CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-114657Grav 2.0.0 before 2.2.5 HTTP Basic Credential Disclosure via Twig Urigetgrav grav
- CVE-2026-114656Traefik before 2.11.58 and 3.7.13 mTLS Bypass via Negated Host Matchertraefik
- CVE-2026-114642Traefik before 2.11.58 and 3.7.14 TLS Config Bypass via NTLM/Kerberos Round Trippertraefik
- CVE-2026-114641Traefik before 2.11.58 and 3.7.14 Race Condition in NTLM/Kerberos Round Trippertraefik
- CVE-2026-114640Traefik v3.7.0 before v3.7.14 mTLS Header Spoofing via Ingress-NGINX HTTP Routertraefik
- CVE-2026-114639Traefik before 2.11.58 and 3.7.14 Authentication Bypass via Negotiate Connection Pooltraefik
- CVE-2026-114638Traefik v3.7.0 before v3.7.14 Client CA Mix-up via auth-tls-secret Name Collisiontraefik
- CVE-2026-114637Traefik v3.2.0 before v3.7.14 FastProxy NTLM/Negotiate Connection Pool Identity Leaktraefik
- CVE-2026-114636Traefik v3.7.13 Authentication Bypass via ssl-passthrough Ingress HTTP Routertraefik
- CVE-2026-114635Traefik before v2.11.58 and v3.7.14 SNI Check Bypass via HTTP/2 Schemetraefik
- CVE-2026-114634WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL RedirectWWBN AVideo
- CVE-2026-114633WWBN AVideo before 29.4.0 Incorrect Authorization via confirmDeleteUser.json.phpWWBN AVideo
- CVE-2026-114722Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages. rcube_utils::mod_css_styles() did not treat an at-rule prologue such as @layer a; as a…Roundcube Webmail
- CVE-2026-114721Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the disabled_actions configuration setting to be bypassedRoundcube Webmail
- CVE-2026-114720Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an IMAP command injection vulnerabilityRoundcube Webmail
- CVE-2026-114576Linksys RE6250 Web Management strcmp random valuesLinksys RE6250
- CVE-2026-114719Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSRF validation bypass in the mark-as-junk action of the markasjunk pluginRoundcube Webmail
- CVE-2026-114718Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the password pluginRoundcube Webmail
- CVE-2026-84910Advanced Search - Moderately critical - Access bypass - SA-CONTRIB-2026-118Drupal Advanced Search · drupal/advanced_search
- CVE-2026-84911AI (Artificial Intelligence) - Moderately critical - Cross site scripting - SA-CONTRIB-2026-119Drupal AI · drupal/ai
- CVE-2026-84912AI (Artificial Intelligence) - Moderately critical - Access Bypass - SA-CONTRIB-2026-120Drupal AI · drupal/ai
- CVE-2026-84913AI translate - Moderately critical - Access Bypass - SA-CONTRIB-2026-121Drupal AI Translate · drupal/ai_translate
- CVE-2026-84914Calculate Working Days - Critical - Access bypass - SA-CONTRIB-2026-122Drupal Calculate Working Days · drupal/calculate_working_da…
- CVE-2026-84915Component blocks - Moderately critical - Cross site scripting - SA-CONTRIB-2026-123Drupal Component blocks · drupal/component_blocks
- CVE-2026-84923Email Verification / SMS Verification / OTP Verification - Critical - Access Bypass - SA-CONTRIB-2026-124Drupal Email Verification / SMS Verification / OTP Verifica…
- CVE-2026-84924Email Verification / SMS Verification / OTP Verification - Critical - Cross Site Scripting - SA-CONTRIB-2026-125Drupal Email Verification / SMS Verification / OTP Verifica…
- CVE-2026-84916Islandora - Moderately critical - Access bypass - SA-CONTRIB-2026-126Drupal Islandora · drupal/islandora
- CVE-2026-84917Jsonapi Role Access - Critical - Access bypass - SA-CONTRIB-2026-127Drupal Jsonapi Role Access · drupal/jsonapi_role_access
- CVE-2026-16648Mailer Plus Log - Moderately critical - Access bypass - SA-CONTRIB-2026-128Drupal Mailer Plus Log · drupal/symfony_mailer_log
- CVE-2026-81163Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129Drupal Media Library Importer · drupal/media_library_import…