CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-10132A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-BTotolink
- CVE-2026-10133A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.Totolink
- CVE-2026-10135A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327).Totolink
- CVE-2026-10136A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20Totolink
- CVE-2026-10137A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B2Totolink
- CVE-2026-10138A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421Totolink
- CVE-2026-10139A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327Totolink
- CVE-2026-10141A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421Totolink
- CVE-2026-92391curl_mime_free stack overflow by recursioncurl
- CVE-2026-103672HMS Networks PEAK-System PCAN Windows drivers Improper Validation of Array IndexHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-92390-J no-clobber guarantee bypassed with 103 early hintscurl
- CVE-2026-92389TFTP direction confusioncurl
- CVE-2026-92388FTP wildcard write callback mixupcurl
- CVE-2026-92387never-ending loop via server response omissioncurl
- CVE-2026-101103HMS Networks PEAK-System PCAN Windows drivers Classic Buffer OverflowHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-92386server-set cookie aborts cookie jar loadcurl
- CVE-2026-87866wolfSSL public-key pinning bypasscurl
- CVE-2026-109576HMS Networks PEAK-System PCAN Windows drivers Out-of-bounds WriteHMS Networks PEAK-System Device Driver Setup · HMS Networks…
- CVE-2026-87865knownhost callback mismatches key as missingcurl
- CVE-2026-87863HSTS response erases persisted entriescurl
- CVE-2026-87864IMAP APPEND plus CRLF conversion command injectioncurl
- CVE-2026-87862HSTS cache import drops longer-lived childcurl
- CVE-2026-87861cross-origin reuse of a Negotiate connectioncurl
- CVE-2026-86415auto client cert connection reuse mixupcurl
- CVE-2026-86414leaking host credentials to HTTP proxycurl
- CVE-2026-86413Negotiate credentials sent to redirected origincurl
- CVE-2026-112380Missing authorization in the WhatsApp channel in Kiro CrewAmazon Kiro Crew
- CVE-2026-86412server-set cookie erases cookie jarcurl
- CVE-2026-86411FTP connection reuse inherits client-certificatecurl
- CVE-2026-86410redirect to SFTP or SCP bypasses host verificationcurl