CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-92855Keycloak-services: keycloak-services: saml broker accepts holder-of-key assertions without proof of key possessionRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-120859PyMoDAQ before 5.3.10 Arbitrary Code Execution via Crafted HDF5, Dock Layout, and XML Settings FilesPyMoDAQ · pymodaq_data +2
- CVE-2026-82965Keycloak-services: keycloak-services: unauthenticated denial of service via saml soap endpoint unbounded xml parsingRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-104867Immich calendar heatmap endpoint discloses cross-user activity through broken access controlimmich-app immich
- CVE-2026-120499h5io before 0.2.6 Arbitrary Code Execution via read_hdf5h5io
- CVE-2026-76077ASN1SCC: Stack buffer overflow and out-of-bounds read in XER tokenizer NT()esa asn1scc
- CVE-2026-75615ASN1SCC: Out-of-bounds read via unvalidated character index in ASN.1 string decodersesa asn1scc
- CVE-2026-75614ASN1SCC: Out-of-bounds write in BitStream_DecodeConstraintWholeNumber (uPER/ACN)esa asn1scc
- CVE-2026-49407OpenHuman: Unauthenticated dictation WebSocket allows arbitrary audio streaming and unbounded memory growthtinyhumansai openhuman
- CVE-2026-54142OpenHuman: Indirect prompt injection via background email sync executes Composio actions without user approvaltinyhumansai openhuman
- CVE-2026-54146OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)tinyhumansai openhuman
- CVE-2026-54143OpenHuman allows remote inbound channel messages to create unapproved shell cron jobs leading to host command executiontinyhumansai openhuman
- CVE-2026-54141OpenHuman: Yuanbao non-web channel can bypass human approval to execute `node_exec`tinyhumansai openhuman
- CVE-2026-119083GluonTS arbitrary file write during archive extractionAWS gluonts
- CVE-2026-49393OpenHuman: Unauthenticated Socket.IO RPC bypass allows invoking protected OpenHuman core controllers without the Bearer tokentinyhumansai openhuman
- CVE-2026-54145OpenHuman: Bearer token leaked via approval gate session_id (SQLite plaintext + debug log + RPC response)tinyhumansai openhuman
- CVE-2026-49405OpenHuman: Unauthenticated server-sent events endpoint leaks user-facing event datatinyhumansai openhuman
- CVE-2026-111253Dnf5daemon-server: dnf5: dnf5daemon-server: missing session-owner check allows foreign d-bus callers to replace another client's resolved…Red Hat Hardened Images
- CVE-2026-118517Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for…sensiolabs symfony/http-client
- CVE-2026-54144OpenHuman: Embedded Google Meet webview can silently capture the macOS desktop without a user gesturetinyhumansai openhuman
- CVE-2026-54140OpenHuman: MCP tool description injection: untrusted server descriptions execute in agent LLM context without sanitizationtinyhumansai openhuman
- CVE-2026-102739ESPectre: Unsafe Deserialization on .npz dataset leads to Code Executionfrancescopace espectre
- CVE-2026-123151Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tailRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-121997Gdb: gdbserver: heap buffer overflow in cmd_qtdpsrc via qtdpsrc declared/actual length mismatchRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-121996Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression lengthRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-121995Gdb: gdb: stack buffer overflow in parse_tracepoint_definition via stale rs->buf tailRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-121994Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply lengthRed Hat Enterprise Linux · Red Hat Hardened Images
- CVE-2026-97371ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packetsntopng
- CVE-2026-114232Keycloak-services: keycloak-services: uma protection api resourcetype field not validated — cross-owner resource accessRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-112208Keycloak-services: keycloak-services: account takeover via stale sso_auth note in organization identity-first loginRed Hat build of Keycloak · Red Hat Single Sign-On