CVE 65

• Multiple Vulnerabilities in Lite-On O-RU Firmware Sep 15, 2026
• CVE-2026-90824 - GPAC MP4Box Stack-Based Overflow Vulnerability Sep 14, 2026
• CVE-2026-88002 - Open WebUI Vulnerability Exposes Server to Hang Sep 9, 2026
• CVE-2026-15460 - Missing Channel-State Validation in Zephyr Bluetooth Classic L2CAP Receive Path Sep 9, 2026
• CVE-2026-86148 - Tenda CP3 Kylin System Command Injection Sep 5, 2026
• Signature Optional - Analysis of CVE-2026-28323 Sep 3, 2026
• CVE-2026-84482 - WWBN AVideo Cross-Site Request Forgery Sep 1, 2026
• CVE-2026-82343 - Gimp Vulnerability Details Aug 28, 2026
• CVE-2026-82306 - StarRocks Query Detail Endpoint Vulnerability Aug 28, 2026
• CVE-2026-82291 - HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials Aug 28, 2026
• CVE-2026-52854 - mediawiki/maps Stored XSS Vulnerability Aug 18, 2026
• CVE-2026-75531 - Stored Cross-Site Scripting Vulnerability in Pandora Aug 17, 2026
• CVE-2026-69148 - MLflow Vulnerability Exposes User Artifacts Aug 17, 2026
• CVE-2026-73249 - calibre Content Server Vulnerability Aug 11, 2026
• CVE-2026-11812 - UpdateHub Vulnerability Causes DoS Aug 10, 2026
• CVE-2026-12372 - Server-Side Request Forgery (SSRF) in nltk/nltk Aug 9, 2026
• CVE-2026-7406 - BMP File Parsing Untrusted Pointer Dereference in Autodesk Products Aug 6, 2026
• CVE-2026-11836 - Production Debug-Unlock Token Verification Missing Device Binding Aug 4, 2026
• CVE-2026-10848 - Out-of-bounds Read in Zephyr OCPP 1.6 RPC Message Parser Aug 2, 2026
• CVE-2026-68563 - Information Disclosure in Ansible Collection Redhat Leapp Jul 30, 2026
• CVE-2026-14643 undici Vulnerable to Cross-User Information Disclosure Jul 29, 2026
• CVE-2026-17497 - NoteGen Arbitrary OS Command Execution via Tauri Shell Jul 26, 2026
• CVE-2026-10681 - SMP Race in Thread Index Allocation Jul 25, 2026
• Critical Vulnerability CVE-2026-60324 in MySQL Server Jul 21, 2026
• CVE-2026-47134 - ClearanceKit Vulnerability Exposed Jul 20, 2026
• CVE-2026-64186 - Fixing Latent Out-of-Bounds Access in IOMMU Debugfs Jul 19, 2026
• CVE-2026-16195 - Sipeed PicoClaw Group Message Authorization Flaw Jul 18, 2026
• CVE-2026-10130 - QueryWeaver Authentication Bypass Vulnerability Jul 18, 2026
• CVE-2026-63175 - Cross-Capture Session Data Leakage in Looklyloo Jul 15, 2026
• CVE-2026-62314 - Anubis Policy Bypass via Client Controlled X-Original-URI Header Jul 15, 2026
• CVE-2026-58408 - ChurchCRM Vulnerability Exposes PII Jul 13, 2026
• CVE-2026-15506 - SecureAge CatchPulse Driver Vulnerability Jul 12, 2026
• CVE-2026-10660 - Memory Corruption in Bluetooth BAP Broadcast Assistant Jul 11, 2026
• CVE-2026-55428 - Coder Vulnerability Route Hijacking Risk Jul 8, 2026
• CVE-2026-13768 - Gardyn IoT Hub Use of Hard-coded Credentials Jul 2, 2026
• CVE-2026-10648 - Critical NULL-pointer Dereference Vulnerability in MCUmgr Jun 29, 2026
• CVE-2026-48764 - TypeBot SSRF Vulnerability Exploited via DNS Rebinding Jun 17, 2026
• CVE-2026-44587 - CarrierWave Bypass Vulnerability Jun 16, 2026
• CVE-2026-12191 - Vulnerability in Comma AI Openpilot Jun 14, 2026
• Alert Exploitation of CVE-2026-34197 in Apache ActiveMQ Jun 12, 2026
• CVE-2026-9746 - Server Crashes Due to Exchange Option Jun 9, 2026
• CVE-2026-11459 - SecureAge CatchPulse IOCTL Vulnerability Disclosed Jun 7, 2026
• CVE-2026-10199 - Assimp glTF2Asset.h LazyDict Null Pointer Dereference May 31, 2026
• CVE-2026-48810 - FreeScout Thread Edit Authorization Bypass via Missing Mailbox Check May 29, 2026
• Wide-ranging 7-zip Vulnerability Exposes Millions to Code Execution Risks May 28, 2026
• Detecting CVE-2026-0265 at Scale PAN-OS CAS Authentication Bypass May 22, 2026
• CVE-2026-23226 How a Missing Lock in ksmbd's Channel List Exposes Your Linux SMB3 Server Apr 8, 2026
• 10 Minutes with Claude Remote Code Execution in Apache ActiveMQ (CVE-2026-34197) Apr 7, 2026
• Critical Vulnerability CVE-2025-32975 Exploited in Quest KACE Systems Mar 23, 2026
• Critical Vulnerability CVE-2025-32975 Exploited in Quest KACE Systems Mar 23, 2026
• CVE-2026-31979 The Symlink Trap - Root Privilege Escalation in Himmelblau Mar 20, 2026
• CVE-2026-31979 The Symlink Trap - Root Privilege Escalation in Himmelblau Mar 20, 2026
• Improper File Access Permission Settings in Digital Arts Products Mar 9, 2026
• Critical Vulnerabilities Found in NesterSoft WorkTime Feb 22, 2026
• Full Disclosure Authenticated RCE Vulnerabilities in Netgate pfSense Feb 16, 2026
• Multiple vulnerabilities in Cybozu Garoon Feb 2, 2026
• Multiple Vulnerabilities Found in Cybozu Garoon Feb 2, 2026
• CVE-2025-40551 - Another Solarwinds Web Help Desk Deserialization Issue Jan 28, 2026
• CVE-2025-64155 | Fortinet FortiSIEM Jan 13, 2026
• CVE-2026-22200 Jan 12, 2026
• New React Rsc Vulnerabilities Enable.Html Dec 14, 2025
• WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide Nov 19, 2025
• Samsung patches actively exploited zero-day reported by WhatsApp Sep 12, 2025
• Tenable Fixes Three High-Severity Flaws in Vulnerability Scanner Nessus Jun 16, 2025
• Multiple CVEs in Infoblox NetMRI RCE, Auth Bypass, SQLi, and File Read Vulnerabilities Jun 4, 2025