CVEs
Browse the synced catalog, newest first.
- CVE-2026-110525MCB Stats <= 1.0.0 - Unauthenticated Stored XSS via User-AgentMCB
- CVE-2026-109081Keycloak-services: keycloak-services: injection of roles into realm default-roles via dcr endpointRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-107124Keycloak-services: keycloak-services: oidc logout endpoint session fixation via id_token_hint leading to account takeoverRed Hat build of Keycloak · Red Hat Single Sign-On
- CVE-2026-121837Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sortRed Hat Exploit Intelligence · Red Hat build of Quarkus
- CVE-2026-123037Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)Red Hat Migration Toolkit for Applications · Red Hat Mig… +9
- CVE-2026-114366Information disclosure vulnerability in authentication handling of QWebSocket impacts Qt FrameworkQt Framework
- CVE-2026-119432Foxit Workspace Stored XSS in shared artifactsFoxit Software Foxit Workspace
- CVE-2026-119431Server-Side Request Forgery in Foxit Workspace File UploadFoxit Software Foxit Workspace
- CVE-2026-119433Server-Side Request Forgery in Foxit Workspace PDF ExportFoxit Software Foxit Workspace
- CVE-2026-89142Out-of-bounds Write in Wi-Fi NPUAiroha Technology EN7529, AN7552, AN7581, AN7583
- CVE-2026-77299Regexp2: Unbounded memory amplification via large `{m}` quantifier on a zero-width subexpressiondlclark regexp2
- CVE-2025-71458FTS3 Web Monitoring 3.12.0 through 3.13.2 and 3.14.0 SQL Injection via /linkinfocern-fts fts-monitoring
- CVE-2026-63774Subnet Solutions PowerSYSTEM Center SQL InjectionSubnet Solutions PowerSYSTEM Center
- CVE-2026-63017Subnet Solutions PowerSYSTEM Center Incorrect AuthorizationSubnet Solutions PowerSYSTEM Center
- CVE-2026-123269libyal libvmdk Descriptor File libvmdk_descriptor_file.c libvmdk_descriptor_file_read_header out-of-boundslibyal libvmdk
- CVE-2026-123268libyal libvmdk Extent Data File libvmdk_extent_table.c libvmdk_extent_table_get_extent_data_file_path memory corruptionlibyal libvmdk
- CVE-2026-85068NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msgnetworkupstools nut
- GO-2026-6893Event type spoofing via UntrustedType in github.com/google/go-eventloggithub.com/google/go-eventlog
- GO-2026-6905Panic on negative member size in Reader.Read in github.com/blakesmith/argithub.com/blakesmith/ar
- GO-2026-6909Nil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/samlgithub.com/crewjam/saml
- GO-2026-6911SSRF and credential leak via unvalidated Location header in github.com/mark3labs/mcp-gogithub.com/mark3labs/mcp-go
- GO-2026-6906Netfoil doesn't decrement TTL in github.com/tinfoil-factory/netfoilgithub.com/tinfoil-factory/netfoil
- GO-2026-6907Arc has unauthenticated application log disclosure via `/api/v1/logs` in github.com/basekick-labs/arcgithub.com/basekick-labs/arc
- GO-2026-6894anacrolix torrent has unbounded recursion in the bencode decoder that causes stack-overflow crash and CPU-exhaustion DoS in…github.com/anacrolix/torrent
- GO-2026-6891charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users in…github.com/charmbracelet/soft-serve
- GO-2026-6892charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories in github.com/charmbracelet/soft-servegithub.com/charmbracelet/soft-serve
- GO-2026-6836SiYuan: The publish filter for local storage returns the administrator's entire storage map with only three keys sanitized in…github.com/siyuan-note/siyuan/kernel
- GO-2026-6838Echo: WebSocket proxy can retain connections and handlers after client disconnect in github.com/labstack/echogithub.com/labstack/echo/v4 · github.com/labstack/echo/v5
- GO-2026-6839Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls in github.com/labstack/echogithub.com/labstack/echo/v4 · github.com/labstack/echo/v5
- GO-2026-6840Echo: BodyDump captures request and response bodies without size limits in v4 in github.com/labstack/echogithub.com/labstack/echo/v4