Browse All CVEs
33,302 vulnerabilities.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-10609 |
medium | 6.8 | 0.0037 | 2026-10-29 | A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The oper | |
CVE-2026-11772 |
medium | 5.1 | 0.0055 | 2026-10-29 | DRIMO CMS is vulnerable to Reflected XSS via q parameter in searching functionality. An at | |
CVE-2026-35018 |
high | 8.7 | 0.0127 | 2026-10-29 | NetComm NF20MESH routers running firmware R6B031 and earlier contain an authenticated remo | |
CVE-2026-35019 |
critical | 9.2 | 0.0081 | 2026-10-29 | NetComm NF20MESH routers running firmware R6B031 and earlier contain an authentication byp | |
CVE-2026-56815 |
high | 7.4 | 0.0017 | 2026-10-29 | pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerabi | |
CVE-2026-54303 |
medium | 6.8 | 0.0023 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.24.0, an endpoint in the Me | |
CVE-2026-54309 |
high | 8.8 | 0.0055 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, when @n8n/ | |
CVE-2026-54310 |
medium | 6.5 | 0.0054 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authent | |
CVE-2026-54311 |
medium | 6.0 | 0.0039 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, an authent | |
CVE-2026-54312 |
high | 7.2 | 0.0040 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user | |
CVE-2026-54313 |
medium | 6.5 | 0.0034 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.24.0, an authenticated user | |
CVE-2026-54314 |
medium | 6.3 | 0.0055 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.24.0, the Compression node' | |
CVE-2026-55766 |
medium | 4.8 | 0.0023 | 2026-10-29 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Prior to 2.12.1, gu | |
CVE-2026-56402 |
high | 7.1 | 0.0038 | 2026-10-29 | NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the handleApproval | |
CVE-2026-56692 |
medium | 6.8 | 0.0017 | 2026-10-29 | NanoClaw before 2.1.17 contains a symlink following vulnerability in forwardAttachedFiles | |
CVE-2026-56693 |
medium | 6.8 | 0.0016 | 2026-10-29 | NanoClaw before 2.1.17 contains a privilege escalation vulnerability in the create_agent d | |
CVE-2026-56694 |
medium | 5.3 | 0.0029 | 2026-10-29 | NanoClaw before 2.1.0 contains a privilege escalation vulnerability in the channel-registr | |
CVE-2026-56695 |
high | 7.1 | 0.0040 | 2026-10-29 | OpenHarness ohmo gateway /resume and /summary slash commands default remote_invocable to T | |
CVE-2026-56696 |
medium | 5.3 | 0.0037 | 2026-10-29 | OpenHarness /issue and /pr_comments slash commands lack remote_invocable=False protection, | |
CVE-2026-11940 |
high | 7.8 | 0.0075 | 2026-10-29 | tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archi | |
CVE-2026-12957 |
high | 8.5 | 0.0023 | 2026-10-29 | Improper trust boundary enforcement in Language Servers for AWS before version 1.65.0 on a | |
CVE-2026-12958 |
high | 8.5 | 0.0019 | 2026-10-29 | Missing symlink validation in Language Servers for AWS may allow an arbitrary file write o | |
CVE-2026-13007 |
high | 8.7 | 0.0061 | 2026-10-29 | Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* t | |
CVE-2026-33760 |
high | 8.8 | 0.0050 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-34912 |
medium | 4.3 | 0.0027 | 2026-10-29 | A missing access control check when linking banners or campaigns to a zone through the zon | |
CVE-2026-34913 |
medium | 4.3 | 0.0027 | 2026-10-29 | A missing access control check when linking trackers to campaigns through the campaign-tra | |
CVE-2026-34914 |
high | 8.3 | 0.0039 | 2026-10-29 | A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0 | |
CVE-2026-34915 |
medium | 6.1 | 0.0026 | 2026-10-29 | A missing sanitisation of user input in the zone-include.php script of Revive Adserver 6.0 | |
CVE-2026-34917 |
medium | 4.3 | 0.0038 | 2026-10-29 | Low‑privileged session IDs generated for the web admin console could be reused in the XML‑ | |
CVE-2026-42867 |
medium | 6.5 | 0.0047 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-44789 |
critical | 9.4 | 0.0053 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, | |
CVE-2026-44790 |
critical | 9.4 | 0.0053 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, | |
CVE-2026-44791 |
critical | 9.4 | 0.0054 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, | |
CVE-2026-44792 |
high | 8.9 | 0.0039 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, | |
CVE-2026-44956 |
none | — | 0.0039 | 2026-10-29 | Low‑privileged users could use their Full Name as a vector for a stored XSS attack. The na | |
CVE-2026-44957 |
medium | 4.3 | 0.0027 | 2026-10-29 | A missing access control check when invoking various modify methods in the XML‑RPC API of | |
CVE-2026-44958 |
medium | 5.4 | 0.0034 | 2026-10-29 | An access control bypass allows an advertiser‑level user to activate or deactivate a banne | |
CVE-2026-44959 |
high | 8.8 | 0.0059 | 2026-10-29 | A missing validation of user input exists when saving delivery limitations in Revive Adser | |
CVE-2026-44960 |
none | — | 0.0039 | 2026-10-29 | A stored XSS can be exploited by leveraging the usernames as an attack vector. When an adm | |
CVE-2026-44961 |
none | — | 0.0041 | 2026-10-29 | The XML‑RPC API addUser method has a validation bypass introduced in the fix for CVE‑2025‑ | |
CVE-2026-45732 |
high | 8.3 | 0.0035 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, | |
CVE-2026-48519 |
critical | 9.6 | 0.0078 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-48520 |
medium | 6.1 | 0.0044 | 2026-10-29 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-49444 |
high | 7.1 | 0.0039 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, | |
CVE-2026-49465 |
medium | 6.0 | 0.0054 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.48, 2.21.8, and 2.22.4, | |
CVE-2026-54301 |
high | 7.0 | 0.0024 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, | |
CVE-2026-54302 |
high | 7.0 | 0.0023 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, | |
CVE-2026-54304 |
high | 7.1 | 0.0038 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.1, | |
CVE-2026-54305 |
high | 8.9 | 0.0037 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, | |
CVE-2026-54306 |
medium | 6.3 | 0.0028 | 2026-10-29 | n8n is an open source workflow automation platform. Prior to 2.25.7 and 2.26.2, a prototyp |