CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-112105GlitterWare Passy TLS main.dart MyHttpOverrides certificate validationGlitterWare Passy
- CVE-2026-84176Apache Camel: Camel-Platform-HTTP-Vertx Cross-Origin Credential Exposure via Wildcard Origin ReflectionApache Software Foundation org.apache.camel:camel-platform-…
- CVE-2026-83531Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control MessagesApache Software Foundation Apache Camel
- CVE-2026-80344Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery AddressApache Software Foundation org.apache.camel:camel-as2
- CVE-2026-80343Apache Camel: Camel-Netty-HTTP Security Constraint Bypass via Case-Sensitive Context-Path MatchingApache Software Foundation org.apache.camel:camel-netty-http
- CVE-2026-80312Apache Camel: Camel-OAuth Authentication Bypass via Fail-Open ProcessorsApache Software Foundation Apache Camel
- CVE-2026-79986Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files componentApache Software Foundation org.apache.camel:camel-azure-fil…
- CVE-2026-79985Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB componentApache Software Foundation Apache Camel
- CVE-2026-79984Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP componentApache Software Foundation Apache Camel
- CVE-2026-112104eremef bandcamp-player Remote Control Server database.ts missing authenticationeremef bandcamp-player
- CVE-2026-79983Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP componentApache Software Foundation org.apache.camel:camel-ftp
- CVE-2026-78165Apache Camel: Camel-Spring-Redis Unfiltered Java Deserialization of Redis PayloadsApache Software Foundation Apache Camel
- CVE-2026-78164Apache Camel: HTTP producers resolve property placeholders in message-supplied URI override headersApache Software Foundation Apache Camel
- CVE-2026-78163Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File DisclosureApache Software Foundation Apache Camel
- CVE-2026-78162Apache Camel: Camel-Hazelcast Managed Instances Missing Java Deserialization Filter (Incomplete Fix for CVE-2026-43865)Apache Software Foundation org.apache.camel:camel-hazelcast
- CVE-2026-112103f3-factory fatfree-core HTTP Client web.php _curl certificate validationf3-factory fatfree-core
- CVE-2026-112102AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injectionAXA Group NLP.js
- CVE-2026-90910Apache Answer: Reaction API authorization bypass for restricted contentApache Software Foundation Apache Answer
- CVE-2026-86589Apache Answer: User Center integration does not revoke first-login sessions after central account suspensionApache Software Foundation Apache Answer
- CVE-2026-79633Apache Answer: Missing Authorization Allows Mutations of Non-Public ContentApache Software Foundation Apache Answer
- CVE-2026-79624Apache Answer: Stale Visit Tokens Retain Access to Private Uploads After Session RevocationApache Software Foundation Apache Answer
- CVE-2026-79620Apache Answer: Improper Authorization Allows Disclosure of Non-Public Question MetadataApache Software Foundation Apache Answer
- CVE-2026-79613Apache Answer: Disclosure of Comments on Non-Public Content Through Public ProfilesApache Software Foundation Apache Answer
- CVE-2026-76994Apache Answer: Exposure of Hidden Question Metadata Through Public Answer ProfilesApache Software Foundation Apache Answer
- CVE-2026-71563Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public QuestionsApache Software Foundation Apache Answer
- CVE-2026-68482Apache Answer: Improper Authorization in Question Invite User LookupApache Software Foundation Apache Answer
- CVE-2026-67249Apache Answer: Email Code Purpose Confusion May Allow Account TakeoverApache Software Foundation Apache Answer
- CVE-2026-64945Apache Answer: Incorrect permission mapping allows users with only the unpin permission to hide/show questionsApache Software Foundation Apache Answer
- CVE-2026-112101BlackBeltTechnology pi-agent-dashboard WebSocket Gateway origin validationBlackBeltTechnology pi-agent-dashboard
- CVE-2026-112192MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only SettingsMISP