Browse All CVEs
14,298 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-71968 |
high | 8.4 | 0.0014 | 2026-10-29 | OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability | |
CVE-2026-71969 |
high | 8.4 | 0.0018 | 2026-10-29 | OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerabil | |
CVE-2026-14886 |
high | 8.2 | 0.0033 | 2026-10-29 | Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespac | |
CVE-2026-69118 |
high | 8.7 | 0.0080 | 2026-10-29 | Cachet through 2.4.1 contains a server-side template injection vulnerability in incident t | |
CVE-2026-71965 |
high | 8.7 | 0.0047 | 2026-10-29 | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution | |
CVE-2026-71966 |
high | 8.7 | 0.0328 | 2026-10-29 | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vul | |
CVE-2026-11810 |
high | 7.5 | 0.0047 | 2026-10-29 | The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mg | |
CVE-2026-13717 |
high | 8.8 | 0.0057 | 2026-10-29 | A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration | |
CVE-2026-18949 |
high | 8.8 | 0.0066 | 2026-10-29 | A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromi | |
CVE-2026-72903 |
high | 8.1 | 0.0049 | 2026-10-29 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.235, a | |
CVE-2026-72909 |
high | 7.1 | 0.0047 | 2026-10-29 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and | |
CVE-2026-72910 |
high | 7.1 | 0.0050 | 2026-10-29 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.112.0 and | |
CVE-2026-72913 |
high | 7.3 | 0.0021 | 2026-10-29 | Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty- | |
CVE-2026-73030 |
high | 7.2 | 0.0059 | 2026-10-29 | unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability i | |
CVE-2026-8718 |
high | 8.4 | 0.0017 | 2026-10-29 | tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which | |
CVE-2026-44763 |
high | 7.6 | 0.0040 | 2026-10-29 | SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit ins | |
CVE-2026-44764 |
high | 7.3 | 0.0032 | 2026-10-29 | Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and In | |
CVE-2026-44765 |
high | 7.3 | 0.0038 | 2026-10-29 | Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and In | |
CVE-2026-58230 |
high | 7.0 | 0.0031 | 2026-10-29 | SAP Approuter does not sufficiently validate certain token content under specific configur | |
CVE-2026-58243 |
high | 8.8 | 0.0044 | 2026-10-29 | SAP ABAP Development Tools does not perform necessary authorization checks for certain fun | |
CVE-2026-66763 |
high | 7.9 | 0.0020 | 2026-10-29 | SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials as | |
CVE-2026-19424 |
high | 8.7 | 0.0051 | 2026-10-29 | Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vuln | |
CVE-2026-4757 |
high | 7.2 | 0.0057 | 2026-10-29 | A VAPIX API parameter had improper input validation which could allow code execution and p | |
CVE-2026-19418 |
high | 7.3 | 0.0024 | 2026-10-29 | The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became in | |
CVE-2026-15556 |
high | 8.1 | 0.0030 | 2026-10-29 | A flaw was found in Picketlink's SP signature validation; a SAML response containing zero | |
CVE-2026-15561 |
high | 7.5 | 0.0072 | 2026-10-29 | A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on si | |
CVE-2026-15567 |
high | 7.5 | 0.0089 | 2026-10-29 | A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryErro | |
CVE-2026-72694 |
high | 7.1 | 0.0014 | 2026-10-29 | A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently | |
CVE-2026-73160 |
high | 8.7 | 0.0041 | 2026-10-29 | Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event | |
CVE-2026-13739 |
high | 8.8 | 0.0048 | 2026-10-29 | A legacy endpoint in Command Center contained an unauthenticated server-side request forge | |
CVE-2026-50236 |
high | 7.4 | 0.0047 | 2026-10-29 | An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. | |
CVE-2026-50237 |
high | 7.4 | 0.0047 | 2026-10-29 | A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Hel | |
CVE-2026-72533 |
high | 8.8 | 0.0056 | 2026-10-29 | An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated | |
CVE-2026-72534 |
high | 8.8 | 0.0042 | 2026-10-29 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allo | |
CVE-2026-72535 |
high | 8.6 | 0.0057 | 2026-10-29 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenti | |
CVE-2026-72536 |
high | 8.6 | 0.0057 | 2026-10-29 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenti | |
CVE-2026-72537 |
high | 8.8 | 0.0040 | 2026-10-29 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allo | |
CVE-2026-72538 |
high | 8.8 | 0.0098 | 2026-10-29 | An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticate | |
CVE-2026-72543 |
high | 7.5 | 0.0061 | 2026-10-29 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 | |
CVE-2026-72544 |
high | 7.5 | 0.0025 | 2026-10-29 | An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows una | |
CVE-2026-72545 |
high | 7.5 | 0.0054 | 2026-10-29 | An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 | |
CVE-2026-72546 |
high | 7.1 | 0.0028 | 2026-10-29 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allo | |
CVE-2026-72547 |
high | 7.1 | 0.0028 | 2026-10-29 | An insecure direct object reference vulnerability in Attendize through commit 9289acb allo | |
CVE-2026-72548 |
high | 7.5 | 0.0061 | 2026-10-29 | An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows una | |
CVE-2026-72551 |
high | 8.8 | 0.0101 | 2026-10-29 | A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with | |
CVE-2026-72552 |
high | 7.5 | 0.0061 | 2026-10-29 | A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated | |
CVE-2026-72555 |
high | 8.1 | 0.0037 | 2026-10-29 | A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 | |
CVE-2026-72556 |
high | 8.8 | 0.0101 | 2026-10-29 | A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user | |
CVE-2026-72557 |
high | 8.8 | 0.0048 | 2026-10-29 | An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users | |
CVE-2026-72558 |
high | 8.8 | 0.0043 | 2026-10-29 | An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticated staff t |