All Critical High Medium Low
CVE Severity CVSS EPSS First Seen Flags Description
CVE-2026-63218 medium 6.5 0.0037 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-63217 medium 6.5 0.0030 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-63215 high 8.3 0.0032 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-63214 high 8.8 0.0046 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-63213 high 7.2 0.0055 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-63111 high 7.1 0.0027 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-61651 high 8.3 0.0032 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-61649 high 7.7 0.0030 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-123208 high 7.7 0.0038 2026-11-05 noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local
CVE-2026-123207 low 2.3 0.0024 2026-11-05 LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows au
CVE-2026-123206 medium 6.3 0.0046 2026-11-05 EdgeChat before 2.20.3 contains a missing authentication vulnerability in the GET /files/:
CVE-2026-123205 high 8.3 0.0042 2026-11-05 accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog a
CVE-2026-123204 medium 5.3 0.0030 2026-11-05 Posta before v0.18.0 contains a server-side request forgery vulnerability that allows auth
CVE-2026-123203 medium 6.9 0.0014 2026-11-05 NEURON (CoreNEURON) through 9.0.2 contains a stack buffer overflow vulnerability that allo
CVE-2026-123202 high 8.7 0.0070 2026-11-05 libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_par
CVE-2026-123201 medium 6.3 0.0039 2026-11-05 Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vu
CVE-2026-123200 high 8.7 0.0045 2026-11-05 VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_Endpoint::h
CVE-2026-123199 medium 6.8 0.0014 2026-11-05 eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in get_at
CVE-2026-123198 critical 9.3 0.0084 2026-11-05 LMFDB before commit 01829bd contains a server-side template injection vulnerability in the
CVE-2026-123197 medium 6.9 0.0042 2026-11-05 WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that all
CVE-2026-123196 high 8.6 0.0036 2026-11-05 Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unau
CVE-2026-118494 high 8.2 0.0047 2026-11-05 Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.
CVE-2026-116472 low 2.7 0.0041 2026-11-05 A security issue was discovered in ingress-nginx where a user with permission to create an
CVE-2026-115451 medium 6.9 0.0025 2026-11-05 Joomla Extension - tassos.gr - File deletion through improper access control in Advanced C
CVE-2026-101542 high 8.8 0.0032 2026-11-05 Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Intern
CVE-2026-101536 high 7.5 0.0033 2026-11-05 Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component:
CVE-2026-101535 high 7.5 0.0033 2026-11-05 Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component
CVE-2026-101529 critical 9.9 0.0042 2026-11-05 Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enter
CVE-2026-101528 critical 9.9 0.0042 2026-11-05 Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enter
CVE-2026-101526 high 8.8 0.0042 2026-11-05 Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Man
CVE-2026-101525 high 8.8 0.0042 2026-11-05 Vulnerability in the Oracle Enterprise Manager for Siebel product of Oracle Enterprise Man
CVE-2026-101518 high 8.8 0.0042 2026-11-05 Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise
CVE-2026-101503 critical 9.9 0.0042 2026-11-05 Vulnerability in Oracle Trusted Answer Search (component: PLSQL package). The supported
CVE-2026-101457 high 8.8 0.0045 2026-11-05 Vulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component:
CVE-2026-69145 medium 6.5 0.0027 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-69144 medium 6.5 0.0031 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-69140 high 8.3 0.0030 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-69137 high 7.7 0.0376 2026-11-05 1 PoC SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-69136 high 7.1 0.0023 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-69135 high 8.8 0.0036 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-61653 high 8.3 0.0025 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-61650 high 8.1 0.0024 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-61648 high 8.3 0.0025 2026-11-05 SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) softwa
CVE-2026-107903 high 8.6 0.0034 2026-11-05 Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gr
CVE-2026-107130 medium 6.9 0.0037 2026-11-05 Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gri
CVE-2026-107129 high 8.3 0.0040 2026-11-05 Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversa
CVE-2026-54914 high 8.3 0.0040 2026-11-05 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. P
CVE-2026-54913 medium 6.9 0.0030 2026-11-05 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. P
CVE-2026-54912 high 8.8 0.0045 2026-11-05 WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. P
CVE-2026-102927 medium 5.9 0.0032 2026-11-05 HedgeDoc is an open source, real-time collaborative markdown notes application. Prior to 1