CVE 84
- CVE-2026-119285 - Fiber CORS Vulnerability
- Yamaha YMS-VPN8 and YMS-VPN8-CP Register Windows Services with Unquoted File Paths
- CVE-2026-82411 - Objects API Cross-object-type Authorization Bypass
- In a pickle Why every pickle defense in machine learning is bypassed the same way
- CVE-2026-2270 - StatefulSet and ControllerRevision Vulnerability
- CVE-2026-108978 - Samsung rlottie Heap-based Buffer Overflow
- CVE-2026-108769 - zhayujie CowAgent Markdown Rendering Denial of Service
- CVE-2026-107284 - AsyncHttpClient Vulnerability Discovered
- CVE-2026-105816 - Vault Vulnerable to Arbitrary Code Execution
- CVE-2026-86344 - 389-ds-base Vulnerability Report
- Multiple Vulnerabilities in Pgpool-II
- CVE-2026-94204 - Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application
- CVE-2026-93853 - Barman Snapshot Backup Deletion Vulnerability
- Multiple Vulnerabilities in baserCMS
- CVE-2026-97368 - chillzhuang SpringBlade Vulnerability
- CVE-2026-85491 - CatalystSeal Vulnerability Details
- CVE-2024-0244 - A Heap Buffer Overflow in the Canon MF753Cdw Printer
- CVE-2026-61852 - Chartbrew SQL Injection Vulnerability
- CVE-2026-94090 - JusticeRage Manalyze PE Parser Vulnerability
- Multiple Vulnerabilities in Lite-On O-RU Firmware
- CVE-2026-90824 - GPAC MP4Box Stack-Based Overflow Vulnerability
- CVE-2026-88002 - Open WebUI Vulnerability Exposes Server to Hang
- CVE-2026-15460 - Missing Channel-State Validation in Zephyr Bluetooth Classic L2CAP Receive Path
- CVE-2026-86148 - Tenda CP3 Kylin System Command Injection
- Signature Optional - Analysis of CVE-2026-28323
- CVE-2026-84482 - WWBN AVideo Cross-Site Request Forgery
- CVE-2026-82343 - Gimp Vulnerability Details
- CVE-2026-82306 - StarRocks Query Detail Endpoint Vulnerability
- CVE-2026-82291 - HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials
- CVE-2026-52854 - mediawiki/maps Stored XSS Vulnerability
- CVE-2026-75531 - Stored Cross-Site Scripting Vulnerability in Pandora
- CVE-2026-69148 - MLflow Vulnerability Exposes User Artifacts
- CVE-2026-73249 - calibre Content Server Vulnerability
- CVE-2026-11812 - UpdateHub Vulnerability Causes DoS
- CVE-2026-12372 - Server-Side Request Forgery (SSRF) in nltk/nltk
- CVE-2026-7406 - BMP File Parsing Untrusted Pointer Dereference in Autodesk Products
- CVE-2026-11836 - Production Debug-Unlock Token Verification Missing Device Binding
- CVE-2026-10848 - Out-of-bounds Read in Zephyr OCPP 1.6 RPC Message Parser
- CVE-2026-68563 - Information Disclosure in Ansible Collection Redhat Leapp
- CVE-2026-14643 undici Vulnerable to Cross-User Information Disclosure
- CVE-2026-17497 - NoteGen Arbitrary OS Command Execution via Tauri Shell
- CVE-2026-10681 - SMP Race in Thread Index Allocation
- Critical Vulnerability CVE-2026-60324 in MySQL Server
- CVE-2026-47134 - ClearanceKit Vulnerability Exposed
- CVE-2026-64186 - Fixing Latent Out-of-Bounds Access in IOMMU Debugfs
- CVE-2026-16195 - Sipeed PicoClaw Group Message Authorization Flaw
- CVE-2026-10130 - QueryWeaver Authentication Bypass Vulnerability
- CVE-2026-63175 - Cross-Capture Session Data Leakage in Looklyloo
- CVE-2026-62314 - Anubis Policy Bypass via Client Controlled X-Original-URI Header
- CVE-2026-58408 - ChurchCRM Vulnerability Exposes PII
- CVE-2026-15506 - SecureAge CatchPulse Driver Vulnerability
- CVE-2026-10660 - Memory Corruption in Bluetooth BAP Broadcast Assistant
- CVE-2026-55428 - Coder Vulnerability Route Hijacking Risk
- CVE-2026-13768 - Gardyn IoT Hub Use of Hard-coded Credentials
- CVE-2026-10648 - Critical NULL-pointer Dereference Vulnerability in MCUmgr
- CVE-2026-48764 - TypeBot SSRF Vulnerability Exploited via DNS Rebinding
- CVE-2026-44587 - CarrierWave Bypass Vulnerability
- CVE-2026-12191 - Vulnerability in Comma AI Openpilot
- Alert Exploitation of CVE-2026-34197 in Apache ActiveMQ
- CVE-2026-9746 - Server Crashes Due to Exchange Option
- CVE-2026-11459 - SecureAge CatchPulse IOCTL Vulnerability Disclosed
- CVE-2026-10199 - Assimp glTF2Asset.h LazyDict Null Pointer Dereference
- CVE-2026-48810 - FreeScout Thread Edit Authorization Bypass via Missing Mailbox Check
- Wide-ranging 7-zip Vulnerability Exposes Millions to Code Execution Risks
- Detecting CVE-2026-0265 at Scale PAN-OS CAS Authentication Bypass
- CVE-2026-23226 How a Missing Lock in ksmbd's Channel List Exposes Your Linux SMB3 Server
- 10 Minutes with Claude Remote Code Execution in Apache ActiveMQ (CVE-2026-34197)
- Critical Vulnerability CVE-2025-32975 Exploited in Quest KACE Systems
- Critical Vulnerability CVE-2025-32975 Exploited in Quest KACE Systems
- CVE-2026-31979 The Symlink Trap - Root Privilege Escalation in Himmelblau
- CVE-2026-31979 The Symlink Trap - Root Privilege Escalation in Himmelblau
- Improper File Access Permission Settings in Digital Arts Products
- Critical Vulnerabilities Found in NesterSoft WorkTime
- Full Disclosure Authenticated RCE Vulnerabilities in Netgate pfSense
- Multiple vulnerabilities in Cybozu Garoon
- Multiple Vulnerabilities Found in Cybozu Garoon
- CVE-2025-40551 - Another Solarwinds Web Help Desk Deserialization Issue
- CVE-2025-64155 | Fortinet FortiSIEM
- CVE-2026-22200
- New React Rsc Vulnerabilities Enable.Html
- WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
- Samsung patches actively exploited zero-day reported by WhatsApp
- Tenable Fixes Three High-Severity Flaws in Vulnerability Scanner Nessus
- Multiple CVEs in Infoblox NetMRI RCE, Auth Bypass, SQLi, and File Read Vulnerabilities