CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-86715Clear Text Storage of Password in Crypttech's Vatos DLPCrypttech Crypto and Informatics Technologies Industry and…
- CVE-2026-111499Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Dell OpenManage Enterprise
- CVE-2026-91914Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability.Dell OpenManage Enterprise
- CVE-2026-111500Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function vulnerability.Dell OpenManage Enterprise
- CVE-2026-115683epiphany: TLS certificate warning bypass via race in tlsErrorPage message handlerGNOME Epiphany
- CVE-2026-91915Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output Used by a…Dell OpenManage Enterprise
- CVE-2026-119602libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Windowkyz libmspack
- CVE-2026-119601AFFLIB through 3.7.22 Heap Out-of-Bounds Write in af_get_pagesshock AFFLIB
- CVE-2026-119600tcpflow < 1.7.0 Out-of-Bounds Read via TCP Demultiplexer Payload Lengthsimsong tcpflow
- CVE-2026-119599AxonHub through 1.0.0-beta11 Privilege Escalation via Service Account API Key Scopeslooplj AxonHub
- CVE-2026-119598Miaomiaowu before 0.9.3 Cross-User Proxy Provider Config Disclosure via external_subscription_idiluobei miaomiaowu
- CVE-2026-119597OpenDeepWiki through 2.0.6 Hard-coded JWT Signing Key Admin Token ForgeryAIDotNet OpenDeepWiki
- CVE-2026-119596UNIT3D through 9.2.0 Private Playlist Disclosure via Playlist Zip DownloadHDInnovations UNIT3D
- CVE-2026-119578MONAI 1.6.0 before 1.6.1 Code Execution via Auto3DSeg algo_from_json()Project-MONAI MONAI
- CVE-2026-119577ArcadeDB before 26.10.2 Improper Session Revocation in Wire-Protocol ConnectionsArcadeData arcadedb
- CVE-2026-119576ArcadeDB from 21.12.1 before 26.10.2 GraphQL Schema Replacement via Read-Only Query EndpointArcadeData arcadedb
- CVE-2026-119575ArcadeDB 26.8.1 before 26.10.2 SSRF via ALTER DATABASE LOAD CSV Block ListArcadeData arcadedb
- CVE-2026-119574Traefik 3.2.0 before 3.7.15 FastProxy Data Race Denial of Servicetraefik
- CVE-2026-119573Traefik 3.7.11 before 3.7.15 Cross-Namespace Authorization Bypass via auth-tls-secrettraefik
- CVE-2026-119572Traefik 3.7.0-ea.1 before 3.7.15 mTLS Bypass via Ingress NGINX Providertraefik
- CVE-2026-119571Parse Server 9.7.0 before 9.10.5-alpha.10 Installation Update Misdirection via Installation IDparse-community parse-server
- CVE-2026-119570Parse Server 9.7.0 before 9.10.5-alpha.7 Protected Field Exposure in Save Responsesparse-community parse-server
- CVE-2026-119569Parse Server 9.0.0 before 9.10.5-alpha.9 Prototype Pollution Denial of Serviceparse-community parse-server
- CVE-2026-118986CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()CallBackery
- CVE-2026-118987CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie headerCallBackery
- CVE-2026-118990CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration…CallBackery
- CVE-2026-118991CallBackery versions before 0.62.0 for Perl encrypt configuration backups with the padded password as the AES keyCallBackery
- CVE-2026-118992CallBackery versions before 0.62.0 for Perl allow OS command execution via sqlite3 shell commands in a restored configuration backupCallBackery
- CVE-2026-118993CallBackery versions before 0.62.0 for Perl allow denial of service via the request path interpolated as a regular expression under CGI…CallBackery
- CVE-2026-118994CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login nameCallBackery