CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-111560OS Command Injection in Barracuda AppliancesBarracuda Networks Barracuda Email Security Gateway · Ba… +4
- CVE-2026-91903Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path…Dell OpenManage Enterprise
- CVE-2026-92886Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-registerTÜBİTAK BİLGEM Software Technologies Research Institute eta…
- CVE-2026-91904Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Dell OpenManage Enterprise
- CVE-2026-91905Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.Dell OpenManage Enterprise
- CVE-2026-91906Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability.Dell OpenManage Enterprise
- CVE-2026-94349Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS…Dell OpenManage Enterprise
- CVE-2026-91907Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site…Dell OpenManage Enterprise
- CVE-2024-12141Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing AttacksWSO2 Identity Server
- CVE-2026-91908Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability.Dell OpenManage Enterprise
- CVE-2026-91909Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument…Dell OpenManage Enterprise
- CVE-2026-91910Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path…Dell OpenManage Enterprise
- CVE-2026-91911Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path…Dell OpenManage Enterprise
- CVE-2026-100140Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qtqt
- CVE-2024-9517Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked AccountsWSO2 API Manager · WSO2 Universal Gateway +7
- CVE-2026-120216fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responsesfastify
- CVE-2024-2372Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing AttacksWSO2 Open Banking AM · WSO2 API Manager +5
- CVE-2026-117518@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape@fastify/reply-from
- CVE-2026-8923Remote Code ExecutionZohocorp ManageEngine Eventlog Analyzer · Zohocorp ManageEn…
- CVE-2026-117531@fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers@fastify/multipart
- CVE-2026-117549@fastify/secure-session vulnerable to signature verification bypass via cookie signature removal@fastify/secure-session
- CVE-2025-12544Stored Cross-Site Scripting in Multiple WSO2 ProductsWSO2 API Manager · WSO2 Carbon API Manager Publisher REST A…
- CVE-2026-120215@fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook@fastify/cors
- CVE-2026-120213@fastify/http-proxy vulnerable to prefix escape via decoded route parameters@fastify/http-proxy
- CVE-2026-2613SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service DisruptionWSO2 API Manager · WSO2 Traffic Manager +3
- CVE-2026-120214@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments@fastify/http-proxy
- CVE-2026-18800Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive DataWSO2 API Manager · WSO2 Traffic Manager +6
- CVE-2026-118871SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI productZTE ElasticNet RNIA R18 NGI
- CVE-2025-13647Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File PathsWSO2 Identity Server · WSO2 Open Banking IAM
- CVE-2024-7075Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 ProductsWSO2 Enterprise Integrator · WSO2 API Manager +2