CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-118038Path Traversal in Telerik Document Processing Libraries AI Agent ToolsProgress Software Telerik Document Processing Libraries
- CVE-2026-67077HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67079HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67080HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67073HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- CVE-2026-67074HCL BigFix AEX is affected by multiple security vulnerabilities.HCL Software BigFix AEX
- RUSTSEC-2026-0415Unbounded memory use on large request bodiesjuniper_hyper
- RUSTSEC-2026-0416Stack overflow on deeply nested GraphQL documentsjuniper
- RUSTSEC-2026-0417Excessive CPU and memory use on crafted GraphQL documentsjuniper
- RUSTSEC-2026-0418libz-sys build script leaks environment variables in the build directorylibz-sys
- RUSTSEC-2026-0433Quadratic parsing of nested image wikilinks with `ENABLE_WIKILINKS`pulldown-cmark
- RUSTSEC-2026-0436Panic and unbounded allocation (OOM) in the CFB/OLE2 parser on malformed inputcalamine
- CVE-2026-102790Joomla Extension - icagenda.com - Authenticated Stored XSS in iCagenda 4.0.8 to 4.0.12icagenda.com iCagenda extension for Joomla
- CVE-2026-81472Dell iDRAC Service Module (iSM) for Windows, Dell iDRAC Service Module (iSM) for Linux, and Dell iDRAC Service Module (iSM) for ESXi, versioDell iDRAC Service Module for Windows · Dell iDRAC Servi… +1
- CVE-2026-114278Unauthenticated Command Injection via kubeconfig Username in che-machine-execEclipse Foundation Eclipse Che
- CVE-2026-102799Joomla Extension - icagenda.com - CSV formula injection in the registrations export in iCagenda 3.5.0 to 4.0.16icagenda.com iCagenda extension for Joomla
- CVE-2026-118485Axel Download Accelerator Path Traversal via URL Filename DecodingAxel Download Accelerator Axel
- CVE-2026-116855WordPress My auctions allegro plugin <= 4.0.3 - Broken Access Control vulnerabilitywphocus My auctions allegro
- CVE-2026-118477KaliFast Project Management Platform ei_git_repo_url OS Command InjectionEISGE Kalifast
- CVE-2026-6064Norton, Avast, and AVG local privilege escalation via link following in Data ShredderGen Digital Norton Antivirus · Gen Digital Avast Antivir… +1
- CVE-2026-115223Smart Popup by Supsystic < 2.0.2 - Admin+ SSTI via Popup Text BlockSmart Popup by Supsystic
- CVE-2026-110508Essential Addons for Elementor 6.7.3 - 6.8.6 - Unauthenticated Registration Approval Bypass via OTP VerificationEssential Addons for Elementor
- CVE-2026-106648Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID ShortcodesRoyal Elementor Addons
- CVE-2026-103330Sadad QA Payment 1.28 - Unauthenticated Arbitrary Order Payment Confirmation via Signature BypassSadad QA Payment
- CVE-2026-103313BitPay Gateway for WooCommerce <= 4.1.3 - Unauthenticated Payment Bypass via Payment Return HandlerBitPay Gateway for WooCommerce
- CVE-2026-99216Drivers: hv: Don't reset VMBus connection state on error/exit pathsLinux
- CVE-2026-99215power: supply: core: prevent unregistering a power supply while a callback runsLinux
- CVE-2026-99214drm/vc4: hdmi: Move packet RAM enable to PM runtimeLinux
- CVE-2026-99213vsock: treat TCP_CLOSING as once-establishedLinux
- CVE-2026-99212net/rds: don't let the rdma_cm destroy an id RDS still owns on route failureLinux