CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-119372SQLite before 3.54.0 Use-After-Free in FTS3 fts3BestSnippet() via snippet()SQLite
- CVE-2026-119371SQLite before 3.54.0 Stack Exhaustion via CTE Chain in selectExpander()SQLite
- CVE-2026-119364ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write BypassProFTPD Project ProFTPD
- CVE-2026-119147ProFTPD before 1.3.9e and 1.3.10rc5 mod_sftp Copy-File Authorization BypassProFTPD Project ProFTPD
- CVE-2026-119146ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMapProFTPD Project ProFTPD
- CVE-2026-116366Unauthenticated RCE vulnerability against ClickHouse ServerClickHouse
- CVE-2026-22110Missing authentication check on POST/PUT requestsDelta Electronics Delta UFC500
- CVE-2026-22105Use of default password based on serial numberDelta Electronics Delta UFC500
- CVE-2026-22109Default WebUI passwords stored in plaintextDelta Electronics Delta UFC500
- CVE-2026-22114Missing brute-force protection for web interfaceDelta Electronics Delta UFC500
- CVE-2025-31704Dahua Intelligent Connection Center command injectionDahua Intelligent Connection Center
- CVE-2026-85268Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle IDGoogle Cloud Identity Platform and Firebase Authentication
- CVE-2026-14467Display of information in the Forocoches comments editorForocoches comments editor
- CVE-2026-97209Insecure temporary file in mix deps.partition lets a local user execute code in another user's dependency buildelixir-lang elixir
- CVE-2026-115274Unbounded integer parsing in JSON.decode/1 enables CPU and memory exhaustion denial of service in Elixirelixir-lang elixir
- CVE-2026-109821Unbounded port parsing in URI.parse/1 enables CPU exhaustion denial of service in Elixirelixir-lang elixir
- CVE-2026-59387Broken access control restriction in Cloud Controller APICloud Foundry CAPI · Cloud Foundry cf-deployment
- CVE-2026-59385Space Developer can extract space-scoped broker credentialsCAPI · Cloud Foundry CF Deployment
- CVE-2026-59388Cloud Controller exposes secrets in audit logCloud Foundry Foundation CAPI · Cloud Foundry Foundation cf…
- CVE-2026-59386Credential exposure to space supporterCloud Foundry Controller · Cloud Foundry cf-deployment
- CVE-2026-64618Apache Fineract: SQL injection vulnerability in Search APIApache Software Foundation Apache Fineract
- CVE-2026-59396DoS Vulnerability in UAA Related to JWKS URI HandlingCloud Foundry UAA · Cloud Foundry cf-deployment
- CVE-2026-115456Gcc: out-of-bounds read in std::from_charsRed Hat Enterprise Linux · Red Hat Hardened Images +2
- CVE-2026-65874Apache Fineract: SQL injection via ORDER BY parameters in the Center and datatables endpointsApache Software Foundation Apache Fineract
- CVE-2026-82104API permission bypass via logic bugTeltonika Networks RUT · Teltonika Networks RUTX +12
- CVE-2026-115455Gcc: stack overflow in std::bitset on libstdc++Red Hat Enterprise Linux · Red Hat Hardened Images +1
- CVE-2026-114691A flaw was found in the libstdc++ component of GCCRed Hat Enterprise Linux · Red Hat Hardened Images +2
- CVE-2026-114690A flaw was found in GCCRed Hat Enterprise Linux · Red Hat Hardened Images +2
- CVE-2026-103039Gravity Forms <= 3.1.2 - Unauthenticated PHP Object Injection via Post Custom FieldGravity Forms
- CVE-2026-110732AI Engine – The Chatbot, AI Framework & MCP for WordPress <= 3.8.6 - Missing Authorization to Administrator Account Takeover via…tigroumeow AI Engine – MCP Server & AI Chatbot for WordPres…