CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-113776virtualenv activation scripts run code from a path that contains a placeholder namepypa virtualenv · virtualenv
- CVE-2026-9825IBM Cyber Fraud Reachable AssertionIBM CyberFraud
- CVE-2026-113732virtualenv activate.fish runs commands from a path or prompt with a backslash before a quotepypa virtualenv · virtualenv
- CVE-2026-113704a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgerya2aproject a2a-rs
- CVE-2026-81212DataStage on Cloud Pak for Data Improper AuthorizationIBM DataStage on Cloud Pak for Data
- CVE-2026-82891IBM Guardium Data Protection is affected by a security vulnerabilityIBM Guardium Data Protection
- CVE-2026-87800IBM Cyber Fraud includes components with multiple known vulnerabilitiesIBM Cyber Fraud
- CVE-2026-92559IBM App Connect Enterprise is vulnerable to a credential exposureIBM App Connect Enterprise
- CVE-2026-93441IBM QRadar SIEM HTTP Receiver protocol is vulnerable to a denial of serviceIBM QRadar Security Information and Event Management
- CVE-2026-93442IBM QRadar SIEM Out-of-bounds ReadIBM QRadar
- PYSEC-2026-4320certifi bundles emSign root CAs with compromised intermediate CA keyscertifi
- CVE-2026-93744IBM i Improper AuthenticationIBM i
- CVE-2026-93888IBM Sterling Connect:Direct for Unix Buffer OverflowIBM Sterling Connect Direct for Unix
- CVE-2026-94402IBM vulnerable to cross-site scripting (XSS) via unsanitized title truncationIBM @carbon/charts · IBM @carbon/charts-react +3
- CVE-2026-113731djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tooldjust-org djust · djust
- CVE-2026-85783Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, each costing an X25519 scalar multiplication in unwrap_file_keyCrypt-Age
- CVE-2026-91668Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Dictionary Repository)Oracle Data Integrator
- CVE-2026-91665Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91664Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91663Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91662Vulnerability in Oracle Essbase (component: Java Based Agent)Oracle Essbase
- CVE-2026-91661Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91660Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91659Vulnerability in Oracle Essbase (component: Build)Oracle Essbase
- CVE-2026-91658Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91657Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91656Vulnerability in Oracle Essbase (component: Federated Partitions)Oracle Essbase
- CVE-2026-91655Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91654Vulnerability in Oracle Essbase (component: Security)Oracle Essbase
- CVE-2026-91653Vulnerability in Oracle Essbase (component: Essbase Web Platform)Oracle Essbase