A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?
CISA adds 1 to KEV; 557 CVEs published, led by QNAP Systems Inc. (35).
557 CVEs published October 15, 2026: 43 critical, 225 high, 252 medium, 18 low; 0 in the KEV catalog at press time; 0 with a public exploit reference; 19 awaiting enrichment. Elevated volume. 25 rendered as box scores below; 375 more in the results table on this page; the remaining 157 on continuation pages.
| MTD | YTD | 2025 same span | 2025 full | |
|---|---|---|---|---|
| CVEs published | 8537 | 58668 | — | — |
| KEV catalog size | 1746 | |||
Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.
Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.
3696 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux | 269 | 6528 | 533 | 2706 | 902 | 1 | 15 | 6 | 0.1 | 7.8 | .0018 | -361 ▼ |
| microsoft | 1458 | 4361 | 269 | 3014 | 1061 | 17 | 291 | 32 | 0.7 | 7.8 | .0046 | +477 ▲ |
| 340 | 3171 | 389 | 1236 | 1407 | 138 | 80 | 9 | 0.3 | 7.5 | .0026 | -159 ▼ | |
| red hat | 153 | 1052 | 57 | 418 | 518 | 59 | 2 | 0 | 0.0 | 6.5 | .0032 | +62 ▲ |
| apple | 0 | 564 | 67 | 166 | 317 | 14 | 89 | 9 | 1.6 | 6.5 | .0019 | -245 ▼ |
| freebsd | 13 | 61 | 2 | 40 | 9 | 3 | 0 | 0 | 0.0 | 7.8 | .0017 | +13 ▲ |
| suse | 5 | 58 | 8 | 29 | 19 | 2 | 0 | 0 | 0.0 | 7.5 | .0033 | -7 ▼ |
| canonical | 3 | 53 | 16 | 12 | 20 | 5 | 0 | 0 | 0.0 | 7.7 | .0022 | +3 ▲ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cisco | 37 | 219 | 71 | 84 | 63 | 1 | 61 | 18 | 8.2 | 8.4 | .0044 | +19 ▲ |
| ubiquiti | 6 | 71 | 35 | 31 | 3 | 2 | 3 | 3 | 4.2 | 8.8 | .0050 | +6 ▲ |
| palo alto networks | 13 | 65 | 1 | 8 | 38 | 18 | 14 | 3 | 4.6 | 4.8 | .0028 | +4 ▲ |
| fortinet | 12 | 54 | 13 | 14 | 22 | 5 | 30 | 8 | 14.8 | 7.0 | .0038 | +2 ▲ |
| netgear | 6 | 40 | 0 | 0 | 32 | 8 | 0 | 0 | 0.0 | 4.3 | .0025 | +4 ▲ |
| f5 | 11 | 37 | 10 | 20 | 6 | 1 | 5 | 2 | 5.4 | 8.7 | .0048 | +3 ▲ |
| ivanti | 8 | 32 | 8 | 20 | 4 | 0 | 26 | 6 | 18.8 | 8.8 | .0146 | -2 ▼ |
| sonicwall | 6 | 25 | 8 | 12 | 5 | 0 | 19 | 4 | 16.0 | 7.8 | .0049 | +1 ▲ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache | 150 | 857 | 172 | 387 | 263 | 21 | 33 | 2 | 0.2 | 7.5 | .0056 | +79 ▲ |
| mozilla | 85 | 464 | 127 | 181 | 125 | 0 | 9 | 0 | 0.0 | 8.8 | .0028 | -28 ▼ |
| gitlab | 26 | 130 | 9 | 29 | 78 | 14 | 5 | 3 | 2.3 | 5.3 | .0033 | +20 ▲ |
| drupal | 0 | 94 | 11 | 9 | 66 | 8 | 4 | 1 | 1.1 | 5.7 | .0027 | -26 ▼ |
| github | 2 | 25 | 2 | 12 | 11 | 0 | 0 | 0 | 0.0 | 7.4 | .0058 | -1 ▼ |
| docker | 8 | 20 | 2 | 10 | 8 | 0 | 0 | 0 | 0.0 | 7.3 | .0015 | +5 ▲ |
| wordpress | 0 | 6 | 1 | 4 | 1 | 0 | 3 | 3 | 50.0 | 8.7 | .0363 | 0 |
| eclipse | 0 | 2 | 2 | 0 | 0 | 0 | 0 | 0 | 0.0 | 9.3 | .0050 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| oracle | 0 | 2905 | 581 | 1660 | 563 | 101 | 28 | 4 | 0.1 | 7.8 | .0036 | -634 ▼ |
| ibm | 196 | 1219 | 233 | 575 | 392 | 19 | 6 | 1 | 0.1 | 7.5 | .0035 | -11 ▼ |
| adobe | 177 | 1007 | 108 | 465 | 425 | 9 | 21 | 5 | 0.5 | 7.5 | .0035 | +7 ▲ |
| progress | 71 | 137 | 21 | 83 | 32 | 1 | 6 | 1 | 0.7 | 7.5 | .0036 | +68 ▲ |
| zohocorp | 1 | 43 | 6 | 29 | 8 | 0 | 0 | 0 | 0.0 | 8.1 | .0113 | -4 ▼ |
| solarwinds | 0 | 26 | 18 | 5 | 3 | 0 | 10 | 4 | 15.4 | 9.1 | .0067 | 0 |
| veeam | 6 | 25 | 7 | 11 | 7 | 0 | 1 | 0 | 0.0 | 8.5 | .0036 | +6 ▲ |
| atlassian | 1 | 10 | 2 | 8 | 0 | 0 | 14 | 1 | 10.0 | 7.8 | .0043 | -2 ▼ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| siemens | 33 | 87 | 9 | 52 | 23 | 3 | 0 | 0 | 0.0 | 7.3 | .0028 | +19 ▲ |
| d-link | 2 | 76 | 23 | 29 | 12 | 12 | 3 | 0 | 0.0 | 8.5 | .0164 | -19 ▼ |
| synology | 0 | 46 | 5 | 10 | 25 | 6 | 0 | 0 | 0.0 | 5.6 | .0032 | 0 |
| rockwell automation | 2 | 45 | 5 | 34 | 6 | 0 | 0 | 0 | 0.0 | 8.7 | .0028 | -16 ▼ |
| advantech | 0 | 20 | 2 | 17 | 1 | 0 | 0 | 0 | 0.0 | 8.6 | .0071 | -2 ▼ |
| schneider electric | 1 | 19 | 2 | 12 | 5 | 0 | 0 | 0 | 0.0 | 8.6 | .0043 | -8 ▼ |
| abb | 1 | 12 | 1 | 6 | 5 | 0 | 0 | 0 | 0.0 | 7.2 | .0018 | +1 ▲ |
| hitachi energy | 0 | 12 | 2 | 4 | 6 | 0 | 0 | 0 | 0.0 | 7.0 | .0025 | -4 ▼ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| dell | 51 | 429 | 45 | 193 | 170 | 21 | 2 | 1 | 0.2 | 7.2 | .0026 | -91 ▼ |
| nvidia | 20 | 321 | 27 | 221 | 73 | 0 | 0 | 0 | 0.0 | 7.8 | .0019 | -12 ▼ |
| sourcecodester | 32 | 269 | 0 | 0 | 162 | 107 | 0 | 0 | 0.0 | 5.5 | .0041 | -12 ▼ |
| openclaw | 1 | 229 | 5 | 117 | 85 | 22 | 0 | 0 | 0.0 | 7.1 | .0031 | -1 ▼ |
| hewlett packard enterprise (hpe) | 38 | 204 | 39 | 92 | 64 | 9 | 1 | 1 | 0.5 | 7.3 | .0042 | -91 ▼ |
| mongodb | 22 | 191 | 6 | 106 | 72 | 7 | 1 | 0 | 0.0 | 7.1 | .0035 | -28 ▼ |
| juniper networks | 153 | 175 | 23 | 130 | 22 | 0 | 7 | 0 | 0.0 | 8.6 | .0035 | +153 ▲ |
| itsourcecode | 18 | 171 | 0 | 0 | 42 | 129 | 0 | 0 | 0.0 | 2.1 | .0033 | -14 ▼ |
| CVE | EPSS | %ile | CVSS |
|---|---|---|---|
| CVE-2026-93616 | .7587 | 99.5 | 9.8 |
| CVE-2026-87902 | .3998 | 98.6 | 8.1 |
| CVE-2026-59774 | .2831 | 98.1 | 9.8 |
| CVE-2026-104935 | .2598 | 98.0 | 8.6 |
| CVE-2026-76460 | .1403 | 96.5 | 10.0 |
| CVE-2026-12269 | .0699 | 94.1 | 8.8 |
| CVE-2026-77692 | .0656 | 93.7 | 7.5 |
| CVE-2026-110908 | .0608 | 93.3 | 8.8 |
| CVE-2026-12268 | .0473 | 91.7 | 8.8 |
| CVE-2026-61642 | .0468 | 91.6 | 7.7 |
| CVE | CVSS | EPSS | Note |
|---|---|---|---|
| CVE-2026-76460 | 10.0 | .1403 | KEV |
| CVE-2026-108576 | 10.0 | .0245 | |
| CVE-2026-105484 | 10.0 | .0213 | |
| CVE-2026-73369 | 10.0 | .0125 | |
| CVE-2026-75699 | 10.0 | .0125 | |
| CVE-2026-75703 | 10.0 | .0125 | |
| CVE-2026-75721 | 10.0 | .0125 | |
| CVE-2026-84412 | 10.0 | .0125 | |
| CVE-2026-89275 | 10.0 | .0125 | |
| CVE-2026-86708 | 10.0 | .0124 |
| Vendor | CVEs |
|---|---|
| linux | 1753 |
| microsoft | 1479 |
| 503 | |
| ibm | 393 |
| red hat | 326 |
| apache | 274 |
| adobe | 231 |
| mozilla | 163 |
| nvidia | 155 |
| juniper networks | 153 |
| Vendor | KEV |
|---|---|
| microsoft | 32 |
| cisco | 18 |
| apple | 9 |
| 9 | |
| fortinet | 8 |
| ivanti | 6 |
| linux | 6 |
| adobe | 5 |
| berriai | 4 |
| checkpoint | 4 |
| Ecosystem | Advisories |
|---|---|
| Maven | 105 |
| npm | 47 |
| PyPI | 36 |
| NuGet | 29 |
| Packagist | 25 |
| Go | 13 |
| crates.io | 10 |
| RubyGems | 4 |
| CVE | Vendor | Days |
|---|---|---|
| CVE-2026-58704 | 0 | |
| CVE-2026-86950 | Apple | 0 |
| CVE-2026-88779 | NetScaler | 0 |
| CVE-2026-93952 | Arista Networks | 0 |
| CVE-2026-102489 | Zammad GmbH | 1 |
| CVE-2026-102490 | Zammad GmbH | 1 |
| CVE-2026-87902 | WordPress | 2 |
| CVE-2026-21589 | Atlassian | 9 |
| CVE-2026-105133 | Ahsay | 10 |
| CVE-2026-105134 | Ahsay | 10 |
| CVE | Vendor | Due | Days over |
|---|---|---|---|
| CVE-2021-27104 | n/a | 2021-11-17 | 1793 |
| CVE-2021-27102 | n/a | 2021-11-17 | 1793 |
| CVE-2021-27101 | n/a | 2021-11-17 | 1793 |
| CVE-2021-27103 | n/a | 2021-11-17 | 1793 |
| CVE-2021-21017 | Adobe | 2021-11-17 | 1793 |
| CVE-2021-28550 | Adobe | 2021-11-17 | 1793 |
| CVE-2021-42013 | Apache Software Foundation | 2021-11-17 | 1793 |
| CVE-2021-41773 | Apache Software Foundation | 2021-11-17 | 1793 |
| CVE-2021-30858 | Apple | 2021-11-17 | 1793 |
| CVE-2021-30860 | Apple | 2021-11-17 | 1793 |
ADDED TO KEV — CVE-2026-21589 (Atlassian Bamboo Data Center). Remediation due October 18, 2026.
EXPLOIT PUBLISHED — zephyrproject zephyr: 36 CVEs (CVE-2026-7656, CVE-2026-8023, CVE-2026-9263, CVE-2026-10593, CVE-2026-10634, CVE-2026-10635, CVE-2026-10636, CVE-2026-10637, CVE-2026-10639, CVE-2026-10640, CVE-2026-10641, CVE-2026-10642, CVE-2026-10644, CVE-2026-10645, CVE-2026-10646, CVE-2026-10647, CVE-2026-10648, CVE-2026-10651, CVE-2026-10652, CVE-2026-10653, CVE-2026-10654, CVE-2026-10655, CVE-2026-10656, CVE-2026-10657, CVE-2026-10664, CVE-2026-10665, CVE-2026-10666, CVE-2026-10667, CVE-2026-10669, CVE-2026-10670, CVE-2026-10671, CVE-2026-10672, CVE-2026-10673, CVE-2026-10681, CVE-2026-10682, CVE-2026-10686). Public exploit references added.
EXPLOIT PUBLISHED — zephyrproject-rtos Zephyr: 14 CVEs (CVE-2026-0849, CVE-2026-1677, CVE-2026-1678, CVE-2026-1679, CVE-2026-1681, CVE-2026-4179, CVE-2026-5066, CVE-2026-5067, CVE-2026-5068, CVE-2026-5071, CVE-2026-5072, CVE-2026-5589, CVE-2026-5590, CVE-2026-13351). Public exploit references added.
EXPLOIT PUBLISHED — curl: 10 CVEs (CVE-2024-2004, CVE-2024-2379, CVE-2024-2398, CVE-2024-2466, CVE-2024-7264, CVE-2024-8096, CVE-2024-11053, CVE-2025-0167, CVE-2025-0665, CVE-2025-0725). Public exploit references added.
EXPLOIT PUBLISHED — RooCodeInc Roo-Code: 5 CVEs (CVE-2026-110202, CVE-2026-110203, CVE-2026-110204, CVE-2026-110205, CVE-2026-110206). Public exploit references added.
EXPLOIT PUBLISHED — rabbitmq-server: 4 CVEs (CVE-2026-61837, CVE-2026-66071, CVE-2026-66078, CVE-2026-67236). Public exploit references added.
EXPLOIT PUBLISHED — Linux: 3 CVEs (CVE-2023-52927, CVE-2025-21704, CVE-2025-38089). Public exploit references added.
EXPLOIT PUBLISHED — CVE-2017-5674. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-11212. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-17828. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-18700. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19139. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19416. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19517. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19539. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19540. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19541. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19542. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19543. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-19857. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-20406. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2018-20786. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-34969. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-37453. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-38408. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-39128. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-39615. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-42753 (Red Hat Enterprise Linux 7). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-42754 (Red Hat Enterprise Linux 8). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-42755 (Red Hat Enterprise Linux 8). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-48795. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-52425. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-0232 (sqlite). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-0553 (gnutls). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-0567 (gnutls). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-22365. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-25062. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-28757. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-34459. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-52533. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-6387 (OpenSSH). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2025-70873. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-101029 (Gitea). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-101105 (code-projects Matrimonial System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-103226 (Artifex Ghostscript). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-106469 (Unknown Gutenverse Form). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108066 (Unknown WP 2FA). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108538 (GPAC). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108542 (021is elvix-sdk). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108584 (FunnyWolf Viper). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108772 (bleenco abstruse). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108786 (houtini-ai seo-crawler-mcp). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108790 (westboy CicadasCMS). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108804 (TRENDnet TEW-751DR). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108812 (SEMCMS). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108816 (agno-agi agno). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108820 (agno-agi agno). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108825 (yangzongzhuan RuoYi). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108829 (Zen Cart). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108892 (Linksys E1700). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108896 (Linksys E1700). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108900 (Exponent CMS). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108908 (Netcore NR268). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108916 (Edimax BR-6208AC). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108935 (Edimax BR-6208AC). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108943 (ModelTC LightX2V). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108948 (code-projects Online Reviewer System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108955 (Tiiny-AI PowerInfer). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108957 (TinyLLaVA_Factory). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108959 (itsourcecode Online Cake Ordering System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108964 (SourceCodester Performance Indicator System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108968 (SourceCodester Performance Indicator System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-108972 (SourceCodester Human Resource Management System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-109106 (Polaris Office App). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-109110 (Wavlink WL-WN592AX6). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-109524 (girishsaraf Online-Appointment-Booking-System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-109827 (GPAC). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110536 (D-Link DIR-868L). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110660 (vgmstream). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110694 (OAID Tengine). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110695 (turboderp ExLlamaV2). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110696 (itsmeravitejak Online-Examination-System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110715 (Artifex Software MuJS). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110764 (iflytek astron-rpa). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110767 (coderamp-labs gitingest). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110769 (holaboss-ai holaOS). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110774 (blinkospace blinko). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110807 (sgl-project SGLang). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-110867 (renovatebot renovate). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-21589 (Atlassian Bamboo Data Center). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-30754. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-33829 (Microsoft Windows 10 Version 1607). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-35001 (OpenS100 Project OpenS100). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-40355 (MIT Kerberos 5). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-58014 (GNOME GLib). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-58015 (GNOME GLib). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-89288 (Unknown Fast Courier). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-90989 (Unknown Tainacan). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-91076 (Unknown Robokassa payment gateway for Woocommerce). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-92409 (Unknown Donation Thermometer). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-92426 (Unknown YITH WooCommerce Popup). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-94254 (Unknown SellKit). Public exploit reference added.
REJECTED — CVE-2026-89603 (Linux). Record withdrawn by the CNA.
DISPUTED — CVE-2026-19745 (Calix GigaSpire). Record marked disputed.
DISPUTED — CVE-2026-19746 (Calix GigaSpire). Record marked disputed.
RESCORED — Linux: 17 CVEs (CVE-2024-26901, CVE-2024-27436, CVE-2024-35809, CVE-2024-35982, CVE-2024-36916, CVE-2024-38565, CVE-2024-56672, CVE-2025-21702, CVE-2025-37924, CVE-2026-22992, CVE-2026-23003, CVE-2026-23066, CVE-2026-23095, CVE-2026-23103, CVE-2026-23414, CVE-2026-23434, CVE-2026-23444). CVSS rescored — before/after on each CVE page.
RESCORED — IBM Guardium Data Protection: 6 CVEs (CVE-2026-84198, CVE-2026-84209, CVE-2026-84230, CVE-2026-84875, CVE-2026-84891, CVE-2026-87980). CVSS rescored — before/after on each CVE page.
RESCORED — Linux kernel: 5 CVEs (CVE-2024-22099, CVE-2024-23307, CVE-2024-24857, CVE-2024-24858, CVE-2024-24859). CVSS rescored — before/after on each CVE page.
RESCORED — Red Hat Enterprise Linux 8: 5 CVEs (CVE-2023-39189, CVE-2023-39192, CVE-2023-39193, CVE-2023-39194, CVE-2023-42755). CVSS rescored — before/after on each CVE page.
RESCORED — zephyrproject-rtos Zephyr: 4 CVEs (CVE-2026-0849, CVE-2026-1678, CVE-2026-1679, CVE-2026-5590). CVSS rescored — before/after on each CVE page.
RESCORED — electron: 3 CVEs (CVE-2026-102673, CVE-2026-102674, CVE-2026-102676). CVSS rescored — before/after on each CVE page.
RESCORED — GNU Binutils: 3 CVEs (CVE-2025-7545, CVE-2025-7546, CVE-2025-8224). CVSS rescored — before/after on each CVE page.
RESCORED — sqlite: 3 CVEs (CVE-2024-0232, CVE-2025-29087, CVE-2025-29088). CVSS rescored — before/after on each CVE page.
RESCORED — CVE-2017-20162 (vercel ms). CVSS 4.3 → 5.3 (NVD).
RESCORED — CVE-2018-1061 ([UNKNOWN] python). CVSS 6.5 → 7.5 (NVD).
RESCORED — CVE-2023-32636 (glib). CVSS 4.7 → 7.5 (NVD).
RESCORED — CVE-2023-32643 (glib). CVSS 5.3 → 7.8 (NVD).
RESCORED — CVE-2023-45853. CVSS 8.8 → 9.8 (NVD).
RESCORED — CVE-2024-7264 (curl). CVSS 6.3 → 6.5 (NVD).
RESCORED — CVE-2025-32728 (OpenBSD OpenSSH). CVSS 4.3 → 3.8 (NVD).
RESCORED — CVE-2026-110144 (Google Chrome). CVSS 9.6 → 8.6 (NVD).
RESCORED — CVE-2026-110809 (sgl-project SGLang). CVSS 5.3 → 2.1 (NVD).
RESCORED — CVE-2026-12259 (nltk/nltk). CVSS 5.3 → 6.5 (NVD).
RESCORED — CVE-2026-17618 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 7.3 → 9.8 (NVD).
RESCORED — CVE-2026-17620 (IBM Financial Transaction Manager (FTM) for RedHat OpenShift). CVSS 5.3 → 7.5 (NVD).
RESCORED — CVE-2026-18541 (IBM Planning Analytics). CVSS 6.4 → 5.4 (NVD).
RESCORED — CVE-2026-19622 (IBM Planning Analytics). CVSS 8.8 → 9.8 (NVD).
RESCORED — CVE-2026-2950 (lodash). CVSS 6.5 → 5.3 (NVD).
RESCORED — CVE-2026-3497 (Ubuntu openssh). CVSS 2.7 → 6.9 (NVD).
RESCORED — CVE-2026-40355 (MIT Kerberos 5). CVSS 5.9 → 7.5 (NVD).
RESCORED — CVE-2026-69435 (Microsoft Azure SRE Agent). CVSS 9.6 → 8.1 (NVD).
RESCORED — CVE-2026-73563 (backstage). CVSS 4.7 → 6.1 (NVD).
RESCORED — CVE-2026-73593 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3 → 6.7 (NVD).
RESCORED — CVE-2026-73594 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.4 → 8.8 (NVD).
RESCORED — CVE-2026-73595 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 4.7 → 9.8 (NVD).
RESCORED — CVE-2026-73596 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 3.8 → 6.5 (NVD).
RESCORED — CVE-2026-73597 (Dell Secure Connect Gateway (SCG) Policy Manager). CVSS 6.5 → 8.1 (NVD).
RESCORED — CVE-2026-83947 (Microsoft Azure Event Grid System). CVSS 7.7 → 6.5 (NVD).
RESCORED — CVE-2026-96611 (FFmpeg). CVSS 6.9 → 7.8 (NVD).
PATCH SHIPPED — Red Hat Hardened Images: 5 CVEs (CVE-2026-88842, CVE-2026-110923, CVE-2026-110925, CVE-2026-110926, CVE-2026-110927). Fix versions published.
PATCH SHIPPED — Red Hat build of Quarkus 3.27.6.redhat: 4 CVEs (CVE-2026-87744, CVE-2026-93432, CVE-2026-94449, CVE-2026-94451). Fix versions published.
PATCH SHIPPED — CVE-2026-102555 (Red Hat Enterprise Linux 10). Fixed in Red Hat Enterprise Linux 10 0:3.6.5-3.el10_2.20.
PATCH SHIPPED — CVE-2026-103226 (Artifex Ghostscript). Fixed in Ghostscript 10.08.0.
PATCH SHIPPED — CVE-2026-75939 (Red Hat OpenShift Container Platform 4.18). Fixed in Red Hat OpenShift Container Platform 4.18 1790828598.
PATCH SHIPPED — CVE-2026-89058 (Red Hat RESTEasy). Fixed in Red Hat build of Quarkus 3.27.6.redhat 6.2.19.Final-redhat-00003.
PATCH SHIPPED — CVE-2026-89059 (Red Hat RESTEasy). Fixed in Red Hat build of Quarkus 3.27.6.redhat 6.2.19.Final-redhat-00003.
ENRICHED — Linux: 440 CVEs (CVE-2023-52458, CVE-2023-52464, CVE-2023-52622, CVE-2023-52675, CVE-2024-26629, CVE-2024-26645, CVE-2024-26651, CVE-2024-26671, CVE-2024-26679, CVE-2024-26777, CVE-2024-26783, CVE-2024-26787, CVE-2024-26805, CVE-2024-26816, CVE-2024-26820, CVE-2024-26835, CVE-2024-26855, CVE-2024-26859, CVE-2024-26861, CVE-2024-26863, CVE-2024-26878, CVE-2024-26891, CVE-2024-26897, CVE-2024-26906, CVE-2024-26920, CVE-2024-26934, CVE-2024-26935, CVE-2024-26937, CVE-2024-26973, CVE-2024-26982, CVE-2024-26988, CVE-2024-26993, CVE-2024-27004, CVE-2024-27013, CVE-2024-27024, CVE-2024-27025, CVE-2024-27038, CVE-2024-27047, CVE-2024-27059, CVE-2024-27065, CVE-2024-27074, CVE-2024-27076, CVE-2024-27077, CVE-2024-27078, CVE-2024-27419, CVE-2024-27437, CVE-2024-33621, CVE-2024-35805, CVE-2024-35807, CVE-2024-35815, and 390 more — full list in this day's data.json). Received CVSS/CPE analysis.
ENRICHED — Apache Software Foundation Apache Tomcat: 9 CVEs (CVE-2016-6794, CVE-2017-5648, CVE-2017-5664, CVE-2017-7674, CVE-2017-12616, CVE-2018-1304, CVE-2018-1305, CVE-2018-8014, CVE-2018-11784). Received CVSS/CPE analysis.
ENRICHED — Microsoft Corporation Microsoft Office: 4 CVEs (CVE-2017-0281, CVE-2017-8509, CVE-2017-8512, CVE-2018-0851). Received CVSS/CPE analysis.
ENRICHED — CVE-2016-0010. Received CVSS 7.8 and CPE data from NVD.
ENRICHED — CVE-2016-0011. Received CVSS 5.4 and CPE data from NVD.
ENRICHED — CVE-2016-0012. Received CVSS 4.3 and CPE data from NVD.
ENRICHED — CVE-2016-0025. Received CVSS 7.3 and CPE data from NVD.
ENRICHED — CVE-2016-0035. Received CVSS 7.8 and CPE data from NVD.
ENRICHED — CVE-2016-0055. Received CVSS 7.8 and CPE data from NVD.
ENRICHED — CVE-2016-0141. Received CVSS 6.5 and CPE data from NVD.
ENRICHED — CVE-2016-0402. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2016-0448. Received CVSS 4.0 and CPE data from NVD.
ENRICHED — CVE-2016-0466. Received CVSS 5.0 and CPE data from NVD.
ENRICHED — CVE-2016-0475. Received CVSS 5.8 and CPE data from NVD.
ENRICHED — CVE-2016-0483. Received CVSS 10.0 and CPE data from NVD.
ENRICHED — CVE-2016-0494. Received CVSS 10.0 and CPE data from NVD.
ENRICHED — CVE-2016-0706. Received CVSS 4.3 and CPE data from NVD.
ENRICHED — CVE-2016-0714. Received CVSS 8.8 and CPE data from NVD.
ENRICHED — CVE-2016-0763. Received CVSS 6.3 and CPE data from NVD.
ENRICHED — CVE-2016-10165. Received CVSS 7.1 and CPE data from NVD.
ENRICHED — CVE-2016-1181. Received CVSS 8.1 and CPE data from NVD.
ENRICHED — CVE-2016-1182. Received CVSS 8.2 and CPE data from NVD.
ENRICHED — CVE-2016-3233. Received CVSS 7.3 and CPE data from NVD.
ENRICHED — CVE-2016-3234. Received CVSS 5.5 and CPE data from NVD.
ENRICHED — CVE-2016-3313. Received CVSS 7.8 and CPE data from NVD.
ENRICHED — CVE-2016-3357. Received CVSS 7.8 and CPE data from NVD.
ENRICHED — CVE-2016-5388. Received CVSS 8.1 and CPE data from NVD.
ENRICHED — CVE-2016-7244. Received CVSS 5.5 and CPE data from NVD.
ENRICHED — CVE-2016-7276. Received CVSS 7.1 and CPE data from NVD.
ENRICHED — CVE-2017-12172 (Red Hat, Inc. postgresql). Received CVSS 6.7 and CPE data from NVD.
ENRICHED — CVE-2017-16137 (HackerOne debug node module). Received CVSS 5.3 and CPE data from NVD.
ENRICHED — CVE-2017-5674. Received CVSS 9.8 and CPE data from NVD.
ENRICHED — CVE-2018-0737 (OpenSSL). Received CVSS 5.9 and CPE data from NVD.
ENRICHED — CVE-2018-11212. Received CVSS 6.5 and CPE data from NVD.
ENRICHED — CVE-2018-12023. Received CVSS 7.5 and CPE data from NVD.
ENRICHED — CVE-2018-12115 (The Node.js Project Node.js). Received CVSS 7.5 and CPE data from NVD.
ENRICHED — CVE-2018-12210 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.5 and CPE data from NVD.
ENRICHED — CVE-2018-12211 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.5 and CPE data from NVD.
ENRICHED — CVE-2018-12212 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.5 and CPE data from NVD.
ENRICHED — CVE-2018-12213 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.0 and CPE data from NVD.
ENRICHED — CVE-2018-12214 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 8.2 and CPE data from NVD.
ENRICHED — CVE-2018-12215 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.0 and CPE data from NVD.
ENRICHED — CVE-2018-12216 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 8.2 and CPE data from NVD.
ENRICHED — CVE-2018-12217 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 2.3 and CPE data from NVD.
ENRICHED — CVE-2018-12218 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 3.3 and CPE data from NVD.
ENRICHED — CVE-2018-12219 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 5.5 and CPE data from NVD.
ENRICHED — CVE-2018-12220 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 8.2 and CPE data from NVD.
ENRICHED — CVE-2018-12221 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 7.8 and CPE data from NVD.
ENRICHED — CVE-2018-12222 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 3.3 and CPE data from NVD.
ENRICHED — CVE-2018-12223 (Intel Corporation Intel(R) Graphics Driver for Windows). Received CVSS 6.3 and CPE data from NVD.
+ 35 more transaction lines — continued on page 2. Every change is listed; nothing truncated.
How to read these box scores · glossary
557 CVEs published. 25 box scores and 375 table rows below; the remaining 157 continue on page 2 — every CVE is listed, nothing truncated.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0608 93.3 —
AFFECTED Product Versions Fixed pfSense-pkg-frr 2.0.2_1 – —
TIMELINE Oct 15 Reserved by CNA Oct 15 Published (CNA: mitre)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L L 6.9 .0164 76.0 —
AFFECTED Product Versions Fixed Notes Station 3 3.9.x – —
TIMELINE Mar 25 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0141 72.2 —
AFFECTED Product Versions Fixed HybridDesk Station 4.2.x – —
TIMELINE May 20 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N P H H H 8.7 .0100 62.3 —
AFFECTED Product Versions Fixed MoviePilot unspecified —
TIMELINE Aug 21 Reserved by CNA Oct 15 Published (CNA: VulnCheck)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H H H 9.8 .0092 59.4 —
AFFECTED Product Versions Fixed 10Web Booster – Website speed optimization, Cache & Page Speed optimizer unspecified —
TIMELINE Oct 10 Reserved by CNA Oct 15 Published (CNA: Wordfence)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0061 48.3 —
AFFECTED Product Versions Fixed Qsirch 7.0.x – —
TIMELINE Jun 5 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N H N H H H 8.6 .0054 44.3 —
AFFECTED Product Versions Fixed QuMagie 2.9.x – —
TIMELINE Apr 21 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N N H H 7.2 .0054 44.2 —
AFFECTED Product Versions Fixed Qsync Central 5.0.x – —
TIMELINE Feb 12 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L L L 5.3 .0054 44.2 —
AFFECTED Product Versions Fixed Qsync Central 5.0.x – —
TIMELINE Apr 21 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H N 9.3 .0054 44.2 —
AFFECTED Product Versions Fixed org.eclipse.jetty:jetty-ethereum 12.1.0 – —
TIMELINE Aug 14 Reserved by CNA Oct 15 Published (CNA: eclipse)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0053 43.8 —
AFFECTED Product Versions Fixed sMedio DTCP MOVE 1.4.x – —
TIMELINE Mar 25 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N H H H 9.4 .0049 40.5 —
AFFECTED Product Versions Fixed QuMagie 2.9.x – —
TIMELINE Jun 5 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N H H H 8.7 .0049 40.5 —
AFFECTED Product Versions Fixed Video Station 5.8.x – —
TIMELINE Mar 25 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC PR UI S C I A CVSS EPSS %ile KEV A L N R U H H H 8.0 .0048 40.2 —
AFFECTED Product Versions Fixed HPE NonStop Python 3.x T0993L01^AAL and earlier – —
TIMELINE Aug 25 Reserved by CNA Oct 15 Published (CNA: hpe)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L A L N N 6.3 .0047 39.6 —
AFFECTED Product Versions Fixed QuFTP Service 1.4.x – —
TIMELINE May 20 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L A N N N 4.8 .0047 39.5 —
AFFECTED Product Versions Fixed Notes Station 3 3.9.x – —
TIMELINE Apr 8 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0047 39.4 —
AFFECTED Product Versions Fixed Email Customizer for WooCommerce (Pro) unspecified —
TIMELINE Aug 26 Reserved by CNA Oct 15 Published (CNA: Wordfence)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N H H H 8.7 .0047 38.9 —
AFFECTED Product Versions Fixed Virtualization Station 4.1.x – —
TIMELINE Jun 11 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U N N H 7.5 .0045 37.8 —
AFFECTED Product Versions Fixed Sick_Safetyscanners_Base CPP Driver unspecified —
TIMELINE Sep 28 Reserved by CNA Oct 15 Published (CNA: SICK AG)
AV AC PR UI S C I A CVSS EPSS %ile KEV N H L N C H H H 8.5 .0043 36.2 —
AFFECTED Product Versions Fixed rancher 2.8.0 – —
TIMELINE Jan 4 Reserved by CNA Oct 15 Published (CNA: suse)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L N 6.9 .0043 35.6 —
AFFECTED Product Versions Fixed org.eclipse.jetty.ee11:jetty-ee11-servlet 12.1.0 – — org.eclipse.jetty.ee10:jetty-ee10-servlet 12.1.0 – — org.eclipse.jetty.ee9:jetty-ee9-security 12.1.0 – — org.eclipse.jetty.ee8:jetty-ee8-security 12.1.0 – — org.eclipse.jetty:jetty-security 11.0.0 – —
TIMELINE Aug 3 Reserved by CNA Oct 15 Published (CNA: eclipse)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N L N N 5.3 .0043 35.4 —
AFFECTED Product Versions Fixed Download Station 5.10.x – —
TIMELINE Apr 8 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H N N 8.7 .0043 35.3 —
AFFECTED Product Versions Fixed Video Station 5.8.x – —
TIMELINE May 5 Reserved by CNA Oct 15 Published (CNA: qnap)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H L N 8.8 .0042 34.9 —
AFFECTED Product Versions Fixed org.eclipse.jetty:jetty-server 12.1.0 – — org.eclipse.jetty:jetty-proxy 11.0.0 – —
TIMELINE Aug 3 Reserved by CNA Oct 15 Published (CNA: eclipse)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N L N H N N 7.1 .0042 34.7 —
AFFECTED Product Versions Fixed Video Station 5.8.x – —
TIMELINE Feb 12 Reserved by CNA Oct 15 Published (CNA: qnap)
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-26245 | 7.1 | 34.7 | QNAP Systems Inc. | Video Station | CWE-89 | SQLi#2 SQL Injection in class_videos.php getSmartVideosByOffset |
| CVE-2026-102469 | 9.2 | 34.0 | Eclipse Foundation | Eclipse Vert.x | CWE-502 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-18662 | 6.9 | 33.0 | Eclipse Foundation | org.eclipse.jetty.ee11:jetty-ee11-servlet | CWE-863 | In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN… |
| CVE-2026-79829 | 8.2 | 32.7 | Hewlett Packard Enterprise | HPE NonStop HTTP WEBSERVER | CWE-20 | HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability |
| CVE-2026-102461 | 8.7 | 32.6 | Eclipse Foundation | Eclipse Vert.x | — | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-101287 | 9.3 | 32.3 | Diaple | Stela | CWE-565 | Authentication bypass in Stela by Diaple Networking |
| CVE-2026-0993 | 8.7 | 31.6 | SODOLA | SL902-SWTGW124AS | CWE-120 | SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser |
| CVE-2026-76066 | 8.7 | 31.0 | crestalnetwork | intentkit | CWE-862 | IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNode |
| CVE-2026-39997 | 8.9 | 29.4 | QNAP Systems Inc. | HybridDesk Station | CWE-306 | Unauthenticated Remote Input Injection in QNAP HD Station's remotepad |
| CVE-2026-15090 | 7.5 | 28.6 | jackdewey | Link Library | CWE-89 | Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' Parameter |
| CVE-2026-39993 | 8.7 | 28.4 | QNAP Systems Inc. | Download Station | CWE-23 | Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Pa… |
| CVE-2026-41544 | 8.7 | 28.4 | QNAP Systems Inc. | QcalAgent | CWE-22 | Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in… |
| CVE-2025-66272 | 7.7 | 28.4 | QNAP Systems Inc. | Video Station | CWE-22 | Arbitrary file deletion and remote code execution |
| CVE-2025-66275 | 7.7 | 28.4 | QNAP Systems Inc. | Video Station | CWE-22 | Remote code execution via command injection |
| CVE-2026-24718 | 5.3 | 28.4 | QNAP Systems Inc. | Qsync Central | CWE-22 | Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi |
| CVE-2026-22896 | 6.2 | 28.2 | QNAP Systems Inc. | Network & Virtual Switch | CWE-79 | Stored XSS via Interface Name in Network & Virtual Switch App |
| CVE-2026-18661 | 8.8 | 25.3 | Eclipse Foundation | org.eclipse.jetty.ee11:jetty-ee11-annotations | CWE-863 | In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-… |
| CVE-2023-32198 | 8.0 | 24.3 | SUSE | steve | CWE-295 | Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-… |
| CVE-2026-102477 | 8.7 | 23.8 | Eclipse Foundation | Eclipse Vert.x | CWE-409 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-77711 | 8.2 | 23.3 | Eclipse Foundation | Eclipse Jetty | CWE-200 | When Jetty's `HttpClient` make a request to a server through a forward proxy,… |
| CVE-2026-102462 | 8.2 | 22.9 | Eclipse Foundation | Eclipse Vert.x | CWE-400 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-103223 | 8.2 | 22.9 | Eclipse Foundation | Eclipse Vert.x | CWE-789 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-103224 | 8.2 | 22.9 | Eclipse Foundation | Eclipse Vert.x | — | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-76659 | 7.5 | 21.7 | Hewlett Packard Enterprise | HPE NonStop TCP/IP UTILITIES | CWE-306 | HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability |
| CVE-2026-16436 | 9.2 | 21.5 | Mitsubishi Electric Corporation | GENESIS | CWE-640 | An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, … |
| CVE-2026-93484 | 8.6 | 21.1 | Znuny | Znuny | CWE-89 | Znuny through 7.3.6 constructs a ticket-search database query by directly con… |
| CVE-2026-17031 | 8.1 | 21.2 | quadlayers | Checkout Field Manager (Checkout Manager) for WooCommerce | CWE-862 | Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing … |
| CVE-2026-110911 | 9.8 | 20.8 | Wheels | Wheels | CWE-89 | Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted v… |
| CVE-2026-63315 | 8.2 | 19.9 | Slican | IPx | CWE-256 | Plaintext storage of a password in WebCTI |
| CVE-2026-18548 | 7.2 | 19.8 | trainingbusinesspros | Groundhogg — CRM, Newsletters, and Marketing Automation | CWE-79 | Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' … |
| CVE-2026-110923 | 6.5 | 19.6 | Red Hat | Red Hat Hardened Images | CWE-22 | Openssh: openssh: sftp can write outside the destination directory from a ser… |
| CVE-2026-11905 | 4.3 | 19.5 | elemntor | Elementor Website Builder – more than just a page builder | CWE-862 | Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (… |
| CVE-2026-102463 | 8.2 | 19.3 | Eclipse Foundation | Eclipse Vert.x | CWE-789 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-102464 | 8.2 | 19.3 | Eclipse Foundation | Eclipse Vert.x | CWE-770 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-76184 | 8.2 | 18.9 | Eclipse Foundation | Eclipse Jetty | CWE-200 | In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/… |
| CVE-2026-109855 | 7.5 | 18.9 | undici | undici | CWE-248 | undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 han… |
| CVE-2026-24721 | 5.3 | 18.6 | QNAP Systems Inc. | File Station 5 | CWE-476 | Null Pointer Dereference in File Station 5 |
| CVE-2026-24722 | 5.3 | 18.6 | QNAP Systems Inc. | File Station 5 | CWE-476 | Null Pointer Dereference in File Station 5 |
| CVE-2026-24723 | 5.3 | 18.6 | QNAP Systems Inc. | File Station 5 | CWE-476 | NULL Pointer Dereference in utilRequest.cgi |
| CVE-2025-29895 | 2.3 | 18.6 | QNAP Systems Inc. | Qsync Central | CWE-476 | NULL Pointer Dereference in qsyncsrv.cgi |
| CVE-2025-29896 | 2.3 | 18.6 | QNAP Systems Inc. | Qsync Central | CWE-476 | NULL Pointer Dereference in qsyncsrv.cgi |
| CVE-2025-29897 | 2.3 | 18.6 | QNAP Systems Inc. | Qsync Central | CWE-120 | Stack-based Buffer Overflow in qsyncsrv.cgi |
| CVE-2026-76182 | 6.9 | 18.3 | Eclipse Foundation | Eclipse Jetty | CWE-74 | In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to… |
| CVE-2026-76663 | 7.5 | 17.5 | Hewlett Packard Enterprise | HPE NonStop TELSERV | CWE-121 | HPE NonStop TELSERV - Memory corruption vulnerability |
| CVE-2026-102467 | 8.7 | 16.8 | Eclipse Foundation | Eclipse Vert.x | CWE-770 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-102475 | 8.7 | 16.8 | Eclipse Foundation | Eclipse Vert.x | CWE-770 | In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],… |
| CVE-2026-73799 | 7.5 | 16.8 | Hewlett Packard Enterprise | HPE NonStop SNMP Trap Multiplexer | CWE-121 | HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability |
| CVE-2026-102466 | 8.2 | 16.3 | Eclipse Foundation | Eclipse Vert.x | CWE-789 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-110926 | 5.3 | 15.6 | Red Hat | Red Hat Hardened Images | CWE-203 | Openssh: openssh: shared lz77 compression dictionary leaks plaintext across c… |
| CVE-2026-108092 | 4.3 | 15.3 | pr-gateway | Blog2Social: Social Media Auto Post & Scheduler | CWE-639 | Social Media Auto Post & Scheduler <= 9.1.4 - Authenticated (Contributor+) In… |
| CVE-2026-110904 | 5.3 | 14.8 | apostrophecms | ApostropheCMS | CWE-863 | ApostropheCMS before 4.33.0 allows authentication bypass for REST API page re… |
| CVE-2026-110907 | 7.5 | 14.6 | BackdropCMS | Backdrop | CWE-669 | Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles to… |
| CVE-2026-3712 | 7.3 | 14.4 | kiboit | PhastPress | CWE-918 | PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Pa… |
| CVE-2026-16438 | 9.4 | 13.8 | Mitsubishi Electric Corporation | GENESIS64 | CWE-266 | An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Histo… |
| CVE-2026-88043 | 7.2 | 13.6 | kitae-park | Mang Board | CWE-79 | Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'dat… |
| CVE-2026-93483 | 9.5 | 13.3 | Znuny | Znuny | CWE-348 | In Znuny through 7.3.6, an attacker can bypass specific standard login proced… |
| CVE-2026-18586 | 7.2 | 13.0 | codename065 | Premium Packages – Sell Digital Products Securely | CWE-79 | Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via '… |
| CVE-2026-79821 | 8.2 | 12.7 | Hewlett Packard Enterprise | HPE NonStop SOAP 4.0 | CWE-20 | HPE NonStop SOAP 4.0 - Memory corruption |
| CVE-2026-76662 | 5.9 | 12.3 | Hewlett Packard Enterprise | HPE NonStop TELSERV | CWE-121 | HPE NonStop TELSERV - Memory corruption vulnerability |
| CVE-2026-63314 | 8.7 | 12.2 | Slican | IPx | CWE-89 | SQL Injection in WebCTI |
| CVE-2026-86803 | 6.5 | 12.2 | oceanwp | Ocean Extra | CWE-94 | Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oce… |
| CVE-2026-72528 | 5.1 | 10.8 | CREEMA LTD. | "Handmade Marketplace App - Creema" for Android | CWE-601 | "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open … |
| CVE-2026-102465 | 8.2 | 10.4 | Eclipse Foundation | Eclipse Vert.x | CWE-770 | In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9]… |
| CVE-2026-15180 | 6.1 | 9.8 | data443 | Tracking Code Manager | CWE-79 | Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_Erro… |
| CVE-2026-18557 | 6.1 | 9.8 | 10web | Photo Gallery by 10Web – Mobile-Friendly Image Gallery | CWE-79 | Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title'… |
| CVE-2026-96614 | 5.1 | 8.3 | GEO CORPORATION | "ゲオアプリ" for Android | CWE-939 | "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization i… |
| CVE-2026-101303 | await | 8.2 | FreeBSD | FreeBSD | CWE-941 | IPv6 UDP sendto(2) bypasses jail loopback restriction |
| CVE-2026-101302 | 6.5 | 8.1 | FreeBSD | FreeBSD | CWE-193 | Remote DoS via receive-side kernel TLS |
| CVE-2026-17001 | 6.4 | 8.1 | carazo | Import and export users and customers | CWE-79 | Import and export users and customers <= 2.4.5 - Authenticated (Custom+) Stor… |
| CVE-2026-78087 | 6.4 | 8.1 | vektor-inc | VK Blocks | CWE-79 | VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripti… |
| CVE-2025-23390 | 6.3 | 8.1 | SUSE | fleet | CWE-295 | Fleet doesn’t validate a server’s certificate when connecting through SSH |
| CVE-2026-24715 | 5.3 | 7.9 | QNAP Systems Inc. | QuRouter | CWE-208 | Lack of Reproducible Vulnerability Evidence in QNAP Report |
| CVE-2026-110925 | 5.4 | 7.9 | Red Hat | Red Hat Hardened Images | CWE-78 | Openssh: openssh: '$' and '\' in a command-line username expand through %u |
| CVE-2026-14572 | 6.4 | 7.7 | themeum | Kirki – Freeform Page Builder, Website Builder & Customizer | CWE-79 | Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page… |
| CVE-2026-101306 | await | 7.6 | FreeBSD | FreeBSD | CWE-273 | Multiple jail filesystem root escapes |
| CVE-2026-58098 | await | 7.2 | FreeBSD | FreeBSD | CWE-787 | Heap out-of-bounds access in semop(2) |
| CVE-2026-101309 | 7.0 | 7.1 | FreeBSD | FreeBSD | CWE-362 | Multiple vulnerabilities in bhyve device models |
| CVE-2026-101310 | 7.0 | 7.1 | FreeBSD | FreeBSD | CWE-126 | Multiple vulnerabilities in bhyve device models |
| CVE-2026-101311 | 7.0 | 7.1 | FreeBSD | FreeBSD | CWE-362 | Multiple vulnerabilities in bhyve device models |
| CVE-2026-101304 | await | 7.1 | FreeBSD | FreeBSD | CWE-273 | Multiple jail filesystem root escapes |
| CVE-2026-101305 | await | 7.1 | FreeBSD | FreeBSD | CWE-273 | Multiple jail filesystem root escapes |
| CVE-2026-76661 | 7.6 | 6.9 | Hewlett Packard Enterprise | HPE NonStop QIOMON | CWE-20 | HPE NonStop QIOMON - Memory corruption vulnerability |
| CVE-2026-101307 | 8.2 | 5.8 | FreeBSD | FreeBSD | CWE-122 | Remotely triggerable buffer overflow in tcp_rack |
| CVE-2026-110912 | 7.1 | 4.8 | DragonFlyBSD | DragonFlyBSD | CWE-130 | In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr… |
| CVE-2026-76656 | 5.3 | 4.6 | Hewlett Packard Enterprise | HPE NonStop TCP/IP UTILITIES | CWE-306 | HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability |
| CVE-2026-74920 | 7.1 | 4.5 | Unknown | Document Gallery | CWE-79 | Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode Attribute |
| CVE-2026-76665 | 7.1 | 4.4 | Hewlett Packard Enterprise | HPE NonStop EXPAND | CWE-125 | HPE NonStop EXPAND - Buffer Overflow vulnerability |
| CVE-2026-78001 | 6.4 | 4.3 | boldgrid | Post and Page Builder by BoldGrid – Visual Drag and Drop Editor | CWE-79 | Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) S… |
| CVE-2026-75559 | 6.9 | 4.2 | Ministry of Land, Infrastructure, Transport and Tourism | Vehicle Inspection Certificate Viewer (for Android) | CWE-201 | The smartphone application "Vehicle Inspection Certificate Viewer" contains a… |
| CVE-2025-68404 | 7.5 | 3.8 | QNAP Systems Inc. | QuRouter | CWE-367 | vcs_pentest Race Condition Authentication Bypass Vulnerability in QuRouter ma… |
| CVE-2026-79826 | 7.1 | 3.8 | Hewlett Packard Enterprise | HPE NonStop OCAX | CWE-122 | HPE NonStop OCAX - Heap buffer overflow vulnerability |
| CVE-2026-79827 | 7.1 | 3.8 | Hewlett Packard Enterprise | HPE NonStop Inspect Subsystem | CWE-122 | HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability |
| CVE-2026-79828 | 7.1 | 3.9 | Hewlett Packard Enterprise | HPE NonStop Debug Utilities | CWE-122 | HPE NonStop Debug Utilities - Heap buffer overflow vulnerability |
| CVE-2026-103304 | 5.3 | 3.5 | Unknown | eaSYNC Booking | CWE-862 | eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Tem… |
| CVE-2026-76664 | 6.4 | 3.4 | Hewlett Packard Enterprise | HPE NonStop EXPAND | CWE-125 | HPE NonStop EXPAND - Out-of-Bounds memory read/write |
| CVE-2026-34009 | 8.4 | 3.1 | QNAP Systems Inc. | Notes Station 3 | CWE-653 | **Container Escape** Host user home directory mounted with write access into … |
| CVE-2026-104643 | 4.2 | 3.1 | Unknown | Easy HTTPS Redirection (SSL) | CWE-862 | Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and… |
| CVE-2026-79825 | 7.1 | 3.0 | Hewlett Packard Enterprise | HPE NonStop NDSREST | CWE-122 | HPE NonStop NDSREST - Heap buffer overflow vulnerability |
| CVE-2026-58099 | await | 3.0 | FreeBSD | FreeBSD | CWE-362 | Memory safety bugs in kqueue copy-on-fork implementation |
| CVE-2026-58100 | await | 3.0 | FreeBSD | FreeBSD | CWE-125 | Memory safety bugs in kqueue copy-on-fork implementation |
| CVE-2026-109145 | 9.8 | 2.7 | Unknown | User Rights Access Manager | CWE-269 | User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation vi… |
| CVE-2026-96537 | 7.5 | 2.7 | Unknown | Tutor LMS | CWE-862 | Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Over… |
| CVE-2026-106031 | 6.5 | 2.7 | Unknown | Spin Wheel | CWE-284 | Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin R… |
| CVE-2026-34014 | 8.4 | 2.6 | QNAP Systems Inc. | Download Station | CWE-732 | ds-move-files.sh is writable and executed as root |
| CVE-2026-19864 | 5.6 | 2.1 | Eclipse Foundation | org.eclipse.jetty:jetty-security | CWE-312 | Eclipse Jetty's `SessionAuthentication` retains authentication credentials in… |
| CVE-2026-103324 | 5.3 | 2.0 | Unknown | Cardinity Payment Gateway for WooCommerce | CWE-345 | Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arb… |
| CVE-2026-34008 | 8.5 | 1.8 | QNAP Systems Inc. | Notes Station 3 | CWE-732 | **Privilege Escalation** World-writable crontab path monitored and executed b… |
| CVE-2026-35088 | 8.2 | 1.6 | Slican | IPx | CWE-326 | Inadequate Encryption Strength in Slican telephone exchanges |
| CVE-2026-110810 | 0.9 | 1.5 | ggml-org | whisper.cpp | CWE-119 | ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds |
| CVE-2026-76660 | 8.7 | 1.4 | Hewlett Packard Enterprise | HPE NonStop CIPSAM | CWE-20 | HPE NonStop CIPSAM - Memory corruption vulnerability |
| CVE-2026-104618 | 6.9 | 1.4 | SUSE | SUSE Linux Enterprise Server 16.1 | CWE-732 | sdbootutil: world-readable debug log |
| CVE-2026-92428 | 5.3 | 1.4 | Unknown | Rede Itaú for WooCommerce | CWE-345 | Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation… |
| CVE-2026-92429 | 5.3 | 1.4 | Unknown | Rede Itaú for WooCommerce | CWE-345 | Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipu… |
| CVE-2026-79822 | 7.1 | 1.2 | Hewlett Packard Enterprise | HPE NonStop TNS/X Native Inspect | CWE-122 | HPE NonStop TNS/X Native Inspect - Execution flow vulnerability |
| CVE-2026-101308 | 5.5 | 1.1 | FreeBSD | FreeBSD | CWE-367 | TOCTOU race between sound(4) buffer resizing and mmap |
| CVE-2025-68403 | 4.6 | 1.0 | QNAP Systems Inc. | QuRouter | CWE-15 | Inadequate Steps to Confirm Vulnerability in QuRouter |
| CVE-2026-110933 | 4.4 | 1.0 | Samsung Open Source | Vyond | CWE-248 | Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Da… |
| CVE-2026-110934 | 4.4 | 1.0 | Samsung Open Source | Vyond | CWE-129 | Improper validation of array index vulnerability in Samsung Open Source Vyond… |
| CVE-2026-104617 | 5.9 | 0.9 | SUSE | SUSE Linux Enterprise Server 16.1 | CWE-522 | sdbootutil: qrencode invocation leaks PIN/recovery key in /proc/<pid>/cmdline |
| CVE-2026-105271 | 5.1 | 0.8 | GEO CORPORATION | "ゲオアプリ" for Android | CWE-312 | "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage … |
| CVE-2026-76666 | 4.7 | 0.6 | Hewlett Packard Enterprise | HPE NonStop EXPAND | CWE-125 | HPE NonStop EXPAND - Out-of-Bounds memory read |
| CVE-2026-79823 | 4.0 | 0.7 | Hewlett Packard Enterprise | HPE NonStop EMS Distributor | CWE-121 | HPE NonStop EMS Distributor - Buffer Overflow vulnerability |
| CVE-2026-110909 | 5.0 | 0.6 | Wheels | Wheels CLI | CWE-923 | Wheels CLI through 4.1.0 does not verify that the local development server an… |
| CVE-2026-16437 | 7.1 | 0.5 | Mitsubishi Electric Corporation | GENESIS | CWE-640 | An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, … |
| CVE-2026-76667 | 5.7 | 0.5 | Hewlett Packard Enterprise | HPE NonStop EXPAND | CWE-125 | HPE NonStop EXPAND - Out-of-Bounds memory read vulnerability |
| CVE-2026-19377 | 6.0 | 0.2 | Cato Networks | Cato Client for Windows | CWE-295 | Improper certificate validation in Cato Client tunnel handshake |
| CVE-2026-76668 | 6.3 | 0.1 | Hewlett Packard Enterprise | HPE NonStop Kernel | CWE-1260 | HPE NonStop Kernel - Access to unmapped or privileged data |
| CVE-2026-57155 | 9.9 | — | opnsense | core | CWE-22 | OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer |
| CVE-2026-105037 | 9.9 | — | EnergizeLab | station-middleware | CWE-73 | EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read |
| CVE-2026-105038 | 9.8 | — | EnergizeLab | FastAPI AI inference server | CWE-306 | EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model S… |
| CVE-2026-109686 | 9.8 | — | Link Whisper INC | Link Whisper Free | CWE-502 | WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerability |
| CVE-2026-109694 | 9.8 | — | WP ManageNinja LLC | Fluent CRM | CWE-266 | WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability |
| CVE-2026-109892 | 9.8 | — | Shabti Kaplan | Frontend Admin by DynamiApps | CWE-266 | WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalati… |
| CVE-2026-57496 | 9.6 | — | Labs64 | NetLicensing-MCP | CWE-22 | NetLicensing MCP Server: REST Path Traversal Bypasses Token Redaction |
| CVE-2026-105039 | 9.6 | — | EnergizeLab | station-middleware | CWE-862 | EnergizeLab Station Middleware Admin APIs Missing Role Checks |
| CVE-2026-111283 | 9.5 | — | BMC Helix | BMC Helix Network Management | CWE-305 | BMC Helix Network Management before 26.3.01 Authentication Bypass via SAML Co… |
| CVE-2026-105474 | 9.4 | — | WebPros | SolusVM 2 | CWE-1336 | A server-side template injection exists in SolusVM 2 up to version 2.0.0-4457… |
| CVE-2026-110812 | 9.4 | — | AWS | Amazon Neptune Engine | CWE-502 | Deserialization of untrusted data in the Gremlin graph-import path in Amazon … |
| CVE-2026-47218 | 9.3 | — | containerd | runwasi | CWE-502 | runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox |
| CVE-2026-84731 | 9.3 | — | Nutanix | Acropolis Operating System (AOS) | CWE-290 | Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Ga… |
| CVE-2026-99999 | 9.3 | — | Linux | Linux | — | ipv4: validate checksum_start before completing checksum |
| CVE-2026-102764 | 9.3 | — | BeyondTrust | Remote Support | CWE-290 | Improper Origin Validation in Internal Messaging Components of BeyondTrust Re… |
| CVE-2026-108497 | 9.3 | — | TMS | Amelia | CWE-89 | WordPress Amelia plugin <= 2.4.10 - SQL Injection vulnerability |
| CVE-2026-109688 | 9.3 | — | Link Whisper INC | Link Whisper Free | CWE-89 | WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerability |
| CVE-2026-109698 | 9.3 | — | Kitae Park | Mang Board WP | CWE-89 | WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability |
| CVE-2026-110957 | 9.3 | — | Wavlink | WL-WN530BE2-A | CWE-77 | Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection |
| CVE-2026-110958 | 9.3 | — | Wavlink | WN530HG4B | CWE-119 | Wavlink WN530HG4B api.cgi heap-based overflow |
| CVE-2026-111281 | 9.3 | — | Jooan | JA-A12 | CWE-798 | Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials |
| CVE-2026-111322 | 9.3 | — | coleam00 | Archon | CWE-306 | Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API |
| CVE-2026-111329 | 9.3 | — | juggleim | JuggleIM | CWE-1392 | JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console |
| CVE-2026-111312 | 9.2 | — | OpenHealthForAll | OpenHealth | CWE-306 | OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route |
| CVE-2026-47168 | 9.1 | — | espocrm | espocrm | CWE-502 | EspoCRM: Authenticated RCE via Unsafe PHP Object Deserialization in MassActio… |
| CVE-2026-55240 | 9.1 | — | msgbyte | tianji | CWE-1336 | Tianji: Remote Code Execution via lodash template evaluate pattern in survey … |
| CVE-2026-102946 | 9.1 | — | authlib | joserfc | CWE-290 | joserfc: JWS signature verification bypass via empty signatures array in jws.… |
| CVE-2026-105032 | 9.1 | — | EnergizeLab | FastAPI AI inference server | CWE-22 | EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary Fi… |
| CVE-2026-111235 | 9.1 | — | The OpenNMS Group | Meridian | CWE-204 | OpenNMS REST authorization bypass via non-canonical HTTP method |
| CVE-2026-111356 | 9.1 | — | magicblack | MacCMS | CWE-307 | MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brut… |
| CVE-2026-62679 | 8.9 | — | LycheeOrg | Lychee | CWE-22 | Lychee: Path traversal in `SecurePathController` allows authenticated arbitra… |
| CVE-2026-55239 | 8.8 | — | msgbyte | tianji | CWE-89 | Tianji: SQL Injection via unsanitized timezone parameter in analytics queries |
| CVE-2026-85634 | 8.8 | — | Red Hat | Red Hat Fuse 7 | CWE-22 | Wildfly-core: wildfly-core: deployer rbac role privilege escalation via path … |
| CVE-2026-105033 | 8.8 | — | EnergizeLab | AI Station firmware (RK3562) | CWE-798 | EnergizeLab AI Station Default Root Credentials with SSH Enabled |
| CVE-2026-105040 | 8.8 | — | EnergizeLab | NestJS auth service | CWE-639 | EnergizeLab Eilik User-ID Mass Assignment Account Takeover |
| CVE-2026-106700 | 8.8 | — | n/a | n/a | — | ELADMIN v2.7 and earlier contains an improper access control vulnerability in… |
| CVE-2026-106708 | 8.8 | — | n/a | n/a | — | XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSR… |
| CVE-2026-108426 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108427 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-20 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108428 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108429 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108430 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108431 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-121 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108432 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108437 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108439 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108440 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-121 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108441 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108442 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108443 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-193 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108444 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Remote Code Execution Vulnerability |
| CVE-2026-108445 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-121 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108446 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-416 | Microsoft Office Excel Remote Code Execution Vulnerability |
| CVE-2026-108447 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108449 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108450 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108451 | 8.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Word Remote Code Execution Vulnerability |
| CVE-2026-108452 | 8.8 | — | Microsoft | Microsoft SharePoint Server Subscription Edition | CWE-22 | Microsoft Office SharePoint Remote Code Execution Vulnerability |
| CVE-2026-109693 | 8.8 | — | WP ManageNinja LLC | Fluent CRM | CWE-266 | WordPress Fluent CRM plugin <= 3.2.5 - Privilege Escalation vulnerability |
| CVE-2026-110913 | 8.8 | — | Chrome | CWE-119 | Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a re… | |
| CVE-2026-110914 | 8.8 | — | Chrome | CWE-119 | Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed … | |
| CVE-2026-110915 | 8.8 | — | Chrome | CWE-416 | Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed… | |
| CVE-2026-110919 | 8.8 | — | Chrome | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote… | |
| CVE-2026-110920 | 8.8 | — | Chrome | CWE-119 | Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a rem… | |
| CVE-2026-110921 | 8.8 | — | Chrome | CWE-416 | Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote… | |
| CVE-2026-110922 | 8.8 | — | Chrome | CWE-416 | Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a… | |
| CVE-2026-111282 | 8.8 | — | driftregion | iso14229 | CWE-190 | iso14229 before 0.10.1 Out-of-Bounds Read via Handle_0x38_RequestFileTransfer |
| CVE-2026-55872 | 8.7 | — | mayerbalintdev | GYM-One | CWE-79 | GYM One admin user list is vulnerable to stored cross-site scripting |
| CVE-2026-97712 | 8.7 | — | Sonatype | Nexus Repository 3 | CWE-862 | Nexus Repository 3 - Privilege Escalation via Role Management |
| CVE-2026-104150 | 8.7 | — | adonisjs | http-server | CWE-400 | AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regul… |
| CVE-2026-108082 | 8.7 | — | sensiolabs | symfony | CWE-1333 | Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Re… |
| CVE-2026-109413 | 8.7 | — | sensiolabs | symfony | CWE-674 | Symfony: Unbounded Recursion in the YAML Inline Lexer Lets a Single Document … |
| CVE-2026-109449 | 8.7 | — | sensiolabs | symfony | CWE-674 | Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expression… |
| CVE-2026-111160 | 8.7 | — | ModelTC | LightLLM | CWE-502 | LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserializa… |
| CVE-2026-111277 | 8.7 | — | nivocart | nivocart | CWE-862 | NivoCart through 2.5.1 Guest Order Invoice Disclosure via account/order/download |
| CVE-2026-111279 | 8.7 | — | dragonflydb | dragonfly | CWE-789 | Dragonfly through 2.0.2 Unbounded Memory Allocation via Negative COUNT in HRA… |
| CVE-2026-111352 | 8.7 | — | ThinkCMF | ThinkCMF | CWE-863 | ThinkCMF through 8.0.1 Incorrect Authorization in Admin REST API |
| CVE-2026-45165 | 8.6 | — | Palo Alto Networks | Idira Secrets Manager (Self-Hosted) | CWE-863 | Idira Secrets Manager (Self-Hosted): Improper Authorization in REST API |
| CVE-2026-55103 | 8.6 | — | discourse | discourse-activity-pub | CWE-345 | Discourse ActivityPub: Fix inbound actor validation and apply outbound reques… |
| CVE-2026-75941 | 8.6 | — | Lenovo | Legion Zone Application | CWE-502 | A potential vulnerability was reported in the Lenovo Legion Zone application,… |
| CVE-2026-111214 | 8.6 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via interfaces_qi… |
| CVE-2026-111215 | 8.6 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE through 2.9.0 OS Command Injection via Wireless Parent Int… |
| CVE-2026-111216 | 8.6 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP |
| CVE-2026-111217 | 8.6 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE through 2.9.0 OS Command Injection via CARP VHID |
| CVE-2026-111218 | 8.6 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE 2.7.0 through 2.9.0 OS Command Injection via Traffic Shape… |
| CVE-2026-111220 | 8.6 | — | Netgate | pfSense CE | CWE-93 | Netgate pfSense CE through 2.9.0 Crontab Injection via PPP Periodic Reset ptpid |
| CVE-2026-111223 | 8.6 | — | Netgate | pfSense CE | CWE-74 | Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via IPsec Mobile Log… |
| CVE-2026-111226 | 8.6 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE 2.4.5 through 2.9.0 OS Command Injection via system_advanc… |
| CVE-2026-111229 | 8.6 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE 2.7.0 through 2.9.0 Command Injection via Captive Portal H… |
| CVE-2026-111231 | 8.6 | — | Netgate | pfSense CE | CWE-863 | Netgate pfSense CE through 2.9.0 Authorization Bypass via config_restore() an… |
| CVE-2026-111366 | 8.6 | — | cool-team-official | cool-admin-midway | CWE-639 | cool-admin-midway through 8.0.0 Authorization Bypass via /admin/sys/user Endp… |
| CVE-2026-92982 | 8.5 | — | Red Hat | Migration Toolkit for Applications 8 | CWE-1336 | Ansible-operator-plugins: ansible operator plugins: arbitrary code execution … |
| CVE-2026-103509 | 8.5 | — | Perforce | P4 (Helix core) | CWE-1220 | Credential Disclosure in P4 Search Configuration API |
| CVE-2026-104025 | 8.4 | — | PeaZip | PeaZip | CWE-22 | Path traversal in PeaZip object preview allows execution of arbitrary program… |
| CVE-2026-110936 | 8.4 | — | Siemens | Siemens Software Center | CWE-427 | A vulnerability has been identified in Siemens Software Center (All versions)… |
| CVE-2026-45449 | 8.3 | — | Unitronics | Unitronics UniStream Pro/UniLogic | CWE-78 | Unitronics - CWE-78: Improper Neutralization of Special Elements used in an O… |
| CVE-2026-45450 | 8.3 | — | Unitronics | Unitronics UniStream Pro/UniLogic | CWE-119 | Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of… |
| CVE-2026-45451 | 8.3 | — | Unitronics | Unitronics UniStream Pro/UniLogic | CWE-287 | Unitronics - CWE-287: Improper Authentication |
| CVE-2026-45452 | 8.3 | — | Unitronics | Unitronics UniStream Pro/UniLogic | CWE-134 | Unitronics - CWE-134 Use of Externally-Controlled format string |
| CVE-2026-77466 | 8.3 | — | LycheeOrg | Lychee | CWE-20 | Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection |
| CVE-2026-77470 | 8.3 | — | LycheeOrg | Lychee | CWE-20 | Lychee: Webshop checkout lets the client override the payment `amount` sent t… |
| CVE-2026-111280 | 8.3 | — | davenardella | snap7 | CWE-787 | snap7 through 1.4.3 Out-of-Bounds Write via TSnap7MicroClient::opReadArea |
| CVE-2026-61838 | 8.2 | — | LycheeOrg | Lychee | CWE-285 | Lychee: Album password bypass in ZIP downloads |
| CVE-2026-88794 | 8.2 | — | Sparx Systems | Enterprise Architect | CWE-611 | XML External Entity injection in Sparx Enterprise Architect |
| CVE-2026-100349 | 8.2 | — | getkin | kin-openapi | CWE-476 | kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a respon… |
| CVE-2026-105034 | 8.2 | — | EnergizeLab | NestJS auth service | CWE-287 | EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial … |
| CVE-2026-111234 | 8.2 | — | SimplePie | simplepie | CWE-73 | SimplePie through 1.9.0 Local File Read via file:// Redirect |
| CVE-2026-111330 | 8.2 | — | juggleim | JuggleIM | CWE-916 | JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1 |
| CVE-2026-111347 | 8.2 | — | opsre | go-ldap-admin | CWE-321 | go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd |
| CVE-2026-55587 | 8.1 | — | aliasvault | aliasvault | CWE-346 | AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID |
| CVE-2026-63442 | 8.1 | — | opnsense | core | CWE-117 | OPNsense: Log Forgery via Login Username CRLF in WebGUI Authentication → Pf T… |
| CVE-2026-111094 | 8.1 | — | JetBrains | TeamCity | CWE-502 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code executio… |
| CVE-2026-58390 | 8.0 | — | opnsense | core | CWE-79 | OPNsense: Stored XSS to root RCE via OpenVPN client common_name in status views |
| CVE-2026-111095 | 8.0 | — | JetBrains | TeamCity | CWE-79 | In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the cl… |
| CVE-2026-55246 | 7.8 | — | Tatsh | bincookie | CWE-122 | bincookie: Heap buffer overflow via unvalidated `num_pages` when parsing a `.… |
| CVE-2026-105035 | 7.8 | — | EnergizeLab | FirmwareUpdater | CWE-321 | EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key |
| CVE-2026-108433 | 7.8 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-807 | Microsoft Office Word Security Feature Bypass Vulnerability |
| CVE-2026-110746 | 7.8 | — | TotalSecurity | TotalAV | CWE-22 | CVE-2026-110746 |
| CVE-2026-111091 | 7.8 | — | JetBrains | Junie CLI | CWE-829 | In JetBrains Junie CLI before 26.8.3 code execution was possible via an untru… |
| CVE-2026-111224 | 7.7 | — | Netgate | pfSense CE | CWE-78 | Netgate pfSense CE through 2.9.0 OS Command Injection via openvpn.connect_asy… |
| CVE-2026-53574 | 7.6 | — | espocrm | espocrm | CWE-89 | EspoCRM: Blind SQL injection via streamAttachments where-clause complex expre… |
| CVE-2026-79832 | 7.6 | — | Hewlett Packard Enterprise | HPE NonStop SQL/MX Executor | CWE-121 | HPE NonStop SQL/MX Executor - Buffer overflow vulnerability |
| CVE-2026-61611 | 7.5 | — | LycheeOrg | Lychee | CWE-307 | Lychee: Missing rate limiting on album password unlock endpoint allows brute-… |
| CVE-2026-79833 | 7.5 | — | Hewlett Packard Enterprise | HPE NonStop ANSI SQLUTIL | CWE-248 | HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability |
| CVE-2026-87018 | 7.5 | — | undici | undici | CWE-248 | undici vulnerable to Denial of Service via TLS 1.2 certificate-changing reneg… |
| CVE-2026-95155 | 7.5 | — | n/a | n/a | CWE-674 | FasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2,… |
| CVE-2026-95179 | 7.5 | — | n/a | n/a | CWE-674 | An issue in lottie-android 6.7.1 and earlier (and master) allows a remote att… |
| CVE-2026-97370 | 7.5 | — | junrar | junrar | CWE-835 | Junrar: RarVM VM_JMP maxOpCount bypass causes infinite CPU loop during RAR4 e… |
| CVE-2026-97394 | 7.5 | — | getkin | kin-openapi | CWE-248 | kin-openapi: Nil-pointer dereference panic in openapi3filter for OpenAPI 3.1 … |
| CVE-2026-100352 | 7.5 | — | getkin | kin-openapi | CWE-754 | kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1… |
| CVE-2026-100353 | 7.5 | — | getkin | kin-openapi | CWE-476 | kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Item… |
| CVE-2026-100354 | 7.5 | — | getkin | kin-openapi | CWE-674 | kin-openapi: Uncontrolled Recursion on Circular allOf/anyOf/oneOf Schemas Cau… |
| CVE-2026-100409 | 7.5 | — | opennextjs | opennextjs-cloudflare | CWE-177 | OpenNext Cloudflare: Cache interception can bypass middleware protection for … |
| CVE-2026-103936 | 7.5 | — | libp2p | js-libp2p | CWE-248 | libp2p: Single pre-auth STUN packet terminates `@libp2p/webrtc` WebRTC-direct… |
| CVE-2026-104827 | 7.5 | — | reactphp | http | CWE-770 | react/http: Unbounded HTTP Client Response Header Buffering Leads to Memory E… |
| CVE-2026-105036 | 7.5 | — | EnergizeLab | Robot firmware (mode 104000) | CWE-494 | EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks |
| CVE-2026-107416 | 7.5 | — | Webba Plugins | Webba Booking | CWE-639 | WordPress Webba Booking plugin <= 6.5.2 - Insecure Direct Object References (… |
| CVE-2026-108116 | 7.5 | — | Progress Software | Kendo UI for jQuery | CWE-74 | MDX and SOAP Injection in Kendo UI for jQuery |
| CVE-2026-108448 | 7.5 | — | Microsoft | Microsoft 365 Apps for Enterprise | CWE-122 | Microsoft Office Outlook Remote Code Execution Vulnerability |
| CVE-2026-109468 | 7.5 | — | Microsoft | Microsoft Visual Studio 2022 version 17.14 | CWE-770 | ASP.NET Core Denial of Service Vulnerability |
| CVE-2026-109695 | 7.5 | — | WPManageNinja | FluentCart | CWE-201 | WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability |
| CVE-2026-109869 | 7.5 | — | undici | undici | CWE-248 | undici vulnerable to Denial of Service via unhandled error on excessive conte… |
| CVE-2026-110723 | 7.5 | — | Eclipse Foundation | Eclipse Connected Services Platform | CWE-290 | In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, … |
| CVE-2026-110874 | 7.5 | — | Dolibarr | dolibarr | CWE-502 | Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize() |
| CVE-2026-111093 | 7.5 | — | JetBrains | Datalore | CWE-23 | In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the … |
| CVE-2026-111219 | 7.5 | — | Netgate | pfSense CE | CWE-93 | Netgate pfSense CE through 2.9.0 Command Injection via PPPoE Server Username |
| CVE-2026-111221 | 7.5 | — | Netgate | pfSense CE | CWE-93 | Netgate pfSense CE through 2.9.0 Command Injection via RADIUS Secret mpd.conf… |
| CVE-2026-111222 | 7.5 | — | Netgate | pfSense CE | CWE-93 | Netgate pfSense CE through 2.9.0 php.ini Injection via Timezone Setting |
| CVE-2026-79834 | 7.4 | — | Hewlett Packard Enterprise | HPE NonStop SQL/MX SQLCAT | CWE-20 | HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability |
| CVE-2026-100351 | 7.4 | — | getkin | kin-openapi | CWE-289 | kin-openapi: ValidationHandler security-requirement bypass via encoded-path o… |
| CVE-2026-108334 | 7.4 | — | Red Hat | Red Hat Connectivity Link 1 | CWE-917 | Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-manage… |
| CVE-2026-109383 | 7.4 | — | undici | undici | CWE-295 | undici vulnerable to TLS certificate validation bypass via dropped tls option… |
| CVE-2026-109829 | 7.4 | — | undici | undici | CWE-346 | undici vulnerable to cache poisoning and cross-user disclosure via cross-orig… |
| CVE-2026-79837 | 7.3 | — | Hewlett Packard Enterprise | HPE NonStop SQL/MX UDR SERVER | CWE-20 | HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability |
| CVE-2026-79838 | 7.3 | — | Hewlett Packard Enterprise | HPE NonStop ODBC/MX Services | CWE-121 | HPE NonStop ODBC/MX Services - Memory corruption vulnerability |
| CVE-2026-79839 | 7.3 | — | Hewlett Packard Enterprise | HPE NonStop ODBC/MX Server | CWE-121 | HPE NonStop ODBC/MX Server - Memory corruption vulnerability |
| CVE-2026-79840 | 7.3 | — | Hewlett Packard Enterprise | HPE NonStop XABroker | CWE-121 | HPE NonStop XABroker - Memory corruption vulnerability |
| CVE-2026-103508 | 7.3 | — | Perforce | P4 (Helix core) | CWE-23 | Path traversal via logging configuration in P4Search |
| CVE-2026-104828 | 7.2 | — | HtmlUnit | htmlunit-neko | CWE-79 | HtmlUnit Neko: Mutation XSS (mXSS) in HTMLWriterFilter - TEXTAREA/TITLE entit… |
| CVE-2026-9703 | 7.1 | — | Grafana | Grafana Enterprise | CWE-284 | Viewer role can create, modify and delete Loki alerting rules |
| CVE-2026-53582 | 7.1 | — | opnsense | core | CWE-91 | OPNsense: XPATH Injection can disclose any secret in config.xml |
| CVE-2026-71490 | 7.1 | — | opnsense | core | CWE-863 | OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-onl… |
| CVE-2026-77467 | 7.1 | — | LycheeOrg | Lychee | CWE-400 | Lychee: A single 383-byte PDF causes ~184 seconds of CPU consumption in the r… |
| CVE-2026-84823 | 7.1 | — | Red Hat | Red Hat Enterprise Linux 8 | CWE-22 | Org.wildfly.core: wildfly: path traversal in take-snapshot discloses the serv… |
| CVE-2026-97665 | 7.1 | — | Sonatype | Nexus Repository 3 | CWE-862 | Nexus Repository 3 - Missing Authorization on NuGet Symbol Package Upload |
| CVE-2026-105065 | 7.1 | — | 8theme.com | XStore | CWE-79 | WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-108491 | 7.1 | — | Everest Forms | Everest Forms | CWE-79 | WordPress Everest Forms plugin <= 3.6.1 - Cross Site Scripting (XSS) vulnerab… |
| CVE-2026-108498 | 7.1 | — | bannersky | BSK PDF Manager | CWE-79 | WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulner… |
| CVE-2026-109685 | 7.1 | — | Link Whisper INC | Link Whisper Free | CWE-79 | WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vuln… |
| CVE-2026-109692 | 7.1 | — | ThemeGrill | User Registration | CWE-862 | WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabi… |
| CVE-2026-109702 | 7.1 | — | maxfoundry | Social Share Buttons | CWE-79 | WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vu… |
| CVE-2026-111170 | 7.1 | — | kedro-org | kedro-datasets | CWE-22 | kedro-datasets 9.3.0 through 9.6.0 Path Traversal via MatplotlibDataset Plot … |
| CVE-2026-111313 | 7.1 | — | DaKheera47 | JobOps | CWE-918 | JobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch |
| CVE-2026-111359 | 7.1 | — | crmeb | CRMEB | CWE-639 | CRMEB 5.6.1 through 6.0.0 IDOR via giftDetail and receiveGift |
| CVE-2026-111363 | 7.1 | — | dataelement | bisheng | CWE-639 | BISHENG through 3.0.0-beta4 IDOR via /api/v1/knowledge/file_bbox |
| CVE-2026-111364 | 7.1 | — | mindoc-org | MinDoc | CWE-639 | MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch |
| CVE-2026-111369 | 7.1 | — | classroomio | ClassroomIO | CWE-863 | ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delet… |
| CVE-2026-89057 | 7.0 | — | Lenovo | Idea Tab Pro (TB373FU) | CWE-288 | A potential authentication bypass vulnerability was reported in some Lenovo t… |
| CVE-2026-92629 | 7.0 | — | Lenovo | Baiying PC Client | CWE-862 | A potential improper authorization vulnerability was reported in Lenovo Baiyi… |
| CVE-2026-111105 | 7.0 | — | Telegram | Telegram | CWE-197 | Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability |
| CVE-2026-111357 | 7.0 | — | Ivanti | Connect Secure | CWE-829 | Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked b… |
| CVE-2026-111365 | 7.0 | — | cool-team-official | cool-admin-midway | CWE-639 | cool-admin-midway through 8.0.0 Missing Authorization via System Role Endpoints |
| CVE-2024-58397 | 6.9 | — | enzo1982 | mp4v2 | CWE-125 | MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4File::GetChapters |
| CVE-2026-77468 | 6.9 | — | LycheeOrg | Lychee | CWE-770 | Lychee: Missing Authentication for Critical Function and Allocation of Resour… |
| CVE-2026-97666 | 6.9 | — | Sonatype | Nexus Repository 3 | CWE-470 | Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint |
| CVE-2026-102527 | 6.9 | — | nuxt-modules | og-image | CWE-349 | Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynami… |
| CVE-2026-105660 | 6.9 | — | mtrudel | bandit | CWE-1286 | Unvalidated HTTP/1 request-target authority lets a client choose conn.host an… |
| CVE-2026-110875 | 6.9 | — | adplug | adplug | CWE-787 | AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp |
| CVE-2026-111123 | 6.9 | — | FluidSynth | fluidsynth | CWE-787 | FluidSynth through 2.6.1 Out-of-Bounds Write via SoundFont Modulator Destination |
| CVE-2026-111124 | 6.9 | — | HEASARC | cfitsio | CWE-125 | CFITSIO through 4.7.0 Heap Out-of-Bounds Read via Negative ZDITHER0 Seed |
| CVE-2026-111125 | 6.9 | — | HEASARC | cfitsio | CWE-125 | CFITSIO through 4.7.0 Heap Out-of-Bounds Read via HCOMPRESS input_nnybble |
| CVE-2026-111126 | 6.9 | — | catdoc | catdoc | CWE-125 | catdoc through 0.95 Out-of-Bounds Read in xls2csv MULRK Record Handler |
| CVE-2026-111127 | 6.9 | — | catdoc | catdoc | CWE-125 | catdoc through 0.95 Out-of-Bounds Read via xls2csv copy_unicode_string |
| CVE-2026-111130 | 6.9 | — | OpenSlide | openslide | CWE-125 | OpenSlide through 4.0.1 Heap Out-of-Bounds Read via MIRAX get_tile_position |
| CVE-2026-111131 | 6.9 | — | libxmp | libxmp | CWE-125 | libxmp through 4.7.4 Stack Out-of-Bounds Read via P61A Depacker |
| CVE-2026-111132 | 6.9 | — | GNOME | libgxps | CWE-125 | GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_e… |
| CVE-2026-111133 | 6.9 | — | libyal | libfsapfs | CWE-125 | libfsapfs through 20260921 Heap Out-of-Bounds Read via libfsapfs_key_encrypte… |
| CVE-2026-111134 | 6.9 | — | libyal | libfwsi | CWE-125 | libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_file_entry_v… |
| CVE-2026-111135 | 6.9 | — | libyal | libfwsi | CWE-125 | libfwsi through 20260522 Heap Out-of-Bounds Read via libfwsi_mtp_volume_value… |
| CVE-2026-111136 | 6.9 | — | swami | libinstpatch | CWE-787 | libInstPatch through 1.1.7 Heap Out-of-Bounds Write via ipatch_sf2_gen_is_valid |
| CVE-2026-111137 | 6.9 | — | amartin755 | libsmi | CWE-787 | libsmi through 0.5.0 Out-of-Bounds Write via smiValueAsString OCTET STRING DE… |
| CVE-2026-111140 | 6.9 | — | libyal | libregf | CWE-125 | libregf through 20260526 Heap Out-of-Bounds Read via libregf_value_item_read_… |
| CVE-2026-111145 | 6.9 | — | Yeraze | ytnef | CWE-125 | ytnef through 2.1.2 Heap Out-of-Bounds Read via DecompressRTF |
| CVE-2026-111146 | 6.9 | — | Yeraze | ytnef | CWE-125 | ytnef through 2.1.2 Heap Out-of-Bounds Read via MAPIPrint in lib/ytnef.c |
| CVE-2026-111147 | 6.9 | — | libyal | libesedb | CWE-125 | Libyal libesedb through 20260704 Heap Out-of-Bounds Read via libesedb_record_… |
| CVE-2026-111149 | 6.9 | — | danoli3 | FreeImage | CWE-125 | FreeImage through 3.19.23 Heap Out-of-Bounds Read via PICT Unpack32Bits |
| CVE-2026-111151 | 6.9 | — | aous72 | OpenJPH | CWE-787 | OpenJPH through 0.32.0 Heap Out-of-Bounds Write in HTJ2K Cleanup-Pass Decoder |
| CVE-2026-111154 | 6.9 | — | sezero | libtimidity | CWE-787 | libTiMidity through 0.2.8 Stack Out-of-Bounds Write via parse_gen in SoundFon… |
| CVE-2026-111155 | 6.9 | — | sezero | libtimidity | CWE-125 | libTiMidity through 0.2.8 Out-of-Bounds Read via SoundFont Loader sndfont.c |
| CVE-2026-111156 | 6.9 | — | sezero | libtimidity | CWE-787 | libTiMidity through 0.2.8 Out-of-Bounds Access via SoundFont Preset Header |
| CVE-2026-111157 | 6.9 | — | SoX | sox | CWE-787 | SoX through 14.4.2 Heap Out-of-Bounds Write via MS ADPCM WAV Decoding |
| CVE-2026-111159 | 6.9 | — | libyal | libewf | CWE-125 | libewf through 20260924 Heap Out-of-Bounds Read via L01 Extended Attribute Pa… |
| CVE-2026-111161 | 6.9 | — | Wohlstand | libADLMIDI | CWE-787 | libADLMIDI 1.6.2 through 1.6.2.1 Stack Out-of-Bounds Write via BW_MidiSequenc… |
| CVE-2026-111162 | 6.9 | — | Mindwerks | WildMIDI | CWE-125 | WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmp |
| CVE-2026-111167 | 6.9 | — | GNU | LibreDWG | CWE-125 | GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder |
| CVE-2026-111230 | 6.9 | — | Netgate | pfSense CE | CWE-73 | Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URL |
| CVE-2026-111269 | 6.9 | — | libical | libical | CWE-125 | libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string |
| CVE-2026-111270 | 6.9 | — | Konstanty Bialkowski | libmodplug | CWE-787 | libmodplug through 0.8.9.1 Heap Out-of-Bounds Write via CSoundFile::ReadDSM |
| CVE-2026-111273 | 6.9 | — | selmf | unarr | CWE-193 | unarr through 1.1.1 Off-by-One Heap Buffer Overflow via tar_get_name |
| CVE-2026-111275 | 6.9 | — | NIFTI-Imaging | nifti_clib | CWE-787 | nifti_clib through 3.0.1 Stack Out-of-Bounds Access via nifti_convert_n2hdr2nim |
| CVE-2026-111278 | 6.9 | — | nivocart | nivocart | CWE-804 | NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML |
| CVE-2026-111320 | 6.9 | — | ValueCell-ai | ValueCell | CWE-918 | ValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check |
| CVE-2026-111323 | 6.9 | — | samugit83 | RedAmon | CWE-918 | RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint |
| CVE-2026-111324 | 6.9 | — | lejianwen | rustdesk-api | CWE-639 | rustdesk-api through 2.7 Authorization Bypass via POST /api/sysinfo |
| CVE-2026-111349 | 6.9 | — | puemos | Craftplan | CWE-862 | Craftplan through 0.7.5 Missing Authorization via CRM Customer JSON:API and G… |
| CVE-2026-111367 | 6.9 | — | aaPanel | BillionMail | CWE-1394 | BillionMail through 4.9 Forgeable JWTs via Default Signing Key |
| CVE-2026-89062 | 6.8 | — | Lenovo | Energy Management Driver | CWE-787 | A potential out-of-bounds write vulnerability was reported in the Lenovo Ener… |
| CVE-2026-110876 | 6.8 | — | adplug | adplug | CWE-125 | AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files |
| CVE-2026-110877 | 6.8 | — | adplug | adplug | CWE-125 | AdPlug through 2.4 Heap Out-of-Bounds Read via CdmoLoader::load |
| CVE-2026-111128 | 6.8 | — | assimp | assimp | CWE-476 | Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment |
| CVE-2026-111129 | 6.8 | — | assimp | assimp | CWE-476 | Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track |
| CVE-2026-111138 | 6.8 | — | NetSurf | libnsbmp | CWE-125 | NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read in RLE8 and RLE4 Decoders |
| CVE-2026-111139 | 6.8 | — | NetSurf | libnsbmp | CWE-125 | NetSurf libnsbmp through 0.1.7 Out-of-Bounds Read via bmp_decode_mask |
| CVE-2026-111142 | 6.8 | — | gdraheim | zziplib | CWE-125 | Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst |
| CVE-2026-111143 | 6.8 | — | ansilove | libansilove | CWE-125 | Ansilove libansilove through 1.4.2 Out-of-Bounds Read via ansilove_xbin RLE D… |
| CVE-2026-111144 | 6.8 | — | ansilove | libansilove | CWE-476 | libansilove 1.3.0 through 1.4.2 NULL Pointer Dereference via ansilove_xbin |
| CVE-2026-111148 | 6.8 | — | libsidplayfp | libsidplayfp | CWE-125 | libsidplayfp through 3.1.1 Heap Out-of-Bounds Read via SidTuneBase::acceptSid… |
| CVE-2026-111150 | 6.8 | — | ValleyBell | libvgm | CWE-125 | ValleyBell libvgm through commit a6eed945 Heap Out-of-Bounds Read via Decompr… |
| CVE-2026-111152 | 6.8 | — | libgme | game-music-emu | CWE-125 | Game Music Emu (libgme) through 0.6.5 Heap Out-of-Bounds Read via AY Loader |
| CVE-2026-111153 | 6.8 | — | libgme | game-music-emu | CWE-125 | Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mut… |
| CVE-2026-111158 | 6.8 | — | EarthScope | libmseed | CWE-125 | EarthScope libmseed through 3.5.4 Heap Out-of-Bounds Read via ms3_detect |
| CVE-2026-111163 | 6.8 | — | Mindwerks | WildMIDI | CWE-125 | WildMIDI through 0.5.0 Heap Out-of-Bounds Read via _WM_ParseNewHmi |
| CVE-2026-111164 | 6.8 | — | UADE | uade | CWE-125 | UADE through 3.05 Out-of-Bounds Read in uade_filemagic via Short Module |
| CVE-2026-111165 | 6.8 | — | sezero | libmikmod | CWE-125 | libmikmod through 3.3.15 Out-of-Bounds Read in MTM_Load via Channel Count |
| CVE-2026-111166 | 6.8 | — | sezero | libmikmod | CWE-125 | libmikmod through 3.3.15 Heap Out-of-Bounds Read via IMF_Load |
| CVE-2026-111271 | 6.8 | — | Konstanty Bialkowski | libmodplug | CWE-125 | libmodplug through 0.8.9.1 Heap Out-of-Bounds Read via CSoundFile::ReadAMS2 |
| CVE-2026-111272 | 6.8 | — | LibRaw | LibRaw | CWE-125 | LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo |
| CVE-2026-111274 | 6.8 | — | selmf | unarr | CWE-125 | unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_extra_fields |
Results continue: ranks 401–557.
Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.
Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.
Day boundary. A day is a UTC calendar day. This page covers 2026-10-15 00:00:00–23:59:59 UTC. All times shown are UTC.
Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.
Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.
Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.
