6.0.2 until 6.7.0, nuxt-og-image exposes the unauthenticated /_og/d/** route when the docume… |
CVE-2026-86003 | High | 7.5 | 2026-09-16 | CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over-gRPC listeners in plugin/pkg/doh/doh.g… |
CVE-2026-91742 | Medium | 4.8 | 2026-09-15 | Confused deputy in PriceTracking in Google Chrome on on iOS prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to bypass system acc… |
CVE-2026-58739 | Medium | 6.7 | 2026-09-15 | In platform_msg_handler_init of default_msg_handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of pr… |
CVE-2026-58698 | Medium | 6.7 | 2026-09-15 | In ap_pmic_poll_msg_handler of ap_pmic_ipc.c, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege… |
CVE-2026-57042 | Medium | 6.7 | 2026-09-15 | In multiple functions of DreamPickerReceiver.kt, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privile… |
CVE-2026-56992 | Medium | 6.7 | 2026-09-15 | In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privi… |
CVE-2026-56986 | High | 8.4 | 2026-09-15 | In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution… |
CVE-2026-56985 | High | 8.4 | 2026-09-15 | In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional exec… |
CVE-2026-56945 | High | 7.8 | 2026-09-15 | In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privile… |
CVE-2026-56922 | Medium | 6.7 | 2026-09-15 | In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2026-56879 | Medium | 6.7 | 2026-09-15 | In gmc_mb_msg_handler of gmc_mba.c, there is a possible memory corruption due to a confused deputy. This could lead to local escalation of privilege with Syste… |
CVE-2026-0183 | Medium | 4.4 | 2026-09-15 | In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges n… |
CVE-2026-55225 | High | 8.0 | 2026-09-15 | Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations. In Strimzi 1.0.0 and earlier, an attacke… |
CVE-2026-81303 | Medium | 6.3 | 2026-09-15 | A flaw was found in hawtio-operator. The operator holds routes/custom-host:create permission cluster-wide and writes the tenant-supplied spec.routeHostName val… |
CVE-2026-84616 | Medium | 5.5 | 2026-09-14 | A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27… |
CVE-2026-54628 | High | 8.6 | 2026-09-14 | Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes URL-capable SQLite virtual table modules such as json_reader an… |
CVE-2026-87582 | High | 8.3 | 2026-09-09 | Confused deputy in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execu… |
CVE-2026-87502 | Medium | 4.2 | 2026-09-09 | Confused deputy in Fullscreen in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social e… |
CVE-2026-87453 | Medium | 5.3 | 2026-09-09 | Confused deputy in BackgroundFetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to leak sensitive… |
CVE-2026-87442 | Low | 3.1 | 2026-09-09 | Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass w… |
CVE-2026-45520 | High | 7.8 | 2026-09-08 | In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privileg… |
CVE-2026-45519 | Low | 3.3 | 2026-09-08 | In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local i… |
CVE-2026-28657 | High | 7.8 | 2026-09-08 | In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to lo… |
CVE-2026-28644 | High | 7.8 | 2026-09-08 | In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible permission bypass due to a confused deputy. This could lead to local escal… |
CVE-2026-28636 | High | 7.8 | 2026-09-08 | In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to… |
CVE-2026-28624 | High | 7.8 | 2026-09-08 | In multiple locations, there is a possible read/write access to files without the proper permissions due to a confused deputy. This could lead to local escalat… |
CVE-2026-28616 | High | 7.8 | 2026-09-08 | In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege wi… |
CVE-2026-28614 | High | 7.8 | 2026-09-08 | In onCreate of SlicePermissionActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege w… |
CVE-2026-28607 | High | 7.8 | 2026-09-08 | In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalatio… |
CVE-2026-28603 | High | 7.8 | 2026-09-08 | In assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible read/write access to private files due to a confused deputy. This could… |
CVE-2026-28600 | High | 7.8 | 2026-09-08 | In onCreate of PaymentDefaultDialog.java, there is a possible way to change default payment app due to a confused deputy. This could lead to local escalation o… |
CVE-2026-69531 | Medium | 5.5 | 2026-09-08 | Unintended proxy or intermediary ('confused deputy') in Microsoft Windows Speech allows an authorized attacker to perform tampering locally. |
CVE-2026-86600 | High | 8.2 | 2026-09-08 | In affected Snowflake drivers, WORKLOAD_IDENTITY authentication requests a cloud workload-identity token and attaches it to the login request without verifying… |
CVE-2026-86115 | Medium | 5.0 | 2026-09-05 | Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skipping SSRF validation and minting internal… |
CVE-2026-84329 | Medium | 5.3 | 2026-09-02 | Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process… |
CVE-2026-83548 | Critical | 10.0 | 2026-09-01 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticat… |
CVE-2026-77348 | High | 8.2 | 2026-08-31 | Wallos is an open-source, self-hostable personal subscription tracker. Prior to version 5.0.0, the fix for CVE-2026-33407 (GHSA-hhjq-82f8-m6rc, "SSRF via HTTP… |
CVE-2026-67567 | Critical | 9.9 | 2026-08-20 | A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a tenant, who has the ability to create HelmRelease custom resou… |
CVE-2026-63643 | | | 2026-08-18 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, the ADD_CALENDAR handler in defaultmodules/calendar/node_helper.js accepts an at… |
CVE-2026-73424 | Medium | 6.5 | 2026-08-17 | Astro is a web framework for content-driven websites. From 10.0.3 until 11.0.3, the Astro Vercel adapter in packages/integrations/vercel/src/serverless/entrypo… |
CVE-2026-72640 | Medium | 6.5 | 2026-08-13 | The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorde… |
CVE-2026-73266 | High | 7.1 | 2026-08-13 | A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE). An authenticated tenant can exploit this vulnerability by manipulating… |
CVE-2026-72526 | Critical | 9.9 | 2026-08-12 | A flaw was found in the multicloud-integrations component. The Application propagation controller processes the `ocm-managed-cluster` annotation from an Applic… |
CVE-2026-70398 | Critical | 9.6 | 2026-08-12 | A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, refer… |
CVE-2026-73079 | High | 8.5 | 2026-08-11 | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168, platform API keys i… |
CVE-2026-16456 | Medium | 6.5 | 2026-08-10 | A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecre… |
CVE-2026-44964 | Medium | 6.5 | 2026-08-07 | In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard. A co-installed ap… |
CVE-2026-44945 | Critical | 9.1 | 2026-08-05 | A privilege escalation vulnerability exists in Rancher's impersonation middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher user with the de… |
CVE-2026-54663 | Medium | 6.1 | 2026-07-29 | swagger-typescript-api generates API clients for Fetch or Axios from OpenAPI specifications. Prior to 13.12.2, src/resolved-swagger-schema.ts warmUpRemoteSchem… |
CVE-2026-43910 | High | 8.2 | 2026-07-28 | Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnec… |
CVE-2026-17107 | High | 8.5 | 2026-07-24 | A flaw was found in the cluster-proxy service-proxy component used in Red Hat Advanced Cluster Management for Kubernetes (RHACM) and multicluster-engine (MCE)… |
CVE-2026-42933 | Critical | 10.0 | 2026-07-23 | Pronetiqs IntraVUE versions 3.2.1a14 and prior have an unintended proxy or intermediary vulnerability which could allow an attacker to use an active proxy, whi… |
CVE-2026-13062 | Medium | 6.5 | 2026-07-22 | An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are int… |
CVE-2026-47122 | Medium | 4.2 | 2026-07-21 | Sparkle is a software update framework for macOS. In versions up to and including 2.9.1, `Autoupdate/AppInstaller.m`'s `shouldAcceptNewConnection:` only enforc… |
CVE-2026-16158 | High | 8.7 | 2026-07-18 | Impact: @fastify/reply-from versions from 8.3.1 up to but not including 12.6.4 build the internal URL cache key by concatenating the destination and source pat… |
CVE-2026-53514 | High | 7.7 | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, and in 1.6.14 and later when invitation IDs can be obtained outside… |
CVE-2026-53513 | Critical | 9.6 | 2026-07-15 | Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin's POST /sso/register and POST /sso/upda… |
CVE-2026-15183 | | | 2026-07-14 | Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflake) versions prior to 3.2.1 can allow attackers to exfiltrate OAuth cl… |
CVE-2026-56675 | High | 8.3 | 2026-07-10 | 9Router is an AI router & token saver. Prior to 0.5.2, 9router treats loopback requests as trusted and allows /v1/* access without an API key, so a same-host r… |