CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-105477A vulnerability in Veeam Agent for Linux allows for local privilege escalation.Veeam Agent for Linux
- CVE-2026-82984When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member…Nextcloud Server
- CVE-2026-77167Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table.Nextcloud server
- CVE-2026-77173A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not…Nextcloud Files Confidential
- CVE-2026-67400A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.Nextcloud Richdocuments
- CVE-2026-77171A public shared collective always allowed recipients of the link to create pages.Nextcloud Collectives
- CVE-2026-77172App passwords were allowed to bypass password confirmation on sensitive endpoints.Nextcloud Server
- CVE-2026-87897A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for…Nextcloud whiteboard
- CVE-2026-82983The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level…Nextcloud Tables
- CVE-2026-82986The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though…Nextcloud Tables
- CVE-2026-54462knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustionknative pkg · knative.dev/pkg
- CVE-2026-112353GFI KerioConnect < 10.0.8p2 Stored XSS via SVG AttachmentGFI USA GFI KerioConnect
- CVE-2026-113775Dynamic Library Loading Process Control in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-109089libXi XGetDeviceControl Control Type Mismatch Heap Buffer OverflowX.Org libXi
- CVE-2026-102638Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-102637Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-102636Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion DesktopAutodesk Fusion
- CVE-2026-107672Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor UtilityAutodesk Fusion Post Processor Utility
- CVE-2026-117511desmondmorris node-tesseract Command Builder tesseract.js process os command injectiondesmondmorris node-tesseract
- CVE-2026-116863WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerabilityTribulant Software Newsletters
- CVE-2026-115495Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management SocketWatchGuard Mobile VPN with SSL Client
- CVE-2026-90465Fireware OS Missing Authentication in FireCluster Sync Allows Privilege EscalationWatchGuard Fireware OS
- CVE-2026-93862Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-112709Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-90464Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as RootWatchGuard Fireware OS
- CVE-2026-103593Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code ExecutionWatchGuard Fireware OS
- CVE-2026-113881Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code ExecutionWatchGuard Fireware OS
- CVE-2026-93434Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration SecretsWatchGuard Fireware OS
- CVE-2026-90442Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of ServiceWatchGuard Fireware OS
- CVE-2026-112710Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code ExecutionWatchGuard Fireware OS