CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-66282Authenticated Denial-of-Service in Zigbee Publish Billing PeriodSilicon Labs EmberZNet
- CVE-2026-66281Authenticated Denial-of-Service in Zigbee Discover Attributes HandlingSilicon Labs EmberZNet
- CVE-2026-85080Authenticated Denial-of-Service in Zigbee GetGroupMembership HandlingSilicon Labs EmberZNet
- CVE-2026-66279Dis-connect vulnerability in Connect StackSilicon Labs Connect SDK
- CVE-2026-111497Google out-of-bounds write in decompression decoderGoogle Brotli · node +7
- EEF-CVE-2026-111497Brotli out-of-bounds write in the decompression decoderbrotli
- CVE-2026-92709Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCErsyslog
- CVE-2026-115248subhajitkhan online-clinic-management-system Booking patappointtime.php behavioral workflowsubhajitkhan online-clinic-management-system
- CVE-2026-113582Apache Abdera: XML external entity expansion in Atom document parsingApache Software Foundation Apache Abdera
- CVE-2026-115400crawlseo before 0.2.5 Cleartext Storage of Google OAuth Tokenscrawlseo
- CVE-2026-115411crawlseo before 0.2.4 Server-Side Request Forgery via Crawlercrawlseo
- CVE-2026-115247subhajitkhan online-clinic-management-system patientregistration.php missing encryptionsubhajitkhan online-clinic-management-system
- CVE-2026-115246subhajitkhan online-clinic-management-system patdocmsg.php cross site scriptingsubhajitkhan online-clinic-management-system
- CVE-2026-102785Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52yootheme.com YOOtheme Pro extension for Joomla
- RUSTSEC-2026-0407SSRF and local file disclosure via unvalidated URLswebpage
- RUSTSEC-2026-0411Out-of-bounds read in Log2Cache::nlog2n(), nlog2n_difference() and plog2p()dahl-salso
- RUSTSEC-2026-0457rmcp server-side request forgery in OAuth client host filterrmcp
- CVE-2026-112832WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerabilityCozyThemes Rootblox
- CVE-2026-112842WordPress Paid Member Subscriptions plugin <= 3.1.2 - Broken Access Control vulnerabilityCozmoslabs Paid Member Subscriptions
- CVE-2026-112822WordPress Workreap Core plugin < 3.4.4 - SQL Injection vulnerabilityAmentoTech Workreap Core
- CVE-2026-115334Lotus through 0.10.2 Authorization Bypass via switch_organization Endpointuselotus lotus
- CVE-2026-115333Lotus through 0.10.2 Improper Authentication via Event Ingestion API Key Prefixuselotus lotus
- CVE-2026-115332Lotus through 0.10.2 SQL Injection via Subscription Filter Keysuselotus lotus
- CVE-2026-115331Lotus through 0.10.2 SQL Injection via Metric Property Names and Filtersuselotus lotus
- CVE-2026-115330Lotus through 0.10.2 SQL Injection via Custom SQL Billable Metricsuselotus lotus
- CVE-2026-115329Lotus through 0.10.2 Cross-Organization IDOR via SubscriptionViewSetuselotus lotus
- CVE-2026-115328JSON-SCADA before 0.65-alpha SQL Injection via OPC HistoryRead APIriclolsen json-scada
- CVE-2026-115327libyang through 6.4.13 Uninitialized Pointer Free in NETCONF RPC ParserCESNET libyang
- CVE-2026-115326QloApps through 1.7.0 IDOR via OrderDetailController Refund RequestWebkul QloApps
- CVE-2026-115325Netmaker through 1.7.0 Authorization Bypass via updateExtClient Unscoped Lookupgravitl netmaker