CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-116648Tanium addressed an improper output sanitization vulnerability in Discover.Tanium Discover
- CVE-2026-116665Tanium addressed an information disclosure vulnerability in Discover.Tanium Discover
- CVE-2026-108327Tanium addressed a path traversal vulnerability in Tanium Data Service.Tanium Data Service · Tanium Interact
- CVE-2026-121565Tanium addressed an improper certificate validation vulnerability in multiple productsTanium TanOS · Tanium Asset +11
- CVE-2026-116654Tanium addressed an improper input validation vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-116651Tanium addressed an unauthorized code execution vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-116653Tanium addressed an improper input validation vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-116652Tanium addressed a business logic error in Threat Response.Tanium Threat Response
- CVE-2026-121535miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authenticationmiroslavpejic85 MiroTalk P2P
- CVE-2026-116669Tanium addressed an improper access controls vulnerability in Discover.Tanium Discover
- CVE-2026-108324Tanium addressed a denial of service vulnerability in Tanium Client.Tanium Client
- CVE-2026-116646Tanium addressed an uncontrolled resource consumption vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-121520Malicious client could set xattr value outside of BuildKit state directoryMoby BuildKit
- CVE-2026-121522Possible panic from Git source resolvermoby BuildKit
- CVE-2026-121541Bake filesystem path entitlements approval can be skipped in some multi-target buildsDocker Buildx
- CVE-2026-115541HumHub 1.19.0 - Stored cross-site scripting in friendship confirmationHumHub Community Edition
- CVE-2026-121542Bake filesystem path entitlements approval can be skipped for path using basename prefixDocker Buildx
- CVE-2026-118865Authenticated OS Command Injection in Archer AX3000 v2 Offline Download ComponentTP-Link Systems Archer AX3000
- CVE-2026-121614Docker Sandboxes host Git executes repository-controlled programsDocker Sandboxes
- CVE-2026-22060CVE-2026-22060 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)NETAPP StorageGRID
- CVE-2026-121531Umami 2FA Policy route.ts single-factor authenticationUmami
- CVE-2026-22058CVE-2026-22058 Authentication Bypass Vulnerability in StorageGRID (formerly StorageGRID Webscale)NETAPP StorageGRID
- CVE-2026-121524sumiie24 School-Management-System Public Search Feature parent_Login.php sql injectionsumiie24 School-Management-System
- CVE-2026-120930Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a…Google Chrome
- CVE-2026-120931Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…Google Chrome
- CVE-2026-119084Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver Connection ParametersAWS amazon-redshift-jdbc-driver
- CVE-2026-112354Etrel INCH AC Charging Station Hard-coded Default CredentialsEtrel d.o.o. Etrel INCH
- CVE-2026-121621Github.com/argoproj-labs/argocd-image-updater: argocd-image-updater: arbitrary command execution via crafted ssh repository proxy…argocd-image-updater · Red Hat OpenShift GitOps
- CVE-2026-121517IrfanView TIFF Wang Annotation heap-based overflowIrfanView
- CVE-2026-111751Angular: Denial of Service via RouterLink Query Parameter Retention in Server-Side Rendering (SSR)angular · @angular/router