CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-92210NoMachine nxhtd Server-Side Request Forgery Information Disclosure VulnerabilityNoMachine
- CVE-2026-92209NoMachine Redis Improper Authentication Local Privilege Escalation VulnerabilityNoMachine
- CVE-2026-92208NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution VulnerabilityNoMachine
- CVE-2026-111184NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation VulnerabilityNoMachine
- CVE-2026-111183GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution VulnerabilityGStreamer
- CVE-2026-114262file-management-system FileController.php store unrestricted uploadfile-management-system
- CVE-2026-114125Storybook: Missing origin validation in Storybook preview allows code injection from malicious websitesstorybookjs storybook · storybook +5
- CVE-2026-114124Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometryelectron
- CVE-2026-114261MomoTommy file-management-system Files API FileController.php destroy missing authenticationMomoTommy file-management-system
- CVE-2026-53986Girafit Camera App 1.9.1 Hardcoded TURN Credentials DisclosureGirafit camera app
- CVE-2026-114123D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and metadatadynamics365ninja d365fo-mcp-server
- CVE-2026-114260oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authenticationoretnom23 file-management-system-php
- CVE-2026-114259oretnom23 file-management-system-php admin_class.php save_files unrestricted uploadoretnom23 file-management-system-php
- CVE-2026-114122Electron: Frame subscription trusts GPU-supplied frame geometryelectron
- CVE-2026-114121Electron: openExternal permission requests can be attributed to the wrong originelectron
- CVE-2026-76497Cisco Expressway Series Software Hardening Release: October 2026 - Insecure Temporary File VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76505Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service VulnerabilityCisco IOS XR Software
- CVE-2026-76524Open Source Snort 3 Control Channel Socket Aribitrary Command Execution VulnerabilityCisco Open Source Snort3
- CVE-2026-76496Cisco Expressway Series Software Hardening Release: October 2026 - Improper Link Resolution VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76495Cisco Expressway Series Software Hardening Release: October 2026 - Incorrect Permission Assignment VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76494Cisco Expressway Series Software Hardening Release: October 2026 - Code Injection VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76493Cisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76490Cisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76489Multiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service VulnerabilityCisco Open Source Snort3 · Cisco Secure Firewall Threat Def…
- CVE-2026-76492Cisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76491Cisco Expressway Series Software Hardening Release: October 2026 - Denial of Service VulnerabilitiesCisco TelePresence Video Communication Server (VCS) Express…
- CVE-2026-76481As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications…Cisco Emergency Responder · Cisco Unified Communications… +1
- CVE-2026-76487Cisco Unified Communications Manager Improper Access Control VulnerabilityCisco Unified Communications Manager
- CVE-2026-113800Electron: HID and USB permission checks can be attributed to the wrong originelectron
- CVE-2026-76479Cisco Unified Communications Products Hardening Release: October 2026 - Path Traversal VulnerabilitiesCisco Emergency Responder · Cisco Unified Communications… +1