CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-95860node-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissionsnode-opcua · node-opcua-address-space +1
- CVE-2026-88968Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspaceanthropics claude-code · @anthropic-ai/claude-code
- CVE-2026-88066Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executableanthropics claude-code
- CVE-2026-95730Authenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIAHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95729Authenticated Sensitive Information Disclosure in VIAHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95728Local Privilege Escalation in Virtual Intranet Access (VIA) Client for LinuxHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95727Authenticated Command Injection Vulnerability in HPE Networking VIAHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95726Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIAHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95725Authenticated Local Command Injection Vulnerability in the VIA Client for LinuxHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95724Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)Hewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95723Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) ClientHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-95722Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) ClientHewlett Packard Enterprise (HPE) Virtual Intranet Access
- CVE-2026-54161upsmon: remote OS command injection (RCE) via attacker-controlled ups.alarm in NOTIFYCMD executionnetworkupstools nut
- CVE-2026-45146Chamilo LMS: Blind SQL Injection in model.ajax.php via filters[groupOp] authentificatedchamilo-lms
- CVE-2026-121577Unescaped header separators in whatstk build a regular expression that backtracks exponentiallylucasrodes whatstk
- CVE-2026-63433MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Valuefranklioxygen MyTube
- CVE-2026-95777Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer Management InterfaceHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95776Authenticated Path Traversal Vulnerability in HPE Networking Fabric Composer API Allows for Limited File ReadHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95775Authenticated Local Information Disclosure Vulnerability in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95774Unauthenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95773Authenticated Local Denial-of-Service Vulnerability in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95772Authenticated Race Condition in API of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95771Authenticated Information Disclosure in HPE Networking Fabric Composer API EndpointHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95770Authenticated Local Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95769Unauthenticated Audit Log Spoofing in API of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95768Privilege Escalation Leading to Information Disclosure in HPE Networking Fabric Composer APIHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95767Unauthenticated Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95766Authenticated Sensitive Information Disclosure in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95765Unauthenticated Sensitive Information Disclosure in Web-Based Management Interface of HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer
- CVE-2026-95764Unauthenticated Adjacent Improper Certificate Validation in HPE Networking Fabric ComposerHewlett Packard Enterprise (HPE) Fabric Composer