CVEs
Every CVE and security advisory cve.now tracks, newest first. Search narrows them by severity, exploitation, vendor, technology and package ecosystem.
- CVE-2026-120631CGI::Cookie versions from 4.67 before 5.00 for Perl allow denial of service via the client cookie expires value used as a regex in parseCGI
- CVE-2026-121585InfiniFlow RAGFlow Text To SQL Retrieval sql.go RunSQL authorizationInfiniFlow RAGFlow
- CVE-2026-121583Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorizationSanluan PublicCMS
- CVE-2022-30267Emerson Ovation Insufficient Verification of Data AuthenticityEmerson Ovation
- CVE-2022-29966Emerson Ovation Missing Authentication for Critical FunctionalityEmerson Ovation
- CVE-2026-121582Umami Record API Endpoint route.ts authorizationUmami
- CVE-2026-121736NocoDB 0.300.0 before 2026.08.0 Unauthenticated OAuth Authorization Code Creationnocodb
- CVE-2026-121735blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokensblueprintue-self-hosted-edition
- CVE-2026-121734ZaneOps 1.14.0 before 1.15.2 Cross-Workspace Information Disclosure via ReviewPreviewEnvDeployAPIViewzane-ops
- CVE-2026-121733Bagisto before 2.4.5 Stored XSS via RMA Conversation Attachment UploadWebkul Bagisto
- CVE-2026-121732RosarioSIS before 12.9 Improper Authorization via Student Billing Mass Assignmentfrancoisjacquet RosarioSIS
- CVE-2026-121731RosarioSIS before 12.9 SQL Injection via period_id in Attendance Absence Reportfrancoisjacquet RosarioSIS
- CVE-2026-121730emailflare before commit cf31f33 Missing Authorization via Inbox Compose Endpoint0xdps emailflare
- CVE-2026-121729emailflare before commit cf31f33 Missing Authorization via /api/keys Routes0xdps emailflare
- CVE-2026-121728SourceHut meta.sr.ht 0.56.11 before 0.89.0 Registration Authorization Bypass via /register/step2SourceHut meta.sr.ht
- CVE-2026-121727Kore before 4.3.0 Integer Underflow Memory Exhaustion via http_header_recv()jorisvink kore
- CVE-2026-109836The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical…ALCPU Core Temp
- CVE-2026-118237Out-of-bounds read vulnerability in GitHub Enterprise Server allowed disclosure of process memory in the Git serviceGitHub Enterprise Server
- CVE-2026-110288Cross-site request forgery vulnerability in GitHub Enterprise Server allowed deletion of stored ChatOps configuration through the…GitHub Enterprise Server
- CVE-2026-104608Use-after-free vulnerability in GitHub Enterprise Server allowed remote code execution in the Git serviceGitHub Enterprise Server
- CVE-2026-121581ArcReel Provider Test-Connection Endpoint test server-side request forgeryArcReel
- CVE-2026-121539miroslavpejic85 MiroTalk P2P Socket I/O server.js CheckPassword access controlmiroslavpejic85 MiroTalk P2P
- CVE-2026-116661Tanium addressed an improper access controls vulnerability in Enforce.Tanium Enforce
- CVE-2026-116650Tanium addressed an unauthorized code execution vulnerability in Threat Response.Tanium Threat Response
- CVE-2026-116668Tanium addressed an uncontrolled resource consumption vulnerability in Discover.Tanium Discover
- CVE-2026-116666Tanium addressed an information disclosure vulnerability in Discover.Tanium Discover
- CVE-2026-120775Tanium addressed a heap-based buffer overflow vulnerability in Deploy.Tanium Deploy
- CVE-2026-116667Tanium addressed an improper access controls vulnerability in Discover.Tanium Discover
- CVE-2026-116664Tanium addressed an improper access controls vulnerability in Discover.Tanium Discover
- CVE-2026-116663Tanium addressed an improper access controls vulnerability in Enforce.Tanium Enforce