CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-120572Incorrect boundary conditions in the Layout: Block and Inline componentMozilla Firefox · Mozilla Thunderbird
- CVE-2026-119742Nagios XI < 2026R2 OS Command Injection via mibs.phpNagios Enterprises Nagios XI
- CVE-2026-85035Use-after-free via dynamically allocated message queue retained by the CAN RX filterzephyrproject zephyr
- CVE-2026-85034Out-of-bounds write in the Bluetooth GATT client: oversized notification and indication values delivered to subscriberszephyrproject zephyr
- CVE-2026-85033Bluetooth Classic AVRCP Target: missing TX cleanup on disconnect permanently stalls vendor-dependent responses and leaks them to the next…zephyrproject zephyr
- CVE-2026-85032Use-after-free in the MCTP over USB binding when the host disables the class while RX parsing is in progresszephyrproject zephyr
- CVE-2026-119179MongoDB Node.js driver: Connection pool desynchronization after operation timeout can expose other user's dataMongoDB Node.js Driver
- CVE-2026-89295Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameterEclipse Foundation Eclipse Mnestix
- CVE-2026-65160NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero.NVIDIA CUDA Toolkit · NVIDIA NVJPEG
- CVE-2026-121458Instatic before 0.0.21 Authorization Bypass via MCP Content Read ToolsCoreBunch Instatic
- CVE-2026-99270tcp: Fix potential UAF in reqsk_timer_handler().Linux
- CVE-2026-76124BuddyBoss App <= 3.2.1 - Authenticated (Subscriber+) Arbitrary File Upload via Feedback EndpointBuddyBoss App
- CVE-2026-108060Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108059Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108058Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108057Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108056Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108055Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108054Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108053Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108052Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108051Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108050Stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionality.AM System ALO Suite
- CVE-2026-108049Clickjacking vulnerability in the Alosuite web application.AM System ALO Suite
- CVE-2026-108048Vulnerability due to a lack of request limits in Alosuite’s password recovery functionality.AM System ALO Suite
- CVE-2026-108047Inadequate authorization vulnerability in Alosuite’s user invitation functionalityAM System ALO Suite
- CVE-2026-108046Direct Object Reference (IDOR) vulnerability in AlosuiteAM System ALO Suite
- RUSTSEC-2026-0440`astral-tokio-tar` is unmaintainedastral-tokio-tar
- RUSTSEC-2026-0452Out-of-bounds read when decoding internal keys shorter than 16 bytessurrealkv
- RUSTSEC-2026-0454Data race and double free via unsound `Send`/`Sync` in `reblessive`surrealdb-core