CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-112148A vulnerability has been identified in LIFF SDK versions 2.20.0 through 2.31.0, where a DOM-based cross-site scripting (XSS) flaw allows anLY LIFF SDK
- CVE-2026-113402ArmorX Global Technology｜ArmorX Spam - Local File InclusionArmorX Global Technology ArmorX Spam
- CVE-2026-113404Uniong｜WebITR - Insecure DeserializationUniong WebITR
- CVE-2026-96903Easy Property Listings < 3.5.27 - Subscriber+ Sensitive Data Disclosure via Contact CRM AJAX HandlersEasy Property Listings
- CVE-2026-96902Easy Property Listings < 3.5.28 - Unauthenticated Hidden Listing Details Disclosure via REST APIEasy Property Listings
- CVE-2026-93300EventON - Subscriber <= 1.4.5 - Unauthenticated SQL Injection via 'email' ParameterEventON - Subscriber
- CVE-2026-97627Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., LtdAtsumi Electric Co. ADX5004 · Atsumi Electric Co. ADX5008 +8
- CVE-2026-100737Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., LtdAtsumi Electric Co. ADX5004 · Atsumi Electric Co. ADX5008 +8
- CVE-2026-113386Roundcube Webmail IMAP command injection in message header handlingRoundcube Webmail
- CVE-2026-109831UnRTF by GNU Project is vulnerable to out-of-bounds writeGNU Project UnRTF
- CVE-2026-113380In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with the ability of a local hangup to tear the call (with its audio and perhaps also video…Signal RingRTC
- CVE-2026-86467Apache Airflow Amazon provider: AWS auth manager: SAML login CSRF logs users into the attacker's accountApache Software Foundation Apache Airflow Amazon provider
- CVE-2026-12489An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through 5.44(ACHR.6)C0 could allow an authenticated attacker to escalate privileges by…Zyxel EX3501-T0 firmware
- CVE-2026-75753Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send specific commands via HTTASUS Router
- CVE-2026-17518Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to corrupt device operationsASUS Router
- CVE-2026-102438An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privilegesASUS Armoury Crate
- CVE-2026-105299Pingora forwards client-nominated Connection headers to HTTP/1 upstreams, allowing ACL bypass in specific chained deploymentshttps://github.com/cloudflare/pingora · pingora-proxy
- CVE-2026-86981An out-of-bounds write issue was addressed with improved bounds checkingApple macOS
- CVE-2026-86979A privacy issue was addressed with improved checksApple macOS
- CVE-2026-86977An authorization issue was addressed with improved network restrictionsApple iOS and iPadOS
- CVE-2026-86976An authorization issue was addressed with improved state managementApple iOS and iPadOS · Apple macOS
- CVE-2026-86975An out-of-bounds read was addressed with improved bounds checkingApple iOS and iPadOS · Apple macOS +3
- CVE-2026-86963A denial-of-service issue was addressed with improved input validationApple iOS and iPadOS
- CVE-2026-86962A double free issue was addressed with improved memory managementApple iOS and iPadOS · Apple macOS +3
- CVE-2026-86961A race condition was addressed with additional validationApple iOS and iPadOS · Apple macOS
- CVE-2026-86959An input validation issue was addressed with improved input validationApple iOS and iPadOS · Apple macOS
- CVE-2026-86957An out-of-bounds read was addressed with improved bounds checkingApple iOS and iPadOS · Apple macOS +3
- CVE-2026-86955An authorization issue was addressed with improved state managementApple iOS and iPadOS
- CVE-2026-86953An out-of-bounds write issue was addressed with improved bounds checkingApple iOS and iPadOS · Apple macOS +3
- CVE-2026-86949This issue was addressed by enforcing library validation on the affected binariesApple Xcode