CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-102895GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated…gpustack
- CVE-2026-122015NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validationNPC-Worldwide npcpy
- CVE-2026-97693Yuxi sandbox isolation failure allows cross-tenant access and internal service compromisexerrors Yuxi
- CVE-2026-122235Jan 0.8.5 before 0.8.8 Workspace Guard Bypass via Dangling Symlinkjanhq jan
- CVE-2026-122234jsondiffpatch before 0.7.7 XSS via Array-Move Destination in HTML Formattersbenjamine jsondiffpatch
- CVE-2026-122233FrankenPHP before 1.13.4 Cross-Request Response Header Leak in Worker Modefrankenphp
- CVE-2026-16725IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmithIBM Watson Speech Services Cartridge
- CVE-2026-19319IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in OnnxIBM Watson Speech Services Cartridge
- CVE-2026-82418IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSLIBM Watson Speech Services Cartridge
- CVE-2026-17493IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.IBM Watson Speech Services Cartridge
- CVE-2026-122014NPC-Worldwide npcpy sft.py load_sft_model code injectionNPC-Worldwide npcpy
- CVE-2026-105702Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-105991Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108536Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108588Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108767Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108838Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-108910Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-110281Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-110282Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-110283Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-116376Multiple vulnerabilities that affects IBM Db2 Genius HubIBM Db2 Genius Hub
- CVE-2026-115762draw.io: Prototype pollution in GraphML (mxGraphMlCodec)jgraph drawio
- CVE-2026-97373draw.io: Incomplete SSRF blocklist in `ProxyServlet` / `Utils.sanitizeUrl`: RFC 6598 CGNAT range `100.64.0.0/10` is not blocked ->…jgraph drawio
- CVE-2026-104203Traccar: Authentication bypass via path parameters exposes protected device mediatraccar
- CVE-2026-122013Comfast CF-WR632AX Multipart webmgnt path traversalComfast CF-WR632AX
- CVE-2026-115758SumatraPDF: TLS hostname validation disabled in `HttpGet()`sumatrapdfreader sumatrapdf
- CVE-2026-102664ProxySQL: Uninitialized heap read in MySQL compressed packet decompression via zlib pathsysown proxysql
- CVE-2026-102340Telepresence: Traffic Manager gRPC has no auth — any pod claims arbitrary namespace and intercepts services, receiving victim environment…telepresenceio telepresence · github.com/telepresenceio/tel…
- CVE-2026-122224WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpointsretspen webvirtcloud