CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-122140Trawl 1.5.0 before 1.10.0 SSRF via IPv4-mapped IPv6 MCP Policy Bypassgermondai trawl
- CVE-2026-122139blueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password Resetblueprintue-self-hosted-edition
- CVE-2026-122138BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit Bypassblueprintue-self-hosted-edition
- CVE-2026-122137Powerlevel10k before 1.20.19 Insecure Temporary Directory via gitstatus Installerromkatv powerlevel10k · romkatv gitstatus
- CVE-2026-122136Powerlevel10k before 1.20.19 Symlink Following via Instant Prompt Temporary Fileromkatv powerlevel10k
- CVE-2026-122135Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.programmistralai mistral-vibe
- CVE-2026-122134Mistral Vibe before 2.25.7 Code Execution via Git Filter Driversmistralai mistral-vibe
- CVE-2026-122133Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exemistralai mistral-vibe
- CVE-2026-122132go-chi chi 5.2.2 through 5.5.0 Open Redirect via RedirectSlashes Middlewarego-chi chi · github.com/go-chi/chi +4
- CVE-2026-122131Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 Prototype Replacement via proto Language Keyhapijs joi · joi +1
- CVE-2026-122130CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output PluginCESNET ipfixcol2
- CVE-2026-122129CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 DecoderCESNET ipfixcol2
- CVE-2026-122127CESNET ipfixcol2 2.7.1 before 2.9.0 Heap Buffer Overflow via TCP LZ4 DecoderCESNET ipfixcol2
- CVE-2026-122126reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocketresiprocate
- CVE-2026-121969netrek-client-cow through 3.3.3 Stack Buffer Overflow via handleSMessagequozl netrek-client-cow
- CVE-2026-121968Netrek-client-cow through 3.3.3 Out-of-Bounds Read via SP_S_MESSAGE Packetsquozl netrek-client-cow
- CVE-2025-71457vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.phpvtenext
- CVE-2025-71456vtenext before 25.02.2 SQL Injection via fieldname in Fax EditViewvtenext
- CVE-2025-71455vtenext before 25.02.2 Session Identifier Disclosure via Touch Web Servicevtenext
- CVE-2025-71454vtenext before 25.02.2 CSRF Protection Bypass via HTTP Method Tamperingvtenext
- CVE-2025-71453vtenext before 25.02.2 Reflected XSS via widgetInfoList in HomeWidgetBlockListvtenext
- CVE-2026-102339Telepresence: Tunnel endpoint accepts caller-supplied session ID with no ownership proof — active client sessions hijackabletelepresenceio telepresence · github.com/telepresenceio/tel…
- CVE-2026-122009DataLinkDC Dinky flink_web Proxy Endpoint FlinkWebURITemplateProxyServlet.java FlinkWebURITemplateProxyServlet.getNewTargetUri server-side…DataLinkDC Dinky
- CVE-2026-10859IBM MQ XMS .NET client is affected by an arbitrary code execution vulnerabilityIBM MQ
- CVE-2026-11376IBM MQ is affected by a denial of service vulnerabilityIBM MQ
- CVE-2026-11724IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityIBM MQ
- CVE-2026-12356IBM MQ Managed File Transfer is affected by an arbitrary code execution vulnerabilityIBM MQ
- CVE-2026-12538IBM MQ Appliance is affected by an improper validation vulnerabilityIBM MQ Appliance
- CVE-2026-12550IBM MQ is affected by a denial of service vulnerabilityIBM MQ
- CVE-2026-13271IBM MQ Managed File Transfer is affected by a denial of service vulnerabilityIBM MQ