CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-20545In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-20499In Modem, there is a possible out of bounds write due to a missing bounds check.MediaTek chipset
- CVE-2026-120325Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversalWebpro-nl Knip
- CVE-2026-120324Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversalAklivity Zilla
- CVE-2026-120317http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrityhttp4k
- CVE-2026-120316http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolutionhttp4k
- CVE-2026-120315LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFilelobehub chat
- CVE-2026-120314Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task OperationsJovancoding Network-AI
- CVE-2026-120313Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePathJovancoding Network-AI
- CVE-2026-120312Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette NameJovancoding Network-AI
- CVE-2026-120311Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job IDJovancoding Network-AI
- CVE-2026-120310Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Responseparse-community parse-server
- CVE-2026-120309Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParamnuxt
- CVE-2026-120323samanhappy MCPHub passthroughHeaders.ts information disclosuresamanhappy MCPHub
- CVE-2026-120322Termix-SSH Termix transferToHost path traversalTermix-SSH Termix
- CVE-2026-120320jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserializationjxxghp MoviePilot
- CVE-2026-120319Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorizationSanluan PublicCMS
- CVE-2026-120283Linksys E8450 portal.cgi strcpy stack-based overflowLinksys E8450
- CVE-2026-120282WAVLINK WN536AX6-A protocol.csp host_black os command injectionWAVLINK WN536AX6-A
- CVE-2026-120281WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflowWAVLINK WN536AX6-A
- CVE-2026-120280WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injectionWAVLINK WN536AX6-A
- CVE-2026-120279WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injectionWAVLINK WN536AX6-A
- CVE-2025-62819Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration…
- CVE-2026-106803A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module.
- CVE-2026-106804A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module.
- CVE-2026-106805A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling.
- CVE-2026-106806A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server.
- CVE-2026-106807A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path.
- CVE-2026-106808OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU Generate Authentication…
- CVE-2026-117067An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated…