Browse All CVEs
50,424 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-51905 |
high | 8.8 | 0.0038 | 2026-10-29 | TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in get_agent | |
CVE-2026-51903 |
high | 8.1 | 0.0033 | 2026-10-29 | SuperAGI v0.0.14 contains an improper access control vulnerability in get_agent_by_latest_ | |
CVE-2026-51902 |
medium | 6.5 | 0.0021 | 2026-10-29 | SuperAGI up to v0.0.14 contains an improper access control vulnerability. The agent contro | |
CVE-2026-107347 |
high | 8.4 | 0.0013 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch p | |
CVE-2026-102260 |
medium | 4.3 | 0.0018 | 2026-10-29 | HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypas | |
CVE-2026-91244 |
medium | 4.7 | 0.0012 | 2026-10-29 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Services). The | |
CVE-2026-91237 |
high | 7.5 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91232 |
critical | 9.9 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91231 |
critical | 10.0 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adap | |
CVE-2026-91230 |
critical | 9.3 | 0.0034 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91229 |
high | 7.5 | 0.0031 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91228 |
high | 7.1 | 0.0029 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91227 |
high | 7.5 | 0.0025 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91226 |
high | 7.5 | 0.0031 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91225 |
critical | 9.1 | 0.0042 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adap | |
CVE-2026-91224 |
critical | 9.9 | 0.0030 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-97406 |
critical | 9.1 | 0.0053 | 2026-10-29 | XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and | |
CVE-2026-86467 |
high | 8.8 | 0.0026 | 2026-10-29 | Apache Airflow Amazon provider: the AWS auth manager's SAML login flow does not bind the a | |
CVE-2026-18799 |
medium | 4.3 | 0.0020 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-18560 |
medium | 4.3 | 0.0018 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-18256 |
medium | 4.3 | 0.0016 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-18223 |
medium | 5.0 | 0.0016 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-16453 |
high | 7.1 | 0.0019 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-16251 |
medium | 6.5 | 0.0029 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-19867 |
medium | 4.3 | 0.0022 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7 | |
CVE-2026-19603 |
medium | 4.3 | 0.0018 | 2026-10-29 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.1 | |
CVE-2026-19601 |
medium | 4.9 | 0.0023 | 2026-10-29 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.1 | |
CVE-2026-19541 |
medium | 6.5 | 0.0022 | 2026-10-29 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.1 | |
CVE-2026-18795 |
medium | 6.4 | 0.0015 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-18551 |
medium | 6.5 | 0.0022 | 2026-10-29 | Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8 | |
CVE-2026-108088 |
high | 7.5 | 0.0046 | 2026-10-29 | ** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerabilit | |
CVE-2026-34485 |
high | 7.8 | 0.0015 | 2026-10-29 | Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low | |
CVE-2026-34484 |
medium | 6.7 | 0.0015 | 2026-10-29 | Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability w | |
CVE-2026-91248 |
medium | 5.3 | 0.0032 | 2026-10-29 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-91217 |
high | 8.6 | 0.0040 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-91216 |
critical | 10.0 | 0.0051 | 2026-10-29 | Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabr | |
CVE-2026-89010 |
critical | 9.3 | 0.0317 | 2026-10-29 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an una | |
CVE-2026-87743 |
high | 7.5 | 0.0052 | 2026-10-29 | A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discr | |
CVE-2026-74048 |
medium | 6.5 | 0.0045 | 2026-10-29 | Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat. If the OpenSSLLifecy | |
CVE-2026-113399 |
critical | 9.8 | 0.0049 | 2026-10-29 | Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefo | |
CVE-2026-89009 |
high | 8.8 | 0.0101 | 2026-10-29 | WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an una | |
CVE-2026-80353 |
high | 8.1 | 0.0039 | 2026-10-29 | Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when crea | |
CVE-2026-74049 |
medium | 6.1 | 0.0037 | 2026-10-29 | Execution After Redirect (EAR) vulnerability in Apache Tomcat. This issue affects Apach | |
CVE-2026-116566 |
medium | 5.3 | 0.0026 | 2026-10-29 | socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters wh | |
CVE-2026-51851 |
high | 7.5 | 0.0065 | 2026-10-29 | modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in pyth | |
CVE-2026-93446 |
high | 7.5 | 0.0059 | 2026-10-29 | Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail | |
CVE-2026-91246 |
medium | 6.1 | 0.0013 | 2026-10-29 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-91245 |
medium | 6.5 | 0.0036 | 2026-10-29 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-88041 |
high | 7.5 | 0.0051 | 2026-10-29 | Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a pr | |
CVE-2026-51863 |
critical | 9.1 | 0.0081 | 2026-10-29 | DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-a |