CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-110932Keycloak-services: keycloak-services: unauthenticated persistent disk exhaustion via theme gzip cacheRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-110931Keycloak-services: keycloak-services: unauthenticated jvm termination via saml 1.1 authoritybinding parsing loopRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-107602Keycloak-services: keycloak-services: unauthenticated cpu exhaustion via saml 1.1 keyinfo infinite loopRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-103112Keycloak-services: keycloak-services: account takeover via authentication race using reset-credentials pathRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-107123Keycloak-services: keycloak-services: unauthenticated cpu denial of service via saml xml datetime and duration parsingRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-82413ntopng: authenticated (non-admin) OS command injection via the vulnerability-scan `scan_ports` parameter (`nmap` argument reaches `popen`)ntopng
- CVE-2026-85287HomeBox: Email Case-Sensitivity Bypass Allows Duplicate Account Creation and Login Denial of Servicesysadminsmedia homebox
- CVE-2026-75599HomeBox: Stored XSS via `javascript:` URI in Custom Entity Fieldssysadminsmedia homebox
- CVE-2026-85286HomeBox: Timing Side-Channel in Login Endpoint Allows User Enumeration via Bcrypt Hashing Delaysysadminsmedia homebox
- CVE-2026-119344Cocos Intra-handshake attested TLS implementation is vulnerable to Diversion Attacksultravioletrs cocos
- CVE-2026-123125Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypasssensiolabs symfony/validator
- CVE-2026-119345Cocos AI Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacksultravioletrs cocos · github.com/ultravioletrs/cocos
- CVE-2026-104269ModSecurity: RFC 2231 `filename*` Parameter Bypasses Multipart Filename Rules on RFC-Compliant Backends (Go, Python, Node, Java)owasp-modsecurity ModSecurity
- CVE-2026-73856ModSecurity: Response Body Inspection Bypassowasp-modsecurity ModSecurity
- CVE-2026-61813ModSecurity: Incorrect libcurl TLS hostname verification setting in HttpsClient::downloadowasp-modsecurity ModSecurity
- CVE-2026-123158sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass…OpenBSD OpenSSH
- CVE-2026-103932ModSecurity: PCRE2 `@rxGlobal` match-limit errors are converted to no-matchowasp-modsecurity ModSecurity
- CVE-2026-119751Content Egg WordPress Plugin < 12.1.0 Unauthenticated Information Disclosure via render-blockskeywordrush Content Egg – Affiliate Product Importer & Pric…
- CVE-2026-102615HeyForm: Uploaded HTML files are served as text/html on the app origin with no CSP — stored XSSheyform
- CVE-2026-102523MariaDB server: Authorization bypass via ALTER TABLE ... CONVERT ... PARTITIONMariaDB server
- CVE-2026-70660stable-diffusion.cpp: Out-of-bounds read in safetensors loader: unvalidated data_offsets allow a tensor's byte range to extend past the…leejet stable-diffusion.cpp
- CVE-2026-70659stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor nameleejet stable-diffusion.cpp
- CVE-2026-115740Server side request forgery vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows the file Prefix…Trellix DLP on-prem extensions
- CVE-2026-121139Rapid7 Metasploit Framework Web Service unauthenticated bootstrap window allows creation of an administrator account without authenticationRapid7 Metasploit Framework
- CVE-2026-107891musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to…musl -libc musl
- CVE-2026-115739Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a remote attacker to…Trellix DLP on-prem extensions
- CVE-2026-123096anacrolix/torrent through 1.61.0 Memory Exhaustion via Unbounded HTTP Tracker Responseanacrolix torrent
- CVE-2026-123095mpv 0.29.0 before 0.42.0 Playlist Entry Injection via ytdl_hook Newlinesmpv-player mpv
- CVE-2026-123094Huginn before 2026.11.05 Stored XSS via OAuth Service Display Namehuginn
- CVE-2026-122330Blosc c-blosc2 before 3.5.0 Divide-by-Zero via blosc2_schunk_get_slice_buffer()c-blosc2