☆ P0
CVE-2026-109618
MAJ
CRITICAL
9.8 1.000
344.8
PHP Group
PHP
CWE-416
PHP Memory Corruption Vulnerability
KEV EPSS↑ PoC CWE! 📣 MÉDIATISÉ ×3 🗺 ATT&CK
☆ P0
CVE-2026-109619
MAJ
HIGH
8.1 1.000
326.6
PHP Group
PHP
CWE-416
PHP Stale Internal Request-State Vulnerability
KEV EPSS↑ CWE! 📣 MÉDIATISÉ ×3 🗺 ATT&CK
☆ P0
CVE-2026-111497
EXPLOITÉE
CRITICAL
9.8 0.826
311.0
Google
Brotli
CWE-252
Google Brotli Unchecked Return Value Vulnerability
KEV EPSS↑ 📣 MÉDIATISÉ ×3 🗺 ATT&CK
☆ P0
CVE-2026-110447
MAJ
CRITICAL
9.8 0.733
269.8
Collabora
Collabora Online – Built-in CODE Server
CWE-78
Collabora Online – Built-in CODE Server OS Command Injection Vulnerability
KEV EPSS↑ CWE! 🗺 ATT&CK
☆ P0
CVE-2026-97229
EXPLOITÉE
CRITICAL
10.0 0.273
250.8
GitLab
Community Edition and Enterprise Edition
CWE-190
GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability
KEV EPSS↑ CWE! 📣 MÉDIATISÉ ×2 🗺 ATT&CK
☆ P0
CVE-2015-3306
CRITICAL
10.0 0.995
249.4
ProFTPD
ProFTPD
CWE-284
ProFTPD Improper Access Control Vulnerability
KEV EPSS↑ 🗺 ATT&CK
☆ P0
CVE-2016-3081
HIGH
8.1 0.965
239.4
Apache
Struts
CWE-77
Apache Struts Command Injection Vulnerability
KEV EPSS↑ CWE! 🗺 ATT&CK
☆ P0
CVE-2015-5477
HIGH
7.5 0.996
234.5
ISC
BIND
CWE-19
ISC BIND Data Processing Errors Vulnerability
KEV EPSS↑ 🗺 ATT&CK
☆ P0
CVE-2026-21589
MAJ
HIGH
7.5 0.995
234.4
Atlassian
Multiple Products
CWE-552
Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
KEV EPSS↑
☆ P0
CVE-2026-105134
MAJ
CRITICAL
10.0 0.818
233.1
Ahsay
AhsayCBS
CWE-77
Ahsay AhsayCBS Command Injection Vulnerability
KEV EPSS↑ CWE! 🗺 ATT&CK
☆ P0
CVE-2026-48356
EXPLOITÉE
CRITICAL
9.3 0.446
232.3
Adobe
Commerce and Magento
CWE-434
Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability
KEV EPSS↑ CWE! 🧩 MAGENTO 🗺 ATT&CK
☆ P0
CVE-2026-104935
HIGH
8.6 0.868
225.7
Ivanti
Connect Secure
CWE-290
Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability
KEV EPSS↑ 🗺 ATT&CK
☆ P0
CVE-2026-105133
MAJ
HIGH
7.3 0.795
214.2
Ahsay
AhsayCBS
CWE-287
Ahsay AhsayCBS Improper Authentication Vulnerability
KEV EPSS↑ CWE! 🗺 ATT&CK
☆ P0
CVE-2026-76418
EXPLOITÉE
HIGH
8.6 0.008
205.6
Cisco
Secure Firewall ASA Software and Cisco Secure FTD Software
CWE-690
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
KEV 📣 MÉDIATISÉ ×3 🗺 ATT&CK
☆ P0
CVE-2026-111357
EXPLOITÉE
HIGH
7.0 0.005
195.6
Ivanti
Connect Secure
CWE-829
Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability
KEV 📣 MÉDIATISÉ ×3 🗺 ATT&CK
☆ P0
CVE-2026-46300
EXPLOITÉE
HIGH
7.8 0.161
189.2
Linux
Kernel
CWE-787
Linux Kernel Missing Initialization of a Variable Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P0
CVE-2026-114625
MAJ
CRITICAL
9.9 0.010
183.6
Arista
VeloCloud Orchestrator
CWE-89
Arista VeloCloud Orchestrator SQL Injection Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P0
CVE-2021-3199
CRITICAL
9.8 0.302
170.1
ONLYOFFICE
Docs
CWE-22
ONLYOFFICE Docs Server Path Traversal Vulnerability
KEV EPSS↑ CWE! 🗺 ATT&CK
☆ P3
CVE-2026-41709
EXPLOITÉE
LOW
2.7 0.007
170.0
Broadcom
VMware ESX
CWE-778
Broadcom VMWare ESX Insufficient Logging Vulnerability
KEV 📣 MÉDIATISÉ ×2
☆ P0
CVE-2026-118527
EXPLOITÉE
LOW
— 0.000
153.0
Ivanti
Connect Secure
—
Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability
KEV 📣 MÉDIATISÉ ×2 🗺 ATT&CK
☆ P0
CVE-2026-102764
CRITICAL
9.8 0.190
151.5
BeyondTrust
Remote Support
CWE-290
BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability
KEV 🗺 ATT&CK
☆ P0
CVE-2026-96951
MAJ
HIGH
8.8 0.098
139.6
Microsoft
Windows
CWE-77
Microsoft Windows Command Injection Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P1
CVE-2025-6965
HIGH
7.7 0.735
134.3
CWE-197
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns availab
EPSS↑
☆ P0
CVE-2026-88779
HIGH
7.5 0.114
133.7
Citrix
NetScaler
CWE-119
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P0
CVE-2026-76519
CRITICAL
9.8 0.022
131.4
Cisco
Secure Email Gateway
CWE-23
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
KEV 🗺 ATT&CK
☆ P0
CVE-2026-106931
HIGH
7.8 0.025
124.8
EG Secure Solutions
SiteGuard Server Edition
CWE-78
EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P0
CVE-2026-0322
HIGH
7.2 0.017
120.3
Palo Alto Networks
PAN-OS
CWE-94
Palo Alto Networks PAN-OS Code Injection Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P0
CVE-2023-22894
HIGH
7.2 0.041
118.1
Strapi
Strapi
CWE-312
Strapi Cleartext Storage of Sensitive Information Vulnerability
KEV 🗺 ATT&CK
☆ P1
CVE-2025-61624
MEDIUM
6.5 0.013
115.6
Fortinet
Multiple Products
CWE-22
Fortinet Multiple Products Path Traversal Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P0
CVE-2026-96656
HIGH
7.2 0.018
115.3
Plex
Media Server
CWE-73
Plex Media Server External Control of File Name or Path Vulnerability
KEV
☆ P1
CVE-2026-110936
MEDIUM
6.7 0.010
111.4
Siemens
Software Center
CWE-427
Siemens Software Center Uncontrolled Search Path Element Vulnerability
KEV
☆ P1
CVE-2026-96654
MEDIUM
6.5 0.019
111.3
Plex
Media Server
CWE-84
Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability
KEV
☆ P1
CVE-2026-96652
MEDIUM
4.3 0.018
103.0
Plex
Media Server
CWE-918
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P1
CVE-2026-96655
MEDIUM
4.3 0.016
102.8
Plex
Media Server
CWE-918
Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability
KEV CWE! 🗺 ATT&CK
☆ P2
CVE-2026-62863
NOUVEAU
CRITICAL
9.6 0.003
85.0
CWE-306
MoLing is a computer-use and browser-use based MCP server. Prior to 0.5.0, when MoLing runs in SSE mode using `-l`, its `/sse` and `/message
REMOTE CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-120306
NOUVEAU
CRITICAL
9.9 0.000
81.4
CWE-269
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The
REMOTE ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-120195
NOUVEAU
CRITICAL
10.0 0.021
79.5
CWE-77
A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120189
NOUVEAU
CRITICAL
10.0 0.013
78.6
CWE-119
A vulnerability was identified in D-Link DIR-505 1.10B02. Affected is the function save_upload_file/mp_upload_file of the file /usr/bin/tftp
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120196
NOUVEAU
CRITICAL
9.9 0.017
78.4
CWE-77
A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipul
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120197
NOUVEAU
CRITICAL
9.9 0.017
78.4
CWE-77
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipula
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-61738
NOUVEAU
CRITICAL
10.0 0.006
77.7
CWE-22
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, `POST /api/scoutsui
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2025-31704
CRITICAL
9.8 0.014
77.4
CWE-78
A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attacker could send a specially crafted request to the a
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-61826
NOUVEAU
CRITICAL
10.0 0.003
77.3
CWE-352
Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` namespace in `bazarr/api/plex/oauth.py` om
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-119706
NOUVEAU
CRITICAL
9.8 0.010
77.0
CWE-502
InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run O
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120338
NOUVEAU
CRITICAL
10.0 0.000
77.0
CWE-94
Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno subprocess. The feat
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120276
NOUVEAU
CRITICAL
10.0 0.000
77.0
CWE-77
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120277
NOUVEAU
CRITICAL
10.0 0.000
77.0
CWE-77
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120279
NOUVEAU
CRITICAL
10.0 0.000
77.0
CWE-77
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120280
NOUVEAU
CRITICAL
10.0 0.000
77.0
CWE-77
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120281
NOUVEAU
CRITICAL
10.0 0.000
77.0
CWE-119
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120283
NOUVEAU
CRITICAL
10.0 0.000
77.0
CWE-119
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such man
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-61728
NOUVEAU
CRITICAL
9.9 0.005
77.0
CWE-79
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected snapshots preceding the
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-62853
NOUVEAU
CRITICAL
9.9 0.004
76.9
CWE-78
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, the `/groovyScriptTest/registerScript` endpoint accepts user-supplied Groovy scrip
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-116241
NOUVEAU
CRITICAL
9.9 0.003
76.8
CWE-78
pgAdmin 4's Import/Export Data tool wraps a user's query export in a psql \copy (...) TO command and checks that the query's parentheses are
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-118235
NOUVEAU
CRITICAL
9.8 0.007
76.7
CWE-434
The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File U
REMOTE CWE! 🧩 WORDPRESS 🗺 ATT&CK
☆ P2
CVE-2026-110799
NOUVEAU
CRITICAL
9.8 0.007
76.7
CWE-287
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.7, the passwo
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-116512
NOUVEAU
CRITICAL
9.8 0.006
76.5
CWE-434
The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to Remo
REMOTE CWE! 🧩 WORDPRESS 🗺 ATT&CK
☆ P2
CVE-2026-118636
NOUVEAU
CRITICAL
9.8 0.006
76.5
CWE-502
**UNSUPPORTED WHEN ASSIGNED**
JavaNativeMessageDecoder in the MINA 3.0 codec module calls ObjectInputStream.readObject() on frame bytes wi
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-109220
NOUVEAU
CRITICAL
9.8 0.005
76.4
CWE-502
The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions
REMOTE CWE! 🧩 WORDPRESS 🗺 ATT&CK
☆ P2
CVE-2026-120227
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120307
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-22
The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120308
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-22
A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the share
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120228
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the co
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120230
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipula
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120231
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120238
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the componen
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120239
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of th
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120240
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the c
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120282
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-77
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulat
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120322
NOUVEAU
CRITICAL
9.9 0.000
76.4
CWE-22
A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file /plugin-api/file-man
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-119096
NOUVEAU
CRITICAL
9.8 0.005
76.4
CWE-287
The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2 via th
REMOTE CWE! 🧩 WORDPRESS 🗺 ATT&CK
☆ P2
CVE-2026-119526
NOUVEAU
CRITICAL
9.8 0.004
76.3
CWE-502
Deserialization of Untrusted Data vulnerability in ThemeREX Royal Event allows Object Injection.
This issue affects Royal Event: from n/a t
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-39738
NOUVEAU
CRITICAL
9.8 0.004
76.3
CWE-502
Deserialization of Untrusted Data vulnerability in Aman FunnelKit Automations wp-marketing-automations allows Object Injection.This issue af
REMOTE CWE! 🧩 WORDPRESS 🗺 ATT&CK
☆ P2
CVE-2026-63377
NOUVEAU
CRITICAL
9.8 0.004
76.3
CWE-306
TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-bet
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-61620
NOUVEAU
CRITICAL
9.8 0.004
76.3
CWE-89
HoneySQL turns Clojure data structures into SQL. From 2.0.0 until 2.7.1392, applications that pass user input or other arbitrary data into t
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-90888
NOUVEAU
CRITICAL
9.8 0.003
76.2
CWE-502
Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions.
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120198
NOUVEAU
CRITICAL
10.0 0.021
74.5
CWE-74
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. S
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-116366
CRITICAL
9.5 0.004
74.5
CWE-190
An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user with network access to
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-93327
NOUVEAU
CRITICAL
9.4 0.004
73.9
CWE-502
A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration versions prior to 2026-09-
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-61729
NOUVEAU
CRITICAL
9.4 0.004
73.8
CWE-306
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.76, `verify_graylog_hea
REMOTE CWE! 🗺 ATT&CK
☆ P2
GHSA-4xm8-rg9h-jhq2
CRITICAL
9.8 0.000
73.8
npm
signalk-server
CWE-22
Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-39732
NOUVEAU
CRITICAL
9.3 0.003
73.2
CWE-89
Unauthenticated SQL Injection in Transliterator <= 2.5.13 versions.
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-33471
MAJ
CRITICAL
9.6 0.002
72.9
rust
nimiq-block
CWE-20
nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-62048
NOUVEAU
CRITICAL
9.3 0.000
72.8
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit a
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-103882
NOUVEAU
CRITICAL
9.1 0.008
72.5
CWE-22
The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due
REMOTE CWE! 🧩 WORDPRESS 🗺 ATT&CK
☆ P2
CVE-2026-112816
NOUVEAU
CRITICAL
10.0 0.003
72.4
CWE-295
Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15, 5.0.11, 5.21.9, 6.10.1 all
REMOTE
☆ P2
CVE-2026-116852
NOUVEAU
CRITICAL
9.1 0.006
72.3
CWE-94
Author Remote Code Execution (RCE) in Widget Options <= 4.2.5 versions.
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-62849
NOUVEAU
CRITICAL
9.1 0.005
72.2
CWE-89
ThingLinks is an enterprise IoT platform. Prior to 1.4.0, an unauthenticated SQL injection vulnerability in the `TDengine TDS APIs` allows r
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-55598
NOUVEAU
CRITICAL
9.1 0.003
72.0
CWE-918
PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an att
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120225
NOUVEAU
CRITICAL
9.1 0.000
71.6
CWE-22
A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function config_restore_ex of th
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120229
NOUVEAU
CRITICAL
9.1 0.000
71.6
CWE-77
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The mani
REMOTE CWE! 🗺 ATT&CK
☆ P2
CVE-2026-120201
NOUVEAU
CRITICAL
9.8 0.006
71.5
CWE-943
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrato
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-78403
NOUVEAU
CRITICAL
9.8 0.006
71.5
CWE-121
Stack-based buffer overflow and missing
authorization vulnerability in Thales Sentinel Keys Server on Windows allows
Overflow Buffers. Senti
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-120209
NOUVEAU
CRITICAL
9.8 0.005
71.5
CWE-321
AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline. Attackers c
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-119660
NOUVEAU
CRITICAL
9.8 0.005
71.4
CWE-1394
MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by using
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-61737
NOUVEAU
CRITICAL
9.8 0.005
71.4
CWE-321
ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default `JWT` secret permits token forgery
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-120224
NOUVEAU
CRITICAL
9.9 0.000
71.4
CWE-266
A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_by_json/run_async_task of the c
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-119597
NOUVEAU
CRITICAL
9.8 0.004
71.2
CWE-321
OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator
REMOTE
☆ P2
CVE-2026-116386
NOUVEAU
CRITICAL
9.8 0.003
71.2
CWE-266
Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 4.0.2 versions.
REMOTE
☆ P2
CVE-2026-61730
NOUVEAU
CRITICAL
9.3 0.004
68.2
CWE-200
SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In affected deployments, the unauthe
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-61850
NOUVEAU
CRITICAL
9.3 0.004
68.2
CWE-269
Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the
REMOTE
☆ P2
CVE-2026-117656
NOUVEAU
CRITICAL
9.3 0.002
68.1
CWE-290
Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth Assent allows an unau
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-89270
NOUVEAU
CRITICAL
9.1 0.004
67.1
CWE-862
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass i
REMOTE 🧩 WORDPRESS
☆ P2
CVE-2026-116557
NOUVEAU
CRITICAL
9.1 0.003
67.0
CWE-862
The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
REMOTE 🧩 WORDPRESS
☆ P2
CVE-2026-102870
HIGH
8.8 0.009
66.9
CWE-94
USN-8958-1: .NET vulnerabilities
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-117666
NOUVEAU
CRITICAL
9.1 0.002
66.8
CWE-297
Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary in the middle to imp
REMOTE
☆ P2
CVE-2026-112905
NOUVEAU
CRITICAL
9.0 0.005
66.6
CWE-285
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.7, authentica
REMOTE 🗺 ATT&CK
☆ P2
CVE-2026-118697
NOUVEAU
CRITICAL
9.0 0.003
66.3
CWE-295
In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted compromised interme
REMOTE
☆ P2
CVE-2026-104351
CRITICAL
9.9 0.006
65.1
CWE-94
Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result in arbitrary code execu
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-107861
CRITICAL
9.9 0.005
65.0
CWE-78
The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-110243
CRITICAL
9.9 0.005
65.0
CWE-78
The network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link maintenance addres
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-101767
CRITICAL
9.8 0.006
64.5
CWE-287
Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core).
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-114595
CRITICAL
9.8 0.005
64.4
CWE-190
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size.
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-102827
MAJ
HIGH
8.1 0.006
64.3
npm
simple-git
CWE-77
simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-96631
NOUVEAU
HIGH
8.2 0.000
64.2
composer
adminneo-org/adminneo
CWE-20
AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-19175
CRITICAL
9.6 0.003
63.0
CWE-416
Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-63353
CRITICAL
9.6 0.003
63.0
CWE-79
Affected devices do not properly sanitize comment fields contained in imported trace files before rendering them on the Trace page.
This
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-106764
MAJ
HIGH
7.5 0.005
60.6
npm
@rog0x/mcp-git-tools
CWE-77
@rog0x/mcp-git-tools executes arbitrary code via the resolveBaseBranch function
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-106763
MAJ
HIGH
7.5 0.005
60.6
npm
@justice8096/sagemath-mcp-server
CWE-78
@justice8096/sagemath-mcp-server: executes arbitrary code via the escapeShellString and sanitizeCode functions
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-106765
HIGH
7.5 0.005
60.6
npm
@rog0x/mcp-docker-tools
CWE-77
@rog0x/mcp-docker-tools: executes arbitrary code via the handleImageList function
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-33287
MAJ
HIGH
7.5 0.005
60.6
npm
liquidjs
CWE-20
LiquidJS has Exponential Memory Amplification through its replace_first Filter $& Pattern
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-109122
CRITICAL
9.1 0.005
60.2
CWE-78
The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the web manageme
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-9086
HIGH
7.3 0.008
59.7
maven
org.keycloak:keycloak-services
CWE-79
Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-118664
HIGH
8.2 0.003
59.6
npm
decode-uri-component
CWE-400
decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs
⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-98432
MAJ
CRITICAL
9.8 0.005
59.4
—
In the Linux kernel, the following vulnerability has been resolved:
ipv4: free inet_opt and ireq_opt after an RCU grace period
tcp_v4_syn_
☆ P3
CVE-2026-119282
HIGH
7.3 0.001
59.0
npm
@nx/maven
CWE-78
@nx/maven and @nx/gradle have OS command injection via nx.json plugin options
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
GHSA-hff9-5pqw-6w9f
CRITICAL
9.8 0.000
58.8
go
github.com/imgproxy/imgproxy/v3
CWE-122
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
🗺 ATT&CK
☆ P3
GHSA-37j9-56gh-j2r7
MAJ
HIGH
7.3 0.000
58.8
maven
org.keycloak:keycloak-services
CWE-79
Duplicate Advisory: Keycloak vulnerable to cross-site scripting (xss) via case-insensitive uri validation bypass
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-113279
HIGH
8.8 0.005
58.4
Google
Chrome
CWE-119
Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox vi
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-118339
HIGH
8.8 0.003
58.2
Google
Chrome
CWE-416
Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pa
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-89197
HIGH
8.8 0.003
58.2
CWE-89
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-89196
HIGH
8.8 0.003
58.2
CWE-89
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not properly validate or sanitize input
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-118346
HIGH
8.8 0.003
58.1
Google
Chrome
CWE-416
Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a c
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-93479
HIGH
8.1 0.012
58.0
CWE-122
USN-8955-1: nginx vulnerabilities
🗺 ATT&CK
☆ P2
CVE-2026-63350
CRITICAL
9.6 0.003
58.0
CWE-95
Affected devices do not properly restrict executable content contained in imported trace files.
This could allow an attacker to social en
🗺 ATT&CK
☆ P2
CVE-2026-15176
HIGH
8.1 0.008
57.6
CWE-122
USN-8955-1: nginx vulnerabilities
🗺 ATT&CK
☆ P2
CVE-2026-106087
HIGH
8.7 0.002
57.5
CWE-306
TRO600 contains an arbitrary file read vulnerability.
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-16438
CRITICAL
9.4 0.003
56.7
CWE-266
Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and
☆ P3
CVE-2026-63414
NOUVEAU
HIGH
7.6 0.005
56.3
rubygems
shopify_app
CWE-863
Shopify App: Token exchange shop context confusion may allow cross-shop authorization bypass in affected apps
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-118779
HIGH
7.5 0.006
55.7
npm
node-forge
CWE-400
Forge: Regular expression denial of service in PEM decoding (pem.decode)
⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-16436
CRITICAL
9.2 0.003
55.6
CWE-640
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 ver
☆ P3
CVE-2026-115887
MAJ
HIGH
7.5 0.005
55.6
npm
graphql-scalars
CWE-1333
graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-118772
HIGH
7.5 0.005
55.6
npm
joi
CWE-1333
joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119202
HIGH
7.5 0.004
55.5
npm
@hapi/content
CWE-1333
@hapi/content: quadratic-time parsing of Content-Disposition parameters allows denial of service
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119188
HIGH
7.5 0.004
55.5
npm
node-forge
CWE-248
Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-118782
HIGH
7.5 0.001
55.1
npm
node-forge
CWE-354
Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-118763
HIGH
7.4 0.003
54.8
npm
@sigstore/oci
CWE-522
@sigstore/oci sends the registry Authorization header to a cross-host blob-upload Location
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119190
HIGH
7.4 0.002
54.7
npm
node-forge
CWE-295
Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-114596
HIGH
8.2 0.003
54.5
CWE-190
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-59241
HIGH
8.8 0.003
53.2
CWE-266
A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions < V8.0 Update 11), SIMATIC WinCC
🗺 ATT&CK
☆ P2
CVE-2026-110166
HIGH
8.8 0.003
53.2
CWE-122
Buffer overflow in Animation in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox
🗺 ATT&CK
☆ P2
CVE-2026-116672
HIGH
8.8 0.003
53.1
pip
Authlib
CWE-639
Authlib RFC 7592 examples omit registration-access-token client binding
🗺 ATT&CK
☆ P3
CVE-2026-118764
MEDIUM
6.9 0.003
51.8
npm
minimatch
CWE-405
minimatch has potential denial of service via globparts amplification
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-118662
MEDIUM
6.9 0.003
51.8
npm
vite
CWE-180
Vite: `server.fs.deny` bypassed with queries
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-13162
HIGH
7.7 0.002
51.4
CWE-78
An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-59978
NOUVEAU
HIGH
7.5 0.006
50.8
composer
adminneo-org/adminneo
CWE-20
AdminNeo: version-cache array injection causes persistent denial of service
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-118669
HIGH
8.4 0.003
50.8
pip
oauthlib
CWE-863
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
🗺 ATT&CK
☆ P3
CVE-2026-119210
MEDIUM
5.9 0.003
50.8
maven
org.mariadb.jdbc:mariadb-java-client
CWE-20
MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-110825
HIGH
7.5 0.004
50.5
CWE-306
The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring authentica
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-92450
HIGH
7.5 0.004
50.5
CWE-798
The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static s
CWE! 🗺 ATT&CK
☆ P3
GHSA-494m-4556-wf5p
HIGH
7.5 0.000
50.0
go
github.com/imgproxy/imgproxy/v3
CWE-125
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-116794
HIGH
8.3 0.002
50.0
rust
russh
CWE-862
russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmation
🗺 ATT&CK
☆ P3
CVE-2026-115908
HIGH
7.4 0.004
49.9
rust
zip
CWE-22
zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically.
CWE! 🗺 ATT&CK
☆ P2
CVE-2026-102073
HIGH
8.2 0.003
49.6
CWE-191
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (
☆ P3
CVE-2026-119200
MEDIUM
6.5 0.003
49.4
npm
nuxt
CWE-41
Nuxt: Dot segments in the request path bypass `server/middleware` path checks and server route rules on page routes
⛓ SUPPLY 🗺 ATT&CK
☆ P2
CVE-2026-111594
HIGH
8.1 0.002
48.8
CWE-319
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into t
☆ P2
CVE-2026-96633
NOUVEAU
HIGH
8.1 0.000
48.6
composer
adminneo-org/adminneo
CWE-73
AdminNeo SQLite Database-List Drop Arbitrary File Deletion
☆ P3
CVE-2026-118773
MEDIUM
6.3 0.004
48.2
npm
glob
CWE-400
Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2025-13327
MAJ
MEDIUM
6.3 0.002
48.0
rust
uv
CWE-1286
uv has ZIP payload obfuscation through parsing differentials
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-114148
HIGH
7.8 0.004
47.2
CWE-276
Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.
☆ P3
CVE-2026-84854
HIGH
7.0 0.001
47.1
CWE-787
In the WibuKey driver for Windows below Version 6.72, insufficient validation of user input when calculating the size of a kernel buffer cou
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-10756
HIGH
7.7 0.002
46.4
CWE-923
TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only fr
☆ P3
CVE-2026-72895
HIGH
7.7 0.001
46.3
CWE-1394
A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions < V1.1.4), SIMATIC I
🗺 ATT&CK
☆ P3
CVE-2026-119199
MEDIUM
5.9 0.004
45.8
npm
@nuxt/vite-builder
CWE-200
Nuxt dev server exposes private runtime config through the Nitro dev bundle
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119276
MEDIUM
5.9 0.004
45.8
maven
org.mariadb.jdbc:mariadb-java-client
CWE-130
MariaDB Connector/J: Rogue server can drive large heap allocations from server-declared lengths in OK packets
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119279
MEDIUM
5.9 0.004
45.8
maven
org.mariadb.jdbc:mariadb-java-client
CWE-130
MariaDB Connector/J: Length-encoded integers larger than Integer.MAX_VALUE were truncated before being used as lengths
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119198
MEDIUM
5.9 0.003
45.8
npm
@nuxt/vite-builder
CWE-73
Nuxt dev server arbitrary file read through client error reports
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119281
MEDIUM
5.9 0.003
45.7
maven
org.mariadb.jdbc:mariadb-java-client
CWE-838
MariaDB Connector/J: Server could switch character_set_results away from UTF-8 without the client noticing
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-116689
HIGH
5.9 0.003
45.7
npm
follow-redirects
CWE-201
follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119186
MEDIUM
5.9 0.002
45.6
npm
node-forge
CWE-354
Forge: AES-GCM authentication bypass via unvalidated tagLength option
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-118778
MEDIUM
5.9 0.002
45.6
npm
node-forge
CWE-476
Forge: TLS client crash when the server sends no certificate
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119195
HIGH
7.5 0.005
45.6
pip
pyasn1
CWE-407
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding
☆ P3
CVE-2026-110491
HIGH
7.5 0.005
45.6
CWE-476
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations.
☆ P3
CVE-2026-118761
HIGH
7.5 0.005
45.6
go
github.com/kubeflow/pipelines
CWE-409
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
🗺 ATT&CK
☆ P3
CVE-2025-70873
HIGH
7.5 0.005
45.6
CWE-244
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to ob
☆ P3
CVE-2026-115909
HIGH
7.5 0.005
45.5
rust
zip
CWE-400
zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During Extraction
☆ P3
CVE-2026-119196
HIGH
7.5 0.004
45.5
pip
pyasn1
CWE-407
pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
☆ P3
CVE-2026-119197
HIGH
7.5 0.004
45.5
pip
pyasn1
CWE-407
pyasn1 has quadratic-complexity denial of service in binary REAL decoding
☆ P3
CVE-2026-119194
HIGH
7.5 0.004
45.5
pip
pyasn1
CWE-407
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding
🗺 ATT&CK
☆ P3
CVE-2026-119286
HIGH
7.5 0.004
45.5
pip
graphql-core
CWE-400
GraphQL-core has denial of service via memory leak in aborted validations
☆ P3
CVE-2026-119187
HIGH
7.5 0.004
45.5
Digitalbazaar
Forge
CWE-674
Forge: Denial of service in TLS record processing via call stack exhaustion
🗺 ATT&CK
☆ P3
CVE-2026-102075
HIGH
7.5 0.004
45.5
CWE-121
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (
☆ P3
CVE-2026-102074
HIGH
7.5 0.004
45.5
CWE-121
A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (
☆ P3
CVE-2026-115907
HIGH
7.5 0.004
45.4
rust
zip
CWE-400
zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed size
☆ P3
CVE-2026-118759
HIGH
7.5 0.003
45.4
go
github.com/kubeflow/pipelines
CWE-200
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
☆ P3
CVE-2026-114597
HIGH
7.5 0.003
45.4
CWE-130
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the
☆ P3
CVE-2026-114598
HIGH
7.5 0.003
45.4
CWE-843
In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network message can cause the application to read beyond the
☆ P3
CVE-2026-9083
MEDIUM
4.9 0.008
45.3
maven
org.keycloak:keycloak-services
CWE-22
Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119283
HIGH
7.5 0.002
45.3
pip
joserfc
CWE-400
joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption
☆ P3
CVE-2026-33389
HIGH
7.5 0.002
45.2
CWE-671
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted con
🗺 ATT&CK
☆ P3
GHSA-mmq5-xm89-9pfg
HIGH
7.5 0.000
45.0
go
github.com/imgproxy/imgproxy/v3
CWE-400
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field
☆ P3
GHSA-vpp8-g58w-m8mp
HIGH
7.5 0.000
45.0
pip
Twisted
CWE-400
Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset
🗺 ATT&CK
☆ P3
CVE-2026-33388
HIGH
7.4 0.004
44.9
CWE-863
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A
🗺 ATT&CK
☆ P3
GHSA-7pm9-g8jh-3m74
MAJ
MEDIUM
4.9 0.000
44.4
maven
org.keycloak:keycloak-services
CWE-22
Duplicate Advisory: Keycloak vulnerable to information disclosure through arbitrary filesystem path probing
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-62290
HIGH
7.3 0.001
43.9
go
github.com/cert-manager/cert-manager
CWE-863
cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
🗺 ATT&CK
☆ P3
CVE-2026-54442
NOUVEAU
MEDIUM
4.8 0.000
43.8
maven
gov.nsa.emissary:emissary
CWE-918
NationalSecurityAgency/emissary has an incomplete fix for CVE-2026-35571
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-96630
NOUVEAU
HIGH
7.2 0.000
43.2
composer
adminneo-org/adminneo
—
AdminNeo: RCE via SQLite VACUUM INTO (ATTACH Blocklist Bypass)
🗺 ATT&CK
☆ P3
CVE-2026-119203
HIGH
7.1 0.003
43.0
pip
pypdf
CWE-835
pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search
🗺 ATT&CK
☆ P3
CVE-2026-119204
HIGH
7.1 0.003
43.0
pip
pypdf
CWE-400
pypdf has possible large memory usage when parsing page tree
🗺 ATT&CK
☆ P3
CVE-2026-119205
HIGH
7.1 0.003
43.0
pip
pypdf
CWE-835
pypdf has possible infinite loop when cloning dictionaries
🗺 ATT&CK
☆ P3
CVE-2026-119206
HIGH
7.1 0.003
43.0
pip
pypdf
CWE-400
pypdf has possible long runtimes when retrieving page labels
🗺 ATT&CK
☆ P3
CVE-2026-119207
HIGH
7.1 0.003
43.0
pip
pypdf
CWE-400
pypdf has possible large memory usage for exceptions in strict mode
🗺 ATT&CK
☆ P3
CVE-2026-119208
HIGH
7.1 0.003
43.0
pip
pypdf
CWE-400
pypdf has possible long runtimes/large memory usage for encrypted PDF files
🗺 ATT&CK
☆ P3
CVE-2026-16437
HIGH
7.1 0.001
42.7
CWE-640
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 ver
☆ P3
CVE-2026-63352
MEDIUM
6.1 0.002
41.8
CWE-79
Affected devices do not properly sanitize calculated signal data contained in imported CSV trace files before rendering it on the Trace page
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-63351
MEDIUM
6.1 0.002
41.8
CWE-79
Affected devices do not properly validate and sanitize visual properties of calculated signals contained in imported CSV trace files before
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-119284
MEDIUM
6.9 0.002
41.6
pip
joserfc
CWE-400
joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection
☆ P3
CVE-2026-44414
MEDIUM
6.8 0.005
41.4
CWE-35
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device
☆ P3
CVE-2026-89209
MAJ
MEDIUM
6.8 0.003
41.1
CWE-294
A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 11 compatible) (All versions < V4.2.4), M
🗺 ATT&CK
☆ P3
CVE-2026-96629
NOUVEAU
MEDIUM
6.8 0.000
40.8
composer
adminneo-org/adminneo
CWE-330
AdminNeo: CSRF Token Secret Recoverable from Single Observed Token, Enabling Cross-Site Request Forgery
☆ P3
CVE-2025-11537
MAJ
MEDIUM
5.0 0.002
40.2
maven
org.keycloak:keycloak-quarkus-server
CWE-117
Keycloak logs sensitive headers
⛓ SUPPLY 🗺 ATT&CK
☆ P3
GHSA-7wpf-ch8f-5f4x
MEDIUM
4.2 0.000
40.2
npm
signalk-server
CWE-918
signalk-server has SSRF via absolute signalk.appIcon URL in the app store icon fetcher
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-96616
MEDIUM
6.5 0.004
39.5
CWE-613
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively
🗺 ATT&CK
☆ P3
CVE-2026-118539
MEDIUM
6.5 0.003
39.4
CWE-862
Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing.
🧩 DRUPAL 🗺 ATT&CK
☆ P3
CVE-2026-27892
MAJ
MEDIUM
6.5 0.002
39.3
composer
facturascripts/facturascripts
CWE-200
FacturaScripts Vulnerable to Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download
🗺 ATT&CK
☆ P3
CVE-2026-115906
MEDIUM
6.5 0.002
39.2
rust
zip
CWE-354
zip: AES Entry HMAC Authentication Bypass on Premature EOF
🗺 ATT&CK
☆ P3
CVE-2026-118777
MEDIUM
4.8 0.003
39.1
npm
node-forge
CWE-1321
Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119201
MEDIUM
4.8 0.002
39.0
npm
@nuxt/vite-builder
CWE-552
Nuxt dev server exposes generated appSecret through Vite file serving
⛓ SUPPLY 🗺 ATT&CK
☆ P3
GHSA-2wrx-84qj-4pcg
MEDIUM
6.5 0.000
39.0
go
github.com/anacrolix/torrent
CWE-407
anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS
☆ P3
CVE-2026-9799
MEDIUM
4.6 0.003
38.0
maven
org.keycloak:keycloak-services
CWE-639
Keycloak allows unauthorized access to resources via uma permission ticket bypass
⛓ SUPPLY 🗺 ATT&CK
☆ P3
GHSA-gfv4-4vr2-rr4g
MAJ
MEDIUM
4.6 0.000
37.6
maven
org.keycloak:keycloak-services
CWE-639
Duplicate Advisory: Keycloak allows unauthorized access to resources via uma permission ticket bypass
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-118775
LOW
3.7 0.003
37.6
npm
node-forge
CWE-190
Forge: ASN.1 OID first arc truncation in asn1.oidToDer
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-119280
LOW
3.7 0.003
37.6
maven
org.mariadb.jdbc:mariadb-java-client
CWE-20
MariaDB Connector/J: XA recover() trusted server-supplied gtrid and bqual lengths
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-111100
MEDIUM
5.3 0.004
37.3
CWE-306
The ONVIF device service on the E3 responds to certain informational requests without requiring authentication.
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-105265
MEDIUM
5.3 0.004
37.3
CWE-22
A vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause /etc/localtime t
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-89208
MEDIUM
5.3 0.003
37.1
CWE-125
A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-119285
MEDIUM
5.9 0.001
35.5
go
github.com/gofiber/fiber/v2
CWE-346
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads
🗺 ATT&CK
☆ P3
GHSA-f3fj-9625-rv3m
MEDIUM
5.9 0.000
35.4
go
github.com/charmbracelet/soft-serve
CWE-362
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
☆ P3
CVE-2024-7322
MEDIUM
5.8 0.003
35.2
CWE-940
A ZigBee coordinator, router, or end device may change their node ID when an unsolicited encrypted rejoin response is received, this change
☆ P3
CVE-2026-119209
HIGH
5.5 0.003
33.3
Pypdf Project
Pypdf
CWE-400
pypdf has possible large memory usage when parsing cross-reference streams
🗺 ATT&CK
☆ P3
CVE-2026-33391
MEDIUM
5.4 0.004
32.8
CWE-863
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privi
🗺 ATT&CK
☆ P3
CVE-2026-119193
MEDIUM
5.4 0.001
32.5
composer
phpunit/phpunit
CWE-379
PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling
☆ P3
CVE-2026-118780
LOW
3.7 0.002
32.4
npm
node-forge
CWE-295
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-116677
MEDIUM
5.3 0.002
32.0
pip
openwisp-controller
CWE-862
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
🗺 ATT&CK
☆ P3
CVE-2024-9675
MAJ
MEDIUM
4.4 0.004
31.9
go
github.com/containers/buildah
CWE-22
Buildah allows arbitrary directory mount
CWE! 🗺 ATT&CK
☆ P3
GHSA-fgxm-5hvv-x4vh
MEDIUM
5.3 0.000
31.8
go
github.com/charmbracelet/soft-serve
CWE-203
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
☆ P3
CVE-2026-103629
MEDIUM
4.3 0.002
31.0
CWE-190
Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-27964
MAJ
LOW
3.9 0.001
28.5
composer
facturascripts/facturascripts
CWE-79
FacturaScripts vulnerable to Reflected Cross-Site Scripting (XSS) via Cookie Manipulation
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-118658
MEDIUM
4.7 0.002
28.4
go
github.com/labstack/echo/v5
CWE-601
Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto
☆ P3
CVE-2026-33387
MEDIUM
4.6 0.003
27.9
CWE-1336
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authe
🗺 ATT&CK
☆ P3
CVE-2026-118781
LOW
2.9 0.001
27.5
npm
node-forge
CWE-835
Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-33920
LOW
3.5 0.001
26.2
CWE-352
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of t
CWE! 🗺 ATT&CK
☆ P3
CVE-2026-116774
MEDIUM
4.3 0.003
26.1
rust
russh
CWE-400
russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang)
🗺 ATT&CK
☆ P3
CVE-2026-116773
MEDIUM
4.3 0.003
26.1
rust
russh
CWE-770
russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets
🗺 ATT&CK
☆ P3
CVE-2026-116696
LOW
3.3 0.001
19.9
rust
russh
CWE-770
russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages
🗺 ATT&CK
☆ P3
CVE-2026-54606
MAJ
HIGH
— 0.006
15.7
npm
suneditor
CWE-79
SunEditor Embed Plugin has DOM XSS via External Script Element After Iframe Embed
CWE! ⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-116775
LOW
2.3 0.003
14.2
rust
pageant
CWE-770
pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS)
🗺 ATT&CK
☆ P3
GHSA-qwgh-2vcv-g2f7
MAJ
MEDIUM
— 0.000
13.0
rust
block_buffer
CWE-119
block_buffer: panic corrupts inline buffer position
PoC CWE! 🗺 ATT&CK
☆ P3
GHSA-5xjx-3w67-w9x9
CRITICAL
— 0.000
10.0
actions
pypa/gh-action-pypi-publish
CWE-295
pypi-publish action revocation of CA in the chain that Sigstore uses in Trusted Publishing and Digital Attestations for PyPI
⛓ SUPPLY 🗺 ATT&CK
☆ P3
CVE-2026-96632
NOUVEAU
HIGH
— 0.000
5.0
composer
adminneo-org/adminneo
CWE-79
AdminNeo Vulnerable to XSS via Rogue MySQL Server Version String (CSP Nonce Bypass)
CWE! 🗺 ATT&CK
☆ P3
CVE-2022-4904
LOW
— 0.012
1.5
—
USN-8951-1: c-ares vulnerabilities
🗺 ATT&CK
☆ P3
CVE-2020-22217
LOW
— 0.010
1.2
—
USN-8951-1: c-ares vulnerabilities
🗺 ATT&CK
☆ P3
CVE-2026-4271
LOW
— 0.009
1.0
—
USN-8890-2: libsoup vulnerabilities
🗺 ATT&CK
☆ P3
CVE-2023-54397
LOW
— 0.004
0.5
—
USN-8952-1: Tornado vulnerabilities
☆ P3
CVE-2024-14029
LOW
— 0.004
0.4
—
USN-8952-1: Tornado vulnerabilities
☆ P3
CVE-2026-5119
LOW
— 0.003
0.3
—
USN-8890-2: libsoup vulnerabilities
🗺 ATT&CK
☆ P3
CVE-2026-96634
NOUVEAU
MEDIUM
— 0.000
0.0
composer
adminneo-org/adminneo
CWE-74
AdminNeo SQLite: multi_query Incorrect Check of Function Return Value RCE
🗺 ATT&CK