CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-112069Broken Access Control in extension "FAL Protect" (fal_protect)TYPO3 Extension "FAL Protect"
- CVE-2026-112065Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 Extension "sgalinski Cookie Consent"
- CVE-2026-112064SQL Injection in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 Extension "sgalinski Cookie Consent"
- CVE-2026-112066Missing Authorization in extension "sgalinski Cookie Consent" (sg_cookie_optin)TYPO3 Extension "sgalinski Cookie Consent"
- CVE-2026-112067Captcha Bypass in extension "Accessible Form Captcha" (bw_captcha)TYPO3 Extension "Accessible Form Captcha"
- CVE-2026-112068Insecure Direct Object Reference in extension "Analytics" (analytics)TYPO3 Extension "Analytics"
- CVE-2026-112237Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)TYPO3 Extension "Kitodo.Presentation"
- CVE-2026-112240Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)Extension "TYPO3 Fluid-Form by coding.ms"
- CVE-2026-113442Cross-Site Scripting in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form)Extension "TYPO3 Fluid-Form by coding.ms"
- CVE-2026-112238SQL Injection in extension "File manager" (ameos_filemanager)TYPO3 Extension "File manager"
- CVE-2026-112071Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)Extension "TYPO3 Shop by coding.ms"
- CVE-2026-113468Broken Access Control in extension "TYPO3 Shop by coding.ms" (shop)Extension "TYPO3 Shop by coding.ms"
- CVE-2026-112239Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai)Extension "TYPO3 AI Integration Extension"
- CVE-2026-113459Sensitive Data Exposure in extension "TYPO3 AI Integration Extension" (ns_t3ai)Extension "TYPO3 AI Integration Extension"
- CVE-2026-112070Broken Access Control in extension "Analytics" (analytics)TYPO3 Extension "Analytics"
- CVE-2026-113378mcollina mcp-ripgrep Advanced Search Tool index.ts os command injectionmcollina mcp-ripgrep
- CVE-2026-43858A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code executionAdvantech ADAM-3600
- CVE-2026-43857A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the serviceAdvantech ADAM-3600
- CVE-2026-85267Cross-Site WebSocket Hijacking in Google Cloud ShellGoogle Cloud Cloud Shell
- CVE-2026-43856A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytesAdvantech ADAM-3600
- CVE-2026-43855A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code executionAdvantech ADAM-3600
- CVE-2026-43854A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabledAdvantech ADAM-3600
- CVE-2026-43853A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crashAdvantech ADAM-3600
- CVE-2026-43852A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the systemAdvantech ADAM-3600
- CVE-2026-43851A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the systemAdvantech ADAM-3600
- CVE-2026-43850A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the systemAdvantech ADAM-3600
- CVE-2026-43849A heap memory read vulnerability could allow an attacker to exfiltrate sensitive dataAdvantech ADAM-3600
- CVE-2026-43848A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the serviceAdvantech ADAM-3600
- CVE-2026-43847A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabledAdvantech ADAM-3600
- CVE-2026-43846A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code executionAdvantech ADAM-3600