CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-93850Unbounded memory consumption during PDF text extractionMattermost
- CVE-2026-93849Mattermost allows authenticated users to trigger excessive memory allocation via crafted msgpack binary WebSocket framesMattermost
- CVE-2026-93328Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and WriteGoogle Cloud MCP Toolbox for Databases
- CVE-2026-110733Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature storeApache Software Foundation Apache SIS
- CVE-2026-93847Improper post type validation on scheduled post endpointsMattermost
- CVE-2026-65184Avocent ACS8000 wsserver command injectionVertiv Avocent ACS8000
- CVE-2026-115930MongoDB Shell (mongosh) bundled with Node.js trusts certificates issued by recoverable eMudhra intermediate CAsMongoDB mongosh
- CVE-2026-116284Kameleo Local API user-info information disclosureKameleo
- CVE-2026-116516Insufficient length validation when parsing Zoom chat transcriptionsMattermost
- CVE-2026-97200Unbounded response body buffering and decompression in hackneybenoitc hackney · hackney
- CVE-2026-115693Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackneybenoitc hackney · hackney
- CVE-2026-113440HTTP/1.1 and HTTP/2 redirects resend basic_auth and cookie to a different scheme or port in hackneybenoitc hackney · hackney
- CVE-2026-115700SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackneybenoitc hackney · hackney
- CVE-2026-112880CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackneybenoitc hackney · hackney
- CVE-2026-116283Kameleo Local API profiles information disclosureKameleo
- CVE-2026-107656An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 tFortinet FortiSandbox
- CVE-2026-111590SSRF in Harbor webhook delivery allows ProjectAdmin to reach internal servicesHarbor
- CVE-2026-108529SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Banditmtrudel bandit · bandit
- CVE-2026-59107Shared SSH Authentication Key in vSolution Matrix File SharingWolfVision Cynap Pro, Cynap Core Pro · WolfVision Cynap, Cy…
- CVE-2026-110499Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Banditmtrudel bandit · bandit
- CVE-2026-109584HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Banditmtrudel bandit · bandit
- CVE-2026-111103HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Banditmtrudel bandit · bandit
- CVE-2026-111101HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Banditmtrudel bandit · bandit
- CVE-2026-113436Quadratic bignum parsing of Content-Length and Host port values in Banditmtrudel bandit · bandit
- CVE-2026-110314WebSocket frames keep reaching the WebSock after a server-initiated close in Banditmtrudel bandit · bandit
- CVE-2026-114213WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Banditmtrudel bandit · bandit
- CVE-2026-114216Chunk extensions accept bare LF and CR, enabling request smuggling in Banditmtrudel bandit · bandit
- CVE-2026-115269HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Banditmtrudel bandit · bandit
- CVE-2026-108525HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Banditmtrudel bandit · bandit
- CVE-2026-116282Kameleo Cookie Controller w.cs CookieController.ListCookies information disclosureKameleo