CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-116657Tanium addressed a denial of service vulnerability in Enforce.Tanium Enforce
- CVE-2026-108333Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium thr…
- CVE-2026-108307Tanium addressed a heap-based buffer overflow vulnerability in Index.Tanium Endpoint Configuration Toolset Solution · Tanium ind…
- CVE-2026-116679Neko: Authorization bypass in legacy WebRTC input handlingm1k1o neko · github.com/m1k1o/neko/server
- CVE-2026-108310Tanium addressed a denial of service vulnerability in Tanium Server.Tanium Server
- CVE-2026-116662Tanium addressed a compression bomb vulnerability in Enforce.Tanium Enforce
- CVE-2026-108305Tanium addressed a local privilege escalation vulnerability in End-User Notifications.Tanium Endpoint Configuration Toolset Solution · Tanium end…
- CVE-2026-108331Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.Tanium Endpoint Configuration Toolset Solution · Tanium thr…
- CVE-2026-87085Tanium addressed a SQL injection vulnerability in Provision.Tanium Provision
- CVE-2026-108308Tanium addressed a SQL injection vulnerability in Patch.Tanium Patch
- CVE-2026-117516oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-108328Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-116678Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLsdani-garcia vaultwarden
- CVE-2026-118131CVE-2026-118131GnuPG
- CVE-2026-116677OpenWISP Controller CA CRL REST API does not scope requests to managed organizationsopenwisp-controller
- CVE-2026-16491CVE-2026-16491 CVE RecordGrafana Enterprise · Grafana OSS
- CVE-2026-117515oretnom23 php-travel-agency-system traceapplication.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-116676Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during planrunatlantis atlantis · github.com/runatlantis/atlantis
- GHSA-WF6J-7HVR-GR93Hydra legacy target blacklist permits unsafe PyYAML loadinghydra-core
- CVE-2026-104353Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)Adobe Campaign Classic
- CVE-2026-105780Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)Adobe Campaign Classic
- CVE-2026-105489Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-104350Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Campaign Classic
- CVE-2026-105781Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-104351Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)Adobe Campaign Classic
- CVE-2026-104354Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-105779Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)Adobe Campaign Classic
- CVE-2026-117514oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injectionoretnom23 php-travel-agency-system
- CVE-2026-57189Asterisk: Possible RED T.140 Generation Accumulation OOB Writeasterisk · certified-asterisk
- CVE-2026-57201Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Bufferasterisk · certified-asterisk