CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-112116An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write…ASUS System Control Interface
- CVE-2026-110464Missing authorization in ASUS Armoury Crate allows a local attacker to write content into a specific file or registry location with Local…ASUS Armoury Crate
- CVE-2026-121610funadmin Frontend List Endpoint index selectList sql injectionfunadmin
- CVE-2026-121609Qihoo 360 Whole Home Router M5 Boot Script mpt start hard-coded credentialsQihoo 360 Whole Home Router M5
- CVE-2026-121608Qihoo 360 D603-2/D600-2/D606-6 Timezone Push iscm on_push_message os command injectionQihoo 360 D603-2 · Qihoo 360 D600-2 +1
- CVE-2026-121607Qihoo 360 D603-2/D600-2/D606-6/D706 iscm testspeed_command os command injectionQihoo 360 D603-2 · Qihoo 360 D600-2 +2
- CVE-2026-121606Qihoo 360 D621-2/D603-2/D600-2/D619/D606-6/D706 Firmware Signature Verification iscm verify_sign signature verificationQihoo 360 D621-2 · Qihoo 360 D603-2 +4
- CVE-2026-121600TOTOLINK A950RG MAC Filter cstecgi.cgi setMacFilterRules stack-based overflowTOTOLINK A950RG
- CVE-2026-121599TOTOLINK A950RG Multi-SSID Configuration cstecgi.cgi delWiFiMultipleConfig stack-based overflowTOTOLINK A950RG
- CVE-2026-121598TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflowTOTOLINK A950RG
- CVE-2026-121597TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflowTOTOLINK A950RG
- CVE-2026-39430On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management and access controls…
- CVE-2026-39431On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service accessible via USB allows…
- CVE-2026-92196Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92200Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation VulnerabilityQuest Foglight for Databases
- CVE-2026-92198Quest Foglight for Databases getSource XML External Entity Processing Information Disclosure VulnerabilityQuest Foglight for Databases
- CVE-2026-92199Quest Foglight for Databases EncryptionUtil Hardcoded Encyption Key Local Privilege Escalation VulnerabilityQuest Foglight for Databases
- CVE-2026-92185Quest Foglight for Databases AbstractParser XML External Entity Processing Information Disclosure VulnerabilityQuest Foglight for Databases
- CVE-2026-92189Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92197Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92191Quest Foglight for Databases runScript Incorrect Authorization Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92186Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92194Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92195Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92192Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92188Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92193Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure VulnerabilityQuest Foglight for Databases
- CVE-2026-92187Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92190Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution VulnerabilityQuest Foglight for Databases
- CVE-2026-92211Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution VulnerabilityPixar Animation Studio OpenUSD