Patch Tuesday — November 2026
2026-11-10 · 1210 CVEs
CVEs published or modified the week of 2026-11-10, partitioned by vendor.
Other vendors (1210 CVEs across 351 vendors)
Ffmpeg · 121 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125267 | High | 7.8 | — | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in the APAC decoder in libavcodec/apac.c caused by an unreset bitstream index. |
CVE-2026-125262 | High | 7.8 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/lcevcdec.c because LCEVC output picture dimensions are not validated against the allocated frame. |
CVE-2026-125259 | High | 7.8 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in ff_prores_kostya_encode_init() that miscalculates frame_size_upper_bound using 32-bit arithmetic for large frame dimensions. |
CVE-2026-125250 | High | 7.8 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow in the GIF encoder's gif_image_write_image() in libavcodec/gif.c because shrunk_buf is sized from the first frame's linesize. |
CVE-2026-125244 | High | 7.8 | — | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds write vulnerability in the VVC decoder's sh_entry_points() function in libavcodec/vvc/ps.c. |
CVE-2026-125233 | High | 7.8 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in dvbsub_encode() in libavcodec/dvbsubenc.c that undercounts each CLUT segment header by two bytes. |
CVE-2026-125229 | High | 7.8 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds memory access vulnerability in the encode_frame() function of libavcodec/huffyuvenc.c, because encode_init() never validates minimum frame dimensions for the median predictor. |
CVE-2026-125209 | High | 7.8 | — | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the DVD subtitle encoder that underestimates RLE output size for odd-width rectangles. |
CVE-2026-125203 | High | 7.8 | — | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap buffer overflow vulnerability in the Cook multichannel decoder in libavcodec/cook.c that fails to verify subpacket channel masks are disjoint. |
CVE-2026-125269 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c where cbs_sei_delete_message() leaves a stale extension_data reference that ff_cbs_sei_add_message() reuses. |
CVE-2026-125260 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/exrenc.c that allows attackers to corrupt heap memory when encode_scanline_rle() processes frames taller than the encoder height. |
CVE-2026-125257 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an off-by-one heap overflow vulnerability in get_exponent_dynamic() in libavcodec/nellymoserenc.c that allows writing one element past the opt and path allocations. |
CVE-2026-125256 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_llvidenc_diff_bytes_rvv() that allows attackers to corrupt heap memory by triggering negative length values in the Huffyuv encoder. |
CVE-2026-125251 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in the VVC decoder alloc_frame() function in libavcodec/vvc/refs.c that undersizes the reference picture list allocation on 32-bit builds. |
CVE-2026-125249 | High | 7.0 | — | 2026-11-09 | FFmpeg 7.1 through 9.0.2 contains an integer overflow in ff_vk_decode_add_slice() in libavcodec/vulkan_decode.c that miscalculates the Vulkan hwaccel bitstream buffer size. |
CVE-2026-125248 | High | 7.0 | — | 2026-11-09 | FFmpeg 9.0 through 9.0.2 contains an integer overflow vulnerability in libavcodec/ffv1enc_vulkan.c that undersizes the float remap GPU buffer for large frames. |
CVE-2026-125241 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/flicvideo.c that allows attackers to write out of bounds because check_pixel_ptr() checks only one bound with negative-stride frames. |
CVE-2026-125239 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in ff_dxva2_hevc_fill_picture_parameters() that allows attackers to corrupt memory via unbounded non-uniform tile counts. |
CVE-2026-125235 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap overflow vulnerability in libavcodec/qsvenc.c that allows attackers to corrupt memory by reusing an undersized pooled QSVFrame buffer when input dimensions increase. |
CVE-2026-125227 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow in cbs_jpeg_write_scan() in libavcodec/cbs_jpeg.c that causes a heap buffer overflow on 32-bit builds. |
CVE-2026-125222 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in hap_parse_frame_header() in libavcodec/hapdec.c that allows attackers to trigger a heap buffer overflow on 32-bit builds. |
CVE-2026-125219 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vdpau_hevc_start_frame() in libavcodec/vdpau_hevc.c that copies unbounded PPS tile counts into fixed-size VDPAU arrays. |
CVE-2026-125218 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the APNG encoder's encode_apng() function in libavcodec/pngenc.c when frame size changes mid-stream. |
CVE-2026-125214 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in pcm_bluray_decode_frame() in libavcodec/pcm-bluray.c on big-endian hosts. |
CVE-2026-125213 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in the PSD decoder in libavcodec/psd.c that allows attackers to corrupt heap memory on 32-bit builds by supplying a crafted PSD image. |
CVE-2026-125212 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/videotoolboxenc.c that copies frames larger than encoder dimensions into undersized CVPixelBuffers. |
CVE-2026-125211 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read and invalid free vulnerability in aribcaption_trans_ass_subtitle() in libavcodec/libaribcaption.c that frees subtitle rectangles using region_count instead of num_rects. |
CVE-2026-125210 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in aribcaption_trans_text_subtitle() in libavcodec/libaribcaption.c when decoding with sub_type text. |
CVE-2026-125208 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in v4l2_buffer_swframe_to_buf() in libavcodec/v4l2_buffers.c because cumulative plane offsets are not checked against the V4L2 buffer length. |
CVE-2026-125204 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow in ff_libwebp_get_frame() in libwebpenc_common.c that lets attackers corrupt memory when cr_threshold is set. |
CVE-2026-125202 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in vaapi_hevc_start_frame() in libavcodec/vaapi_hevc.c that copies unbounded PPS tile counts into fixed-size arrays. |
CVE-2026-125201 | High | 7.0 | — | 2026-11-09 | FFmpeg 7.0 before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in vk_av1_decode_slice() in libavcodec/vulkan_av1.c because the tile-count limit is checked only on entry. |
CVE-2026-125196 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in liboapve_encode() in libavcodec/liboapvenc.c that allows attackers to corrupt heap memory by supplying frames larger than the configured encoder dimensions. |
CVE-2026-125181 | High | 7.0 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds write vulnerability in flic_decode_frame_15_16BPP() in libavcodec/flicvideo.c that allows attackers to corrupt heap memory on big-endian builds. |
CVE-2026-125261 | Medium | 6.1 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encode_frame() in libavcodec/sgienc.c, where unsigned size variables mis-handle negative linesize frames. |
CVE-2026-125197 | Medium | 6.1 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer underflow in decode_frame() in libavcodec/lcldec.c that allows attackers to trigger a heap out-of-bounds read via short ZLIB packets with FLAG_MULTITHREAD. |
CVE-2026-125193 | Medium | 6.1 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in bitpacked_decode_uyvy422() in libavcodec/bitpacked_dec.c because it never verifies packets hold width * height * 2 bytes. |
CVE-2026-125178 | Medium | 6.1 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds heap read vulnerability in tdsc_load_cursor() in libavcodec/tdsc.c, which stores cursor dimensions before validating them. |
CVE-2026-125172 | Medium | 6.1 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c that fails to validate NAL unit length prefixes against remaining packet data. |
CVE-2026-125171 | Medium | 6.1 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Musepack SV7 decoder because mpc7_decode_init() does not validate lastframelen against MPC_FRAME_SIZE. |
CVE-2026-125264 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in parse_frame_header() in libavcodec/jpegxl_parser.c that fails to validate TOC entry counts against remaining input. |
CVE-2026-125254 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a division by zero vulnerability in the VVC decoder because ff_vvc_slice_rpl() fails to validate num_ref_idx_active against built reference list entries. |
CVE-2026-125240 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a resource leak vulnerability in svt_jpegxs_dec_decode() in libsvtjpegxsdec.c that leaks decoder instances when ff_set_dimensions() rejects frame dimensions. |
CVE-2026-125238 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a reachable assertion vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c that returns success when an access unit produces no frame. |
CVE-2026-125234 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in wavpack_encode_init() in libavcodec/wavpackenc.c that causes an infinite loop when computing block size from sample rate and channel count. |
CVE-2026-125232 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a division by zero vulnerability in estimate_motion_b() in libavcodec/motion_est.c, caused by frame timestamp distances truncated to 16 bits. |
CVE-2026-125231 | Medium | 5.5 | — | 2026-11-09 | FFmpeg 4.4 through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/adxdec.c because adx_decode_header() updates the channel layout before validating the sample rate. |
CVE-2026-125230 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in the pcm_rechunk bitstream filter that allows attackers to trigger division by zero via a crafted channel count. |
CVE-2026-125226 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in sbg_read_header() in libavformat/sbgdec.c that derives an unbounded default frame size from the script's sample rate. |
CVE-2026-125225 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in aac_adtstoasc_filter() that allows attackers to crash applications via oversized ADTS AAC packets. |
CVE-2026-125224 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a denial of service vulnerability in libavcodec/vorbis_parser.c that re-parses invalid extradata for every packet when valid_extradata remains false. |
CVE-2026-125221 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uncontrolled recursion vulnerability in score_header() in libavcodec/flac_parser.c that allows attackers to exhaust the thread stack via crafted FLAC input. |
CVE-2026-125220 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a deadlock vulnerability in mimic_decode_frame() in libavcodec/mimic.c that fails to report frame progress when init_get_bits8() fails. |
CVE-2026-125216 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/dpxenc.c that allows attackers to crash the process via unvalidated bits_per_raw_sample for RGB48 input. |
CVE-2026-125207 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uncontrolled memory allocation vulnerability in the Interplay ACM decoder that allows attackers to exhaust memory via an attacker-controlled block size. |
CVE-2026-125205 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an unbounded memory allocation vulnerability in the av1_frame_merge bitstream filter that allows attackers to exhaust memory by never sending a temporal delimiter OBU. |
CVE-2026-125200 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/libx265.c because libx265_encode_frame() never frees the rpu.payload allocated by ff_dovi_rpu_generate(). |
CVE-2026-125199 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in vc1_decode_frame() in libavcodec/vc1dec.c that leaks slice buffers when init_get_bits8() fails. |
CVE-2026-125194 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in pcm_dvd_encode_frame() in libavcodec/pcm-dvdenc.c when a 24-bit final frame holds fewer samples than one block. |
CVE-2026-125187 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a reachable assertion vulnerability in the TTA encoder's tta_encode_frame() in libavcodec/ttaenc.c, which never reserves output packet space for the 4-byte CRC. |
CVE-2026-125185 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a division by zero vulnerability in ff_aom_parse_film_grain_sets() that fails to reject AFGS1 scaling points with repeated x values. |
CVE-2026-125183 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a denial of service vulnerability in pps_3d_extension() in libavcodec/hevc/ps.c that allows attackers to exhaust CPU through unbounded depth lookup table loops. |
CVE-2026-125180 | Medium | 5.5 | — | 2026-11-09 | FFmpeg 8.1 through 9.0.2 contains a memory exhaustion vulnerability in the libavcodec/exif.c parser that allows attackers to amplify allocations by pointing many IFD entries at overlapping payloads. |
CVE-2026-125174 | Medium | 5.5 | — | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a NULL pointer dereference vulnerability in ff_hap_set_chunk_count() in libavcodec/hap.c, where a shadowed return variable masks reallocation failures. |
CVE-2026-125173 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in libxevd_receive_frame() in libavcodec/libxevd.c that fails to free pkt_au when an access unit produces no picture. |
CVE-2026-125104 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory exhaustion vulnerability in ape_decode_frame() in libavcodec/apedec.c that fails to enforce the 73728-sample limit for legacy APE frames. |
CVE-2026-125073 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an infinite loop vulnerability in bit_allocation() in libavcodec/imc.c that allows attackers to hang decoding by supplying audio blocks with a negative bit budget. |
CVE-2026-125070 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tqi_decode_frame() in libavcodec/eatqi.c, which ignores init_get_bits() failure after an integer overflow. |
CVE-2026-125068 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Bink video decoder because decode_frame() in libavcodec/bink.c ignores init_get_bits() failure. |
CVE-2026-125067 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in vble_decode_frame() in libavcodec/vble.c because it ignores init_get_bits() failure on oversized packets. |
CVE-2026-125066 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Cirrus Logic AccuPak (CLJR) decoder in libavcodec/cljrdec.c because decode_frame() ignores init_get_bits() failure. |
CVE-2026-125065 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in tgv_decode_inter() in libavcodec/eatgv.c that ignores init_get_bits() failure on oversized packets. |
CVE-2026-125064 | Medium | 5.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in g726_decode_frame() in libavcodec/g726.c because it ignores init_get_bits() failure on oversized packets. |
CVE-2026-125270 | Medium | 5.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2_buffer_swframe_to_buf() in libavcodec/v4l2_buffers.c that mishandles frames with negative linesize. |
CVE-2026-125265 | Medium | 5.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff_nvdec_start_frame() fails to reset ctx->bitstream after slice errors. |
CVE-2026-125255 | Medium | 5.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a use after free vulnerability in libavcodec/mjpegdec.c that allows attackers to trigger freed buffer reads by sending a SOF marker without a preceding SOI. |
CVE-2026-125253 | Medium | 5.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow in cbs_vp9_split_fragment() in libavcodec/cbs_vp9.c that wraps the superframe size check on 32-bit builds. |
CVE-2026-125228 | Medium | 5.3 | — | 2026-11-09 | FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an out-of-bounds read vulnerability in put_vector() in libavcodec/vorbisenc.c when NaN samples leave the codebook entry at -1. |
CVE-2026-125263 | Medium | 4.7 | — | 2026-11-09 | FFmpeg 9.0 through 9.0.2 built with liblcevc_dec fails to validate LCEVC enhanced output dimensions against max_pixels in libavcodec/decode.c before frame allocation. |
CVE-2026-125258 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a division by zero vulnerability in dovi_configure_ext() in libavcodec/dovi_rpuenc.c that allows attackers to crash the process via an unvalidated frame rate denominator. |
CVE-2026-125252 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vaapi_decode.c that allows attackers to exhaust memory by supplying streams with slice parse errors. |
CVE-2026-125246 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a denial of service vulnerability in cbs_jpeg_assemble_fragment() that miscounts 0xff stuffing bytes in JPEG scan headers. |
CVE-2026-125245 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in ff_mjpeg_decode_sof() in libavcodec/mjpegdec.c, which overwrites the hwaccel_picture_private pointer without freeing it. |
CVE-2026-125242 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in libavcodec/vdpau.c that allows attackers to exhaust heap memory by aborting pictures before end_frame. |
CVE-2026-125237 | Medium | 4.7 | — | 2026-11-09 | FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in libavcodec/dpx.c that leaves dpx->hwaccel_picture_private allocated when Vulkan hwaccel callbacks fail. |
CVE-2026-125223 | Medium | 4.7 | — | 2026-11-09 | FFmpeg 8.0 through 9.0.2 contains a memory leak vulnerability in the VP9 decoder that allows attackers to exhaust memory because vp9_decode_frame() skips resetting the CBS fragment on error paths. |
CVE-2026-125215 | Medium | 4.7 | — | 2026-11-09 | FFmpeg 7.1 through 9.0.2 contains a NULL pointer dereference vulnerability in ff_dovi_rpu_generate() in libavcodec/dovi_rpuenc.c that allows attackers to crash applications via crafted Dolby Vision RPU metadata. |
CVE-2026-125191 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a reference count leak in libavcodec/v4l2_buffers.c that allows attackers to deadlock the V4L2 mem2mem decoder on multi-plane capture formats. |
CVE-2026-125189 | Medium | 4.7 | — | 2026-11-09 | FFmpeg 8.1 through 9.0.2 contains a denial of service vulnerability in the lcevc_metadata bitstream filter caused by a process block position mismatch in lcevc_metadata_handle_vui(). |
CVE-2026-125186 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uncontrolled resource consumption vulnerability in the dts2pts bitstream filter that allows attackers to exhaust CPU through unbounded per-packet POC node allocation. |
CVE-2026-125072 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in mp_decode_frame() in libavcodec/mpegaudiodec_template.c because init_get_bits() failure is ignored after a signed integer overflow. |
CVE-2026-125071 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in libavcodec/jvdec.c that allows attackers to crash applications by supplying oversized JV video packets. |
CVE-2026-125069 | Medium | 4.7 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a NULL pointer dereference vulnerability in the Motion Pixels decoder because mp_decode_frame() ignores init_get_bits() failure. |
CVE-2026-125268 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the CineForm HD decoder that allows attackers to leak heap memory via unzeroed idwt_tmp buffers in libavcodec/cfhd.c. |
CVE-2026-125266 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized stack memory disclosure vulnerability in old_codec23() of libavcodec/sanm.c that leaks stack bytes into decoded frames. |
CVE-2026-125247 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in dng_decode_tiles() that allows attackers to leak uninitialized memory via crafted DNG tile dimensions. |
CVE-2026-125243 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ff_jpegls_decode_picture() in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. |
CVE-2026-125236 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in alloc_frame() in libavcodec/vvc/refs.c that leaks SPS and PPS references when frame buffer allocation fails. |
CVE-2026-125217 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in roq_dpcm_encode_frame() in libavcodec/roqaudioenc.c that encodes stale heap contents when flushed early. |
CVE-2026-125192 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the DXA decoder in libavcodec/dxa.c that allows attackers to disclose heap memory via crafted DXA files. |
CVE-2026-125190 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in decode_mvc2() in libavcodec/mvcdec.c that leaks uninitialized stack memory through unchecked palette indices. |
CVE-2026-125184 | Low | 3.3 | — | 2026-11-09 | FFmpeg 6.1 through 9.0.2 contains an information disclosure vulnerability in the CamStudio decoder (libavcodec/cscd.c) that copies uninitialized heap memory into decoded frames when decompressed payloads are short. |
CVE-2026-125182 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the Cook decoder joint_decode() function because cook_decode_init() does not check js_subband_start against subbands. |
CVE-2026-125179 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory vulnerability in the VQA video decoder in libavcodec/vqavideo.c that allows attackers to disclose heap memory via a crafted VQA file. |
CVE-2026-125177 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in the MSCC/SRGC decoder in libavcodec/mscc.c that outputs uninitialized heap bytes when RLE data ends early. |
CVE-2026-125176 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory read vulnerability in decode_hybrid() in libavcodec/flashsv.c that reads past decompressed data when decoding 15-bit color pixels. |
CVE-2026-125175 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in flashsv_decode_block() in libavcodec/flashsv.c that copies uninitialized heap memory into decoded frames when inflate output is short. |
CVE-2026-125170 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in targa_decode_rle() in libavcodec/targa.c caused by missing packet length checks. |
CVE-2026-125103 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in ff_mlz_decompression() in libavcodec/mlz.c, which accepts string codes beyond the dictionary's next free code. |
CVE-2026-125102 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in tak_decode_frame() in libavcodec/takdec.c that fails to verify multichannel decorrelation lists cover every channel. |
CVE-2026-125101 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in the VMnc decoder in libavcodec/vmnc.c that restores an unwritten cursor save area into later frames. |
CVE-2026-125100 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an integer overflow vulnerability in the OpenEXR decoder's decode_frame() in libavcodec/exr.c that miscalculates the tiled block count. |
CVE-2026-125099 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the GEM raster image decoder in libavcodec/gemdec.c that exposes uninitialized row-buffer bytes. |
CVE-2026-125098 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an information disclosure vulnerability in vp8_lossy_decode_alpha() in libavcodec/webp.c that leaves alpha plane memory uninitialized for short uncompressed ALPH chunks. |
CVE-2026-125097 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in raw_decode() in libavcodec/rawdec.c that fails to verify packet stride covers a full row for 1 to 8 bits per pixel video. |
CVE-2026-125096 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in libavcodec/tiertexseqv.c that allows attackers to leak stack contents by triggering failed RLE unpacking. |
CVE-2026-125095 | Low | 3.3 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory use vulnerability in the C93 video decoder in libavcodec/c93.c, where decode_frame() never checks how many color table bytes were copied. |
CVE-2026-125206 | Low | 2.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the prores_ks encoder's get_alpha_data() that reads before the blocks buffer for interlaced frames with odd heights. |
CVE-2026-125198 | Low | 2.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a memory leak vulnerability in mediaformat_jni_setBuffer() in libavcodec/mediacodec_wrapper.c that never frees buffers wrapped with NewDirectByteBuffer(). |
CVE-2026-125195 | Low | 2.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in adpcm_encode_frame() in libavcodec/adpcmenc.c that leaks heap bytes when encoding mono ADPCM_MS audio with trellis enabled. |
CVE-2026-125188 | Low | 2.5 | — | 2026-11-09 | FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in libavcodec/proresenc_anatoliy.c that occurs when the prores_aw encoder processes interlaced, odd-height frames. |
Ibm · 97 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-17399 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to insufficient validation of uploaded content. |
CVE-2026-17359 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. |
CVE-2026-17354 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to perform arbitrary file writes due to path traversal. |
CVE-2026-17342 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. |
CVE-2026-17239 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a path traversal vulnerability. |
CVE-2026-17150 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and access sensitive information from other tenants due to insufficient input validation. |
CVE-2026-17147 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code and perform unauthorized administrative actions due to a path traversal vulnerability. |
CVE-2026-17117 | Critical | 9.9 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improperly controlled modification of object attributes. |
CVE-2026-17408 | Critical | 9.8 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to improper neutralization of special elements in an OS command. |
CVE-2026-17340 | Critical | 9.8 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a path traversal vulnerability. |
CVE-2026-17313 | Critical | 9.8 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information and take control of gateway configuration due to authentication bypass via an alternate path. |
CVE-2026-17362 | Critical | 9.8 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to create, modify, or delete tenants due to missing authorization. |
CVE-2026-82418 | Critical | 9.8 | — | 2026-11-04 | IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability. |
CVE-2026-17394 | Critical | 9.6 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improperly controlled modification of object attributes. |
CVE-2026-17297 | Critical | 9.6 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to perform an account takeover due to an open redirect vulnerability. |
CVE-2026-114464 | Critical | 9.3 | — | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control. |
CVE-2026-18836 | Critical | 9.3 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to server-side request forgery. |
CVE-2026-17466 | Critical | 9.1 | — | 2026-11-08 | IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to path traversal. |
CVE-2026-101117 | Critical | 9.1 | — | 2026-11-08 | IBM WebSphere Extreme Scale 8.6.1.0 through 8.6.2.2 could allow a remote attacker to bypass security restrictions due to improper Content Security Policy configuration. |
CVE-2026-17338 | Critical | 9.1 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. |
CVE-2026-17292 | Critical | 9.1 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to take over ownership of other organizations due to broken object-level authorization. |
CVE-2026-8639 | High | 8.8 | — | 2026-11-08 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. |
CVE-2026-117545 | High | 8.8 | — | 2026-11-08 | IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication. |
CVE-2026-110273 | High | 8.8 | — | 2026-11-08 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.9 IBM TRIRIGA could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command. |
CVE-2026-17335 | High | 8.8 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to path traversal. |
CVE-2026-17404 | High | 8.5 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. |
CVE-2026-17388 | High | 8.5 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to broken object-level authorization. |
CVE-2026-17381 | High | 8.5 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization validation using user-controlled keys. |
CVE-2026-17328 | High | 8.5 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. |
CVE-2026-17287 | High | 8.5 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. |
CVE-2026-17228 | High | 8.5 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. |
CVE-2026-17108 | High | 8.5 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. |
CVE-2026-16912 | High | 8.5 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to server-side request forgery. |
CVE-2026-116501 | High | 8.4 | — | 2026-11-08 | IBM Qiskit SDK 2.4.0 through 2.6.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds write caused by improper input validation when accessing a corrupted unitary matrix. |
CVE-2026-116499 | High | 8.4 | — | 2026-11-08 | IBM Qiskit SDK 1.4.2 through 2.6.2 could allow a local attacker to execute arbitrary code due to deserialization of untrusted data. |
CVE-2026-97677 | High | 8.1 | — | 2026-11-08 | IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into any directory writable by the service account, bypassing the platform's local file access isolation safeguard. |
CVE-2026-19133 | High | 8.1 | — | 2026-11-08 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized account takeover due to improper authorization. |
CVE-2026-105467 | High | 8.1 | — | 2026-11-08 | IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Reflected XSS. |
CVE-2026-17386 | High | 8.1 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 could allow a remote attacker to gain full administrative control due to the use of a cryptographically weak pseudo-random number generator. |
CVE-2026-17343 | High | 8.1 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to bypass authorization checks to access or modify sensitive information due to improper authorization. |
CVE-2026-82891 | High | 8.1 | — | 2026-10-20 | IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key. |
CVE-2026-17333 | High | 8.0 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to bypass authentication and inject unauthorized configuration changes due to improper certificate validation. |
CVE-2026-17129 | High | 7.6 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an insecure direct object reference. |
CVE-2026-93879 | High | 7.5 | — | 2026-11-08 | Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption resulting from improper escaping of user-controlled data in Expression Language (EL) expressions. |
CVE-2026-16714 | High | 7.5 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to overwrite arbitrary files due to a path traversal vulnerability. |
CVE-2026-105002 | High | 7.5 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow arbitrary code to be executed by the management service in certain non-default configurations due to improper control of generation of code. |
CVE-2026-10859 | High | 7.5 | — | 2026-11-04 | IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 through 10.0.0.5 LTS and CD could allow an authenticated attacker to execute arbitrary code on consum… |
CVE-2026-17401 | High | 7.2 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow. |
CVE-2026-78537 | Medium | 6.8 | — | 2026-11-08 | IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain sensitive information due to the use of a weak cryptographic algorithm. |
CVE-2026-17308 | Medium | 6.8 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive credentials and manipulate tool responses due to improper certificate validation. |
CVE-2026-95867 | Medium | 6.7 | — | 2026-11-08 | IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code due to a buffer overflow. |
CVE-2026-82830 | Medium | 6.7 | — | 2026-11-08 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of argument delimiters. |
CVE-2026-17427 | Medium | 6.5 | — | 2026-11-08 | IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a denial of service due to improper validation of input leng… |
CVE-2026-17426 | Medium | 6.5 | — | 2026-11-08 | IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due to an unhandled exception. |
CVE-2026-16682 | Medium | 6.5 | — | 2026-11-08 | IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and OP940.00 through OP940.82 could allow a remote attacker to cause a… |
CVE-2026-8860 | Medium | 6.5 | — | 2026-11-08 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. |
CVE-2026-18668 | Medium | 6.5 | — | 2026-11-08 | IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a remote attacker to perform protocol downgrade attacks due to a security misconfiguration. |
CVE-2026-16699 | Medium | 6.5 | — | 2026-11-08 | IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated attacker to change the passwords of other users due to improper authorization. |
CVE-2026-14437 | Medium | 6.5 | — | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to traverse directories on the system. |
CVE-2026-113698 | Medium | 6.5 | — | 2026-11-08 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to a denial of service when executing a specially crafted query with a Materialized Query Table. |
CVE-2026-108284 | Medium | 6.5 | — | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information. |
CVE-2026-115554 | Medium | 6.4 | — | 2026-11-08 | IBM Tivoli Netcool/OMNIbus 8.1.0 through 8.1.0.41 is vulnerable to stored cross-site scripting. |
CVE-2026-17303 | Medium | 6.4 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to access internal network resources due to improper validation of a user-supplied URL. |
CVE-2026-17236 | Medium | 6.4 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information due to improper authorization. |
CVE-2026-18869 | Medium | 6.4 | — | 2026-09-18 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands. |
CVE-2026-120115 | Medium | 6.3 | — | 2026-11-08 | IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints. |
CVE-2026-119670 | Medium | 6.3 | — | 2026-11-08 | IBM Storage Copy Data Management 2.2.0.0 through 2.3.1.0 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input. |
CVE-2026-76052 | Medium | 6.0 | — | 2026-11-08 | IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through 6.0.1.0, and 5.2.3.0 through 5.2.3.8 could allow an attacker to leverage an undocumented flag to gain access to an unauthen… |
CVE-2026-14435 | Medium | 5.9 | — | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.20.3 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques. |
CVE-2026-14434 | Medium | 5.9 | — | 2026-11-08 | IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques. |
CVE-2026-14375 | Medium | 5.9 | — | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.1.0 does not validate or improperly validates TLS certificate validation when communicating with remote cluster GUI interfaces, which could allow an attacker to inject forged JSON response… |
CVE-2026-108292 | Medium | 5.5 | — | 2026-11-08 | IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated user to upload a file with dangerous types that could be executed by another user if opened. |
CVE-2026-14469 | Medium | 5.4 | — | 2026-11-08 | IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate filesets beyond their control due to improper authorization. |
CVE-2025-1837 | Medium | 5.4 | — | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could allow an authenticated user to perform unauthorized actions due to improper trust of server-side permission methods. |
CVE-2026-17139 | Medium | 5.4 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting. |
CVE-2026-17262 | Medium | 5.4 | — | 2026-09-18 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of service due to improper validation of FTP authentication commands. |
CVE-2026-11918 | Medium | 5.4 | — | 2026-09-15 | IBM ContextForge MCP Gateway <= v1.0.4 IBM mcp-context-forge could allow an authenticated user to bypass protection mechanisms due to incomplete recursive inspection of nested payload content. |
CVE-2025-36075 | Medium | 5.3 | — | 2026-11-08 | IBM Safer Payments 6.4.0.00 through 6.4.2.11, 6.5.0.00 through 6.5.0.09, 6.6.0.00 through 6.6.0.07, 6.7.0.00 through 6.7.0.03, and 6.8.0.00 could allow an authenticated user to obtain sensitive information, caused by improper user input va… |
CVE-2024-41786 | Medium | 5.3 | — | 2026-11-08 | IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation. |
CVE-2026-81209 | Medium | 4.9 | — | 2026-11-08 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 Standard Edition could allow a remote authenticated attacker to obtain sensitive inform… |
CVE-2026-18525 | Medium | 4.9 | — | 2026-11-08 | IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due to improper validation of listener IP address and port. |
CVE-2026-10841 | Medium | 4.8 | — | 2026-09-18 | IBM WebSphere Application Server 8.5 and 9.0, and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 are vulnerable to HTTP request smuggling. |
CVE-2026-105473 | Medium | 4.6 | — | 2026-11-08 | IBM QRadar 7.5.0 through 7.5.0 Update Pack 16 Interim Fix 02, and 7.6.0.0 through 7.6.0.5 is vulnerable to Open Redirect. |
CVE-2026-12737 | Medium | 4.4 | — | 2026-11-08 | IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.1_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.1_1 stores potentially sensitive information in log files that could be read by a local privileged user. |
CVE-2026-8642 | Medium | 4.3 | — | 2026-11-08 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. |
CVE-2026-78636 | Medium | 4.3 | — | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure vulnerability due to unsafe class reflection in the JMX REST connector body parser. |
CVE-2026-2700 | Medium | 4.3 | — | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows low-privileged users to execute administrative functions by directly invoking backend APIs.As a result, UI-level access restrictio… |
CVE-2026-19307 | Medium | 4.3 | — | 2026-11-08 | IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1, and IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1 Standard Edition could allow a remote authenticated attacker to acce… |
CVE-2026-11547 | Medium | 4.3 | — | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by a server-side request forgery vulnerability in the Admin Center deploy validation endpoint. |
CVE-2026-10844 | Medium | 4.3 | — | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow a remote attacker to conduct phishing attacks. |
CVE-2026-103320 | Medium | 4.3 | — | 2026-11-08 | IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 could allow an authenticated user with the Reader role to obtain sensitive information. |
CVE-2026-17167 | Medium | 4.3 | — | 2026-11-07 | IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to falsify audit log information due to reliance on untrusted inputs. |
CVE-2026-18195 | Medium | 4.2 | — | 2026-11-08 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to perform content spoofing due to improper output encoding of error messages. |
CVE-2026-8640 | Low | 3.5 | — | 2026-11-08 | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite attribute on session cookies, making it vulnerable to Cross-Site Request Forgery (CSRF) attacks. |
CVE-2026-17140 | Low | 3.3 | — | 2026-11-07 | IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code. |
CVE-2026-84228 | Low | 3.1 | — | 2026-11-08 | IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation. |
CVE-2025-0166 | Low | 2.7 | — | 2026-11-08 | IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 could disclose sensitive source code information that should not be accessible. |
Google · 61 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58936 | Critical | 9.8 | — | 2026-11-02 | In png_set_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. |
CVE-2026-121034 | Critical | 9.6 | — | 2026-11-03 | Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. |
CVE-2026-118359 | High | 8.8 | — | 2026-10-27 | Use after free in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. |
CVE-2026-118358 | High | 8.8 | — | 2026-10-27 | Use after free in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. |
CVE-2026-58942 | High | 8.4 | — | 2026-11-02 | In do_fault_around of memory.c, there is a possible use after free due to a logic error in the code. |
CVE-2026-58934 | High | 8.4 | — | 2026-11-02 | In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. |
CVE-2026-58829 | High | 8.4 | — | 2026-11-02 | In fuse_backing_mmap of backing.c, there is a possible memory corruption due to a use after free. |
CVE-2026-58828 | High | 8.4 | — | 2026-11-02 | In multiple functions of base.c, there is a possible use-after-free due to a race condition. |
CVE-2026-58827 | High | 8.4 | — | 2026-11-02 | In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. |
CVE-2026-58826 | High | 8.4 | — | 2026-11-02 | In ksys_unshare of fork.c, there is a possible memory corruption due to a use after free. |
CVE-2026-58825 | High | 8.4 | — | 2026-11-02 | In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. |
CVE-2026-58824 | High | 8.4 | — | 2026-11-02 | In __pkvm_load_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. |
CVE-2026-55289 | High | 8.4 | — | 2026-11-02 | In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. |
CVE-2026-55288 | High | 8.4 | — | 2026-11-02 | In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. |
CVE-2026-55287 | High | 8.4 | — | 2026-11-02 | In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or insufficient UI. |
CVE-2026-55283 | High | 8.4 | — | 2026-11-02 | In multiple locations, there is a possible memory safety issue due to a use-after-free. |
CVE-2026-55275 | High | 8.4 | — | 2026-11-02 | In multiple locations, there is a possible use-after-free due to a race condition. |
CVE-2026-55271 | High | 8.4 | — | 2026-11-02 | In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. |
CVE-2026-55263 | High | 8.4 | — | 2026-11-02 | In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI. |
CVE-2026-55262 | High | 8.4 | — | 2026-11-02 | In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization due to improper input validation. |
CVE-2026-55261 | High | 8.4 | — | 2026-11-02 | In nfa_t4tnfcee_store_rx_buf of nfa_nfcee_act.cc, there is a possible way to achieve code execution due to a missing permission check. |
CVE-2026-55257 | High | 8.4 | — | 2026-11-02 | In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. |
CVE-2026-121196 | High | 8.1 | — | 2026-11-03 | Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. |
CVE-2026-121063 | High | 8.1 | — | 2026-11-03 | Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. |
CVE-2026-58886 | High | 7.8 | — | 2026-11-02 | In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. |
CVE-2026-58836 | High | 7.8 | — | 2026-11-02 | In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that allows a sideloaded application to modify the package source during a self-update due to a logic error… |
CVE-2026-58938 | High | 7.5 | — | 2026-11-02 | In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. |
CVE-2026-58882 | High | 7.5 | — | 2026-11-02 | In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. |
CVE-2026-121227 | High | 7.4 | — | 2026-11-03 | Uninitialized resource in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-121207 | High | 7.4 | — | 2026-11-03 | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-121197 | High | 7.4 | — | 2026-11-03 | Out of bounds read in ANGLE in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-121173 | High | 7.4 | — | 2026-11-03 | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-121160 | High | 7.4 | — | 2026-11-03 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-121143 | High | 7.4 | — | 2026-11-03 | Uninitialized resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-121095 | High | 7.4 | — | 2026-11-03 | Uninitialized resource in WebGL in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-121062 | High | 7.4 | — | 2026-11-03 | Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. |
CVE-2026-121032 | High | 7.4 | — | 2026-11-03 | Out of bounds read in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. |
CVE-2026-58880 | High | 7.0 | — | 2026-10-05 | In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. |
CVE-2026-121242 | Medium | 6.5 | — | 2026-11-03 | Improper input validation in WebPackaging in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via crafted network traffic. |
CVE-2026-121237 | Medium | 6.5 | — | 2026-11-03 | Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. |
CVE-2026-121225 | Medium | 6.5 | — | 2026-11-03 | Incorrect authorization in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. |
CVE-2026-121169 | Medium | 6.5 | — | 2026-11-03 | Missing authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. |
CVE-2026-121142 | Medium | 6.5 | — | 2026-11-03 | Incorrect authorization in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. |
CVE-2026-121041 | Medium | 6.5 | — | 2026-11-03 | Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. |
CVE-2026-121038 | Medium | 6.5 | — | 2026-11-03 | Information leak in Compositing in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. |
CVE-2026-121031 | Medium | 6.5 | — | 2026-11-03 | Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted Chrome extension. |
CVE-2026-58937 | Medium | 6.2 | — | 2026-11-02 | In multiple locations, there is a possible persistent denial of service due to improper input validation. |
CVE-2026-58821 | Medium | 6.2 | — | 2026-11-02 | In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. |
CVE-2026-55272 | Medium | 6.2 | — | 2026-11-02 | In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. |
CVE-2026-121093 | Medium | 5.7 | — | 2026-11-03 | Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. |
CVE-2026-121043 | Medium | 5.4 | — | 2026-11-03 | UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. |
CVE-2026-121039 | Medium | 5.3 | — | 2026-11-03 | Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. |
CVE-2026-58933 | Medium | 5.3 | — | 2026-11-02 | In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. |
CVE-2026-55292 | Medium | 5.3 | — | 2026-11-02 | In rw_ci_data_cback of rw_ci.cc, there is a possible memory safety issue due to integer underflow. |
CVE-2026-121240 | Medium | 4.3 | — | 2026-11-03 | Improper input validation in Variations in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via crafted network traffic. |
CVE-2026-121175 | Medium | 4.3 | — | 2026-11-03 | Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. |
CVE-2026-121111 | Medium | 4.3 | — | 2026-11-03 | Incorrect authorization in HID in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. |
CVE-2026-121029 | Medium | 4.3 | — | 2026-11-03 | Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. |
CVE-2026-55264 | Medium | 4.0 | — | 2026-11-02 | In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. |
CVE-2026-49935 | Medium | 4.0 | — | 2026-11-02 | In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. |
CVE-2026-58856 | Low | 3.3 | — | 2026-10-05 | In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. |
Red Hat · 55 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120984 | Critical | 9.1 | — | 2026-11-07 | A flaw was found in the Keycloak server's client management component. |
CVE-2026-12977 | High | 8.8 | — | 2026-11-09 | A flaw was found in the deployment-operation family of WildFly Core. |
CVE-2026-50240 | High | 8.8 | — | 2026-11-06 | A flaw was found in OpenShift Pipelines-as-Code (PAC). |
CVE-2026-86848 | High | 8.8 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. |
CVE-2026-86567 | High | 8.8 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost. |
CVE-2026-100236 | High | 8.6 | — | 2026-10-14 | A flaw was found in the DPDK GSO library. |
CVE-2026-19706 | High | 8.3 | — | 2026-11-09 | During ABI bootstrap, the bootstrap node's approve-csr.service approves and signs every CSR without identity validation. |
CVE-2026-119610 | High | 8.2 | — | 2026-11-09 | A flaw was found in GStreamer's gst-plugins-good, specifically in the H.264 RTP depayloader element. |
CVE-2026-86565 | High | 8.2 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost. |
CVE-2026-96453 | High | 8.0 | — | 2026-11-05 | A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from the command line. |
CVE-2026-86563 | High | 7.8 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost. |
CVE-2026-86562 | High | 7.8 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost. |
CVE-2026-119079 | High | 7.5 | — | 2026-11-09 | decode_sequence_of() in lib/krb5/asn.1/asn1_encode.c in MIT Kerberos 5 (aka krb5) 1.11 and later grows the decoded element array one entry at a time, which allows remote attackers to cause a denial of service (CPU consumption in the KDC) b… |
CVE-2026-112323 | High | 7.5 | — | 2026-11-09 | The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) 1.5.2 and later allows remote attackers to cause a denial of service (memory exhaustion in kadmind) by sending repeated failed AUTH_GSSAPI_INIT requests. |
CVE-2026-112322 | High | 7.5 | — | 2026-11-09 | clean_client() in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) restarts its scan from the head of the client list after each removal, resulting in quadratic CPU cost. |
CVE-2026-112321 | High | 7.5 | — | 2026-11-09 | The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted… |
CVE-2026-112320 | High | 7.5 | — | 2026-11-09 | The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. |
CVE-2026-112314 | High | 7.5 | — | 2026-11-09 | clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC re… |
CVE-2026-121629 | High | 7.5 | — | 2026-11-09 | A flaw was found in GStreamer's adaptive streaming demuxers (HLS, DASH, MSS). |
CVE-2026-121995 | High | 7.5 | — | 2026-11-05 | A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to corrupt stack memory automatically during connection setup. |
CVE-2026-103112 | High | 7.5 | — | 2026-11-05 | A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. |
CVE-2026-91149 | High | 7.5 | — | 2026-09-18 | A flaw was found in Cockpit. |
CVE-2026-89059 | High | 7.5 | — | 2026-09-18 | A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count. |
CVE-2026-120830 | High | 7.4 | — | 2026-11-03 | A flaw was found in libslirp in icmp_forward_error(). |
CVE-2026-92092 | High | 7.4 | — | 2026-10-29 | A flaw was found in openshift-ansible. |
CVE-2026-89058 | High | 7.4 | — | 2026-09-18 | A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true. |
CVE-2026-82976 | High | 7.1 | — | 2026-11-03 | A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack. |
CVE-2026-84503 | Medium | 6.7 | — | 2026-11-09 | A flaw was found in ansible-core's ansible.builtin.git module. |
CVE-2026-125040 | Medium | 6.5 | — | 2026-11-09 | A flaw was found in the SRT and WebVTT subtitle parser in GStreamer's gst-plugins-base. |
CVE-2026-112319 | Medium | 6.5 | — | 2026-11-09 | The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted R… |
CVE-2026-112318 | Medium | 6.5 | — | 2026-11-09 | The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind c… |
CVE-2026-112316 | Medium | 6.5 | — | 2026-11-09 | xdr_krb5_tl_data() in lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) does not free partially decoded data on failure, which allows remote authenticated users to cause a denial of service (memory leak in kadmind) via crafted RPC requ… |
CVE-2026-121611 | Medium | 6.5 | — | 2026-11-09 | A flaw was found in GStreamer's gst-plugins-bad package. |
CVE-2026-86856 | Medium | 6.5 | — | 2026-10-14 | A flaw was found in the DPDK nfp vDPA driver. |
CVE-2026-86849 | Medium | 6.5 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. |
CVE-2026-86847 | Medium | 6.5 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. |
CVE-2026-86846 | Medium | 6.5 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. |
CVE-2026-86845 | Medium | 6.5 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost vhost-crypto. |
CVE-2026-86566 | Medium | 6.5 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost. |
CVE-2026-86561 | Medium | 6.5 | — | 2026-10-14 | A flaw was found in DPDK lib/vhost. |
CVE-2026-88833 | Medium | 6.5 | — | 2026-10-13 | A flaw was found in BusyBox's udhcpc DHCP client. |
CVE-2026-93683 | Medium | 6.4 | — | 2026-10-14 | A flaw was found in the DPDK vhost library. |
CVE-2026-120749 | Medium | 6.2 | — | 2026-11-06 | A flaw was found in D-Bus. |
CVE-2026-121601 | Medium | 6.1 | — | 2026-11-09 | A flaw was found in GStreamer's MXF demuxer plugin (gst-plugins-bad). |
CVE-2026-122056 | Medium | 5.9 | — | 2026-11-09 | A flaw was found in OpenSCAP. |
CVE-2026-91147 | Medium | 5.9 | — | 2026-09-18 | A flaw was found in `cockpit-ws`. |
CVE-2026-125041 | Medium | 5.5 | — | 2026-11-09 | A flaw was found in GStreamer's gst-plugins-good MOV/MP4 demuxer. |
CVE-2026-115207 | Medium | 5.5 | — | 2026-10-22 | A flaw was found in GNU patch. |
CVE-2026-112317 | Medium | 5.3 | — | 2026-11-09 | krb5_ktkdb_get_entry() in lib/kdb/keytab.c in MIT Kerberos 5 (aka krb5) 1.2.8 and later does not free decrypted key material when a post-decryption check fails, which allows remote attackers to cause a denial of service (memory leak in the… |
CVE-2026-112315 | Medium | 5.3 | — | 2026-11-09 | The RPCSEC_GSS authentication routines in lib/rpc/authgss_prot.c in MIT Kerberos 5 (aka krb5) 1.4 and later do not free partially decoded buffers on failure, which allows remote attackers to cause a denial of service (memory leak in kadmin… |
CVE-2026-12542 | Medium | 5.3 | — | 2026-10-01 | A flaw was found in Foreman. |
CVE-2026-92856 | Medium | 4.9 | — | 2026-11-06 | A flaw was found in the SAML brokering component of Keycloak, an identity and access management solution. |
CVE-2026-125063 | Medium | 4.3 | — | 2026-11-09 | A flaw was found in the rrule validation of schedules in automation controller. |
CVE-2026-121837 | Medium | 4.3 | — | 2026-11-06 | A flaw was found in the REST Data Panache component of Quarkus. |
CVE-2026-115456 | Low | 3.7 | — | 2026-10-30 | A flaw was found in gcc. |
Hewlett Packard Enterprise (Hpe) · 48 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-95731 | Critical | 9.8 | — | 2026-11-03 | Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access the affected system using hardcoded credentials. |
CVE-2026-95733 | Critical | 9.6 | — | 2026-11-03 | A vulnerability exists in a component of HPE Networking Fabric Composer. |
CVE-2026-95732 | Critical | 9.6 | — | 2026-11-03 | An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. |
CVE-2026-95779 | High | 8.8 | — | 2026-11-09 | An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager software. |
CVE-2026-95778 | High | 8.8 | — | 2026-11-09 | A remote code execution vulnerability exists in HPE Morpheus Software. |
CVE-2026-95734 | High | 8.8 | — | 2026-11-03 | A sensitive information disclosure vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low-privileged user to access sensitive information beyond what is authorized by the user's existing privilege level. |
CVE-2026-95735 | High | 8.7 | — | 2026-11-03 | An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. |
CVE-2026-95736 | High | 8.3 | — | 2026-11-03 | Improper certificate validation vulnerabilities exist in the affected interface of HPE Networking Fabric Composer, which could be exploited by an unauthenticated adjacent attacker if certain preconditions outside of the attacker's control… |
CVE-2026-95737 | High | 8.2 | — | 2026-11-03 | A privilege escalation vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. |
CVE-2026-95739 | High | 8.1 | — | 2026-11-03 | An improper restriction of excessive authentication attempts vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct brute-force attacks against user accounts if certain precondi… |
CVE-2026-95738 | High | 8.1 | — | 2026-11-03 | Authentication bypass vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacke… |
CVE-2026-95741 | High | 8.0 | — | 2026-11-03 | A missing integrity verification vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95740 | High | 8.0 | — | 2026-11-03 | An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain preconditions outside… |
CVE-2026-95743 | High | 7.8 | — | 2026-11-03 | Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Networking Fabric Composer. |
CVE-2026-95742 | High | 7.8 | — | 2026-11-03 | An arbitrary file write vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. |
CVE-2026-95744 | High | 7.7 | — | 2026-11-03 | A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could allow an authenticated low-privileged attacker to access sensitive information, if certain preconditions outside of the atta… |
CVE-2026-95750 | High | 7.5 | — | 2026-11-03 | An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met. |
CVE-2026-95749 | High | 7.5 | — | 2026-11-03 | A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. |
CVE-2026-95748 | High | 7.5 | — | 2026-11-03 | A SQL injection vulnerability exists in HPE Networking Fabric Composer. |
CVE-2026-95747 | High | 7.5 | — | 2026-11-03 | A privilege escalation vulnerability exists in the SSH interface of HPE Networking Fabric Composer which could allow an authenticated low-privileged attacker to exceed their authorized level of access, if certain preconditions outside of t… |
CVE-2026-95746 | High | 7.5 | — | 2026-11-03 | An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's… |
CVE-2026-95745 | High | 7.5 | — | 2026-11-03 | A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. |
CVE-2026-95751 | High | 7.4 | — | 2026-11-03 | An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's… |
CVE-2026-95753 | High | 7.1 | — | 2026-11-03 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95752 | High | 7.1 | — | 2026-11-03 | A local privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95755 | Medium | 6.8 | — | 2026-11-03 | Improper certificate validation vulnerabilities in the affected interface of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept management traffic if certain preconditions outside of the attacker's… |
CVE-2026-95756 | Medium | 6.6 | — | 2026-11-03 | A command injection vulnerability exists in the API of HPE Networking Fabric Composer and could be exploited by an authenticated remote attacker with administrative privileges if certain preconditions outside of the attacker's control are… |
CVE-2026-95759 | Medium | 6.5 | — | 2026-11-03 | Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. |
CVE-2026-95758 | Medium | 6.5 | — | 2026-11-03 | An authorization bypass vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95757 | Medium | 6.5 | — | 2026-11-03 | A local authentication bypass vulnerability exists in an API of HPE Networking Fabric Composer. |
CVE-2026-95760 | Medium | 6.4 | — | 2026-11-03 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. |
CVE-2026-95763 | Medium | 5.9 | — | 2026-11-03 | An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated remote attacker to access sensitive information if certain preconditions outside of the attacker's control are met. |
CVE-2026-95762 | Medium | 5.9 | — | 2026-11-03 | An insufficient session expiration vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. |
CVE-2026-95761 | Medium | 5.9 | — | 2026-11-03 | An improper certificate validation vulnerability exists in HPE Networking Fabric Composer. |
CVE-2026-95764 | Medium | 5.7 | — | 2026-11-03 | An improper certificate validation vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95765 | Medium | 5.4 | — | 2026-11-03 | A sensitive information disclosure vulnerability exists in the web-based management interface of HPE Networking Fabric Composer. |
CVE-2026-95769 | Medium | 5.3 | — | 2026-11-03 | An audit log spoofing vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95768 | Medium | 5.3 | — | 2026-11-03 | A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. |
CVE-2026-95767 | Medium | 5.3 | — | 2026-11-03 | An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95766 | Medium | 5.3 | — | 2026-11-03 | Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. |
CVE-2026-95770 | Medium | 4.7 | — | 2026-11-03 | A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low-privileged user with local access to view sensitive information, if certain precondition… |
CVE-2026-95771 | Medium | 4.3 | — | 2026-11-03 | An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer. |
CVE-2026-95772 | Medium | 4.2 | — | 2026-11-03 | A race condition vulnerability exists in the API of HPE Networking Fabric Composer. |
CVE-2026-95773 | Low | 3.8 | — | 2026-11-03 | A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer. |
CVE-2026-95774 | Low | 3.7 | — | 2026-11-03 | A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer. |
CVE-2026-95775 | Low | 3.3 | — | 2026-11-03 | A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. |
CVE-2026-95777 | Low | 3.1 | — | 2026-11-03 | A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer. |
CVE-2026-95776 | Low | 3.1 | — | 2026-11-03 | An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. |
Oracle · 39 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-83020 | Critical | 10.0 | — | 2026-09-15 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). |
CVE-2026-82999 | Critical | 9.9 | — | 2026-09-15 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). |
CVE-2026-82998 | Critical | 9.9 | — | 2026-09-15 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). |
CVE-2026-82997 | Critical | 9.9 | — | 2026-09-15 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). |
CVE-2026-60432 | Critical | 9.8 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). |
CVE-2026-83151 | Critical | 9.8 | — | 2026-09-15 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). |
CVE-2026-83000 | Critical | 9.8 | — | 2026-09-15 | Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler). |
CVE-2026-82995 | Critical | 9.8 | — | 2026-09-15 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). |
CVE-2026-82994 | Critical | 9.8 | — | 2026-09-15 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). |
CVE-2026-73961 | Critical | 9.8 | — | 2026-09-15 | Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces). |
CVE-2026-47025 | High | 8.8 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). |
CVE-2026-91348 | High | 8.4 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). |
CVE-2026-91252 | High | 8.2 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). |
CVE-2026-83011 | High | 8.1 | — | 2026-09-15 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). |
CVE-2026-91253 | High | 7.8 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). |
CVE-2026-60662 | High | 7.8 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). |
CVE-2026-82996 | High | 7.8 | — | 2026-09-15 | Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Centralized Thirdparty Jars). |
CVE-2026-91255 | High | 7.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). |
CVE-2026-91254 | High | 7.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). |
CVE-2026-87417 | High | 7.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). |
CVE-2026-91242 | High | 7.4 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Plugins). |
CVE-2026-91256 | High | 7.1 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). |
CVE-2026-87421 | High | 7.1 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). |
CVE-2026-91336 | Medium | 6.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). |
CVE-2026-70755 | Medium | 6.5 | — | 2026-09-15 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: File download). |
CVE-2026-101395 | Medium | 6.1 | — | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). |
CVE-2026-87413 | Medium | 5.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). |
CVE-2026-87411 | Medium | 5.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). |
CVE-2026-60453 | Medium | 5.3 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). |
CVE-2026-101394 | Medium | 5.3 | — | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). |
CVE-2026-91208 | Medium | 5.1 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). |
CVE-2026-91324 | Medium | 4.7 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). |
CVE-2026-91244 | Medium | 4.7 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). |
CVE-2026-101396 | Medium | 4.7 | — | 2026-10-20 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). |
CVE-2026-87423 | Medium | 4.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). |
CVE-2026-91209 | Medium | 4.2 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). |
CVE-2026-91249 | Low | 3.3 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). |
CVE-2026-87414 | Low | 3.1 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System). |
CVE-2026-87422 | Low | 2.5 | — | 2026-10-20 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). |
Apache Software Foundation · 33 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-111421 | High | 8.8 | — | 2026-11-09 | Apache Airflow's Task Execution API stored XCom values written by a task without the reserved-key check applied elsewhere, so a Dag author's task could write an XCom that, when a user later viewed it through the API with deserialization en… |
CVE-2026-101296 | High | 8.1 | — | 2026-10-20 | A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. |
CVE-2026-120367 | High | 7.5 | — | 2026-11-09 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. |
CVE-2026-111453 | Medium | 4.3 | — | 2026-11-09 | Apache Airflow's API endpoint for deleting an asset's queued events checked Dag edit permission against the `dag_id` query parameter, but deleted the queued events of every Dag the caller could read. |
CVE-2026-81816 | Low | 3.5 | — | 2026-11-05 | XML External Entity (XXE) Injection in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all platforms allows a remote authenticated attacker holding content-author permission to read arbitrary server files and trigger server-side req… |
CVE-2026-124077 | — | — | — | 2026-11-09 | The GitIdentifiers class in Apache Commons Codec did not reject NUL bytes in tree entry names. |
CVE-2026-119078 | — | — | — | 2026-11-09 | Apache Commons Codec's Blake3 class documented the output of its doFinalize methods as depending on any previously finalized bytes, so that consecutive calls would return different output. |
CVE-2026-123779 | — | — | — | 2026-11-09 | Direct Request ('Forced Browsing') vulnerability in Apache Axis2/Java. |
CVE-2026-123770 | — | — | — | 2026-11-09 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. |
CVE-2026-123766 | — | — | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the OpenAPI module of Apache Axis2/Java. |
CVE-2026-123753 | — | — | — | 2026-11-09 | Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. |
CVE-2026-120832 | — | — | — | 2026-11-09 | Server-Side Request Forgery (SSRF) vulnerability in Apache Axis2/Java. |
CVE-2026-120761 | — | — | — | 2026-11-09 | Improper Restriction of XML External Entity Reference vulnerability in Apache Axis2/Java. |
CVE-2026-118196 | — | — | — | 2026-11-09 | OAuth 1 rebinding vulnerability in Apache Allura. |
CVE-2026-96285 | — | — | — | 2026-11-09 | Apache Airflow 3.3.1 shipped a fix for CVE-2026-67260 that checks the scheduler's decoded `next_kwargs` value is a dictionary, but performs that check only after deserializing the whole stored payload. |
CVE-2026-86829 | — | — | — | 2026-11-09 | Apache Airflow's scheduler fully deserializes XCom values written by task code while evaluating task dependencies. |
CVE-2026-86468 | — | — | — | 2026-11-09 | Apache Airflow's CLI records its arguments in the audit log but masks secrets by argument position, so some supported command shapes leave secrets in cleartext, for example a trailing `--description` on Variable commands, `--conn-extra`, a… |
CVE-2026-82440 | — | — | — | 2026-11-09 | Description Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it. |
CVE-2026-82436 | — | — | — | 2026-11-09 | Description `DefaultStateSerializer`, used to persist and restore stateful bolt checkpoints, configured Kryo with class registration disabled and an instantiation strategy that constructs objects without invoking their constructors, then… |
CVE-2026-82337 | — | — | — | 2026-11-09 | Apache Airflow rebuilt deadline alert fields through generic deserialization, which imports and instantiates the class named in the serialized Dag, in the scheduler and API server. |
CVE-2026-76185 | — | — | — | 2026-11-09 | Apache Airflow's Task SDK secret cache built its keys from the team name and secret id with unescaped `_` delimiters, so different (team, secret id) pairs could collide. |
CVE-2026-68982 | — | — | — | 2026-11-09 | Apache Airflow's CeleryExecutor ran callback workloads (`ExecuteCallback`, used for deadline-alert callbacks) without validating the workload's authentication token. |
CVE-2026-50204 | — | — | — | 2026-11-09 | Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column because the secrets masker matched only on configured sensitive key names. |
CVE-2026-40913 | — | — | — | 2026-11-09 | Apache Airflow's public Import Errors API returns the raw parse-failure stack trace to any user with the `ImportError.can_read` permission when the failing file has no registered DAG. |
CVE-2026-113508 | — | — | — | 2026-11-09 | Apache Airflow's logout endpoint attempted to revoke the presented token on the server, but any failure during revocation was silently ignored and logout still reported success. |
CVE-2026-113504 | — | — | — | 2026-11-09 | Apache Airflow's secrets masker stopped descending into nested structures after five levels, so a secret registered with the masker — for example a Connection password or a Variable value — that appeared more than five containers deep unde… |
CVE-2026-111455 | — | — | — | 2026-11-09 | Apache Airflow's asynchronous connection test checked permissions when the test was queued — only create permission when the connection ID did not exist yet — but, when the test completed with `commit_on_success`, wrote the tested connecti… |
CVE-2026-111454 | — | — | — | 2026-11-09 | Apache Airflow's asset API endpoints returned the IDs of Dags that are scheduled on, produce, or consume an asset without checking whether the caller may read those Dags. |
CVE-2026-111452 | — | — | — | 2026-11-09 | Apache Airflow's secrets masker matched sensitive key names only in their snake_case form, so values stored under camelCase keys such as `privateKey`, `connectionString`, `webhookUrl` or `accessKey` — for example in a Connection's extra or… |
CVE-2026-111395 | — | — | — | 2026-11-09 | Apache Airflow did not reject reserved serialization keys inside a Dag run's `conf`. |
CVE-2026-107474 | — | — | — | 2026-11-09 | The Apache Airflow connections API did not mask the apprise provider's `config` connection extra, which can embed notification-service credentials. |
CVE-2026-101031 | — | — | — | 2026-11-09 | The `example_dag_decorator` example Dag shipped with Apache Airflow validated an IP address fetched over HTTP with Python's `ipaddress` module and then placed it into a shell command. |
CVE-2025-66621 | — | — | — | 2026-11-06 | Apache James SASL OAuthBearer/XOAUTH2 prior versions 3.9.1 fails to validate correctly AUD claim of JWT payloads when introspection is not configured. |
Unattributed · 33 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120647 | Critical | 9.8 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow Content-Disposition parameter injection via unescaped double quotes in the header attachment filename. |
CVE-2026-120637 | Critical | 9.8 | — | 2026-11-04 | CGI versions before 5.00 for Perl take request parameters from the process command line arguments for an unrecognised REQUEST_METHOD. |
CVE-2026-115946 | Critical | 9.8 | — | 2026-11-01 | XS::libbrotli versions before 1.2.1.0 for Perl bundle a brotli library with an out-of-bounds write in the decoder. |
CVE-2026-120644 | Critical | 9.1 | — | 2026-11-04 | CGI::Cookie versions before 5.00 for Perl allow cookie attribute injection via unvalidated path, domain and expires values. |
CVE-2026-120642 | Critical | 9.1 | — | 2026-11-04 | CGI versions before 5.00 for Perl return request-derived values untainted under taint mode. |
CVE-2026-121843 | High | 8.8 | — | 2026-11-09 | Privilege escalation in Firefox for iOS. |
CVE-2026-121842 | High | 8.8 | — | 2026-11-09 | Privilege escalation in the Reader View component in Firefox for iOS. |
CVE-2026-120641 | High | 8.8 | — | 2026-11-04 | CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. |
CVE-2026-92857 | High | 8.1 | — | 2026-11-05 | Keycloak provides a Dynamic Client Registration feature that allows users with specific tokens to register their own applications. |
CVE-2026-112208 | High | 8.1 | — | 2026-11-05 | A flaw was found in the Organization identity-first login flow of the Keycloak authentication server. |
CVE-2026-120635 | High | 8.1 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow form fields to be smuggled past proxies and WAFs via multipart parsing that differs from the RFCs. |
CVE-2026-110931 | High | 7.5 | — | 2026-11-05 | A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management. |
CVE-2026-120651 | High | 7.5 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set. |
CVE-2026-120646 | High | 7.5 | — | 2026-11-04 | CGI versions from 4.71 before 5.00 for Perl allow denial of service via a plain string dereferenced as a symbolic reference in uploadInfo. |
CVE-2026-120645 | High | 7.5 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow denial of service via submitted values used as a regex for optgroup selection in scrolling_list. |
CVE-2026-120631 | High | 7.5 | — | 2026-11-04 | CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parse. |
CVE-2026-124432 | High | 7.3 | — | 2026-11-08 | phpMyFAQ 4.1.9 before 4.1.11 and 4.2.0 pre-releases before 4.2.0-beta.3 contain an account enumeration vulnerability in the unauthenticated POST /api/webauthn/prepare-login endpoint, which returns stable stored credential IDs for passkey-r… |
CVE-2026-120639 | High | 7.2 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push. |
CVE-2026-97847 | High | 7.1 | — | 2026-11-05 | A flaw was found in the protocol mapper and identity resolution components of Keycloak. |
CVE-2026-120650 | Medium | 6.5 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow memory, CPU and disk exhaustion via missing or unenforced request size, parameter and upload limits. |
CVE-2026-120640 | Medium | 6.5 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow the POSTDATA, PUTDATA, PATCHDATA and XForms:Model parameters to be set from the query string or form fields. |
CVE-2026-120634 | Medium | 6.5 | — | 2026-11-04 | CGI::Carp versions before 5.00 for Perl leak warnings across requests in persistent environments via the warningsToBrowser buffer. |
CVE-2026-120632 | Medium | 6.5 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow CPU exhaustion via a backtracking regex on the XForms multipart/related Content-Type. |
CVE-2026-120648 | Medium | 6.1 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow HTML injection via text containing --> in comment. |
CVE-2026-120643 | Medium | 6.1 | — | 2026-11-04 | CGI versions from 4.62 before 5.00 for Perl allow cross-site scripting via a raw apostrophe in URLs returned by url and self_url. |
CVE-2026-120638 | Medium | 6.1 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow open redirects via HTML entity decoding of the URL after application validation in redirect. |
CVE-2026-120636 | Medium | 6.1 | — | 2026-11-04 | CGI versions before 5.00 for Perl allow open redirects and script injection via URLs built from REQUEST_URI in url and start_form. |
CVE-2026-120633 | Medium | 6.1 | — | 2026-11-04 | CGI versions before 5.00 for Perl trust the client X-Forwarded-Host header in url, self_url, virtual_host and virtual_port. |
CVE-2026-13575 | Medium | 5.6 | — | 2026-11-01 | HTTP::Session versions before 0.54 for Perl allow memcached command injection via unfiltered session ids in HTTP::Session::Store::CHI. |
CVE-2026-80490 | Medium | 4.4 | — | 2026-09-30 | Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. |
CVE-2026-115864 | — | — | — | 2026-11-09 | Monoceros versions before 0.30 for Perl allow a request declaring a large Content-Length to kill a worker by exhausting memory. |
CVE-2026-121841 | — | — | — | 2026-11-09 | Other issue in Firefox for iOS. |
CVE-2026-101272 | — | — | — | 2026-10-28 | The mechanism binding files generated during a shredding process to the authentication method is not working correctly and the same session token is used for all token-based API users. |
Unknown · 28 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-115252 | Critical | 10.0 | — | 2026-11-09 | The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks before saving its settings and writing one of them, unmodified, into a standalone PHP file that it then serves, allowing un… |
CVE-2026-123751 | Critical | 9.8 | — | 2026-11-09 | The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not validate the path or type of uploaded files, making it possible for unauthenticated attackers to write arbitrary files t… |
CVE-2026-115237 | Critical | 9.8 | — | 2026-11-09 | The Grand Job WordPress plugin through 1.2.1 does not correctly verify the password reset code before updating a user's password, allowing unauthenticated attackers to set the password of arbitrary accounts, including administrators, and f… |
CVE-2026-115213 | Critical | 9.8 | — | 2026-11-09 | The EASY-JS-WPAPI Client HANDLE for the WordPress REST-API WordPress plugin through 2.0 does not prevent the administrator credentials it stores from being disclosed to unauthenticated users and does not correctly verify authentication, al… |
CVE-2026-123064 | High | 8.8 | — | 2026-11-09 | The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a n… |
CVE-2026-115212 | High | 8.8 | — | 2026-11-09 | The mView 豆瓣电影 WordPress plugin through 1.0.3 does not validate the type, name, or source of a remotely fetched file, nor perform any capability or authorization check, before saving it to a web-accessible directory, allowing any authentic… |
CVE-2026-115204 | High | 8.8 | — | 2026-11-09 | The AZEXO Store Locator WordPress plugin through 1.4 does not perform capability or nonce checks on its AJAX actions and does not sanitise a request header used to build a file path, allowing any authenticated user such as a subscriber to… |
CVE-2025-15702 | High | 8.8 | — | 2026-11-05 | The Cloud Blocks WordPress plugin through 1.1.8 does not perform any authorisation or sanitisation when storing block asset URLs, allowing unauthenticated users to store malicious scripts that are executed in the browser of any privileged… |
CVE-2026-106466 | High | 7.5 | — | 2026-11-09 | The JWT Auth WordPress plugin through 3.0.2 does not invalidate previously issued refresh tokens when a user changes or resets their password or removes a connected device, allowing an attacker who obtained a refresh token before such an e… |
CVE-2026-123091 | High | 7.5 | — | 2026-11-09 | The Vigilant WordPress plugin before 2.11.0 does not enforce its two-factor authentication on login forms other than the default WordPress one, allowing an attacker who knows a user's password to skip the second factor and log in as that… |
CVE-2026-118202 | High | 7.5 | — | 2026-11-09 | The Limit Login Attempts Security WordPress plugin before 3.4.1 does not confirm that its two-factor authentication step succeeded before completing a login and treats a failure to build that step as success, so an attacker who holds a pr… |
CVE-2026-118201 | High | 7.5 | — | 2026-11-09 | The Limit Login Attempts Security WordPress plugin before 3.4.1 does not enforce its two-factor authentication on every password-authentication route, so an attacker who already knows a protected user's password can authenticate through a… |
CVE-2026-115256 | High | 7.5 | — | 2026-11-09 | The Mail Debug for WooCommerce WordPress plugin through 1.3.0 does not perform any capability, authentication, or nonce check on one of its email-logging actions, which is exposed to unauthenticated users and is not restricted to its own d… |
CVE-2026-121875 | High | 7.2 | — | 2026-11-09 | The Post Duplicator WordPress plugin before 3.0.18 does not validate the capabilities assigned to roles through its permissions settings, allowing a site administrator on a multisite network who is not a Super Admin to grant any role arbit… |
CVE-2026-121874 | High | 7.2 | — | 2026-11-09 | The Post Duplicator WordPress plugin before 3.0.18 does not restrict settings saves to its own options, allowing a site administrator on a multisite network who is not a Super Admin to overwrite arbitrary options of their site, including t… |
CVE-2026-123131 | Medium | 5.9 | — | 2026-11-09 | The GemBooking WordPress plugin before 1.7.1 does not properly verify that a REST request is addressed to its own routes before temporarily granting staff users administrative capabilities, allowing users with the GemBooking WordPress pl… |
CVE-2026-106008 | Medium | 5.3 | — | 2026-11-09 | The FraudLabs Pro SMS Verification WordPress plugin from 1.11.2 to 1.12.1 does not perform authorisation or validity checks before marking a WooCommerce order's SMS verification as completed, allowing unauthenticated users to forge the ver… |
CVE-2026-81422 | Medium | 5.3 | — | 2026-11-09 | The Advanced Appointment Booking & Scheduling WordPress plugin before 2.7 does not verify the site's user-registration setting before creating accounts through a publicly accessible shortcode, allowing unauthenticated attackers to register… |
CVE-2026-123129 | Medium | 5.3 | — | 2026-11-09 | The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not validate the ticket-type price sent to one of its unauthenticated AJAX actions when the referenced product has no ticket types configured, and stores the subm… |
CVE-2026-123088 | Medium | 5.3 | — | 2026-11-09 | The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not perform any authorization check before returning an order's order-received URL for an attacker-supplied order id, exposing the order's secret key in the redire… |
CVE-2026-120409 | Medium | 5.3 | — | 2026-11-09 | The All-in-One Video Gallery WordPress plugin before 5.1.1 does not check whether a video is password protected before serving it through its standalone player page and its download link, allowing unauthenticated visitors to obtain the me… |
CVE-2026-103331 | Medium | 5.3 | — | 2026-10-28 | The UniPAY Payment Gateway For WooCommerce WordPress plugin before 2.4 does not properly verify the authenticity of payment notifications, as their signature is checked against a merchant secret that is empty by default, allowing unauthent… |
CVE-2026-121759 | Medium | 4.9 | — | 2026-11-09 | The Fusion Page Builder WordPress plugin before 1.7.1 does not check that the user owns the content it moves to the trash, which could allow users with a role as low as Contributor to trash arbitrary posts and pages, or delete them permane… |
CVE-2026-123145 | Medium | 4.4 | — | 2026-11-09 | The WooCommerce Stripe Payment Gateway WordPress plugin before 11.1.0 does not exclude the account password from the checkout fields it saves to order metadata during express checkout, causing the password a customer chooses when creating… |
CVE-2026-123128 | Low | 3.7 | — | 2026-11-09 | The GemBooking WordPress plugin before 1.7.1 does not serialise concurrent booking requests per team member, allowing unauthenticated users to create overlapping confirmed bookings for the same team member across different bookable items… |
CVE-2025-15708 | Low | 3.5 | — | 2026-11-07 | The Live Composer WordPress plugin before 2.1.23 does not sanitise and escape some of its custom post type slug settings before using them in front-end links, which could allow high privilege users such as admin to perform Stored Cross-Si… |
CVE-2025-15701 | Low | 3.5 | — | 2026-11-05 | The Easy Social Icons WordPress plugin before 4.0.3 does not sanitise and escape some of its settings before outputting them on front-end pages, which could allow high-privilege users such as Administrators to perform Stored Cross-Site Scr… |
CVE-2024-3586 | Low | 3.5 | — | 2026-10-29 | The LetterPress WordPress plugin before 2.4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability… |
Apple · 24 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86922 | High | 8.8 | — | 2026-10-20 | A type confusion issue was addressed with improved state management. |
CVE-2026-86919 | High | 8.8 | — | 2026-10-20 | A stack overflow was addressed with improved input validation. |
CVE-2026-86957 | Medium | 6.5 | — | 2026-10-20 | An out-of-bounds read was addressed with improved bounds checking. |
CVE-2026-84613 | Medium | 6.5 | — | 2026-10-20 | An out-of-bounds write issue was addressed with improved bounds checking. |
CVE-2026-86921 | Medium | 6.2 | — | 2026-10-20 | A permissions issue was addressed with improved validation. |
CVE-2026-112523 | Medium | 5.5 | — | 2026-10-26 | This issue was addressed with improved handling of symlinks. |
CVE-2026-86962 | Medium | 5.5 | — | 2026-10-20 | A double free issue was addressed with improved memory management. |
CVE-2026-86944 | Medium | 5.5 | — | 2026-10-20 | An out-of-bounds write issue was addressed with improved bounds checking. |
CVE-2026-84582 | Medium | 5.5 | — | 2026-10-20 | A privacy issue was addressed with improved access restrictions. |
CVE-2026-28850 | Medium | 5.5 | — | 2026-10-20 | An authorization issue was addressed with improved state management. |
CVE-2026-86913 | Medium | 5.4 | — | 2026-10-20 | A use after free issue was addressed with improved memory management. |
CVE-2026-86872 | Medium | 5.4 | — | 2026-10-20 | A logic issue was addressed with improved state management. |
CVE-2026-86953 | Medium | 4.6 | — | 2026-10-20 | An out-of-bounds write issue was addressed with improved bounds checking. |
CVE-2026-86959 | Medium | 4.3 | — | 2026-10-20 | An input validation issue was addressed with improved input validation. |
CVE-2026-86918 | Medium | 4.3 | — | 2026-10-20 | An out-of-bounds write issue was addressed with improved bounds checking. |
CVE-2026-113971 | — | — | — | 2026-11-09 | This issue was addressed by restricting options offered on a locked device. |
CVE-2026-113970 | — | — | — | 2026-11-09 | A use-after-free issue was addressed with improved memory management. |
CVE-2026-113969 | — | — | — | 2026-11-09 | A logic issue was addressed with improved state management. |
CVE-2026-113968 | — | — | — | 2026-11-09 | A logic issue was addressed with improved state management. |
CVE-2026-113965 | — | — | — | 2026-11-09 | This issue was addressed with improved checks. |
CVE-2026-113964 | — | — | — | 2026-11-09 | A logic issue was addressed with improved state management. |
CVE-2026-113963 | — | — | — | 2026-11-09 | An authorization issue was addressed with improved state management. |
CVE-2026-113961 | — | — | — | 2026-11-09 | An authorization issue was addressed with improved validation. |
CVE-2026-113960 | — | — | — | 2026-11-09 | This issue was addressed by removing the vulnerable code. |
Kyverno · 22 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124440 | Critical | 9.9 | — | 2026-11-08 | Kyverno from 1.19.1 before 1.19.2 contains an authorization bypass vulnerability in the apiCall namespace clamp that allows namespace tenants to issue cross-namespace and cluster-scoped API requests by appending malformed percent-escapes t… |
CVE-2026-122313 | Critical | 9.9 | — | 2026-11-05 | Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to modify resources in other namespaces through NamespacedMutatingPolicy targetMatchConstraints.expression CEL output lack… |
CVE-2026-122311 | Critical | 9.9 | — | 2026-11-05 | Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and resource.post(), allowing namespaced CEL policies to escape their namespace. |
CVE-2026-122310 | Critical | 9.9 | — | 2026-11-05 | Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw path, whose fragment or query the Kubernetes client discards. |
CVE-2026-122304 | Critical | 9.9 | — | 2026-11-05 | Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape namespace confinement because the cleanup controller builds its context loader with a nil policy. |
CVE-2026-122303 | Critical | 9.9 | — | 2026-11-05 | Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to overwrite resources in other namespaces via NamespacedMutatingPolicy mutate-existing targetMatchConstraints.expression. |
CVE-2026-122302 | Critical | 9.8 | — | 2026-11-05 | Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources beyond their RBAC because generate-rule admission checks verify the controller's permissions, not the author's. |
CVE-2026-122321 | Critical | 9.1 | — | 2026-11-05 | Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string (such as a tag) rather than bound to the verified digest, so cache hits skip… |
CVE-2026-122316 | High | 8.5 | — | 2026-11-05 | Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. |
CVE-2026-122308 | High | 8.5 | — | 2026-11-05 | Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler that allows users with create/update permissions to trigger synchronized generate policies by spoofing internal generate.kyverno.io labels. |
CVE-2026-122320 | High | 7.7 | — | 2026-11-05 | Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. |
CVE-2026-122318 | High | 7.7 | — | 2026-11-05 | Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. |
CVE-2026-122312 | High | 7.7 | — | 2026-11-05 | Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in pkg/engine/apicall/apiCall.go because path.Clean treats '?' as a path character, letting the namespace regex match segments inside the query stri… |
CVE-2026-122307 | High | 7.7 | — | 2026-11-05 | Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespa… |
CVE-2026-122306 | High | 7.7 | — | 2026-11-05 | Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission controller CPU by submitting pathological wildcard patterns. |
CVE-2026-122305 | High | 7.7 | — | 2026-11-05 | Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged users to hang the admission webhook via self-referential variable templates. |
CVE-2026-122323 | High | 7.5 | — | 2026-11-05 | Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. |
CVE-2026-122322 | High | 7.5 | — | 2026-11-05 | Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. |
CVE-2026-122319 | High | 7.5 | — | 2026-11-05 | Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. |
CVE-2026-122315 | High | 7.5 | — | 2026-11-05 | Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. |
CVE-2026-122314 | High | 7.5 | — | 2026-11-05 | Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. |
CVE-2026-122309 | Medium | 6.2 | — | 2026-11-05 | Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and memory by submitting CEL expressions evaluated without runtime cost limits. |
N/a · 19 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-38601 | High | 7.5 | — | 2026-11-03 | A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user, bypass OpenID Connect authentication and access all controls via forged session cookies. |
CVE-2026-124576 | High | 7.3 | — | 2026-11-09 | A security flaw has been discovered in BeikeShop up to 2.0.0.31. |
CVE-2026-124573 | High | 7.3 | — | 2026-11-09 | A vulnerability was found in logseq 2.0.1/2.0.2. |
CVE-2026-124554 | High | 7.3 | — | 2026-11-09 | A security flaw has been discovered in JeecgBoot 3.9.5. |
CVE-2026-121610 | High | 7.3 | — | 2026-11-04 | A security flaw has been discovered in funadmin 7.1.0. |
CVE-2026-106991 | High | 7.1 | — | 2026-11-03 | hustoj >=24.09.10 and <=26.08.19 is vulnerable to Incorrect Access Control. |
CVE-2026-121582 | Medium | 6.5 | — | 2026-11-03 | A vulnerability has been found in Umami up to 3.4.1. |
CVE-2026-124999 | Medium | 6.3 | — | 2026-11-09 | A security vulnerability has been detected in braindecode up to 1.8.2. |
CVE-2026-124625 | Medium | 6.3 | — | 2026-11-09 | A security vulnerability has been detected in PipraPay 3.0.0. |
CVE-2026-124555 | Medium | 6.3 | — | 2026-11-09 | A weakness has been identified in JeecgBoot 3.9.5. |
CVE-2026-124591 | Medium | 5.5 | — | 2026-11-09 | A vulnerability was detected in Bahleel 0.1.0/0.1.1. |
CVE-2026-124624 | Medium | 5.3 | — | 2026-11-09 | A weakness has been identified in PipraPay 3.0.0. |
CVE-2026-124623 | Medium | 4.7 | — | 2026-11-09 | A security flaw has been discovered in PipraPay 3.0.0. |
CVE-2026-113702 | Medium | 4.3 | — | 2026-11-09 | A security flaw has been discovered in iomad up to 4.5.15/5.0.11/5.1.8/5.2.4. |
CVE-2026-124582 | Medium | 4.3 | — | 2026-11-09 | A vulnerability was identified in WebTorrent up to 2.8.5/3.0.21. |
CVE-2026-123992 | Medium | 4.3 | — | 2026-11-07 | A flaw has been found in DataEase up to 2.10.27. |
CVE-2026-121581 | Medium | 4.3 | — | 2026-11-03 | A vulnerability has been found in ArcReel 0.32.0/0.33.0/0.34.0. |
CVE-2026-124834 | Low | 3.7 | — | 2026-11-09 | A security vulnerability has been detected in iomad up to 4.5.15/5.0.11/5.1.8/5.2.4. |
CVE-2026-124992 | Low | 3.3 | — | 2026-11-09 | A vulnerability was identified in nushell up to 0.116.1. |
Openemr · 19 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124483 | High | 8.3 | — | 2026-11-08 | OpenEMR before 8.4.0 contains an incorrect authorization vulnerability because the prescription REST API routes check the patients.med ACL instead of patients.rx and request no specific permission bit, so read-only Medical/History access p… |
CVE-2026-124461 | High | 8.1 | — | 2026-11-08 | OpenEMR before 8.3.0 contains a missing authorization vulnerability in library/ajax/upload.php that allows any authenticated user to read and overwrite document data by supplying an arbitrary doc_id. |
CVE-2026-103935 | High | 8.1 | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
CVE-2026-124457 | High | 7.6 | — | 2026-11-08 | OpenEMR before 8.3.0 contains a path traversal vulnerability in interface/billing/sl_eob_process.php that allows authenticated users to write and read files by supplying unsanitized eraname values. |
CVE-2026-124448 | High | 7.6 | — | 2026-11-08 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in the CCDA/CCD preview stylesheets, where cda.xsl copies event-handler attributes whose values evade a character denylist and ccd.xsl copies table-cell attributes u… |
CVE-2026-124466 | High | 7.2 | — | 2026-11-08 | OpenEMR before 8.4.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server send HTTP requests by registering an OAuth2 client with an unvalidated jwks_uri. |
CVE-2026-124475 | High | 7.1 | — | 2026-11-08 | OpenEMR before 8.3.0 contains an insecure direct object reference vulnerability in portal/lib/persist.php that allows authenticated portal patients to modify other patients' settings by supplying an arbitrary setting_patient value. |
CVE-2026-124444 | High | 7.1 | — | 2026-11-08 | OpenEMR before 8.4.0 contains a mass assignment vulnerability in the patient portal OnsiteDocument query API that lets request parameters set bitwise criteria filters whose values are placed unquoted into the SQL WHERE clause. |
CVE-2026-103938 | High | 7.1 | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
CVE-2026-124487 | Medium | 6.5 | — | 2026-11-08 | OpenEMR before 8.4.0 contains an improper authorization vulnerability in the non-patient POST /fhir/DocumentReference/$docref route that allows low-privileged users to generate any patient's CCDA. |
CVE-2026-124479 | Medium | 6.5 | — | 2026-11-08 | OpenEMR before 8.4.0 contains an arbitrary local file read vulnerability in REST document download, where the controller passes stored uploaded document bytes to Symfony's BinaryFileResponse as a filesystem path instead of returning them a… |
CVE-2026-124470 | Medium | 6.5 | — | 2026-11-08 | OpenEMR before 8.3.0 contains a broken object level authorization vulnerability in portal/report/portal_custom_report.php that allows authenticated portal patients to read other patients' problem list entries. |
CVE-2026-104139 | Medium | 6.5 | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
CVE-2026-104138 | Medium | 6.5 | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
CVE-2026-104134 | Medium | 6.5 | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
CVE-2026-124452 | Medium | 5.4 | — | 2026-11-08 | OpenEMR before 8.3.0 contains a stored cross-site scripting vulnerability in interface/forms/eye_mag/report.php that allows authenticated users to inject scripts by adding unescaped document notes. |
CVE-2026-103021 | Medium | 5.3 | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
CVE-2026-103020 | Medium | 5.3 | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
CVE-2026-104137 | — | — | — | 2026-11-05 | OpenEMR is a free and open source electronic health records and medical practice management application. |
Compugroup Medical · 16 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-118798 | — | — | — | 2026-11-09 | Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access… |
CVE-2026-118795 | — | — | — | 2026-11-09 | Administrative roles and module permissions are stored in mutable local database fields, allowing privilege escalation for attackers with database write access. |
CVE-2026-118792 | — | — | — | 2026-11-09 | Default credentials permit access through AcuXDBC. |
CVE-2026-118791 | — | — | — | 2026-11-09 | The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification. |
CVE-2026-118790 | — | — | — | 2026-11-09 | Multiple hardcoded credentials are embedded within product components and administrative functionalities. |
CVE-2026-118468 | — | — | — | 2026-11-09 | XML parsers process attacker-influenced update manifests or network responses with external entity resolution enabled, potentially allowing XML External Entity (XXE) attacks. |
CVE-2026-118467 | — | — | — | 2026-11-09 | Shared telemetry and logging components store or transmit patient and doctor identifiers, clinical information, and low-entropy identifiers without adequate pseudonymization or protection. |
CVE-2026-118465 | — | — | — | 2026-11-09 | Shared components expose hard-coded Access, workgroup, CCBasic, DBISAM, and related database credentials that are identical across installations. |
CVE-2026-118464 | — | — | — | 2026-11-09 | Shared cryptographic services use fixed vendor-wide secrets, deterministic IVs, null salts, and reversible transformations to protect credentials, IPC data, configuration values, and clinical fields. |
CVE-2026-118462 | — | — | — | 2026-11-09 | Update components download and execute code without proper authenticity verification, relying on ignored hashes or forgeable checksums. |
CVE-2026-118461 | — | — | — | 2026-11-09 | The shared client accepts caller-controlled doctor identifiers for read and write operations without requiring authentication or authorization credentials. |
CVE-2026-118460 | — | — | — | 2026-11-09 | Embedded private keys protected by a shared password can be used to sign practitioner assertions for arbitrary practitioner identifiers, enabling unauthorized practitioner token requests. |
CVE-2026-118459 | — | — | — | 2026-11-09 | A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials. |
CVE-2026-118458 | — | — | — | 2026-11-09 | The shared AIS login routing selects a production-shipped test DAO and plaintext comparison for the H and V application codes, accepting fixed administrator accounts. |
CVE-2026-118450 | — | — | — | 2026-11-09 | Venere is installed outside Program Files and loads/registers unsigned components from locations where an unprivileged user may create files. |
CVE-2026-112172 | — | — | — | 2026-11-09 | CGM XDent and XMedical expose PHP synchronization endpoints that allow unauthenticated attackers to manipulate session variables and execute arbitrary SQL queries against backend MySQL databases. |
Suitecrm · 16 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-71550 | Critical | 9.9 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-71548 | High | 8.8 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-69142 | High | 8.8 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-100363 | High | 8.8 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-69141 | High | 8.3 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-69140 | High | 8.3 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-63215 | High | 8.3 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-61653 | High | 8.3 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-61651 | High | 8.3 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-61650 | High | 8.1 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-69137 | High | 7.7 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-100364 | High | 7.1 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-63217 | Medium | 6.5 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-100359 | Medium | 6.5 | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-63111 | — | — | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
CVE-2026-100362 | — | — | — | 2026-11-05 | SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. |
Shenzhen Shine Industrial Co., Ltd. · 12 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54384 | Critical | 9.8 | — | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to obtain a full session for a victim's account by submitting a linked Google or Facebook account identifier to the POST /fro… |
CVE-2026-54378 | Critical | 9.6 | — | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user to obtain temporary AWS credentials by calling the POST /front/user/s3/token/ endpoint. |
CVE-2026-54372 | High | 8.8 | — | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation vulnerability that allows network-based attackers to intercept and modify HTTPS traffic by exploiting a custom X509TrustManager… |
CVE-2026-54375 | High | 8.4 | — | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that allows attackers to extract or intercept unencrypted m_session_id tokens stored in application backups, which remain val… |
CVE-2026-54376 | High | 8.2 | — | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that allows a malicious application to intercept Fitbit login tokens by registering the same callback scheme (vitafit://vtio.c… |
CVE-2026-54382 | High | 7.7 | — | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role that allows authenticated attackers to perform s3:PutObject operations across the entire shared bucket instead of being r… |
CVE-2026-54381 | High | 7.5 | — | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows unauthenticated attackers to list and download stored files without authentication. |
CVE-2026-54374 | High | 7.5 | — | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows attackers to extract confidential third-party integration secrets by decompiling the APK. |
CVE-2026-54383 | Medium | 6.5 | — | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated user to query the GET /front/relation/search/ endpoint and retrieve PII and health-related profile information for user re… |
CVE-2026-54377 | Medium | 6.5 | — | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows authenticated attackers to access another user's data by supplying a different user_id or profile_id to endpoints such as GET /fron… |
CVE-2026-54380 | Medium | 5.4 | — | 2026-11-04 | VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated attackers to upload an SVG image containing malicious JavaScript to the shared storage bucket. |
CVE-2026-54373 | Low | 3.5 | — | 2026-11-04 | VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows network-based attackers to intercept or modify unencrypted HTTP communications due to the absence of an Android network secu… |
Go-vikunja · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123522 | High | 7.1 | — | 2026-11-08 | Vikunja before 2.7.1 contains an authorization bypass vulnerability that allows authenticated users to read any task by injecting a crafted task object into a no-op Kanban bucket move. |
CVE-2026-123530 | Medium | 5.9 | — | 2026-11-08 | Vikunja before 2.7.1 contains a missing authentication vulnerability that allows attackers holding a stolen session to enroll and enable TOTP without the account password. |
CVE-2026-123526 | Medium | 5.4 | — | 2026-11-08 | Vikunja before 2.7.1 contains a mass assignment vulnerability that allows any authenticated user to set the read-only external_id field through the team create and update endpoints. |
CVE-2026-123506 | Medium | 5.4 | — | 2026-11-08 | Vikunja from 2.2.0 before 2.7.1 contains an authorization bypass vulnerability that allows holders of tokens scoped only to projects_webhooks to manage the owner's user-level webhooks by supplying user_id in request bodies. |
CVE-2026-123502 | Medium | 5.2 | — | 2026-11-08 | Vikunja before 2.7.1 contains an information exposure vulnerability that allows log readers to obtain link-share hashes because the request logger records the raw URI of the /shares/:share/auth route. |
CVE-2026-123518 | Medium | 4.3 | — | 2026-11-08 | Vikunja before 2.7.1 contains an incorrect authorization vulnerability in TaskBucket.CanUpdate, which checks write access to the bucket's project and to the task separately but never verifies that both belong to the same project. |
CVE-2026-123514 | Medium | 4.3 | — | 2026-11-08 | Vikunja before 2.7.1 contains an improper resource cleanup vulnerability that leaves full-data export archives orphaned on disk after re-exports, failed exports, or account deletion. |
CVE-2026-123498 | Low | 3.7 | — | 2026-11-08 | Vikunja veans before 2.7.1 contains a prompt injection vulnerability that allows project members with write access to inject instructions by setting project titles or task content rendered verbatim inside the coding agent's authoritative i… |
CVE-2026-123494 | Low | 3.5 | — | 2026-11-08 | Vikunja before 2.7.1 contains a cross-site request forgery vulnerability that allows attackers to import their data into a victim's account because the Todoist, Microsoft To Do, and Trello migration OAuth callbacks lack a bound state param… |
CVE-2026-123510 | Low | 3.3 | — | 2026-11-08 | Vikunja before 2.7.1 fails to re-anchor PluginsDir and LogPath to service.rootpath, allowing plugins to load from and logs to be written in the startup working directory. |
Hickory-dns · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123606 | High | 7.5 | — | 2026-11-08 | The hickory-dns recursor in hickory-recursor 0.25.0-alpha.3 through 0.25.2 and hickory-resolver 0.26.0-alpha.1 before 0.26.2 iterates every out-of-bailiwick NS target lacking glue in a referral without any per-query work budget. |
CVE-2026-123586 | High | 7.5 | — | 2026-11-08 | Hickory DNS 0.25.0-alpha.3 through 0.25.2 contains a query amplification vulnerability in its recursive resolver, which mishandles cyclic sibling name server referrals that lack glue records. |
CVE-2026-123574 | High | 7.5 | — | 2026-11-08 | The zone file parser in the hickory-proto crate of Hickory DNS 0.24.0 before 0.26.2 panics when a single token in a zone file is 4096 bytes or longer. |
CVE-2026-123570 | High | 7.5 | — | 2026-11-08 | The DNS wire-format message parser in hickory-proto (Hickory DNS) 0.18 before 0.26.2 preallocates record vectors sized by the untrusted ANCOUNT, NSCOUNT, and ARCOUNT header fields before reading record data. |
CVE-2026-123602 | Medium | 5.9 | — | 2026-11-08 | The Hickory DNS recursor in all versions of hickory-recursor and in hickory-resolver 0.26.0-beta.1 before 0.26.2 (recursor feature) is vulnerable to ghost domain names attacks because it reuses child-side apex NS RRsets cached from zone NS… |
CVE-2026-123594 | Medium | 4.8 | — | 2026-11-08 | Hickory DNS hickory-proto through 0.26.0-alpha.1 and hickory-net 0.26.0-beta.1 before 0.26.2 contain an NSEC validation flaw that returns a secure proof for NXDOMAIN responses when the covering NSEC's Next Domain Name is a strict descendan… |
CVE-2026-123590 | Medium | 4.8 | — | 2026-11-08 | Hickory DNS hickory-net 0.26.0-beta.1 before 0.26.2 and hickory-proto through 0.26.0-alpha.1 accept NSEC and NSEC3 records for DNSSEC nonexistence proofs when any other record with the same owner name passes signature validation. |
CVE-2026-123598 | Low | 3.7 | — | 2026-11-08 | The validating recursor in Hickory DNS hickory-recursor 0.25.0 through 0.26.0-alpha.1, hickory-resolver 0.26.0-alpha.1 before 0.26.2, and hickory-net 0.26.0-beta.1 before 0.26.2 caches DNSSEC-bogus answers using the untrusted, attacker-sup… |
CVE-2026-123582 | Low | 3.7 | — | 2026-11-08 | The validating recursive resolver and validating forwarder in Hickory DNS (hickory-server) 0.25.0 before 0.26.2 do not check whether the SOA record passed DNSSEC validation when assembling NXDOMAIN or NODATA responses. |
CVE-2026-123578 | Low | 3.7 | — | 2026-11-08 | Hickory DNS hickory-net 0.26.0 before 0.26.2 and hickory-proto 0.25.0 through 0.25.2 skip the check that a UDP response's question section matches the query when the response has an empty question section (QDCOUNT=0), and also skip the cas… |
Wso2 · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-11229 | High | 7.2 | — | 2026-11-04 | The system fails to properly enforce scope authorization when the `authorize_all_scopes` configuration is enabled. |
CVE-2025-5769 | Medium | 6.1 | — | 2026-11-03 | The authentication endpoint does not properly encode user-supplied input before rendering it within the web page. |
CVE-2024-8122 | Medium | 5.9 | — | 2026-10-08 | The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). |
CVE-2024-2372 | Medium | 5.4 | — | 2026-11-02 | The affected components accept user-supplied input for constructing redirection URLs without enforcing expected validation constraints. |
CVE-2024-9517 | Medium | 4.9 | — | 2026-11-02 | The refresh token grant type in WSO2 products fails to re-validate account status before issuing new access tokens. |
CVE-2024-5617 | Medium | 4.8 | — | 2026-11-02 | The account lock feature fails to correctly enforce account lockouts on the primary user store when users with identical usernames exist in both primary and secondary user stores. |
CVE-2024-2323 | Medium | 4.8 | — | 2026-10-20 | The RemoteUserStoreManagerService does not sufficiently validate password change attempts when the password history validation feature is enabled. |
CVE-2024-7075 | Medium | 4.6 | — | 2026-11-02 | The user search function within the management console fails to properly encode user-supplied input before rendering it in the browser. |
CVE-2024-12139 | Medium | 4.3 | — | 2026-11-02 | The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters under specific conditions. |
CVE-2024-12141 | Medium | 4.3 | — | 2026-11-02 | The product fails to sufficiently validate callback URLs, allowing them to be manipulated with malicious payloads when processed through a weak regular expression or when validation is omitted. |
Signalwire · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-116790 | Critical | 9.1 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-116785 | Critical | 9.1 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-116786 | High | 8.8 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-116788 | High | 8.2 | — | 2026-11-05 | FreeSWITCH is an open-source software telecommunications platform. |
CVE-2026-116570 | High | 7.5 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-116567 | High | 7.5 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-115928 | High | 7.5 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-116571 | Medium | 5.9 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
CVE-2026-116780 | Low | 2.7 | — | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
Linksys · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121933 | Critical | 10.0 | — | 2026-11-04 | A flaw has been found in Linksys E5350 1.0.00.037. |
CVE-2026-121932 | Critical | 10.0 | — | 2026-11-04 | A vulnerability was detected in Linksys E5350 1.0.00.037. |
CVE-2026-121615 | Critical | 10.0 | — | 2026-11-04 | A vulnerability was determined in Linksys E5600 1.1.0.26. |
CVE-2026-121931 | Critical | 9.1 | — | 2026-11-04 | A security vulnerability has been detected in Linksys WRT54GL 4.30.18. |
CVE-2026-121930 | Critical | 9.1 | — | 2026-11-04 | A weakness has been identified in Linksys WRT54GL 4.30.18. |
CVE-2026-121617 | High | 7.5 | — | 2026-11-04 | A security flaw has been discovered in Linksys E5600 1.1.0.26. |
CVE-2026-121618 | Medium | 5.3 | — | 2026-11-04 | A weakness has been identified in Linksys E5600 1.1.0.26. |
CVE-2026-121616 | Medium | 5.3 | — | 2026-11-04 | A vulnerability was identified in Linksys E5600 1.1.0.26. |
Supertokens · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123800 | Critical | 9.9 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
CVE-2026-123803 | High | 8.1 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
CVE-2026-123802 | High | 8.1 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
CVE-2026-123798 | High | 8.1 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
CVE-2026-123797 | High | 7.5 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
CVE-2026-123801 | High | 7.4 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
CVE-2026-123799 | High | 7.4 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
CVE-2026-123804 | Medium | 6.8 | — | 2026-11-09 | SuperTokens Core is an open source authentication server. |
Freerdp · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121407 | Medium | 6.5 | — | 2026-11-03 | FreeRDP before 3.32.2 contains a denial of service vulnerability in the shadow server's remdesk_server_thread that allows authenticated clients to crash the process via an inverted PDU length check. |
CVE-2026-121395 | Medium | 6.5 | — | 2026-11-03 | FreeRDP from 3.17.0 before 3.32.2 contains an assertion failure in the RemoteFX differential decoder when verbose WinPR assertions are enabled. |
CVE-2026-121403 | Medium | 4.3 | — | 2026-11-03 | FreeRDP before 3.32.2 contains a denial of service vulnerability where a malformed drive DEVICE_IOREQUEST with a truncated IRP_MJ_CREATE body silently kills the drive worker. |
CVE-2026-121399 | Medium | 4.3 | — | 2026-11-03 | FreeRDP before 3.32.2 contains a memory allocation vulnerability in rdg_receive_packet that allows a malicious RD Gateway to force a 2 GiB client allocation before tunnel authentication. |
CVE-2026-121391 | Medium | 4.3 | — | 2026-11-03 | FreeRDP from 3.0.0 before 3.32.2 contains a file descriptor leak in parallel_process_irp_create that fails to close previous descriptors on repeated IRP_MJ_CREATE requests. |
CVE-2026-121387 | Medium | 4.3 | — | 2026-11-03 | FreeRDP 2.0.0 before 3.32.2 contains an out-of-bounds read vulnerability in freerdp_dsp_decode_gsm610 that allows malicious RDP servers to read past audio buffers by sending truncated GSM610 frames. |
CVE-2026-121411 | Low | 3.1 | — | 2026-11-03 | FreeRDP before 3.32.2 fails to bound server-supplied target dimensions and output origin in RDPGFX MAPSURFACETOSCALEDOUTPUT PDUs, allowing malicious RDP servers to abort X11 clients. |
Tmatens · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123796 | — | — | — | 2026-11-09 | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. |
CVE-2026-123373 | — | — | — | 2026-11-09 | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. |
CVE-2026-123372 | — | — | — | 2026-11-09 | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. |
CVE-2026-123371 | — | — | — | 2026-11-09 | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. |
CVE-2026-123370 | — | — | — | 2026-11-09 | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. |
CVE-2026-123369 | — | — | — | 2026-11-09 | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. |
CVE-2026-123368 | — | — | — | 2026-11-09 | compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. |
Zephyrproject · 7 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-90586 | High | 7.8 | — | 2026-11-09 | The Xtensa MMU userspace port never initialized the per-thread page-table pointer thread->arch.ptables during thread setup, while arch_mem_domain_thread_add() in arch/xtensa/core/ptables.c uses a non-NULL value of that field as its "this t… |
CVE-2026-90591 | High | 7.5 | — | 2026-11-09 | The NXP ENET-QOS Ethernet driver's receive work handler eth_nxp_enet_qos_rx() in drivers/ethernet/eth_nxp_enet_qos hands each processed descriptor back to the DMA by writing desc->read.control = rx_desc_refresh_flags, which sets OWN_FLAG a… |
CVE-2026-90590 | Medium | 6.5 | — | 2026-11-09 | The NXP ENET QoS Ethernet driver in drivers/ethernet/eth_nxp_enet_qos serialises transmission with a binary semaphore, data->tx.tx_sem, taken in eth_nxp_enet_qos_tx() and returned only by the transmit-completion interrupt handler tx_dma_do… |
CVE-2026-90589 | Medium | 5.5 | — | 2026-11-09 | When CONFIG_THREAD_STACK_MEM_MAPPED is enabled, each thread stack is mapped into the kernel virtual address space with a guard page on either side, and the mapping is released during abort cleanup. |
CVE-2026-90587 | Medium | 4.6 | — | 2026-11-09 | usbh_device_init() in subsys/usb/host/usbh_device.c rejects a device whose device descriptor advertises bNumConfigurations == 0, but it only logs the error and jumps to the cleanup label without setting the return code. |
CVE-2026-90585 | Medium | 4.6 | — | 2026-11-09 | The Renesas RA SCI UART driver's receive-error ISR, uart_ra_sci_eri_isr() in drivers/serial/uart_renesas_ra_sci.c, acknowledged the error condition only when a Zephyr interrupt-driven callback had already been registered. |
CVE-2026-90588 | Low | 3.7 | — | 2026-11-09 | The HTTP client's debug helper print_header_field() in subsys/net/lib/http/http_client.c formatted an http_parser data-callback slice with a %s conversion: snprintk(output, len + 1, "%s", str). |
Frodobots · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121690 | — | — | — | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) executes code with unnecessary privileges. |
CVE-2026-121689 | — | — | — | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (v6.2.4_6.2.5_0.614.0) exposes sensitive credentials through multiple insecure mechanisms. |
CVE-2026-121688 | — | — | — | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains an insecure STM32 firmware update mechanism. |
CVE-2026-121687 | — | — | — | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains several local interfaces that are exposed without authentication. 1. |
CVE-2026-121686 | — | — | — | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) is vulnerable to unauthenticated, remote code execution via MQTT. |
CVE-2026-121685 | — | — | — | 2026-11-09 | FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) contains multiple sets of hard-coded credentials. |
Owasp-modsecurity · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-104269 | High | 8.6 | — | 2026-11-05 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
CVE-2026-73857 | High | 7.5 | — | 2026-11-09 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
CVE-2026-103932 | Medium | 5.8 | — | 2026-11-05 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
CVE-2026-104259 | Medium | 5.4 | — | 2026-11-09 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
CVE-2026-61813 | Low | 3.7 | — | 2026-11-05 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
CVE-2026-61812 | — | — | — | 2026-11-09 | ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. |
Progress Software · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-115338 | High | 8.1 | — | 2026-11-09 | Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive information or modify requests when unencrypted connections are used. |
CVE-2026-115341 | High | 7.7 | — | 2026-11-09 | Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope. |
CVE-2026-115339 | High | 7.5 | — | 2026-11-09 | Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service. |
CVE-2026-115340 | High | 7.1 | — | 2026-11-09 | Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations. |
CVE-2026-115336 | Medium | 6.5 | — | 2026-11-09 | Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service. |
CVE-2026-115337 | Medium | 6.3 | — | 2026-11-09 | Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to bypass access restrictions and access or modify files belonging to other users. |
Automattic · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125120 | Critical | 9.8 | — | 2026-11-09 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. |
CVE-2026-125117 | High | 8.2 | — | 2026-11-09 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. |
CVE-2026-125119 | High | 7.5 | — | 2026-11-09 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. |
CVE-2026-125118 | Medium | 6.5 | — | 2026-11-09 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. |
CVE-2026-125116 | Medium | 4.8 | — | 2026-11-09 | Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. |
D-link · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124560 | Critical | 9.8 | — | 2026-11-09 | A vulnerability was found in D-Link DIR-878 1.20B05. |
CVE-2026-124563 | High | 7.5 | — | 2026-11-09 | A security flaw has been discovered in D-Link DIR-878 1.20B05. |
CVE-2026-124562 | High | 7.5 | — | 2026-11-09 | A vulnerability was identified in D-Link DIR-878 1.20B05. |
CVE-2026-124561 | High | 7.5 | — | 2026-11-09 | A vulnerability was determined in D-Link DIR-878 1.20B05. |
CVE-2026-124564 | Medium | 5.3 | — | 2026-11-09 | A weakness has been identified in D-Link DIR-878 1.20B05. |
Dell · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-91917 | High | 8.0 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability. |
CVE-2026-111503 | High | 7.1 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. |
CVE-2026-111499 | Medium | 5.5 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. |
CVE-2026-111500 | Medium | 5.4 | — | 2026-10-30 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability. |
CVE-2026-111498 | Medium | 4.7 | — | 2026-10-30 | OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability. |
Fushengqian · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124569 | Medium | 5.4 | — | 2026-11-09 | A vulnerability was found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc133. |
CVE-2026-124568 | Medium | 4.3 | — | 2026-11-09 | A vulnerability has been found in fushengqian fuintCatering up to 6d054f5788ac8645eb491f79242bb8a625efc133. |
CVE-2026-124567 | Medium | 4.3 | — | 2026-11-09 | A flaw has been found in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. |
CVE-2026-124566 | Medium | 4.3 | — | 2026-11-09 | A vulnerability was detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. |
CVE-2026-124565 | Medium | 4.3 | — | 2026-11-09 | A security vulnerability has been detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f. |
Samsung Semiconductor · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-66368 | — | — | — | 2026-11-05 | Incorrect handling of SDP payload leads to a Denial of Service |
CVE-2025-66367 | — | — | — | 2026-11-05 | Improper handling of NAS DLTransport messages may lead to a baseband crash. |
CVE-2025-66366 | — | — | — | 2026-11-05 | Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash |
CVE-2025-66365 | — | — | — | 2026-11-05 | Incorrect handling of SIP packets leads to baseband crashes |
CVE-2025-66364 | — | — | — | 2026-11-05 | Continuously sending control‑plane messages causes the baseband to crashes. |
Tinyhumansai · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54146 | High | 8.8 | — | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. |
CVE-2026-54145 | High | 8.8 | — | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. |
CVE-2026-49393 | High | 8.4 | — | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. |
CVE-2026-54140 | High | 8.3 | — | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. |
CVE-2026-49407 | High | 7.7 | — | 2026-11-05 | OpenHuman is an open-source agent harness available as a desktop application and Rust library. |
Totolink · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123961 | Critical | 9.9 | — | 2026-11-07 | A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. |
CVE-2026-123957 | Critical | 9.9 | — | 2026-11-07 | A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. |
CVE-2026-121600 | Critical | 9.9 | — | 2026-11-04 | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. |
CVE-2026-121597 | Critical | 9.9 | — | 2026-11-04 | A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. |
CVE-2026-124060 | Critical | 9.1 | — | 2026-11-07 | A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. |
Chartbrew · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54349 | Critical | 9.8 | — | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. |
CVE-2026-85712 | High | 8.8 | — | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. |
CVE-2026-68933 | High | 7.5 | — | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. |
CVE-2026-69128 | — | — | — | 2026-11-06 | Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts. |
Dynatrace-oss · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123811 | High | 7.5 | — | 2026-11-09 | Dynatrace MCP Server is an MCP server for Dynatrace Observability. |
CVE-2026-123810 | Medium | 4.3 | — | 2026-11-09 | Dynatrace MCP Server is an MCP server for Dynatrace Observability. |
CVE-2026-123809 | Medium | 4.2 | — | 2026-11-09 | Dynatrace MCP Server is an MCP server for Dynatrace Observability. |
CVE-2026-123812 | Low | 3.7 | — | 2026-11-09 | Dynatrace MCP Server is an MCP server for Dynatrace Observability. |
Fraunhoferhhi · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124308 | Medium | 5.8 | — | 2026-11-07 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRefBufs because decompressPicture clears m_subPicExtTasks without waiting for pending tasks. |
CVE-2026-124307 | Medium | 5.8 | — | 2026-11-07 | Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability that allows attackers to corrupt memory by redefining an ALF adaptation parameter set id still referenced by slices. |
CVE-2026-124311 | Medium | 5.5 | — | 2026-11-07 | Fraunhofer HHI VVdeC through 3.2.1 contains a NULL pointer dereference vulnerability in InterPrediction::xPredInterBlk that allows attackers to crash the decoder by switching SPS to enable reference wrap-around. |
CVE-2026-124312 | Medium | 4.7 | — | 2026-11-07 | Fraunhofer HHI VVdeC through 3.2.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash the decoder by supplying a collocated picture of different resolution. |
Fundacja Widzialni · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-112205 | — | — | — | 2026-11-09 | WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionality. |
CVE-2026-112204 | — | — | — | 2026-11-09 | WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpoint. |
CVE-2026-110469 | — | — | — | 2026-11-09 | WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpoint. |
CVE-2026-110468 | — | — | — | 2026-11-09 | WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpoint. |
Galeno Sistemi · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-112171 | — | — | — | 2026-11-09 | An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to, modification of, or disclosure of database data. |
CVE-2026-112170 | — | — | — | 2026-11-09 | The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates. |
CVE-2026-112169 | — | — | — | 2026-11-09 | Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification. |
CVE-2026-112168 | — | — | — | 2026-11-09 | The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded secrets. |
Openidentityplatform · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123550 | Critical | 9.8 | — | 2026-11-08 | OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions on the ECP (PAOS) and HTTP-Artifact bindings when WantAssertionsSigned is false. |
CVE-2026-123542 | Medium | 6.8 | — | 2026-11-08 | OpenAM before 16.1.4 fails to enforce PKCE in the OAuth 2.0 device authorization flow, never validating the code verifier when device codes are exchanged for tokens. |
CVE-2026-123538 | Medium | 6.6 | — | 2026-11-08 | OpenAM before 16.1.4 does not verify that a signed SAML 1.x assertion or response was signed by the partner named as its issuer, accepting a signature from any certificate in OpenAM's keystore. |
CVE-2026-123546 | Medium | 6.1 | — | 2026-11-08 | OpenAM before 16.1.4 contains an open redirect and cross-site scripting vulnerability that allows remote attackers to control post-login and logout destinations via the goto and gotoOnFail parameters. |
Pgadmin · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-116249 | High | 8.4 | — | 2026-10-30 | In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relative to the user's storage directory, but get_complete_file_path() only stripped leading slashes before joining the two. |
CVE-2026-116238 | High | 8.1 | — | 2026-10-30 | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). |
CVE-2026-116248 | Medium | 6.8 | — | 2026-10-30 | In pgAdmin 4 server mode only administrators are meant to share a server with all users; the server dialog shows the Shared switch only to them. |
CVE-2026-116250 | Medium | 6.5 | — | 2026-10-30 | In server mode pgAdmin 4 validates a path a user gives for a file in their storage directory with check_access_permission() and then opened it by name. |
Pyload · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123816 | High | 8.1 | — | 2026-11-09 | pyLoad is a free and open-source download manager written in Python. |
CVE-2026-123813 | High | 7.5 | — | 2026-11-09 | pyLoad is a free and open-source download manager written in Python. |
CVE-2026-123814 | Medium | 6.4 | — | 2026-11-09 | pyLoad is a free and open-source download manager written in Python. |
CVE-2026-123815 | — | — | — | 2026-11-09 | pyLoad is a free and open-source download manager written in Python. |
Qihoo 360 · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121609 | Critical | 10.0 | — | 2026-11-04 | A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. |
CVE-2026-121607 | Critical | 10.0 | — | 2026-11-04 | A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. |
CVE-2026-121606 | Critical | 10.0 | — | 2026-11-04 | A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. |
CVE-2026-121608 | High | 7.3 | — | 2026-11-04 | A vulnerability was determined in Qihoo 360 D603-2, D600-2 and D606-6 up to 6.3.2. |
Rack · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125111 | High | 7.5 | — | 2026-11-09 | Rack is a modular Ruby web server interface. |
CVE-2026-125110 | Medium | 5.3 | — | 2026-11-09 | Rack is a modular Ruby web server interface. |
CVE-2026-125109 | Medium | 4.8 | — | 2026-11-09 | Rack is a modular Ruby web server interface. |
CVE-2026-125108 | Low | 3.7 | — | 2026-11-09 | Rack is a modular Ruby web server interface. |
Sourcecodester · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125075 | High | 7.3 | — | 2026-11-09 | A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. |
CVE-2026-125074 | High | 7.3 | — | 2026-11-09 | A flaw has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. |
CVE-2026-124571 | Medium | 6.3 | — | 2026-11-09 | A flaw has been found in SourceCodester Simple CRUD using PHP and FPDF 1.0. |
CVE-2026-124570 | Low | 2.4 | — | 2026-11-09 | A vulnerability was detected in SourceCodester Online Leave Management System 1.0. |
Vtenext · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-71457 | Critical | 9.8 | — | 2026-11-04 | vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verification. |
CVE-2025-71456 | High | 8.1 | — | 2026-11-04 | vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject SQL by supplying a crafted fieldname parameter to modules/Fax/EditView.php. |
CVE-2025-71454 | Medium | 6.5 | — | 2026-11-04 | vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in include/utils/VteCsrf.php skips __csrf_token validation for non-POST requests. |
CVE-2025-71455 | Medium | 5.3 | — | 2026-11-04 | vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the PHPSESSID value returned by the Touch web service endpoint. |
Wagtail · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125106 | Medium | 6.5 | — | 2026-11-09 | Wagtail is an open source content management system built on Django. |
CVE-2026-123819 | Medium | 6.5 | — | 2026-11-09 | Wagtail is an open source content management system built on Django. |
CVE-2026-123820 | Medium | 5.3 | — | 2026-11-09 | Wagtail is an open source content management system built on Django. |
CVE-2026-125105 | Low | 3.7 | — | 2026-11-09 | Wagtail is an open source content management system built on Django. |
Blueprintue · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122139 | Medium | 5.3 | — | 2026-11-04 | blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in ForgotPasswordMiddleware.php that allows unauthenticated attackers to identify registered email addresses. |
CVE-2026-122138 | Medium | 5.3 | — | 2026-11-04 | BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a login rate limit bypass vulnerability in LoginMiddleware.php that keys failed-login counters on case-sensitive usernames. |
CVE-2026-121735 | Low | 3.7 | — | 2026-11-03 | blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmed_sent_at. |
Control Web Panel · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-77876 | High | 8.8 | — | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel module that allows attackers to execute arbitrary commands by submitting unescaped input through the… |
CVE-2026-73695 | High | 8.8 | — | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php that allows attackers to include arbitrary local PHP files by supplying an unsanitized module name parameter concatena… |
CVE-2026-77880 | High | 7.8 | — | 2026-11-02 | Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API password change route /newpass/, which runs as root. |
Crocoblock · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123482 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Stored XSS.This issue affects JetFormBuilder: from n/a through 3.6.8. |
CVE-2026-123484 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuilder allows DOM-Based XSS.This issue affects JetFormBuilder: from n/a through 3.6.8. |
CVE-2026-123483 | Medium | 5.3 | — | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.8. |
Datalinkdc · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124558 | High | 7.3 | — | 2026-11-09 | A vulnerability has been found in DataLinkDC Dinky up to 1.2.5. |
CVE-2026-122009 | High | 7.3 | — | 2026-11-04 | A flaw has been found in DataLinkDC Dinky up to 1.2.5. |
CVE-2026-124572 | Medium | 5.4 | — | 2026-11-09 | A vulnerability has been found in DataLinkDC dinky up to 1.2.5. |
Dromara · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120201 | Critical | 9.8 | — | 2026-10-31 | Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by injecting query conditions into the JPOM-USER-TOKEN header. |
CVE-2026-111605 | High | 8.1 | — | 2026-10-16 | Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. |
CVE-2026-91993 | Medium | 4.3 | — | 2026-09-15 | Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. |
Eclipse Foundation · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124683 | — | — | — | 2026-11-09 | Eclipse Langium versions 3.2.0 through 4.4.0 contain an inefficient algorithmic complexity issue (CWE-407) in the opt-in IndentationAwareTokenBuilder and IndentationAwareLexer. |
CVE-2026-118492 | — | — | — | 2026-11-09 | In Eclipse Langium versions 3.0.0 and later, the langium-sprotty package does not HTML-escape diagnostic messages before rendering them in the default hover popup provided by `addHoverPopupHandler`. |
CVE-2026-123870 | — | — | — | 2026-11-09 | The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). |
Frappe · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-109601 | High | 7.5 | — | 2026-10-12 | Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling of attributes in outgoing email HTML. |
CVE-2026-124316 | Medium | 4.3 | — | 2026-11-07 | Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the whitelisted erpnext.buying.utils.get_linked_material_requests method lacking document or company permission checks. |
CVE-2024-58391 | Medium | 4.3 | — | 2026-10-12 | Frappe before 14.58.0 and 15.x before 15.4.0 contains a cross-site scripting vulnerability in printview because printview parameters are not escaped before being rendered. |
Hcl Software · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-66253 | Low | 3.1 | — | 2026-10-01 | iControl is affected by a Session Timeout vulnerability, which could allow an attacker to exploit an unattended or abandoned active session, enabling unauthorized access to the application and the ability to perform actions on behalf of th… |
CVE-2026-66249 | Low | 3.1 | — | 2026-10-01 | iControl is affected by a Missing Secure Attribute vulnerability, which could allow an attacker to intercept cookies transmitted over unencrypted HTTP connections, enabling the unauthorized extraction of sensitive information such as sessi… |
CVE-2026-66248 | Low | 3.1 | — | 2026-10-01 | iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacker to trigger verbose database and system errors, enabling the disclosure of sensitive internal infrastructure details used to pla… |
Jarun · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121627 | Medium | 6.1 | — | 2026-11-03 | buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unescaped bookmark URL in BookmarkModelView._list_entry(). |
CVE-2026-123201 | Medium | 5.3 | — | 2026-11-05 | Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request internal hosts by supplying a url parameter to /api/fetch_data or /api/network_ha… |
CVE-2026-121550 | Low | 3.3 | — | 2026-11-03 | nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing NNN_FIFO path without verifying it is a FIFO. |
Nasa-jpl · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124001 | High | 8.1 | — | 2026-11-09 | NASA JPL ION-DTN 2.2.1b through 4.2.0 contains an integer overflow vulnerability in the Datagram Retransmission (DGR) convergence layer that allows attackers to corrupt heap memory by sending a maliciously crafted 64-bit svcDataLength valu… |
CVE-2026-123999 | High | 7.5 | — | 2026-11-09 | NASA JPL ION-DTN 3.6.2 through 4.2.0 contains a heap-based buffer overflow in the Network Management daemon (nm_mgr) string-formatting logic that allows a malicious or misconfigured agent to trigger an out-of-bounds write by sending deeply… |
CVE-2026-124000 | Medium | 5.3 | — | 2026-11-09 | NASA JPL ION-DTN 2.1.0 through 4.2.0 contains a heap buffer under-allocation vulnerability in the Asynchronous Message Service daemon (amsd) that allows a rogue or misconfigured peer to trigger an out-of-bounds write by sending crafted Met… |
Nec Corporation · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-113364 | — | — | — | 2026-11-09 | Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary code with SYSTEM privile… |
CVE-2026-113363 | — | — | — | 2026-11-09 | Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through 7.5.0, Ver 7.6.0 and Ver 7.7.0 through 7.7.2 on Windows allows a remote unauthenticated attacker to execute arbitrary co… |
CVE-2026-113362 | — | — | — | 2026-11-09 | Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier (excluding Ver 7.3.3), Ver 7.6.0 and Ver 7.7.0 through 7.7.1 on Windows allows a locally authenticated low-privileged attac… |
Python Software Foundation · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-19552 | — | — | — | 2026-11-09 | When ca_certs parameter was supplied to ssl.get_server_certificate() function, the identity of the certificate is not checked. |
CVE-2026-124249 | — | — | — | 2026-11-09 | http.cookiejar.CookieJar deleted a stored cookie when a response carried an already expired Set-Cookie header for it, using the Domain and Path attributes from the header without consulting the cookie policy. |
CVE-2026-19445 | — | — | — | 2026-09-30 | A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its sni_callback assigns a different context to SSLSocket.context (the documented way to select a certificate per server name) and nothing else… |
Tübitak Bilgem Software Technologies Research Institute · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-94434 | High | 8.8 | — | 2026-11-09 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus Boot Repair allows OS Command Injection. |
CVE-2026-94249 | High | 8.1 | — | 2026-11-09 | Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk allows Privilege Abuse. |
CVE-2026-92606 | Medium | 6.0 | — | 2026-11-09 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus MyComputer allows Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions. |
Wedevs · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121760 | High | 7.5 | — | 2026-11-09 | Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through 2.6.1. |
CVE-2026-121767 | Medium | 5.3 | — | 2026-11-07 | Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects weDocs: from n/a through 2.6.1. |
CVE-2026-119485 | Medium | 5.3 | — | 2026-11-03 | Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2. |
@Modelcontextprotocol · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-111768 | High | 7.5 | — | 2026-11-05 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. |
CVE-2026-111769 | Medium | 6.5 | — | 2026-11-05 | The Model Context Protocol TypeScript SDK provides TypeScript client and server implementations of the Model Context Protocol. |
Arendst · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119756 | Critical | 9.8 | — | 2026-11-09 | Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Devi… |
CVE-2026-119755 | High | 7.5 | — | 2026-11-09 | Tasmota through 16.0.0, fixed in commit 1cb7ebc, contains a cross-site request forgery vulnerability that allows unauthenticated attackers to bypass Referer-based CSRF protection in HttpCheckPriviledgedAccess() by crafting a Referer header… |
Aws · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124034 | Medium | 6.4 | — | 2026-11-09 | Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with th… |
CVE-2026-124033 | Medium | 6.4 | — | 2026-11-09 | The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a relative path traversal issue. |
Azuracast · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121427 | High | 7.5 | — | 2026-11-03 | AzuraCast through 0.23.8 fails to remove frontend_config.custom_config in PUT /station/{id}/profile/edit for users lacking the Manage station broadcasting permission, and the stored JSON is written verbatim as key=value lines into the Shou… |
CVE-2026-121431 | Medium | 5.3 | — | 2026-11-03 | AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with WebHooks permission to bypass the UserUrlFilter guard via the Mastodon, Telegram, GroupMe, and RadioReg connectors. |
Bytecodealliance · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121439 | Medium | 5.3 | — | 2026-11-03 | Wasmtime 46.0.0 before 48.0.7 and 49.0.0 before 49.0.4 contains a response splitting vulnerability in wasi-http p3 that allows guests to set unvalidated content-length headers. |
CVE-2026-54914 | — | — | — | 2026-11-05 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. |
Canonical · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84410 | — | — | — | 2026-11-09 | In apport before 2.37.0, an improper privilege management vulnerability allows an unprivileged local attacker to gain root privileges on systems where automatic crash reporting is enabled. |
CVE-2026-86692 | — | — | — | 2026-11-09 | In apport before 2.37.0, a path traversal vulnerability allows an attacker who can supply a crafted crash report to cause unintended file creation or overwrite outside the intended extraction directory when the report is processed with app… |
Chengdu Feiyuxing Technology · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124580 | Critical | 10.0 | — | 2026-11-09 | A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. |
CVE-2026-124585 | Critical | 9.9 | — | 2026-11-09 | A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. |
Craftcms · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-115934 | Critical | 9.8 | — | 2026-11-09 | An unauthenticated SQL injection in the element search endpoint allows stacked query execution, enabling escalation to an administrator. |
CVE-2026-124428 | Medium | 6.5 | — | 2026-11-08 | Craft CMS from 5.7.0 before 5.11.2 contains an arbitrary file read vulnerability that allows authenticated control panel users to read SVG files by posting arbitrary paths to the app/icon-svg endpoint. |
Darylldoyle · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121447 | Medium | 6.1 | — | 2026-11-03 | svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by placing javascript: URLs in the animateTransform values attribute. |
CVE-2026-121443 | Medium | 5.3 | — | 2026-11-03 | svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers to crash requests by submitting SVG input ending inside an unclosed tag. |
Dianping · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124506 | Medium | 4.3 | — | 2026-11-09 | A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. |
CVE-2026-124505 | Medium | 4.3 | — | 2026-11-09 | A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1. |
Dos Co., Ltd. · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-113437 | Medium | 5.3 | — | 2026-11-09 | Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. |
CVE-2026-109582 | Medium | 4.0 | — | 2026-11-09 | Insecure storage of sensitive information issue exists in SS1 provided by DOS Co., Ltd. |
Dynamiapps · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119506 | Critical | 9.1 | — | 2026-11-09 | Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.30.1. |
CVE-2026-119504 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Stored XSS.This issue affects Frontend Admin by DynamiApps: from… |
Espressif · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-113783 | High | 7.4 | — | 2026-11-04 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. |
CVE-2026-113782 | High | 7.1 | — | 2026-11-04 | ESP-IDF is the Espressif Internet of Things (IOT) Development Framework. |
Fengoffice · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124500 | Medium | 6.3 | — | 2026-11-09 | A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. |
CVE-2026-124499 | Medium | 4.7 | — | 2026-11-09 | A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. |
Floci-io · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124509 | High | 7.3 | — | 2026-11-09 | A vulnerability was identified in floci-io Floci up to 2.1.0. |
CVE-2026-124508 | Medium | 5.3 | — | 2026-11-09 | A vulnerability was determined in floci-io Floci up to 2.4.0. |
Francoisjacquet · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121731 | High | 8.8 | — | 2026-11-03 | RosarioSIS before 12.9 contains a sql injection vulnerability that allows authenticated non-student users, including parents, to inject SQL via the unquoted period_id parameter in StudentSummary.php. |
CVE-2026-121732 | Low | 2.7 | — | 2026-11-03 | RosarioSIS before 12.9 contains an improper authorization vulnerability that allows school-scoped administrators to assign fees and payments to students of other schools via MassAssignFees.php and MassAssignPayments.php. |
Hisense · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123998 | High | 8.3 | — | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its remote-control MQTT broker on TCP port 36669, which accepts publicly documented default credentials and an ineffective 4-digit pairin… |
CVE-2026-123994 | Medium | 6.3 | — | 2026-11-06 | Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability in the DIAL (Discovery and Launch) service on TCP port 56789, which accepts control requests from any LAN-adjacent device without authentic… |
Illumio · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-114032 | High | 7.8 | — | 2026-11-09 | The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. |
CVE-2026-114031 | High | 7.8 | — | 2026-11-09 | Incorrect permission assignment allows local privilege escalation to SYSTEM on affected releases of the Illumio VEN for Windows. |
Infiniflow · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121927 | Medium | 6.3 | — | 2026-11-04 | A vulnerability has been found in InfiniFlow RAGFlow up to 0.27.3. |
CVE-2026-121928 | Low | 3.5 | — | 2026-11-04 | A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.2. |
Jgraph · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-115762 | Medium | 6.1 | — | 2026-11-04 | draw.io is a configurable diagramming and whiteboarding application. |
CVE-2026-97373 | Medium | 5.8 | — | 2026-11-04 | draw.io is a configurable diagramming and whiteboarding application. |
Jupyterlab · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-55002 | Medium | 5.5 | — | 2026-11-06 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. |
CVE-2025-54991 | Medium | 5.5 | — | 2026-11-06 | JupyterLab Desktop is the cross-platform desktop application for JupyterLab. |
Kevquirk · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124635 | Medium | 4.7 | — | 2026-11-09 | A vulnerability was identified in kevquirk PureBlog up to 3.7.2. |
CVE-2026-124636 | Low | 3.8 | — | 2026-11-09 | A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. |
Kitae Park · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122666 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Reflected XSS.This issue affects Mang Board WP: from n/a through 2.4.7. |
CVE-2026-122665 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kitae Park Mang Board WP mangboard allows Stored XSS.This issue affects Mang Board WP: from n/a through 2.4.7. |
Kubeflow · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-88985 | Medium | 6.5 | — | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. |
CVE-2026-88984 | — | — | — | 2026-11-05 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. |
Laservideo · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-112165 | — | — | — | 2026-11-09 | The LaserGest mobile application disables TLS certificate and hostname verification via setServerTrustMode("nocheck"), allowing a man-in-the-middle attacker to intercept or modify network traffic, including credentials and API communicatio… |
CVE-2026-112164 | — | — | — | 2026-11-09 | The LaserGest mobile application encrypts stored assistance portal credentials with a hardcoded AES key and IV, allowing an attacker with access to the application package to recover them in cleartext. |
Leejet · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-70659 | High | 7.8 | — | 2026-11-05 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. |
CVE-2026-70660 | — | — | — | 2026-11-05 | stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. |
Libsdl-org · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122329 | High | 7.8 | — | 2026-11-05 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw() in src/decoder_aiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. |
CVE-2026-122328 | High | 7.8 | — | 2026-11-05 | SDL_mixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw() of src/decoder_wav.c when decoding A-law or mu-law WAV files. |
Mamunur Rashid · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-54863 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Review Schema review-schema allows Reflected XSS.This issue affects Review Schema: from n/a through 3.1.4. |
CVE-2026-119515 | Medium | 6.5 | — | 2026-11-09 | Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Bookin… |
Mistralai · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122135 | High | 8.8 | — | 2026-11-04 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by abusing repository-configured gpg.program during project context collection. |
CVE-2026-122134 | High | 8.8 | — | 2026-11-04 | Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by configuring malicious Git clean or process filter drivers in a repository. |
Mycred · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123465 | High | 7.5 | — | 2026-11-09 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycred allows Retrieve Embedded Sensitive Data.This issue affects myCred: from n/a through 4.0.2. |
CVE-2026-123471 | Medium | 4.3 | — | 2026-11-06 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in myCred myCred mycred allows Code Injection.This issue affects myCred: from n/a through 4.0.2. |
Ninenines · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-115701 | — | — | — | 2026-11-06 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowboy allows an unauthenticated remote attacker to exhaust connection process memory over HTTP/1.1. |
CVE-2026-113431 | — | — | — | 2026-11-06 | Allocation of Resources Without Limits or Throttling vulnerability in ninenines cowlib allows an unauthenticated remote peer to exhaust the memory of an HTTP/2 endpoint via HPACK-indexed header fields. |
Nst Labs Tech · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122028 | Medium | 4.3 | — | 2026-11-04 | A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.0. |
CVE-2026-122020 | Medium | 4.3 | — | 2026-11-04 | A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.1. |
Parse-community · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121415 | Low | 3.7 | — | 2026-11-03 | Parse Server before 8.6.111 and 9.0.0 before 9.10.6-alpha.3 on MongoDB skips field type validation for null-valued dot notation keys, allowing sub-documents to be written beneath Pointer, Number, String, Date, or Boolean fields. |
CVE-2026-122301 | Low | 3.1 | — | 2026-11-05 | Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 returns field values in object create responses to callers that lack read access to the created object through class-level permissions or the object's ACL. |
Pavel-odintsov · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-92698 | High | 8.2 | — | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. |
CVE-2026-92694 | Medium | 5.9 | — | 2026-11-05 | FastNetMon is a high-performance DDoS detector and sensor. |
Petpooja · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119731 | High | 7.5 | — | 2026-11-02 | Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic signature verification, source valida… |
CVE-2026-119735 | Medium | 5.4 | — | 2026-11-02 | Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject malicious markup through item descriptions or messages submitted in the Purchase Inquiry thread (/purcha… |
Properfraction · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-39733 | Medium | 5.3 | — | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp-user-avatar allows Code Injection.This issue affects ProfilePress: from n/a through 4.17.7. |
CVE-2026-119473 | Medium | 4.3 | — | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in properfraction ProfilePress wp-user-avatar allows Code Injection.This issue affects ProfilePress: from n/a through 4.17.7. |
Python-pillow · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-112902 | — | — | — | 2026-11-05 | Pillow is a Python imaging library. |
CVE-2026-112899 | — | — | — | 2026-11-05 | Pillow is a Python imaging library. |
Qt · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-116337 | — | — | — | 2026-11-09 | Uncontrolled resource consumption vulnerability in the Qt Framework HTTP response handling functionality of the Qt Network module. |
CVE-2026-107157 | — | — | — | 2026-10-26 | Specially crafted CBOR input passed to QCborValue::fromCbor() in Qt Core can cause an out-of-bounds read, which may crash the application and could expose information. |
Rconfig · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124079 | Critical | 9.8 | — | 2026-11-09 | rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability that allows unauthenticated network attackers to execute arbitrary code by pushing a crafted serialized job onto the Re… |
CVE-2026-70555 | Medium | 6.5 | — | 2026-11-09 | rConfig Core 8.2.3 before 8.2.13 contains an information disclosure vulnerability that allows authenticated users to retrieve cleartext SSH, Telnet, and enable passwords for managed devices through the device-credentials API due to automat… |
Romkatv · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122137 | Medium | 6.7 | — | 2026-11-04 | Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install script that reuses attacker-creatable directories when mktemp fails. |
CVE-2026-122136 | Medium | 4.4 | — | 2026-11-04 | Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local attackers to overwrite victim-writable files via a predictable temporary path. |
Ronf · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102643 | High | 8.8 | — | 2026-11-09 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. |
CVE-2026-77473 | Medium | 6.5 | — | 2026-11-09 | AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. |
Surrealdb · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121419 | High | 8.1 | — | 2026-11-03 | SurrealDB from 3.1.0 before 3.3.0 contains an improper authentication vulnerability where the MCP BoundSubject fingerprint uses the access method name instead of per-user identity for JWT/Bearer access. |
CVE-2026-121423 | Medium | 6.5 | — | 2026-11-03 | SurrealDB before 3.3.0 contains an unbounded recursion vulnerability that allows authenticated users to abort the surreald process by triggering stack overflow on deeply nested values. |
Sveltejs · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123566 | High | 7.5 | — | 2026-11-08 | Sveltejs devalue before 5.9.3 contains a denial of service vulnerability that allows attackers to cause CPU amplification by supplying sparse arrays to uneval. |
CVE-2026-123562 | High | 7.5 | — | 2026-11-08 | devalue (sveltejs/devalue) 5.8.0 before 5.9.3 contains an unhandled promise rejection in stringifyAsync: when serializing multiple promises, a later promise rejecting before an earlier one settles leaves an internal rejection unhandled, ev… |
Sysadminsmedia · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85287 | Medium | 6.5 | — | 2026-11-05 | HomeBox is a home inventory and organization system. |
CVE-2026-85286 | Low | 3.7 | — | 2026-11-05 | HomeBox is a home inventory and organization system. |
Tactis · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-112198 | — | — | — | 2026-10-28 | XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App. |
CVE-2026-112197 | — | — | — | 2026-10-28 | Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. |
Telepresenceio · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102340 | High | 8.5 | — | 2026-11-04 | Telepresence enables local development against a remote Kubernetes or OpenShift cluster. |
CVE-2026-102339 | High | 8.2 | — | 2026-11-04 | Telepresence enables local development against a remote Kubernetes or OpenShift cluster. |
The Wikimedia Foundation · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-103442 | — | — | — | 2026-09-30 | External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection. |
CVE-2026-103441 | — | — | — | 2026-09-30 | Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files. |
Tox-dev · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-112938 | Medium | 5.8 | — | 2026-11-05 | filelock is a platform-independent file lock for Python. |
CVE-2026-112910 | Medium | 5.3 | — | 2026-11-05 | filelock is a platform-independent file lock for Python. |
Turboderp-org · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124996 | Medium | 6.3 | — | 2026-11-09 | A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. |
CVE-2026-124994 | Medium | 6.3 | — | 2026-11-09 | A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.3. |
Vembu Technologies · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-71452 | Medium | 6.1 | — | 2026-11-03 | Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/clientside/restoreprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating request parameters… |
CVE-2025-71451 | Medium | 6.1 | — | 2026-11-03 | Vembu BDRSuite before 7.6.0 contains an unauthenticated cross-site scripting vulnerability in templates/progress/serverside/serverbackupprogress.sgp that allows remote attackers to inject arbitrary JavaScript by manipulating request parame… |
Warp-tech · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-91168 | Medium | 6.8 | — | 2026-11-04 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. |
CVE-2026-91163 | Low | 3.7 | — | 2026-11-04 | Warpgate is an open source SSH, HTTPS, and MySQL bastion host for Linux. |
Welcart · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119505 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Stored XSS.This issue affects Welcart e-Commerce: from n/a through 2.12.6. |
CVE-2026-119503 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Code Injection.This issue affects Welcart e-Commerce: from n/a through 2.12.6. |
Wpwax · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122661 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist directorist allows Stored XSS.This issue affects Directorist: from n/a through 8.10.7. |
CVE-2026-119497 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist directorist allows Stored XSS.This issue affects Directorist: from n/a through 8.10.6. |
Yeti-platform · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63502 | High | 8.3 | — | 2026-11-03 | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. |
CVE-2026-63489 | High | 7.6 | — | 2026-11-03 | Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. |
Zcashfoundation · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123558 | High | 7.5 | — | 2026-11-08 | Zebra zebrad before 7.0.0 contains a denial of service vulnerability that allows a malicious peer to stall checkpoint sync by cancelling the verifier rewind after a failed commit. |
CVE-2026-123554 | High | 7.5 | — | 2026-11-08 | Zebra zebrad 6.4.0 before 7.0.0 performs quadratic work in the mempool coinbase-maturity check because Transaction::coinbase_spend_restriction() rebuilds the transaction's output list once per spent outpoint. |
10web · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119483 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker allows Stored XSS.This issue affects Form Maker by 10Web: from n/a through 1.15.50. |
6amtech · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122019 | High | 7.3 | — | 2026-11-04 | A vulnerability was identified in 6amTech 6valley 16.0. |
@Novu · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125115 | Medium | 6.8 | — | 2026-11-09 | Novu provides an API for sending notifications through multiple channels. |
@Signalk · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123807 | Critical | 9.8 | — | 2026-11-09 | Signal K Server is a server application that runs on a central hub in a boat. |
Aapanel · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124579 | High | 7.4 | — | 2026-11-09 | A vulnerability was determined in aaPanel BillionMail up to 4.9. |
Accel-ppp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123205 | Medium | 6.5 | — | 2026-11-05 | accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOG_MAX_SIZE. |
Ag2ai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-113663 | High | 8.8 | — | 2026-11-05 | AG2 is an open-source AgentOS. |
Aguila Technologies · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119524 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aguila Technologies WP Customer Area customer-area allows Stored XSS.This issue affects WP Customer Area: from n/a through 8.4.3. |
Aio-libs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123817 | — | — | — | 2026-11-09 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. |
Akuvox · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-116371 | Medium | 6.3 | — | 2026-10-26 | A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.26. |
Alan Health · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58128 | Medium | 6.2 | — | 2026-11-04 | Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious application to write attacker-controlled files outside the intended directory via the exported ShareRec… |
Am_automatic_machines · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-103906 | — | — | — | 2026-11-09 | Use of hard-coded MQTT credentials in the AM CLUB mobile application allows an authenticated attacker to connect to the MQTT broker and access data or perform actions across tenant boundaries. |
Amazon · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124035 | High | 7.1 | — | 2026-11-09 | Unsafe reflection in the error mitigation schema validation in Amazon Braket Schemas before 1.32.2 might allow a remote authenticated user with S3 write access to the quantum task output location to execute arbitrary code on any machine th… |
Amir1376 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121451 | High | 8.8 | — | 2026-11-03 | AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated browser-integration API that allows remote attackers to write attacker-chosen files to arbitrary paths. |
Amlogic · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119739 | Medium | 5.3 | — | 2026-11-02 | The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows remote attackers to… |
Anacrolix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123096 | Medium | 6.5 | — | 2026-11-05 | anacrolix/torrent through 1.61.0 contains a memory exhaustion vulnerability in the tracker/http package that allows malicious trackers to crash clients by returning unbounded responses. |
Angular · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-111752 | — | — | — | 2026-11-03 | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. |
Anthropics · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-88066 | — | — | — | 2026-11-03 | Claude Desktop is Anthropic's desktop application for interacting with Claude. |
Ardatan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-114604 | — | — | — | 2026-11-05 | GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. |
Armurox · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63417 | — | — | — | 2026-11-03 | Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or dictionary keys. |
Ash-project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119613 | — | — | — | 2026-11-09 | Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a caller of an AshAi tool to read internal error details, including module names and data values, by making a tool call fail. |
Atlasaidev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121576 | High | 8.8 | — | 2026-11-09 | Incorrect Privilege Assignment vulnerability in AtlasAiDev MCP Server for WordPress ai-workflow-automation-ai-agent-hub allows Privilege Escalation.This issue affects MCP Server for WordPress: from n/a through 2.0.1. |
Authorizerdev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123196 | High | 8.1 | — | 2026-11-05 | Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to control emailed link hosts by supplying x-authorizer-url gRPC metadata. |
Axew3.com · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121769 | High | 8.5 | — | 2026-11-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axew3.com WP w3all phpBB wp-w3all-phpbb-integration allows SQL Injection.This issue affects WP w3all phpBB: from n/a through 3.1.9. |
Benjamine · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122234 | Medium | 4.7 | — | 2026-11-04 | jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by supplying an unescaped array-move destination index in a delta. |
Biojppm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120455 | Medium | 6.1 | — | 2026-11-02 | rapidyaml through 0.16.0 contains an out-of-bounds write vulnerability in ParseEngine::_add_annotation() that allows attackers to corrupt memory by supplying YAML with excess anchors or tags. |
Bishopfox · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-77622 | — | — | — | 2026-11-05 | Sliver is a command and control framework. |
Bitcoinjs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-107846 | — | — | — | 2026-11-04 | bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsers. |
Bpampuch · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119743 | Medium | 4.8 | — | 2026-11-09 | pdfmake before 0.3.14 contains a shared resource caching vulnerability that allows attackers to access cross-document cached resources by exploiting a process-wide virtual file system keyed only by URL without request headers or per-docume… |
Brainstorm Force · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120852 | Medium | 5.3 | — | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Force CartFlows cartflows allows Code Injection.This issue affects CartFlows: from n/a through 3.3.0. |
Bubka · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63439 | Critical | 9.8 | — | 2026-11-06 | 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes. |
C-prot Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-95648 | High | 8.1 | — | 2026-11-09 | Improperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc. |
Caddyserver · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55458 | — | — | — | 2026-11-05 | Caddy is an extensible server platform that uses TLS by default. |
Campcodes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122047 | High | 7.3 | — | 2026-11-04 | A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0. |
Cemtan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-110669 | Medium | 6.5 | — | 2026-10-14 | A security vulnerability has been detected in cemtan sar2html 4.0.0. |
Cern-fts · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-71458 | High | 7.5 | — | 2026-11-06 | FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo. |
Cgns · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-110661 | Low | 3.3 | — | 2026-10-14 | CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFI_read_node_header that allows attackers to crash applications by supplying crafted ADF node headers. |
Chamilo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-45146 | High | 7.2 | — | 2026-11-03 | Chamilo LMS is an open-source learning management system. |
Chaos Software · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-104989 | — | — | — | 2026-11-09 | Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries |
Chenyme · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124574 | Medium | 6.3 | — | 2026-11-09 | A vulnerability was determined in chenyme grok2api up to 3.1.6. |
Coder · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-58398 | Medium | 4.3 | — | 2026-10-17 | Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in the login page because the redirect query parameter is improperly sanitized. |
Comfast · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122013 | Critical | 10.0 | — | 2026-11-04 | A vulnerability was detected in Comfast CF-WR632AX 2.6.0.1. |
Conductor-oss · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124507 | Medium | 5.3 | — | 2026-11-09 | A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1. |
Cool Plugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121777 | Medium | 5.3 | — | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Cool Plugins Cool Formkit Lite extensions-for-elementor-form allows Code Injection.This issue affects Cool Formkit Lite: from n/a through 2.7.10. |
Ctfd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121562 | Medium | 5.3 | — | 2026-11-03 | CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. |
Databasus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-110770 | High | 8.1 | — | 2026-10-14 | Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/reset-password. |
Dbgate · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121455 | Medium | 5.4 | — | 2026-11-03 | DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated users to bypass LOGIN_PERMISSIONS because test() and save() never call testConnectionPermission. |
Dcmjs-org · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-46350 | Critical | 9.1 | — | 2026-11-05 | dcmjs is a JavaScript implementation of DICOM manipulation. |
Diillson · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123271 | High | 8.0 | — | 2026-11-05 | ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses server-supplied Protected Resource Metadata as the resource indicator without checking it matches the configured server URL. |
Djust-org · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125112 | — | — | — | 2026-11-09 | djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. |
Echohs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120503 | Low | 3.3 | — | 2026-11-02 | A vulnerability was detected in EchoHS GeekezBrowser up to 1.7.2/1.8.0. |
Effekseer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120386 | Medium | 4.3 | — | 2026-11-09 | Effekseer improperly validates "effect" files. |
Electrovir · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63496 | High | 7.8 | — | 2026-11-09 | augment-vir is a collection of helper functions. |
Elizaos · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124587 | Medium | 4.3 | — | 2026-11-09 | A vulnerability was identified in elizaOS eliza 2.0.3-beta.7. |
Empiresoft · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121929 | Low | 3.5 | — | 2026-11-04 | A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.0. |
Enspirit · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-44265 | High | 7.4 | — | 2026-11-03 | Elo is a purely functional expression language for no-code tools. |
Ericlbuehler · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124028 | Medium | 4.2 | — | 2026-11-06 | mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject tool calls by placing delimiter strings in text the model quotes. |
Erupts · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124504 | Medium | 6.3 | — | 2026-11-09 | A vulnerability was detected in erupts erupt up to 2.3.0. |
Esa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-76077 | High | 8.1 | — | 2026-11-05 | ASN1SCC is an open source ASN.1 compiler for embedded systems. |
Fancydirty · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125359 | Medium | 4.3 | — | 2026-11-09 | Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, including non-owner accounts, to set an arbitrary PanSou base URL via savePanSouBaseUrlAction without role checks. |
Fifu.app · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123476 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fifu.app Featured Image from URL featured-image-from-url allows Stored XSS.This issue affects Featured Image from URL: from n/a through 6… |
Filegator · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-94619 | Medium | 5.9 | — | 2026-11-06 | FileGator is a multi-user file manager. |
Flexprice · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-110765 | Medium | 5.9 | — | 2026-10-14 | FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature verification when the intuit-signature header is omitted. |
Flowci · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124330 | Medium | 5.0 | — | 2026-11-08 | A vulnerability was determined in FlowCI flow-core-x up to 1.23.49. |
Flowintel · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124850 | — | — | — | 2026-11-09 | A SQL injection vulnerability exists in a database migration script in flowintel. |
Foliovision · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121764 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player fv-wordpress-flowplayer allows Stored XSS.This issue affects FV Flowplayer Video Player: from n/a… |
Fossasia · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122325 | Low | 3.1 | — | 2026-11-05 | fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor lead creation API that allows exhibitors to access other organizers' attendee data. |
Francescopace · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102739 | High | 7.8 | — | 2026-11-05 | ESPectre is a Wi-Fi motion sensing platform for ESP32. |
Freebsd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-101307 | Critical | 9.1 | — | 2026-10-15 | When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. |
Freeswitch · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-116779 | Critical | 9.8 | KEV | 2026-11-05 | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. |
Froxlor · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121435 | Medium | 4.3 | — | 2026-11-03 | Froxlor before 2.3.15 contains an authorization bypass vulnerability that allows authenticated customers to create MySQL databases by calling the Mysqls.add API endpoint, which lacks the customer_hide_options check. |
Funstory-ai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124553 | High | 7.5 | — | 2026-11-08 | BabelDOC from 0.3.61 before 0.7.0 contains a resource exhaustion vulnerability that allows remote attackers to exhaust CPU and memory by supplying unbounded bfrange and cidrange spans. |
Geonode · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-33050 | High | 8.8 | — | 2026-11-06 | GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data. |
Germondai · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122140 | Medium | 5.8 | — | 2026-11-04 | Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. |
Gijo Varghese · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121780 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gijo Varghese Flying Images nazy-load allows Stored XSS.This issue affects Flying Images: from n/a through 2.4.15. |
Git-for-windows · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-100408 | Medium | 4.4 | — | 2026-11-04 | Git for Windows is the Windows port of Git. |
Gitea · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-117677 | Medium | 6.5 | — | 2026-11-01 | When parsing an uploaded Helm chart, Gitea decompressed the archive and read every tar entry while looking for `Chart.yaml` without limiting the decompressed size, and did so before the package size quota was checked; the quota only consid… |
Gitleaks · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124039 | Low | 3.3 | — | 2026-11-06 | Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. |
Gmo Prime Strategy Co., Ltd. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-117477 | Medium | 6.1 | — | 2026-11-09 | KUSANAGI provided by GMO Prime Strategy Co., Ltd. |
Gnu · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-118384 | Medium | 6.1 | — | 2026-10-28 | GNU mtools before 4.0.50 has an out-of-bounds write in parse_vses in vfat.c. |
Goposta · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123204 | Medium | 4.3 | — | 2026-11-05 | Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit rights to make the backend send POST requests to internal destinations by creating webhooks with arbitrary URLs. |
Gpustack · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102895 | Critical | 9.8 | KEV | 2026-11-04 | GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. |
Gradleup · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-75598 | Medium | 6.3 | — | 2026-11-06 | The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation. |
H2o · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-55368 | High | 8.1 | — | 2026-11-04 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. |
Havelsan Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119474 | High | 7.8 | — | 2026-11-09 | Incorrect Permission Assignment for Critical Resource vulnerability in HAVELSAN Inc. |
Hedgedoc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102927 | — | — | — | 2026-11-05 | HedgeDoc is an open source, real-time collaborative markdown notes application. |
Hivepress · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123470 | Medium | 4.3 | — | 2026-11-07 | Missing Authorization vulnerability in HivePress HivePress hivepress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress: from n/a through 1.8.1. |
Hnswlib · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124959 | — | — | — | 2026-11-09 | The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. |
Huggingface · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124588 | Medium | 6.3 | — | 2026-11-09 | A security flaw has been discovered in huggingface finetrainers 0.1.0/0.2.0. |
Icculus · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-58392 | Low | 3.3 | — | 2026-10-14 | PhysicsFS through 3.2.0 contains an out-of-bounds read vulnerability in __PHYSFS_utf8codepoint() that allows attackers to read past name buffers via an off-by-one cursor advance on six-octet UTF-8 sequences. |
If-so Dynamic Content · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121782 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personali… |
Ignisda · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-77442 | Medium | 5.9 | — | 2026-11-06 | Ryot is a self-hosted personal tracking application. |
Imgproxy · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123614 | Critical | 9.8 | — | 2026-11-08 | imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a crafted data_size value. |
Immich-app · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-77439 | High | 8.8 | — | 2026-11-05 | Immich is a self-hosted photo and video management solution. |
Infoblox · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119274 | Medium | 4.8 | — | 2026-11-09 | Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS |
Inspur · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-58387 | High | 7.5 | — | 2026-09-30 | Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and e… |
Intelbras · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124577 | Critical | 9.8 | — | 2026-11-09 | A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. |
Internlm · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123818 | High | 7.5 | — | 2026-11-09 | LMDeploy is a toolkit for compressing, deploying, and serving large language models. |
Itsourcecode · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124581 | High | 7.3 | — | 2026-11-09 | A vulnerability was determined in itsourcecode Airline Reservation System 1.0. |
Iubenda · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120854 | High | 7.5 | — | 2026-11-09 | Allocation of Resources Without Limits or Throttling vulnerability in iubenda iubenda iubenda-cookie-law-solution allows HTTP DoS.This issue affects iubenda: from n/a through 3.13.6. |
Jackh54 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61854 | High | 8.2 | — | 2026-10-30 | VoiceSentinel is a real-time voice moderation system for Minecraft servers. |
Janhq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122235 | Medium | 4.7 | — | 2026-11-04 | Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows attackers to write files outside the workspace via dangling symlinks. |
Jelmer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122299 | High | 8.8 | — | 2026-11-04 | Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a duplicate tree header to the last occurrence instead of the first, diverging from core git's resolution behavior, while Po… |
Jenkins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-117616 | High | 8.8 | — | 2026-10-28 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system a… |
Jhuckaby · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85076 | — | — | — | 2026-11-05 | Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. |
Jihong88 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124491 | Medium | 6.4 | — | 2026-11-08 | SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that assigns server-returned file names to innerHTML without escaping. |
Jorisvink · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121727 | High | 7.5 | — | 2026-11-03 | Kore before 4.3.0 contains an integer underflow vulnerability in HTTP request body handling that allows unauthenticated attackers to bypass http_body_max by sending more body bytes than declared. |
Julianhille · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125107 | High | 7.5 | — | 2026-11-09 | Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron. |
Kasemjaffer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-60117 | Medium | 6.2 | — | 2026-11-09 | The Android implementation of the Flutter/Dart receive_sharing_intent package, versions 1.4.1 through 1.9.0, contains a path traversal vulnerability in FileDirectory.getDataColumn that allows a malicious co-resident application to write fi… |
Keepnet Labs Ltd. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-92546 | High | 7.5 | — | 2026-10-27 | Authentication bypass by spoofing vulnerability in Keepnet Labs Ltd. |
Kekingcn · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124556 | Medium | 4.3 | — | 2026-11-09 | A security vulnerability has been detected in kekingcn kkFileView up to 5.0.3. |
Kompini · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124637 | — | — | — | 2026-11-09 | A stored Cross-Site Scripting (XSS) vulnerability was identified in the profile editing form, in the parameters: cliNom and cliCognoms, in a request to https://www.luxorgymtarrega.com/dadespersonals/modificarClient/ID. |
Kongxin-github · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124621 | High | 7.4 | — | 2026-11-09 | A vulnerability was determined in kongxin-github Java_Library_Management_System up to 70a6eb6b96fe64575d8051f1a59055bfc5dc5885. |
Koxudaxi · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63469 | — | — | — | 2026-11-03 | fastapi-code-generator creates FastAPI applications from OpenAPI files. |
Krupalshah · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122038 | High | 7.3 | — | 2026-11-04 | A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. |
Kunchenguid · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102344 | High | 8.1 | — | 2026-11-06 | Lavish is the new editor for your HTML artifacts. |
Kurrent-io · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-81190 | — | — | — | 2026-11-05 | KurrentDB is a database engineered for modern software applications and event-driven architectures. |
Langgenius · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123135 | Medium | 6.3 | — | 2026-11-05 | A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. |
Laradashboard · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120488 | Medium | 5.4 | — | 2026-11-02 | LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with post.create or post.edit permission to inject scripts via unsanitized LaraBuilder design_json block content. |
Libnoname · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123208 | High | 8.8 | — | 2026-11-05 | noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS that allows malicious websites to read, overwrite, or delete installation files. |
Libyal · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123268 | Low | 3.5 | — | 2026-11-06 | A security vulnerability has been detected in libyal libvmdk up to 3fdd7839758e9f44ef95e1dfccde8552b860a4fc. |
Lightdash · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121631 | Medium | 4.2 | — | 2026-11-03 | Lightdash 0.2609.0 before 3.137.0 contains an authorization bypass vulnerability in the RenameService that allows authenticated users with update Project permission on one project to access and modify dashboards belonging to a different pr… |
Liquid Web / Stellarwp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123469 | Medium | 5.3 | — | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Code Injection.This issue affects The Events Calendar: from n/a through 6… |
Lxc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-100395 | — | — | — | 2026-11-05 | LXC is a userspace interface for the Linux kernel containment features used to create and manage system containers. |
Lxtgh · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124589 | Medium | 6.3 | — | 2026-11-09 | A weakness has been identified in lxtGH OMG-Seg up to f3b26b609bae919760cd3ccf09c36179bb8624a0. |
Mathurvishal · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121502 | High | 7.3 | — | 2026-11-03 | A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. |
Melapress · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121573 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.7. |
Mikefarah · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124987 | Medium | 6.3 | — | 2026-11-09 | A vulnerability has been found in mikefarah yq up to 4.53.3. |
Miniupnp Project · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-110656 | Low | 3.1 | — | 2026-10-14 | miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseelt function's namespace-prefix handling that skips an end-of-buffer check after advancing past ':'. |
Mpdavis · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120459 | High | 7.4 | — | 2026-11-02 | python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs because HMACKey and CryptographyHMACKey accept zero-length HMAC secrets. |
Mpv-player · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123095 | High | 7.5 | — | 2026-11-05 | mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdl_hook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. |
Munin-monitoring · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125357 | Medium | 5.3 | — | 2026-11-09 | Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory. |
Neo4j · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-92683 | — | — | — | 2026-11-09 | Incorrect authorization in the @authentication directive JWT where filter evaluation in Neo4j @neo4j/graphql versions 7.0.0 before 7.6.7 allows an attacker holding an otherwise-valid JWT to bypass all but the first filter condition via a m… |
Nexmoe · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123787 | Medium | 4.3 | — | 2026-11-06 | A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.2. |
Nickboss · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123460 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss WordPress File Upload wp-file-upload allows Stored XSS.This issue affects WordPress File Upload: from n/a through 5.2.2. |
Nist · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120833 | High | 7.8 | — | 2026-11-03 | labbench before 0.46.1 contains a deserialization of untrusted data vulnerability in read() and read_relational() that passes any file with a .p or .pickle extension to pandas.read_pickle based on the extension alone. |
Nocodb · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121736 | Medium | 5.3 | — | 2026-11-03 | NocoDB 0.300.0 before 2026.08.0 contains a missing authentication vulnerability in the POST /api/v2/oauth/authorize handler that allows unauthenticated attackers to create OAuth authorization codes. |
Novik · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121546 | Medium | 5.9 | — | 2026-11-03 | ruTorrent before 5.3.20 contains a path traversal vulnerability in the datadir plugin that allows authenticated users to escape the topDirectory jail because correctDirectory() does not resolve symbolic links. |
Novuhq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125114 | — | — | — | 2026-11-09 | Novu provides an API for sending notifications through multiple channels. |
Npc-worldwide · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122015 | Medium | 6.3 | — | 2026-11-04 | A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. |
Ntop · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-82413 | High | 8.8 | — | 2026-11-05 | ntopng is a web-based network traffic monitoring application. |
Nuxt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123808 | Medium | 5.3 | — | 2026-11-09 | Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS. |
Octoprint · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123364 | — | — | — | 2026-11-09 | OctoPrint provides a web interface for controlling consumer 3D printers. |
Olivier-ls · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124622 | Medium | 5.3 | — | 2026-11-09 | A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.3. |
Ondata · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-76894 | Low | 3.1 | — | 2026-11-03 | CKAN MCP Server is a tool for querying CKAN open data portals. |
Open Source Robotics Foundation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-42002 | High | 8.4 | — | 2026-09-28 | A code injection vulnerability has been discovered in the Robot Operating System 2 (ROS 2) 'ros2topic' command-line tool, affecting all ROS 2 distributions from Crystal Clemmys up to and including Lyrical Luth and Rolling Ridley. |
Open-wanderer · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-71495 | Critical | 10.0 | — | 2026-11-06 | Wanderer is a self-hosted trail database for saving and sharing adventures. |
Openam Consortium · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121825 | Medium | 6.1 | — | 2026-11-09 | OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty ID-FF service provider single sign-on flow. |
Openbsd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123158 | High | 8.1 | KEV | 2026-11-05 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). |
Openremote · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124436 | High | 8.0 | — | 2026-11-08 | OpenRemote before 1.32.2 contains an improper authorization vulnerability that allows realm administrators to access and modify global resources by calling admin endpoints lacking super administrator checks. |
Opentext · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-10248 | — | — | — | 2026-11-09 | XSS Vulnerability in OpenText Filr Appliance versions upto 25.1.2 could allow an authenticated user to upload a malicious file and exercise Stored XSS attack. |
Osbil Technology Ltd.osbil Technology Ltd. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16283 | High | 8.8 | — | 2026-11-09 | Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Osbil Technology Ltd.Osbil Technology Ltd. |
Oss-apps · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122324 | Low | 3.1 | — | 2026-11-05 | SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users' expenses by supplying arbitrary expenseId values to expense.getExpenseDetails. |
Ottermind · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124557 | High | 7.3 | — | 2026-11-09 | A vulnerability was detected in OtterMind Chat2DB up to 5.3.8. |
Packagekit · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-104620 | — | — | — | 2026-11-09 | A path traversal attack in simulation of actions in the Zypp backend of PackageKit before 1.4.1 could be used by local attackers to gain root privileges. |
Pantum · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124578 | Medium | 5.3 | — | 2026-11-09 | A security vulnerability has been detected in Pantum BP5100DW 3.A.4.7. |
Php · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122233 | Low | 3.7 | — | 2026-11-04 | FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP stream response headers between requests, because the reset only happens in RSHUTDOWN, which worker requests skip. |
Phpmyadmin · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121262 | Medium | 5.3 | — | 2026-11-03 | A vulnerability was found in phpMyAdmin SQL-Parser 6.0.0/6.0.1. |
Plugins360 Labs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120838 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Plugins360 Labs All-in-One Video Gallery all-in-one-video-gallery allows Stored XSS.This issue affects All-in-One Video Gallery: from n/a… |
Pluginus.net · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123183 | Medium | 5.3 | — | 2026-11-07 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PluginUs.Net Active Products Tables for WooCommerce profit-products-tables-for-woocommerce allows Code Injection.This issue affects Active Produ… |
Prestashop · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124916 | Medium | 5.4 | — | 2026-11-09 | PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration. |
Psf · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-114134 | — | — | — | 2026-11-05 | Black is the uncompromising Python code formatter. |
Pt Norther Lights Production · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123475 | High | 7.5 | — | 2026-11-09 | Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MapSVG: from n/a through 8.16.3. |
Pypa · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102925 | High | 7.8 | — | 2026-09-29 | virtualenv is a tool for creating isolated virtual python environments. |
Redpanda Data · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123270 | Critical | 9.8 | — | 2026-11-09 | Redpanda Connect versions 4.39 to 4.110 contain a missing authentication vulnerability that enables unauthenticated remote code execution (RCE). |
Rehan-remade · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125358 | High | 8.1 | — | 2026-11-09 | Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation vulnerability in the HostLink class of its passthrough example mods that allows remote attackers to execute Minecraft co… |
Replicate · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-56712 | High | 8.5 | — | 2026-11-09 | Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not v… |
Report One · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-110633 | High | 7.8 | — | 2026-10-14 | MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker-supplied archives into arbitrary directories. |
Retspen · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122224 | High | 8.1 | — | 2026-11-04 | WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged authenticated users to reach MigrateViewSet and CreateInstanceViewSet because no permission_classes are declared, so Django REST… |
Ricky-7-yan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121558 | Medium | 4.3 | — | 2026-11-03 | AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in rag/agentic_rag.py that allows authenticated users to read other projects' knowledge by supplying project_id. |
Rustls · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123610 | Low | 3.7 | — | 2026-11-08 | rustls before 0.23.46 contains an uncontrolled memory allocation flaw in its optional Brotli certificate decompression, which limits decompressed output size but accepts an input-selected large history window. |
Rymera Web Co · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120856 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rymera Web Co Invoice Gateway for WooCommerce – Invoice Payment Gateway invoice-gateway-for-woocommerce allows Reflected XSS.This issue a… |
Samsung Open Source · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124684 | Medium | 5.1 | — | 2026-11-09 | Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation. |
Sandisk · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-114594 | — | — | — | 2026-11-09 | A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execu… |
Sharepoint Products · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123973 | Medium | 5.0 | — | 2026-11-06 | SharePoint Products CopyMove before 2026-11-06 allows traversal. |
Sharpemu · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-92704 | High | 8.3 | — | 2026-11-04 | SharpEmu is an experimental PlayStation 5 emulator for Windows and Linux. |
Sililawijesinghe · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123988 | Medium | 5.3 | — | 2026-11-07 | A vulnerability has been found in SililaWijesinghe Food Ordering System up to ba314e897e3365600461e5ea59432e39ceaa0fa5. |
Silkimen · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121554 | Medium | 5.9 | — | 2026-11-03 | cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks cookies to third-party hosts because the JavaScript layer passes jar-built Cookie headers as ordinary request headers. |
Simsong · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119600 | Medium | 4.8 | — | 2026-10-30 | tcpflow before 1.7.0 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. |
Sipsorcery-org · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123805 | High | 7.5 | — | 2026-11-09 | SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. |
Siteserver · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124575 | Low | 3.7 | — | 2026-11-09 | A vulnerability was identified in SiteServer SSCMS up to 7.1.3/7.2.1/7.4.0. |
Solidtime-io · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-76806 | Medium | 6.3 | — | 2026-11-04 | Solidtime is an open-source time-tracking app. |
Sonicwall · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-19868 | High | 7.5 | KEV | 2026-11-06 | An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authentication method to bypass SAML authentication controls. |
Sourcehut · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121728 | Medium | 5.3 | — | 2026-11-03 | SourceHut meta.sr.ht 0.56.11 before 0.89.0 contains an authorization bypass vulnerability that allows unauthenticated attackers to register accounts when public registration is disabled. |
Spatie · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121589 | Medium | 5.3 | — | 2026-11-04 | A weakness has been identified in spatie url-signer up to 2.1.3. |
Stylemixthemes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-66675 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows Stored XSS.This issue affects Motors: from n/a through 1.4.128. |
Sumatrapdfreader · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-115758 | — | — | — | 2026-11-04 | SumatraPDF is a multi-format reader for Windows. |
Sumiie24 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121524 | High | 7.3 | — | 2026-11-03 | A flaw has been found in sumiie24 School-Management-System up to d946d649c7c95e101fc5679ecd91999533bb10d7. |
Sysown · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102664 | High | 7.1 | — | 2026-11-04 | ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. |
Telegram · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-107181 | High | 8.1 | — | 2026-10-07 | Telegram Desktop before 7.2.9 contains an IPC record-separator injection vulnerability in Core::Sandbox that allows remote attackers to inject OPEN: records via crafted tg:// links containing unescaped semicolons. |
Templateinvaders · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120855 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TemplateInvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows Stored XSS.This issue affects TI WooCommerce Wishlist: from n/a t… |
Temporal Technologies, Inc. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-87857 | — | — | — | 2026-11-09 | Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request that presents it. |
Tempoxyz · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63634 | — | — | — | 2026-11-09 | pympp is a Python SDK for the Machine Payments Protocol. |
Tencent · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124586 | High | 7.3 | — | 2026-11-09 | A vulnerability was determined in Tencent RapidJSON 1.1.0. |
Texlyre · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121588 | Medium | 6.1 | — | 2026-11-03 | TeXlyre from 0.11.0 before 0.13.5 contains a stored cross-site scripting vulnerability that allows attackers to execute script by supplying malicious LSP or typesetter recipe icons. |
Theupdateframework · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123806 | Medium | 4.0 | — | 2026-11-09 | python-tuf is a Python reference implementation of The Update Framework (TUF). |
Thorvg · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123367 | High | 7.4 | — | 2026-11-09 | Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine. |
Tidelift · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124501 | High | 7.3 | — | 2026-11-09 | A weakness has been identified in Tidelift moto up to 5.2.4. |
Titraio · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63497 | — | — | — | 2026-11-09 | titra is an open source time tracking project. |
Tobias · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-120834 | High | 7.3 | — | 2026-11-09 | Incorrect Privilege Assignment vulnerability in Tobias WP2LEADS wp2leads allows Privilege Escalation.This issue affects WP2LEADS: from n/a through 3.5.17. |
Tornadoweb · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123534 | Medium | 6.5 | — | 2026-11-08 | Tornado before 6.6 contains a path traversal vulnerability in RequestHandler.static_url() and get_version() that allows attackers to hash files outside static_path using ../ sequences. |
Traccar · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-104203 | High | 7.5 | — | 2026-11-04 | Traccar is an open source GPS tracking system. |
Tracecathq · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-58490 | Critical | 9.8 | — | 2026-11-06 | Tracecat is an open-source security automation platform for teams and AI agents. |
Trailbaseio · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119759 | High | 8.1 | — | 2026-11-09 | TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during ins… |
Trendyol · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124465 | Medium | 6.5 | — | 2026-11-08 | Trendyol kafka-konsumer from 2.3.3 before 2.6.18 contains a denial of service vulnerability in batch_consumer.go that panics when a single record exceeds MessageGroupByteSizeLimit. |
Twogood · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-110716 | Medium | 5.5 | — | 2026-10-14 | unshield through 1.6.2 contains a heap out-of-bounds read vulnerability in unshield_get_file_table() that allows attackers to read past heap allocations via unchecked cabinet header offsets. |
Videowhisper.com · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122664 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com Broadcast Live Video videowhisper-live-streaming-integration allows Reflected XSS.This issue affects Broadcast Live Vide… |
Vrpn · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123200 | High | 7.5 | — | 2026-11-05 | VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_Endpoint::handle_sender_message() and handle_type_message() that allows unauthenticated remote peers to write outside a stack buffer via an unchecked length ind… |
Wailsapp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-34157 | — | — | — | 2026-11-05 | Wails is a framework for building desktop applications using Go and web technologies. |
Wc Lovers · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61990 | Medium | 4.3 | — | 2026-11-07 | Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM Membership: from n/a through 2.12.0. |
Webful Creations · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-119514 | Medium | 6.3 | — | 2026-11-09 | Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects RepairBuddy: from n/a through 4.1234. |
Welotec · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-105979 | High | 7.2 | — | 2026-11-03 | Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject system commands and execute them with root privileges. |
Wp Chill · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121570 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill RSVP and Event Management rsvp allows Stored XSS.This issue affects RSVP and Event Management: from n/a through 2.7.17. |
Wp E-signature · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121722 | High | 7.5 | — | 2026-11-09 | Missing Authorization vulnerability in WP E-Signature Formidable Forms Signature Online Contract Automation forms-signature-formidable-online-contract-automation allows Exploiting Incorrectly Configured Access Control Security Levels.This… |
Wp Inventory · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-111403 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Reflected XSS.This issue affects WP Inventory Manager: from n/a through 2.5… |
Wp Wham · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123463 | High | 7.1 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooCommerce checkout-files-upload-woocommerce allows Stored XSS.This issue affects Checkout Files Uploa… |
Wpmet · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122673 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ShopEngine shopengine allows Stored XSS.This issue affects ShopEngine: from n/a through 4.9.8. |
Wpmu Dev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121763 | Medium | 6.5 | — | 2026-11-09 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Hummingbird hummingbird-performance allows Stored XSS.This issue affects Hummingbird: from n/a through 3.21.2. |
Wppconnect · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-123197 | Medium | 5.3 | — | 2026-11-05 | WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that allows unauthenticated attackers to read decrypted sticker media through the /files static mount. |
Wpzoom · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121612 | Medium | 4.3 | — | 2026-11-09 | Weak Authentication vulnerability in WPZOOM WPBruiser {no- Captcha anti-Spam} goodbye-captcha allows Authentication Abuse.This issue affects WPBruiser {no- Captcha anti-Spam}: from n/a through 3.6.2. |
Wummel · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124584 | Medium | 4.4 | — | 2026-11-09 | A vulnerability has been found in wummel patool 4.1.0. |
Wwbn · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124424 | High | 7.1 | — | 2026-11-08 | WWBN AVideo contains a path traversal vulnerability in plugin/AI/receiveAsync.json.php that allows holders of any valid AI token to write arbitrary .vtt files by injecting traversal sequences into the unsanitized response[lang] parameter. |
X.org · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-93521 | High | 7.8 | — | 2026-10-28 | A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14 could be used by authenticated X clients to crash or execute code within the X server context. |
Xddxdd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63644 | High | 7.5 | — | 2026-11-09 | bird-lg-go is a BIRD looking glass in Go. |
Xerrors · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-97693 | Critical | 9.9 | — | 2026-11-04 | Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. |
Xrootd · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-125113 | Medium | 5.3 | — | 2026-11-09 | The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. |
Yangzongzhuan · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-122016 | Medium | 6.3 | — | 2026-11-04 | A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.2. |
Yezhihao · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-121926 | High | 7.3 | — | 2026-11-04 | A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. |
Yungifez · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124502 | Medium | 4.3 | — | 2026-11-09 | A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3. |
Zammad · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102345 | — | — | — | 2026-11-04 | Zammad is a web based open source helpdesk/customer support system. |
Zeroturnaround · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-63436 | Medium | 6.1 | — | 2026-11-03 | zt-zip is a Java library that provides convenience methods for ZIP archive manipulation. |
Zhangbw409 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-124590 | High | 7.3 | — | 2026-11-09 | A security vulnerability has been detected in zhangbw409 library_manager_system f6c9d9c96bf5d2a32ef741daeaa29d80e6db166b/56514767a5207caf5e04c2cea379dfaa8cb5f00b. |
Zizmorcore · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102289 | — | — | — | 2026-11-09 | zizmor is a static analysis tool for CI/CD systems. |
Zoneminder · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-58386 | Medium | 6.5 | — | 2026-09-28 | ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. |