CVEs
Browse the synced catalog, newest first.
- CVE-2026-116779FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commandssignalwire freeswitch
- CVE-2026-116789FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS serversignalwire freeswitch
- CVE-2026-116781FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsingsignalwire freeswitch
- CVE-2026-116785FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handlingsignalwire freeswitch
- CVE-2026-116786FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofiasignalwire freeswitch
- CVE-2026-116787FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Lengthsignalwire freeswitch
- CVE-2026-116567FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handlingsignalwire freeswitch
- CVE-2026-116571FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header constructionsignalwire freeswitch
- CVE-2026-116570FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authenticationsignalwire freeswitch
- CVE-2026-116569FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsingsignalwire freeswitch
- CVE-2026-1339Open redirect vulnerability - UCMDB/Operations Bridge ManagerOpenText Universal Discovery and CMDB · OpenText Operations…
- CVE-2026-116568FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsingsignalwire freeswitch
- CVE-2026-116572FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-namesignalwire freeswitch
- CVE-2026-44875In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows…Hewlett Packard Enterprise (HPE) HPE Cray Programming Envir…
- CVE-2026-115928FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound callssignalwire freeswitch
- CVE-2026-116574FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequencessignalwire freeswitch
- CVE-2026-116573FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header usersignalwire freeswitch
- CVE-2026-100358SuiteCRM: Admin OS RCE via Dropdown Editor PHP InjectionSuiteCRM
- CVE-2026-100363SuiteCRM: Privilege escalation via V8 REST modules (ACLRoles, ACLActions, Administration)SuiteCRM
- CVE-2026-100359SuiteCRM: Authenticated SQL Injection In action_get_end_date functionSuiteCRM
- CVE-2026-123273ImageMagick before 7.1.2-35 and 6.9.13-60 Infinite Loop via SVG DecoderImageMagick
- CVE-2026-123272mcp-go before v1.2.1 Origin Validation Error via Unvalidated Well-Known Protected Resource Metadatamark3labs mcp-go
- CVE-2026-123271ChatCLI before v1.215.2 Origin Validation Error via Unvalidated MCP OAuth Resource Indicatordiillson ChatCLI
- CVE-2026-123135langgenius dify Sandbox Run init.py hard-coded credentialslanggenius dify
- CVE-2026-100362SuiteCRM: V8 OAuth2 Username EnumerationSuiteCRM
- CVE-2026-97377SuiteCRM: Authenticated SQL Injection in SOAP Portal Method portal_get_entry_listSuiteCRM
- CVE-2026-100360SuiteCRM: V8 API Relationship Delete Bypasses Object-Level Authorization on the Related RecordSuiteCRM
- CVE-2026-100361SuiteCRM: Mass Assignment in V8 API Allows Modification of Sensitive User Fields (user_hash, external_auth_only)SuiteCRM
- CVE-2026-100364SuiteCRM V8 JSON:API processAttributes() Missing ID Filter Allows ACL Bypass and Record Ownership HijackSuiteCRM
- CVE-2026-100365SuiteCRM: Time-Based Blind SQL Injection via AOR_Reports ORDER BY Clause Allows Data Exfiltration by Any Authenticated UserSuiteCRM