Browse All CVEs
3,516 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40044 |
critical | 9.3 | 0.0048 | 2026-10-29 | Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attacker | |
CVE-2026-27681 |
critical | 9.9 | 0.0050 | 2026-10-29 | Due to insufficient authorization checks in SAP Business Planning and Consolidation and SA | |
CVE-2026-6264 |
critical | 9.8 | 0.0074 | 2026-10-29 | A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated | |
CVE-2026-40288 |
critical | 9.8 | 0.0061 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.14 | |
CVE-2026-40289 |
critical | 9.1 | 0.0042 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions below 4.5.139 of PraisonAI and 1.5.14 | |
CVE-2026-40313 |
critical | 9.1 | 0.0031 | 2026-10-29 | PraisonAI is a multi-agent teams system. In versions 4.5.139 and below, the GitHub Actions | |
CVE-2026-31908 |
critical | 9.1 | 0.0052 | 2026-10-29 | Header injection vulnerability in Apache APISIX. The attacker can take advantage of certa | |
CVE-2026-2332 |
critical | 9.1 | 0.0131 | 2026-10-29 | In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extens | |
CVE-2026-2449 |
critical | 9.0 | 0.0033 | 2026-10-29 | Improper neutralization of argument delimiters in a command ('argument injection') vulnera | |
CVE-2026-39808 |
critical | 9.8 | 0.9319 | 2026-10-29 | KEV | Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an u |
CVE-2026-39813 |
critical | 9.8 | 0.2222 | 2026-10-29 | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, | |
CVE-2026-26149 |
critical | 9.0 | 0.0056 | 2026-10-29 | Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allo | |
CVE-2026-27243 |
critical | 9.3 | 0.0030 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Sc | |
CVE-2026-27245 |
critical | 9.3 | 0.0030 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Sc | |
CVE-2026-27246 |
critical | 9.3 | 0.0030 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Sc | |
CVE-2026-27303 |
critical | 9.6 | 0.0061 | 2026-10-29 | Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Deserialization of Untr |