CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-84725Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eapRed Hat JBoss Enterprise Application Platform
- CVE-2026-116797Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`highcharts · @highcharts grid-pro +3
- CVE-2026-79656OAuth and OIDC tokens written unredacted to server logs by the Generic OAuth, Google and GitLab connectorsGrafana OSS · Grafana Enterprise
- CVE-2026-116796Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported chartshighcharts
- CVE-2026-58458Don't Starve Together Memory Corruption via world_gen_dataKlei Entertainment Don't Starve Together
- CVE-2026-117501HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodiesHTTP-Body
- CVE-2026-117500HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart uploadHTTP-Body
- CVE-2026-116531HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a read ends inside a chunkHTTP-Body
- CVE-2026-116285HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodiesHTTP-Body
- CVE-2026-116135HTTP::Body versions before 1.23_01 for Perl drop mixed-case percent escapes from urlencoded form fields instead of decoding themHTTP-Body
- CVE-2026-116134HTTP::Body versions before 1.23_01 for Perl allow memory exhaustion via an unbounded multipart part header blockHTTP-Body
- CVE-2026-116133HTTP::Body versions before 1.23_01 for Perl allow CPU exhaustion via quadratic rescanning of a multipart body with a missing or malformed…HTTP-Body
- CVE-2026-116132HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on diskHTTP-Body
- CVE-2026-116131HTTP::Body versions before 1.23_01 for Perl allow memory and temporary file exhaustion via an unlimited number of form fields and…HTTP-Body
- CVE-2026-116795RE2JS: Quadratic-time denial of service in re2js lookbehind matchingle0pard re2js · re2js
- CVE-2026-116794russh: Agent server never calls `Agent::confirm`, so keys added with the confirm constraint (`ssh-add -c`) sign without confirmationEugeny russh · russh
- CVE-2026-82962Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packetzephyrproject zephyr
- CVE-2026-82961Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user modezephyrproject zephyr
- CVE-2026-118619Ultralytics Google Drive Download Path Traversal Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118618Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118617Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118616Ultralytics parse_model Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118615Ultralytics torch_safe_load Command Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118614Ultralytics check_det_dataset Code Injection Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118613Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution VulnerabilityUltralytics
- CVE-2026-118581NoSQL injection via mismatched BSON size prefix in raw document splice to the wire protocolMongoDB Java Driver
- CVE-2026-118611Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118610Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118609Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution VulnerabilityAlpine iLX-F511
- CVE-2026-118608Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure VulnerabilityAlpine iLX-F511