# CVEs published 2026-10-27

629 CVEs were published on October 27, 2026: 67 critical, 179 high. Days are UTC.

- [CVE-2026-104016](https://cve.now/CVE-2026-104016.md): jackson-dataformat-protobuf: signed integer overflow in string-length paths allows unbounded array allocation and OutOfMemoryError (CVSS 7.5, FasterXML jackson-dataformat-protobuf)
- [CVE-2026-118129](https://cve.now/CVE-2026-118129.md): jeremyckahn Chitchatter PostMessage Bootstrap.tsx isConfigMessageEvent improper authentication (CVSS 5.3, jeremyckahn Chitchatter)
- [CVE-2026-118338](https://cve.now/CVE-2026-118338.md): Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-118312](https://cve.now/CVE-2026-118312.md): Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside t (CVSS 9.6, Google Chrome)
- [CVE-2026-118319](https://cve.now/CVE-2026-118319.md): Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox vi (CVSS 4.3, Google Chrome)
- [CVE-2026-118309](https://cve.now/CVE-2026-118309.md): Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit (CVSS 9.6, Google Chrome)
- [CVE-2026-118356](https://cve.now/CVE-2026-118356.md): Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a c (CVSS 8.8, Google Chrome)
- [CVE-2026-118315](https://cve.now/CVE-2026-118315.md): Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome)
- [CVE-2026-118330](https://cve.now/CVE-2026-118330.md): Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside t (CVSS 8.8, Google Chrome)
- [CVE-2026-118341](https://cve.now/CVE-2026-118341.md): Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sand (CVSS 8.8, Google Chrome)
- [CVE-2026-118347](https://cve.now/CVE-2026-118347.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-118314](https://cve.now/CVE-2026-118314.md): Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbit (CVSS 8.8, Google Chrome)
- [CVE-2026-118308](https://cve.now/CVE-2026-118308.md): Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sa (CVSS 9.6, Google Chrome)
- [CVE-2026-118335](https://cve.now/CVE-2026-118335.md): Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbi (CVSS 8.8, Google Chrome)
- [CVE-2026-118310](https://cve.now/CVE-2026-118310.md): Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute ar (CVSS 9.6, Google Chrome)
- [CVE-2026-118342](https://cve.now/CVE-2026-118342.md): Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsi (CVSS 9.6, Google Chrome)
- [CVE-2026-118346](https://cve.now/CVE-2026-118346.md): Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-118316](https://cve.now/CVE-2026-118316.md): Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outs (CVSS 9.6, Google Chrome)
- [CVE-2026-118304](https://cve.now/CVE-2026-118304.md): Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code ins (CVSS 8.8, Google Chrome)
- [CVE-2026-118345](https://cve.now/CVE-2026-118345.md): Use after free in PDFium in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-118313](https://cve.now/CVE-2026-118313.md): Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-118332](https://cve.now/CVE-2026-118332.md): Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary (CVSS 9.6, Google Chrome)
- [CVE-2026-118334](https://cve.now/CVE-2026-118334.md): Use after free in ImageCapture in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbo (CVSS 8.8, Google Chrome)
- [CVE-2026-118311](https://cve.now/CVE-2026-118311.md): Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome)
- [CVE-2026-118343](https://cve.now/CVE-2026-118343.md): Improper input validation in ReadingList in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary (CVSS 8.8, Google Chrome)
- [CVE-2026-118359](https://cve.now/CVE-2026-118359.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome)
- [CVE-2026-118327](https://cve.now/CVE-2026-118327.md): Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome)
- [CVE-2026-118349](https://cve.now/CVE-2026-118349.md): Memory corruption in Payments in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox (CVSS 8.8, Google Chrome)
- [CVE-2026-118353](https://cve.now/CVE-2026-118353.md): Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a (CVSS 8.8, Google Chrome)
- [CVE-2026-118358](https://cve.now/CVE-2026-118358.md): Memory corruption in WebAudio in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-118336](https://cve.now/CVE-2026-118336.md): Improper input validation in Headless in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary cod (CVSS 8.8, Google Chrome)
- [CVE-2026-118333](https://cve.now/CVE-2026-118333.md): Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted… (CVSS 5.4, Google Chrome)
- [CVE-2026-118328](https://cve.now/CVE-2026-118328.md): Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-118351](https://cve.now/CVE-2026-118351.md): Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-118307](https://cve.now/CVE-2026-118307.md): Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome)
- [CVE-2026-118355](https://cve.now/CVE-2026-118355.md): Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code (CVSS 9.6, Google Chrome)
- [CVE-2026-118352](https://cve.now/CVE-2026-118352.md): Memory corruption in Cache in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside th (CVSS 8.8, Google Chrome)
- [CVE-2026-118337](https://cve.now/CVE-2026-118337.md): Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a… (CVSS 5.4, Google Chrome)
- [CVE-2026-118321](https://cve.now/CVE-2026-118321.md): Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arb (CVSS 9.6, Google Chrome)
- [CVE-2026-118340](https://cve.now/CVE-2026-118340.md): Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside th (CVSS 9.6, Google Chrome)
- [CVE-2026-118354](https://cve.now/CVE-2026-118354.md): Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in (CVSS 8.8, Google Chrome)
- [CVE-2026-118329](https://cve.now/CVE-2026-118329.md): Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitr (CVSS 8.8, Google Chrome)
- [CVE-2026-118322](https://cve.now/CVE-2026-118322.md): Memory corruption in ANGLE in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox v (CVSS 4.3, Google Chrome)
- [CVE-2026-118320](https://cve.now/CVE-2026-118320.md): Memory corruption in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the s (CVSS 8.8, Google Chrome)
- [CVE-2026-118317](https://cve.now/CVE-2026-118317.md): Memory corruption in HTML in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the (CVSS 8.8, Google Chrome)
- [CVE-2026-118305](https://cve.now/CVE-2026-118305.md): Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsid (CVSS 9.6, Google Chrome)
- [CVE-2026-118339](https://cve.now/CVE-2026-118339.md): Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox v (CVSS 8.8, Google Chrome)
- [CVE-2026-118350](https://cve.now/CVE-2026-118350.md): Use after free in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox vi (CVSS 8.8, Google Chrome)
- [CVE-2026-118318](https://cve.now/CVE-2026-118318.md): Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. (CVSS 4.3, Google Chrome)
- [CVE-2026-118357](https://cve.now/CVE-2026-118357.md): Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside (CVSS 8.8, Google Chrome)
- [CVE-2026-118344](https://cve.now/CVE-2026-118344.md): Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via (CVSS 8.8, Google Chrome)
- [CVE-2026-118348](https://cve.now/CVE-2026-118348.md): Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code in (CVSS 8.8, Google Chrome)
- [CVE-2026-118331](https://cve.now/CVE-2026-118331.md): Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code (CVSS 8.8, Google Chrome)
- [CVE-2026-118306](https://cve.now/CVE-2026-118306.md): Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outs (CVSS 9.6, Google Chrome)
- [CVE-2026-50571](https://cve.now/CVE-2026-50571.md): WebSub: Reflected script execution through intent-verification challenges (CVSS 5.7, w3c websub)
- [CVE-2026-59158](https://cve.now/CVE-2026-59158.md): Nuxt Ollama: public runtime configuration discloses the configured cloud API key (CVSS 7.5, thoda-dev nuxt-ollama · nuxt-ollama)
- [CVE-2026-58257](https://cve.now/CVE-2026-58257.md): GRR vulnerable to Arbitrary File Read and Deletion (CVSS 7.2, JeromeDevome GRR)
- [CVE-2026-58256](https://cve.now/CVE-2026-58256.md): GRR vulnerable to Remote Code Execution Via PHP Code Injection (CVSS 9.1, JeromeDevome GRR)
- [CVE-2026-58255](https://cve.now/CVE-2026-58255.md): Cronicle: Non-admin uid/gid injection in create\_event/update\_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401 (CVSS 8.8, jhuckaby Cronicle)
- [CVE-2026-58205](https://cve.now/CVE-2026-58205.md): GRR has a Reflected XSS issue (CVSS 8.1, JeromeDevome GRR)
- [CVE-2026-22063](https://cve.now/CVE-2026-22063.md): CVE-2026-22063 eMudhra CA Certificate Compromise in NetApp Products (CVSS 6.0, NetApp ONTAP · NetApp StorageGRID +1)
- [CVE-2026-58496](https://cve.now/CVE-2026-58496.md): ThorVG: Out-of-bounds Read in SFNT/TTF Font Loader via Memory API (CVSS 4.3, thorvg)
- [CVE-2026-118128](https://cve.now/CVE-2026-118128.md): a2aproject a2a-js Task Status Update result\_manager.ts ResultManager.applyStatusUpdate race condition (CVSS 6.9, a2aproject a2a-js)
- [CVE-2026-57199](https://cve.now/CVE-2026-57199.md): Asterisk: Asterisk app\_sms.c copies externally controlled SMS lengths into fixed in-struct buffers (CVSS 2.3, asterisk · certified-asterisk)
- [CVE-2026-57203](https://cve.now/CVE-2026-57203.md): Asterisk: Local privilege escalation through ast\_loggrabber's world-writable helper location (CVSS 6.9, asterisk · certified-asterisk)
- [CVE-2026-57190](https://cve.now/CVE-2026-57190.md): Asterisk: SQL Injection in cel\_pgsql and cel\_tds via CELGenUserEvent eventtype Field (CVSS 7.0, asterisk · certified-asterisk)
- [CVE-2026-97045](https://cve.now/CVE-2026-97045.md): Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net (no CVSS, golang.org/x/net/html · golang.org/x/net)
- [CVE-2026-78661](https://cve.now/CVE-2026-78661.md): Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net (no CVSS, golang.org/x/net/html · golang.org/x/net)
- [CVE-2026-62765](https://cve.now/CVE-2026-62765.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 7.5, Microsoft Edge)
- [CVE-2026-57191](https://cve.now/CVE-2026-57191.md): Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing (CVSS 8.2, asterisk · certified-asterisk)
- [CVE-2026-57192](https://cve.now/CVE-2026-57192.md): Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch (CVSS 6.0, asterisk · certified-asterisk)
- [CVE-2026-57186](https://cve.now/CVE-2026-57186.md): Asterisk: CVE-2022-37325 fix is absent from current chan\_ooh323 Q.931 party-number parser (CVSS 7.5, asterisk · certified-asterisk)
- [CVE-2026-57200](https://cve.now/CVE-2026-57200.md): Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE (CVSS 7.5, asterisk · certified-asterisk)
- [CVE-2026-57195](https://cve.now/CVE-2026-57195.md): Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication (CVSS 7.5, asterisk · certified-asterisk)
- [CVE-2026-85898](https://cve.now/CVE-2026-85898.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-83831](https://cve.now/CVE-2026-83831.md): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CVSS 8.8, Microsoft Edge)
- [CVE-2026-116775](https://cve.now/CVE-2026-116775.md): pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) (CVSS 2.3, Eugeny russh · pageant)
- [CVE-2026-116774](https://cve.now/CVE-2026-116774.md): russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) (CVSS 4.3, Eugeny russh · russh)
- [CVE-2026-116773](https://cve.now/CVE-2026-116773.md): russh's SSH client is susceptible to unbounded allocations via EXT\_INFO packets (CVSS 4.3, Eugeny russh · russh)
- [CVE-2026-116696](https://cve.now/CVE-2026-116696.md): russh's SSH agent server is susceptible to unbound allocations via repeated SSH\_AGENT\_CONSTRAIN\_CONFIRM messages (CVSS 3.3, Eugeny russh · russh)
- [CVE-2026-116695](https://cve.now/CVE-2026-116695.md): Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass (CVSS 5.3, rgrove crass · crass)
- [CVE-2026-116694](https://cve.now/CVE-2026-116694.md): OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation (CVSS 6.3, open-telemetry opentelemetry-python · opentelemetry-propaga…)
- [CVE-2026-116693](https://cve.now/CVE-2026-116693.md): dd-trace: ReDOS in URL query string obfuscation (CVSS 8.7, DataDog dd-trace-js · dd-trace)
- [CVE-2026-116692](https://cve.now/CVE-2026-116692.md): MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules (CVSS 9.8, mlflow)
- [CVE-2026-103995](https://cve.now/CVE-2026-103995.md): Lenient parsing of integers for response body and chunk framing (CVSS 2.0, Python Software Foundation CPython)
- [CVE-2026-116691](https://cve.now/CVE-2026-116691.md): MLflow CrewAI autologging records LLM provider API keys in logged trace spans (CVSS 6.5, mlflow)
- [CVE-2026-112352](https://cve.now/CVE-2026-112352.md): Sunhillo SureLine Authentication Bypass via Session Cookie (CVSS 9.1, Sunhillo SureLine)
- [CVE-2026-112351](https://cve.now/CVE-2026-112351.md): Sunhillo SureLine OS Command Injection via networkDiag.cgi (CVSS 8.7, Sunhillo SureLine)
- [CVE-2026-112350](https://cve.now/CVE-2026-112350.md): Sunhillo SureLine Path Traversal via radarUpdater.cgi (CVSS 8.7, Sunhillo SureLine)
- [CVE-2026-116690](https://cve.now/CVE-2026-116690.md): MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source (CVSS 7.5, mlflow)
- [CVE-2026-116689](https://cve.now/CVE-2026-116689.md): follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects (CVSS 5.9, follow-redirects)
- [CVE-2026-116688](https://cve.now/CVE-2026-116688.md): CKEditor: Cross-site scripting (XSS) in the engine package (CVSS 8.1, ckeditor5 · @ckeditor/ckeditor5-engine)
- [CVE-2026-116687](https://cve.now/CVE-2026-116687.md): CKEditor: Cross-site scripting (XSS) in the engine package (CVSS 3.1, ckeditor5 · @ckeditor/ckeditor5-engine)
- [CVE-2026-116686](https://cve.now/CVE-2026-116686.md): Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas (CVSS 6.5, modelcontextprotocol python-sdk · mcp)
- [CVE-2026-116685](https://cve.now/CVE-2026-116685.md): Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies (CVSS 5.9, modelcontextprotocol python-sdk · mcp)
- [CVE-2026-112355](https://cve.now/CVE-2026-112355.md): MembershipWorks WordPress Plugin \< 6.17 Information Disclosure via WordPress REST API (CVSS 8.7, MembershipWorks)
- [CVE-2026-116684](https://cve.now/CVE-2026-116684.md): Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server (CVSS 6.8, modelcontextprotocol python-sdk · mcp)
- [GHSA-F897-62HF-6GXQ](https://cve.now/GHSA-F897-62HF-6GXQ.md): MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length (high (no CVSS), @modelcontextprotocol/sdk · @modelcontextprotocol/server +2)
- [CVE-2026-116683](https://cve.now/CVE-2026-116683.md): CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values (CVSS 7.1, ctfer-io terraform-provider-ctfd · github.com/ctfer-io/t… +1)
- [CVE-2026-118180](https://cve.now/CVE-2026-118180.md): Matrix homeserver could redirect the chat session to a local file or network share (no CVSS, Mozilla Thunderbird)
- [CVE-2026-118179](https://cve.now/CVE-2026-118179.md): Request forgery via news: links (no CVSS, Mozilla Thunderbird)
- [CVE-2026-118178](https://cve.now/CVE-2026-118178.md): RSS feed could redirect its subscription to a local file or network share (no CVSS, Mozilla Thunderbird)
- [CVE-2026-118177](https://cve.now/CVE-2026-118177.md): Calendar discovery accepted local file and remote network share locations (no CVSS, Mozilla Thunderbird)
- [CVE-2026-118176](https://cve.now/CVE-2026-118176.md): Bypass of remote UNC path restriction in mailbox: URLs (no CVSS, Mozilla Thunderbird)
- [CVE-2026-118175](https://cve.now/CVE-2026-118175.md): Content of other messages could be included when replying to a crafted message (no CVSS, Mozilla Thunderbird)
- [CVE-2026-118174](https://cve.now/CVE-2026-118174.md): Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment (no CVSS, Mozilla Thunderbird)
- [CVE-2026-118173](https://cve.now/CVE-2026-118173.md): MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement (CVSS 6.1, misp-guard)
- [CVE-2026-115413](https://cve.now/CVE-2026-115413.md): AWS API MCP Server OAuth Token Audience Validation Bypass (CVSS 7.8, aws-api-mcp-server)
- [CVE-2026-118171](https://cve.now/CVE-2026-118171.md): CVE-2026-118171 (no CVSS, Strapi Open Source and Enterprise Headless CMS)
- [CVE-2026-118172](https://cve.now/CVE-2026-118172.md): CVE-2026-118172 (no CVSS, Strapi Open Source and Enterprise Headless CMS)
- [CVE-2026-118170](https://cve.now/CVE-2026-118170.md): CVE-2026-118170 (no CVSS, Strapi Open Source and Enterprise Headless CMS)
- [CVE-2026-57202](https://cve.now/CVE-2026-57202.md): Asterisk: ARI setChannelVar bypasses live\_dangerously and permits FILE() writes (CVSS 8.1, asterisk · certified-asterisk)
- [CVE-2026-57188](https://cve.now/CVE-2026-57188.md): Asterisk: Stack buffer overflow in res\_xmpp XMPP namespace prefix handling (CVSS 7.1, asterisk · certified-asterisk)
- [CVE-2026-116682](https://cve.now/CVE-2026-116682.md): FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory (CVSS 8.6, gtsteffaniak filebrowser · github.com/gtsteffaniak/filebrow…)
- [CVE-2026-117526](https://cve.now/CVE-2026-117526.md): reduxjs redux-devtools Remotedev Server evalAction code injection (CVSS 4.8, reduxjs redux-devtools)
- [CVE-2026-116680](https://cve.now/CVE-2026-116680.md): Homebox generic notifier SSRF via HTTP redirect after URL validation (CVSS 6.4, sysadminsmedia homebox)
- [CVE-2026-88812](https://cve.now/CVE-2026-88812.md): X.Org Server XKB SetGeometry TextDoodad Double Free (CVSS 7.8, X.org xorg-x11-server · x.org xwayland)
- [CVE-2026-102816](https://cve.now/CVE-2026-102816.md): Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305 (CVSS 5.3, TP-Link Systems RE305)
- [CVE-2026-102815](https://cve.now/CVE-2026-102815.md): Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305 (CVSS 6.9, TP-Link Systems RE305)
- [CVE-2026-102814](https://cve.now/CVE-2026-102814.md): Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305 (CVSS 8.7, TP-Link Systems RE305)
- [CVE-2026-102813](https://cve.now/CVE-2026-102813.md): Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305 (CVSS 6.1, TP-Link Systems RE305)
- [CVE-2026-102812](https://cve.now/CVE-2026-102812.md): Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 (CVSS 6.9, TP-Link Systems RE305 · TP-Link Systems Archer C7)
- [CVE-2026-118132](https://cve.now/CVE-2026-118132.md): CVE-2026-118132 (no CVSS, NextChat)
- [CVE-2026-108311](https://cve.now/CVE-2026-108311.md): Tanium addressed an insufficient logging vulnerability in Tanium Server. (CVSS 2.7, Tanium Server)
- [CVE-2026-108303](https://cve.now/CVE-2026-108303.md): Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. (CVSS 8.8, Tanium Certificate Manager)
- [CVE-2026-108316](https://cve.now/CVE-2026-108316.md): Tanium addressed an information disclosure vulnerability in Tanium Server. (CVSS 4.3, Tanium Server)
- [CVE-2026-116656](https://cve.now/CVE-2026-116656.md): Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. (CVSS 7.5, Tanium Enforce)
- [CVE-2026-108325](https://cve.now/CVE-2026-108325.md): Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. (CVSS 6.6, Tanium Reputation)
- [CVE-2026-116659](https://cve.now/CVE-2026-116659.md): Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. (CVSS 4.3, Tanium Enforce)
- [CVE-2026-108302](https://cve.now/CVE-2026-108302.md): Tanium addressed an improper access controls vulnerability in Comply. (CVSS 4.3, Tanium Comply)
- [CVE-2026-108306](https://cve.now/CVE-2026-108306.md): Tanium addressed a local privilege escalation vulnerability in End-User Notifications. (CVSS 7.8, Tanium Endpoint Configuration Toolset Solution · Tanium end…)
- [CVE-2026-108329](https://cve.now/CVE-2026-108329.md): Tanium addressed an unauthorized code execution vulnerability in Threat Response. (CVSS 8.8, Tanium Threat Response)
- [CVE-2026-108332](https://cve.now/CVE-2026-108332.md): Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. (CVSS 6.3, Tanium Endpoint Configuration Toolset Solution · Tanium thr…)
- [CVE-2026-108301](https://cve.now/CVE-2026-108301.md): Tanium addressed an improper access controls vulnerability in Comply. (CVSS 6.0, Tanium Comply)
- [CVE-2026-108304](https://cve.now/CVE-2026-108304.md): Tanium addressed a local privilege escalation vulnerability in End-User Notifications. (CVSS 7.8, Tanium Endpoint Configuration Toolset Solution · Tanium end…)
- [CVE-2026-87086](https://cve.now/CVE-2026-87086.md): Tanium addressed a denial of service vulnerability in Provision. (CVSS 7.5, Tanium Provision)
- [CVE-2026-108309](https://cve.now/CVE-2026-108309.md): Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension. (CVSS 5.5, Tanium Endpoint Configuration Toolset Solution · Tanium per…)
- [CVE-2026-116658](https://cve.now/CVE-2026-116658.md): Tanium addressed a denial of service vulnerability in Enforce. (CVSS 6.5, Tanium Enforce)
- [CVE-2026-108313](https://cve.now/CVE-2026-108313.md): Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. (CVSS 6.6, Tanium Server)
- [CVE-2026-116649](https://cve.now/CVE-2026-116649.md): Tanium addressed an improper output sanitization vulnerability in Enforce. (CVSS 7.1, Tanium Enforce)
- [CVE-2026-116647](https://cve.now/CVE-2026-116647.md): Tanium addressed an improper output sanitization vulnerability in Comply. (CVSS 7.1, Tanium Comply)
- [CVE-2026-116660](https://cve.now/CVE-2026-116660.md): Tanium addressed an improper access controls vulnerability in Enforce. (CVSS 4.3, Tanium Enforce)
- [CVE-2026-108326](https://cve.now/CVE-2026-108326.md): Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. (CVSS 6.5, Tanium Endpoint Configuration Toolset Solution · Tanium cx-…)
- [CVE-2026-108330](https://cve.now/CVE-2026-108330.md): Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. (CVSS 3.6, Tanium Endpoint Configuration Toolset Solution · Tanium thr…)
- [CVE-2026-116657](https://cve.now/CVE-2026-116657.md): Tanium addressed a denial of service vulnerability in Enforce. (CVSS 5.3, Tanium Enforce)
- [CVE-2026-108333](https://cve.now/CVE-2026-108333.md): Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. (CVSS 2.5, Tanium Endpoint Configuration Toolset Solution · Tanium thr…)
- [CVE-2026-108307](https://cve.now/CVE-2026-108307.md): Tanium addressed a heap-based buffer overflow vulnerability in Index. (CVSS 7.8, Tanium Endpoint Configuration Toolset Solution · Tanium ind…)
- [CVE-2026-116679](https://cve.now/CVE-2026-116679.md): Neko: Authorization bypass in legacy WebRTC input handling (CVSS 5.4, m1k1o neko · github.com/m1k1o/neko/server)
- [CVE-2026-108310](https://cve.now/CVE-2026-108310.md): Tanium addressed a denial of service vulnerability in Tanium Server. (CVSS 5.3, Tanium Server)
- [CVE-2026-116662](https://cve.now/CVE-2026-116662.md): Tanium addressed a compression bomb vulnerability in Enforce. (CVSS 7.5, Tanium Enforce)
- [CVE-2026-108305](https://cve.now/CVE-2026-108305.md): Tanium addressed a local privilege escalation vulnerability in End-User Notifications. (CVSS 7.8, Tanium Endpoint Configuration Toolset Solution · Tanium end…)
- [CVE-2026-108331](https://cve.now/CVE-2026-108331.md): Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. (CVSS 3.3, Tanium Endpoint Configuration Toolset Solution · Tanium thr…)
- [CVE-2026-87085](https://cve.now/CVE-2026-87085.md): Tanium addressed a SQL injection vulnerability in Provision. (CVSS 6.5, Tanium Provision)
- [CVE-2026-108308](https://cve.now/CVE-2026-108308.md): Tanium addressed a SQL injection vulnerability in Patch. (CVSS 6.5, Tanium Patch)
- [CVE-2026-117516](https://cve.now/CVE-2026-117516.md): oretnom23 php-travel-agency-system Contact Form contact\_insert.php sql injection (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-108328](https://cve.now/CVE-2026-108328.md): Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. (CVSS 4.2, Tanium Threat Response)
- [CVE-2026-116678](https://cve.now/CVE-2026-116678.md): Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs (CVSS 5.8, dani-garcia vaultwarden)
- [CVE-2026-118131](https://cve.now/CVE-2026-118131.md): CVE-2026-118131 (no CVSS, GnuPG)
- [CVE-2026-116677](https://cve.now/CVE-2026-116677.md): OpenWISP Controller CA CRL REST API does not scope requests to managed organizations (CVSS 5.3, openwisp-controller)
- [CVE-2026-16491](https://cve.now/CVE-2026-16491.md): CVE-2026-16491 CVE Record (CVSS 6.5, Grafana Enterprise · Grafana OSS)
- [CVE-2026-117515](https://cve.now/CVE-2026-117515.md): oretnom23 php-travel-agency-system traceapplication.php sql injection (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-116676](https://cve.now/CVE-2026-116676.md): Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan (CVSS 8.8, runatlantis atlantis · github.com/runatlantis/atlantis)
- [GHSA-WF6J-7HVR-GR93](https://cve.now/GHSA-WF6J-7HVR-GR93.md): Hydra legacy target blacklist permits unsafe PyYAML loading (high (no CVSS), hydra-core)
- [CVE-2026-104353](https://cve.now/CVE-2026-104353.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) (CVSS 9.9, Adobe Campaign Classic)
- [CVE-2026-105780](https://cve.now/CVE-2026-105780.md): Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) (CVSS 9.9, Adobe Campaign Classic)
- [CVE-2026-105489](https://cve.now/CVE-2026-105489.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.9, Adobe Campaign Classic)
- [CVE-2026-104350](https://cve.now/CVE-2026-104350.md): Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79) (CVSS 9.3, Adobe Campaign Classic)
- [CVE-2026-105781](https://cve.now/CVE-2026-105781.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 10.0, Adobe Campaign Classic)
- [CVE-2026-104351](https://cve.now/CVE-2026-104351.md): Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.9, Adobe Campaign Classic)
- [CVE-2026-104354](https://cve.now/CVE-2026-104354.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.1, Adobe Campaign Classic)
- [CVE-2026-105779](https://cve.now/CVE-2026-105779.md): Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (CVSS 9.1, Adobe Campaign Classic)
- [CVE-2026-117514](https://cve.now/CVE-2026-117514.md): oretnom23 php-travel-agency-system Admin Record Pages customer\_detail.php sql injection (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-57189](https://cve.now/CVE-2026-57189.md): Asterisk: Possible RED T.140 Generation Accumulation OOB Write (CVSS 2.3, asterisk · certified-asterisk)
- [CVE-2026-57201](https://cve.now/CVE-2026-57201.md): Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer (CVSS 7.5, asterisk · certified-asterisk)
- [CVE-2026-114598](https://cve.now/CVE-2026-114598.md): Access of resource using incompatible type ('type confusion') in EPICS Base (CVSS 7.5, The EPICS Community EPICS Base)
- [CVE-2026-108015](https://cve.now/CVE-2026-108015.md): eMudhra Compromised Certificate vulnerability impacts HCL Notes Client (CVSS 9.1, HCLSoftware Notes Client)
- [CVE-2026-57194](https://cve.now/CVE-2026-57194.md): Asterisk: chan\_unistim DIALPAGE digit handling can overflow phone\_number and crash Asterisk (CVSS 5.9, asterisk · certified-asterisk)
- [CVE-2026-114597](https://cve.now/CVE-2026-114597.md): Improper handling of length parameter inconsistency in EPICS Base (CVSS 7.5, The EPICS Community EPICS Base)
- [CVE-2026-114596](https://cve.now/CVE-2026-114596.md): Integer overflow or wraparound in EPICS Base (CVSS 8.2, The EPICS Community EPICS Base)
- [CVE-2026-114595](https://cve.now/CVE-2026-114595.md): Integer overflow or wraparound in EPICS Base (CVSS 9.8, The EPICS Community EPICS Base)
- [CVE-2026-57198](https://cve.now/CVE-2026-57198.md): Asterisk: Possible RED T.140 Heap Buffer Overflow (CVSS 2.3, asterisk · certified-asterisk)
- [CVE-2026-116675](https://cve.now/CVE-2026-116675.md): TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin \`data-mce-object\` serialization (CVSS 8.5, tinymce · tinymce/tinymce)
- [CVE-2026-117513](https://cve.now/CVE-2026-117513.md): oretnom23 php-travel-agency-system Admin Search Pages customer\_search.php sql injection (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-116674](https://cve.now/CVE-2026-116674.md): systeminformation: Prototype pollution in \`networkStats()\` via the interface name (CVSS 6.5, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-57185](https://cve.now/CVE-2026-57185.md): Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser (CVSS 6.5, asterisk · certified-asterisk)
- [CVE-2026-48360](https://cve.now/CVE-2026-48360.md): Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94) (CVSS 9.6, Adobe Connect Desktop App · Adobe Connect Android Mobile App)
- [CVE-2026-116673](https://cve.now/CVE-2026-116673.md): systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net (CVSS 3.3, sebhildebrandt systeminformation · systeminformation)
- [CVE-2026-108014](https://cve.now/CVE-2026-108014.md): eMudhra Compromised Certificate vulnerability impacts HCL Domino Server (CVSS 9.1, HCLSoftware Domino Server)
- [CVE-2026-57197](https://cve.now/CVE-2026-57197.md): Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format\_ogg\_speex) (CVSS 7.7, asterisk · certified-asterisk)
- [CVE-2026-109090](https://cve.now/CVE-2026-109090.md): libXi XGetDeviceControl DEVICE\_ENABLE Heap Buffer Overflow (CVSS 7.5, x.org libXi)
- [CVE-2026-116672](https://cve.now/CVE-2026-116672.md): Authlib RFC 7592 examples omit registration-access-token client binding (CVSS 8.8, authlib)
- [CVE-2026-117512](https://cve.now/CVE-2026-117512.md): oretnom23 php-travel-agency-system employee\_insert.php unrestricted upload (CVSS 6.9, oretnom23 php-travel-agency-system)
- [CVE-2026-109088](https://cve.now/CVE-2026-109088.md): libXtst RECORD EnableContext Reply Endless Loop (CVSS 6.5, X.org libXtst)
- [CVE-2026-48380](https://cve.now/CVE-2026-48380.md): Substance3D - Painter | Out-of-bounds Read (CWE-125) (CVSS 5.5, Adobe Substance 3D Painter)
- [CVE-2026-48379](https://cve.now/CVE-2026-48379.md): Substance3D - Painter | Stack-based Buffer Overflow (CWE-121) (CVSS 7.8, Adobe Substance 3D Painter)
- [CVE-2026-104349](https://cve.now/CVE-2026-104349.md): Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427) (CVSS 7.3, Adobe Creative Cloud Desktop Application)
- [CVE-2025-64394](https://cve.now/CVE-2025-64394.md): A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup (CVSS 4.3, Veeam Backup for Microsoft)
- [CVE-2026-108141](https://cve.now/CVE-2026-108141.md): A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to w (CVSS 5.9, Veeam Backup and Replication)
- [CVE-2026-106078](https://cve.now/CVE-2026-106078.md): A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token and receive responses (CVSS 6.9, Veeam Backup for Microsoft)
- [CVE-2026-107671](https://cve.now/CVE-2026-107671.md): A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by disabling it globally bef (CVSS 8.5, Veeam ONE)
- [CVE-2026-108142](https://cve.now/CVE-2026-108142.md): A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service. (CVSS 9.1, Veeam Backup and Replication)
- [CVE-2026-106077](https://cve.now/CVE-2026-106077.md): A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with (CVSS 8.3, Veeam Backup for Microsoft)
- [CVE-2026-106076](https://cve.now/CVE-2026-106076.md): A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backu (CVSS 9.0, Veeam Backup for Microsoft)
- [CVE-2026-108140](https://cve.now/CVE-2026-108140.md): A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to w (CVSS 5.9, Veeam Backup and Replication)
- [CVE-2026-105477](https://cve.now/CVE-2026-105477.md): A vulnerability in Veeam Agent for Linux allows for local privilege escalation. (CVSS 7.3, Veeam Agent for Linux)
- [CVE-2026-82984](https://cve.now/CVE-2026-82984.md): When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member o (CVSS 4.3, Nextcloud Server)
- [CVE-2026-77167](https://cve.now/CVE-2026-77167.md): Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc\_share\_external database table. (CVSS 7.5, Nextcloud server)
- [CVE-2026-77173](https://cve.now/CVE-2026-77173.md): A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not b (CVSS 4.3, Nextcloud Files Confidential)
- [CVE-2026-67400](https://cve.now/CVE-2026-67400.md): A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token. (CVSS 3.5, Nextcloud Richdocuments)
- [CVE-2026-77171](https://cve.now/CVE-2026-77171.md): A public shared collective always allowed recipients of the link to create pages. (CVSS 3.5, Nextcloud Collectives)
- [CVE-2026-77172](https://cve.now/CVE-2026-77172.md): App passwords were allowed to bypass password confirmation on sensitive endpoints. (CVSS 5.3, Nextcloud Server)
- [CVE-2026-87897](https://cve.now/CVE-2026-87897.md): A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for anot (CVSS 4.6, Nextcloud whiteboard)
- [CVE-2026-82983](https://cve.now/CVE-2026-82983.md): The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level pe (CVSS 3.3, Nextcloud Tables)
- [CVE-2026-82986](https://cve.now/CVE-2026-82986.md): The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for a table even though t (CVSS 4.6, Nextcloud Tables)
- [CVE-2026-54462](https://cve.now/CVE-2026-54462.md): knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion (CVSS 6.5, knative pkg · knative.dev/pkg)
- [CVE-2026-112353](https://cve.now/CVE-2026-112353.md): GFI KerioConnect \< 10.0.8p2 Stored XSS via SVG Attachment (CVSS 6.2, GFI USA GFI KerioConnect)
- [GHSA-VP88-798V-H67F](https://cve.now/GHSA-VP88-798V-H67F.md): rustls: ECH rejection can expose buffered application data to authenticated outer server before \`ech\_required\` alert (low (no CVSS), rustls)
- [GHSA-W44R-93J7-QV28](https://cve.now/GHSA-W44R-93J7-QV28.md): rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share (low (no CVSS), rustls)
- [GHSA-C8M5-C952-6CM4](https://cve.now/GHSA-C8M5-C952-6CM4.md): Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs (medium (no CVSS), rustls)
- [GHSA-H2V8-394M-P7VV](https://cve.now/GHSA-H2V8-394M-P7VV.md): Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication. (low (no CVSS), rustls)
- [CVE-2026-113775](https://cve.now/CVE-2026-113775.md): Dynamic Library Loading Process Control in Autodesk Fusion Desktop (CVSS 7.8, Autodesk Fusion)
- [CVE-2026-109089](https://cve.now/CVE-2026-109089.md): libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow (CVSS 7.5, X.Org libXi)
- [CVE-2026-102638](https://cve.now/CVE-2026-102638.md): Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop (CVSS 7.1, Autodesk Fusion)
- [CVE-2026-102637](https://cve.now/CVE-2026-102637.md): Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop (CVSS 7.1, Autodesk Fusion)
- [CVE-2026-102636](https://cve.now/CVE-2026-102636.md): Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop (CVSS 7.1, Autodesk Fusion)
- [CVE-2026-107672](https://cve.now/CVE-2026-107672.md): Stack File Trusted Markdown Injection in Autodesk Fusion Post Processor Utility (CVSS 8.8, Autodesk Fusion Post Processor Utility)
- [CVE-2026-117511](https://cve.now/CVE-2026-117511.md): desmondmorris node-tesseract Command Builder tesseract.js process os command injection (CVSS 6.9, desmondmorris node-tesseract)
- [CVE-2026-116863](https://cve.now/CVE-2026-116863.md): WordPress Newsletters plugin \<= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 9.6, Tribulant Software Newsletters)
- [CVE-2026-115495](https://cve.now/CVE-2026-115495.md): Mobile VPN with SSL Client for Windows: Cleartext Transmission of VPN Credentials over Local Management Socket (CVSS 5.7, WatchGuard Mobile VPN with SSL Client)
- [CVE-2026-90465](https://cve.now/CVE-2026-90465.md): Fireware OS Missing Authentication in FireCluster Sync Allows Privilege Escalation (CVSS 8.7, WatchGuard Fireware OS)
- [CVE-2026-93862](https://cve.now/CVE-2026-93862.md): Fireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service (CVSS 7.2, WatchGuard Fireware OS)
- [CVE-2026-112709](https://cve.now/CVE-2026-112709.md): Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution (CVSS 9.2, WatchGuard Fireware OS)
- [CVE-2026-90464](https://cve.now/CVE-2026-90464.md): Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root (CVSS 7.2, WatchGuard Fireware OS)
- [CVE-2026-103593](https://cve.now/CVE-2026-103593.md): Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution (CVSS 9.1, WatchGuard Fireware OS)
- [CVE-2026-113881](https://cve.now/CVE-2026-113881.md): Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution (CVSS 6.1, WatchGuard Fireware OS)
- [CVE-2026-93434](https://cve.now/CVE-2026-93434.md): Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets (CVSS 8.7, WatchGuard Fireware OS)
- [CVE-2026-90442](https://cve.now/CVE-2026-90442.md): Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service (CVSS 8.6, WatchGuard Fireware OS)
- [CVE-2026-112710](https://cve.now/CVE-2026-112710.md): Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution (CVSS 9.2, WatchGuard Fireware OS)
- [CVE-2026-82332](https://cve.now/CVE-2026-82332.md): Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking (CVSS 5.6, WatchGuard Fireware OS)
- [CVE-2026-93857](https://cve.now/CVE-2026-93857.md): Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution (CVSS 9.2, WatchGuard Fireware OS)
- [CVE-2026-93866](https://cve.now/CVE-2026-93866.md): Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write (CVSS 9.2, WatchGuard Fireware OS)
- [CVE-2026-93864](https://cve.now/CVE-2026-93864.md): Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root (CVSS 7.1, WatchGuard Fireware OS)
- [CVE-2026-103594](https://cve.now/CVE-2026-103594.md): Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution (CVSS 9.5, WatchGuard Fireware OS)
- [CVE-2026-104381](https://cve.now/CVE-2026-104381.md): Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service (CVSS 6.0, WatchGuard Fireware OS)
- [CVE-2026-111107](https://cve.now/CVE-2026-111107.md): Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service (CVSS 8.7, WatchGuard Fireware OS)
- [CVE-2026-93865](https://cve.now/CVE-2026-93865.md): Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection (CVSS 9.2, WatchGuard Fireware OS)
- [CVE-2026-109823](https://cve.now/CVE-2026-109823.md): Host filesystem path disclosure via DNS rebinding (CVSS 2.3, tidewave-ai tidewave · tidewave)
- [CVE-2026-117510](https://cve.now/CVE-2026-117510.md): Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic\_arch.py load\_pretrained\_gr00t path traversal (CVSS 5.3, Dexmal Dexbotic)
- [GHSA-3W55-933P-8PV5](https://cve.now/GHSA-3W55-933P-8PV5.md): Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage (high (no CVSS), strands-agents)
- [GHSA-763V-5PJM-FX36](https://cve.now/GHSA-763V-5PJM-FX36.md): Strands Agents: Default FileSessionManager storage is world-readable on shared systems (medium (no CVSS), strands-agents)
- [GHSA-G5FF-637F-6Q2M](https://cve.now/GHSA-G5FF-637F-6Q2M.md): LiteLLM: internal\_user\_viewer arbitrary local file read via \`vertex\_ai\_credentials\` (high (no CVSS), litellm)
- [GHSA-HHWW-MRG2-969H](https://cve.now/GHSA-HHWW-MRG2-969H.md): LiteLLM vulnerable to reflected XSS in /sso/debug/callback (medium (no CVSS), litellm)
- [CVE-2026-117509](https://cve.now/CVE-2026-117509.md): crownpku Rasa\_NLU\_Chi Model Persistor persistor.py Persistor.\_decompress path traversal (CVSS 5.3, crownpku Rasa\_NLU\_Chi)
- [CVE-2026-104189](https://cve.now/CVE-2026-104189.md): 3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share (CVSS 7.5, maz1987in 3Dviewer-Nextcloud)
- [CVE-2026-111585](https://cve.now/CVE-2026-111585.md): Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow (CVSS 8.8, TeamViewer Full Client · TeamViewer Portable +1)
- [CVE-2026-111584](https://cve.now/CVE-2026-111584.md): Local Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows (CVSS 7.3, TeamViewer Remote - Patch Management)
- [CVE-2026-111583](https://cve.now/CVE-2026-111583.md): Local Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows (CVSS 7.3, TeamViewer Full Client · TeamViewer Host)
- [CVE-2026-111582](https://cve.now/CVE-2026-111582.md): Local Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows (CVSS 7.3, TeamViewer Remote Management - Monitoring)
- [CVE-2026-92377](https://cve.now/CVE-2026-92377.md): Local Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows (CVSS 7.8, TeamViewer Full Client · TeamViewer Host)
- [CVE-2026-92376](https://cve.now/CVE-2026-92376.md): Local Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows (CVSS 7.8, TeamViewer Remote Management - Monitoring)
- [CVE-2026-92375](https://cve.now/CVE-2026-92375.md): Local privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring (CVSS 7.8, TeamViewer Full Client · TeamViewer Host +1)
- [CVE-2026-92374](https://cve.now/CVE-2026-92374.md): Privilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS (CVSS 7.8, TeamViewer Full Client · TeamViewer Host)
- [CVE-2026-92372](https://cve.now/CVE-2026-92372.md): Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution (CVSS 8.8, TeamViewer Full Client)
- [CVE-2026-117507](https://cve.now/CVE-2026-117507.md): a2aproject a2a-java TaskManager.saveTaskEvent race condition (CVSS 5.3, a2aproject a2a-java)
- [CVE-2026-117506](https://cve.now/CVE-2026-117506.md): a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption (CVSS 5.3, a2aproject a2a-java)
- [CVE-2026-117604](https://cve.now/CVE-2026-117604.md): Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback (CVSS 8.7, getgrav grav)
- [CVE-2026-117505](https://cve.now/CVE-2026-117505.md): a2aproject a2a-java ChildQueue queue.offer resource consumption (CVSS 5.3, a2aproject a2a-java)
- [CVE-2026-105987](https://cve.now/CVE-2026-105987.md): Stored XSS in KGS Software tia Viewer (CVSS 5.1, KGS Software tia Viewer)
- [CVE-2026-118027](https://cve.now/CVE-2026-118027.md): Frame poisoning in the Layout component (no CVSS, Mozilla Firefox)
- [CVE-2026-118026](https://cve.now/CVE-2026-118026.md): Invalid pointer in the JavaScript: GC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118025](https://cve.now/CVE-2026-118025.md): Other issue in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118024](https://cve.now/CVE-2026-118024.md): Use-after-free in the Graphics: Text component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118023](https://cve.now/CVE-2026-118023.md): Sandbox escape due to use-after-free in the Graphics: WebRender component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118022](https://cve.now/CVE-2026-118022.md): Sandbox escape due to use-after-free in the Disability Access APIs component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118021](https://cve.now/CVE-2026-118021.md): Sandbox escape due to use-after-free in the XPCOM component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118020](https://cve.now/CVE-2026-118020.md): Use-after-free in the Layout component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118019](https://cve.now/CVE-2026-118019.md): Race condition, use-after-free in the DOM: File component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118018](https://cve.now/CVE-2026-118018.md): Spoofing issue in the Downloads component in Firefox for Android (no CVSS, Mozilla Firefox)
- [CVE-2026-118017](https://cve.now/CVE-2026-118017.md): Use-after-free in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118016](https://cve.now/CVE-2026-118016.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118015](https://cve.now/CVE-2026-118015.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118014](https://cve.now/CVE-2026-118014.md): Use-after-free in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118013](https://cve.now/CVE-2026-118013.md): Use-after-free in the Layout: Images, Video, and HTML Frames component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118012](https://cve.now/CVE-2026-118012.md): Use-after-free in the DOM: Animation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118011](https://cve.now/CVE-2026-118011.md): Frame poisoning in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118010](https://cve.now/CVE-2026-118010.md): Use-after-free in the Disability Access APIs component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118009](https://cve.now/CVE-2026-118009.md): Integer overflow, use-after-free in the Graphics: Text component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118008](https://cve.now/CVE-2026-118008.md): Privilege escalation in the DOM: Navigation component (CVSS 8.8, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118007](https://cve.now/CVE-2026-118007.md): Use-after-free in the JavaScript: GC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118006](https://cve.now/CVE-2026-118006.md): Privilege escalation due to use-after-free in the WebRTC: Signaling component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118005](https://cve.now/CVE-2026-118005.md): Use-after-free in the WebRTC: Signaling component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118004](https://cve.now/CVE-2026-118004.md): Incorrect boundary conditions in the CSS Transitions and Animations component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118003](https://cve.now/CVE-2026-118003.md): Information disclosure in the Networking: DNS component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118002](https://cve.now/CVE-2026-118002.md): Information disclosure due to race condition in the Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-118000](https://cve.now/CVE-2026-118000.md): Information disclosure in the Networking: HTTP component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117999](https://cve.now/CVE-2026-117999.md): Race condition in the IPC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117998](https://cve.now/CVE-2026-117998.md): Mitigation bypass in the DOM: Push Subscriptions component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117997](https://cve.now/CVE-2026-117997.md): Sandbox escape due to use-after-free in the Widget component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117996](https://cve.now/CVE-2026-117996.md): Incorrect boundary conditions in the WebRTC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117995](https://cve.now/CVE-2026-117995.md): Privilege escalation in the DOM: UI Events & Focus Handling component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117994](https://cve.now/CVE-2026-117994.md): Use-after-free in the JavaScript: GC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117993](https://cve.now/CVE-2026-117993.md): Integer overflow in the Graphics: Text component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117992](https://cve.now/CVE-2026-117992.md): Information disclosure in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117991](https://cve.now/CVE-2026-117991.md): Incorrect boundary conditions in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117990](https://cve.now/CVE-2026-117990.md): Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117989](https://cve.now/CVE-2026-117989.md): Use-after-free in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117988](https://cve.now/CVE-2026-117988.md): Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117987](https://cve.now/CVE-2026-117987.md): Use-after-free in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117986](https://cve.now/CVE-2026-117986.md): Use-after-free in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117985](https://cve.now/CVE-2026-117985.md): Sandbox escape due to use-after-free in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117984](https://cve.now/CVE-2026-117984.md): Incorrect boundary conditions in the Layout: Scrolling and Overflow component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117983](https://cve.now/CVE-2026-117983.md): Use-after-free in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117982](https://cve.now/CVE-2026-117982.md): Invalid pointer in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117981](https://cve.now/CVE-2026-117981.md): Privilege escalation in the Toolkit component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117980](https://cve.now/CVE-2026-117980.md): Use-after-free in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117979](https://cve.now/CVE-2026-117979.md): Incorrect boundary conditions in the Graphics: WebRender component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117978](https://cve.now/CVE-2026-117978.md): Incorrect boundary conditions in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117977](https://cve.now/CVE-2026-117977.md): Other issue in the Console component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117976](https://cve.now/CVE-2026-117976.md): Site isolation issue in the DOM: Navigation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117975](https://cve.now/CVE-2026-117975.md): Sandbox escape due to invalid pointer in the Graphics: WebRender component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117974](https://cve.now/CVE-2026-117974.md): Use-after-free in the XML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117973](https://cve.now/CVE-2026-117973.md): Use-after-free in the Networking: DNS component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117972](https://cve.now/CVE-2026-117972.md): Use-after-free in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117971](https://cve.now/CVE-2026-117971.md): Sandbox escape due to use-after-free in the Print Preview component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117970](https://cve.now/CVE-2026-117970.md): Race condition in the Disability Access APIs component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117969](https://cve.now/CVE-2026-117969.md): Invalid pointer in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117968](https://cve.now/CVE-2026-117968.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117967](https://cve.now/CVE-2026-117967.md): Mitigation bypass in the DOM: Security component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117966](https://cve.now/CVE-2026-117966.md): Site isolation issue in the Networking: HTTP component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117965](https://cve.now/CVE-2026-117965.md): Same-origin policy bypass in the Address Bar component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117964](https://cve.now/CVE-2026-117964.md): Use-after-free in the Panning and Zooming component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117963](https://cve.now/CVE-2026-117963.md): Incorrect boundary conditions in the DOM: Service Workers component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117962](https://cve.now/CVE-2026-117962.md): Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117961](https://cve.now/CVE-2026-117961.md): Incorrect boundary conditions in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117960](https://cve.now/CVE-2026-117960.md): Spoofing issue in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117959](https://cve.now/CVE-2026-117959.md): Site isolation issue in the DOM: Service Workers component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117958](https://cve.now/CVE-2026-117958.md): Site isolation issue in the Networking: HTTP component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117957](https://cve.now/CVE-2026-117957.md): Cryptographic issue in the WebRTC: Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117956](https://cve.now/CVE-2026-117956.md): Invalid pointer in the Nimbus Desktop Client component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117955](https://cve.now/CVE-2026-117955.md): JIT miscompilation in the JavaScript: WebAssembly component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117954](https://cve.now/CVE-2026-117954.md): Use-after-free in the Layout: Positioned component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117953](https://cve.now/CVE-2026-117953.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117952](https://cve.now/CVE-2026-117952.md): Uninitialized memory in the Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117951](https://cve.now/CVE-2026-117951.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117950](https://cve.now/CVE-2026-117950.md): Incorrect boundary conditions in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117949](https://cve.now/CVE-2026-117949.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117948](https://cve.now/CVE-2026-117948.md): Use-after-free in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117947](https://cve.now/CVE-2026-117947.md): Use-after-free in the XML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117946](https://cve.now/CVE-2026-117946.md): Incorrect boundary conditions in the JavaScript Engine component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117945](https://cve.now/CVE-2026-117945.md): Incorrect boundary conditions in the XML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117944](https://cve.now/CVE-2026-117944.md): Use-after-free in the Layout component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117943](https://cve.now/CVE-2026-117943.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117942](https://cve.now/CVE-2026-117942.md): Incorrect boundary conditions in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117941](https://cve.now/CVE-2026-117941.md): Use-after-free in the DOM: CSS Object Model component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117940](https://cve.now/CVE-2026-117940.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117939](https://cve.now/CVE-2026-117939.md): Use-after-free in the XML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117938](https://cve.now/CVE-2026-117938.md): Use-after-free in the Layout component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117937](https://cve.now/CVE-2026-117937.md): Invalid pointer in the JavaScript Engine component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117936](https://cve.now/CVE-2026-117936.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117935](https://cve.now/CVE-2026-117935.md): Use-after-free in the DOM: Bindings (WebIDL) component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117934](https://cve.now/CVE-2026-117934.md): Use-after-free in the Layout component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117933](https://cve.now/CVE-2026-117933.md): Frame poisoning in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117932](https://cve.now/CVE-2026-117932.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117931](https://cve.now/CVE-2026-117931.md): Use-after-free in the DOM: Events component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117930](https://cve.now/CVE-2026-117930.md): Use-after-free in the DOM: Bindings (WebIDL) component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117929](https://cve.now/CVE-2026-117929.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117928](https://cve.now/CVE-2026-117928.md): Same-origin policy bypass in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117927](https://cve.now/CVE-2026-117927.md): Use-after-free in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117926](https://cve.now/CVE-2026-117926.md): Incorrect boundary conditions in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117925](https://cve.now/CVE-2026-117925.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117924](https://cve.now/CVE-2026-117924.md): Use-after-free in the XSLT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117923](https://cve.now/CVE-2026-117923.md): Use-after-free in the Audio/Video component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117922](https://cve.now/CVE-2026-117922.md): Use-after-free in the Networking: WebSockets component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117921](https://cve.now/CVE-2026-117921.md): Use-after-free in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117920](https://cve.now/CVE-2026-117920.md): Use-after-free in the DOM: HTML Parser component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117919](https://cve.now/CVE-2026-117919.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117918](https://cve.now/CVE-2026-117918.md): Use-after-free in the Graphics: Canvas2D component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117917](https://cve.now/CVE-2026-117917.md): Invalid pointer in the Graphics: WebRender component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117916](https://cve.now/CVE-2026-117916.md): Use-after-free in the XSLT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117915](https://cve.now/CVE-2026-117915.md): Incorrect boundary conditions in the Layout: Block and Inline component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117914](https://cve.now/CVE-2026-117914.md): Use-after-free in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117913](https://cve.now/CVE-2026-117913.md): Use-after-free in the SVG component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117912](https://cve.now/CVE-2026-117912.md): Same-origin policy bypass in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117911](https://cve.now/CVE-2026-117911.md): Use-after-free in the Audio/Video: Playback component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117910](https://cve.now/CVE-2026-117910.md): Invalid pointer in the JavaScript Engine component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117909](https://cve.now/CVE-2026-117909.md): Use-after-free in the JavaScript: GC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117908](https://cve.now/CVE-2026-117908.md): Use-after-free in the Graphics: ImageLib component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117907](https://cve.now/CVE-2026-117907.md): Use-after-free in the Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117906](https://cve.now/CVE-2026-117906.md): Use-after-free in the CSS Parsing and Computation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117905](https://cve.now/CVE-2026-117905.md): Use-after-free in the Audio/Video: Playback component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117904](https://cve.now/CVE-2026-117904.md): Use-after-free in the JavaScript: GC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117903](https://cve.now/CVE-2026-117903.md): Use-after-free in the Audio/Video component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117902](https://cve.now/CVE-2026-117902.md): Use-after-free in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117901](https://cve.now/CVE-2026-117901.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117900](https://cve.now/CVE-2026-117900.md): Use-after-free in the DOM: Editor component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117899](https://cve.now/CVE-2026-117899.md): Use-after-free in the Networking: HTTP component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117898](https://cve.now/CVE-2026-117898.md): Use-after-free in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117897](https://cve.now/CVE-2026-117897.md): Incorrect boundary conditions in the Layout: Tables component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117896](https://cve.now/CVE-2026-117896.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117895](https://cve.now/CVE-2026-117895.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117894](https://cve.now/CVE-2026-117894.md): Incorrect boundary conditions in the WebRTC: Signaling component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117893](https://cve.now/CVE-2026-117893.md): Incorrect boundary conditions in the Security: PSM component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117892](https://cve.now/CVE-2026-117892.md): Privilege escalation due to use-after-free in the WebRTC: Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117891](https://cve.now/CVE-2026-117891.md): Use-after-free in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117890](https://cve.now/CVE-2026-117890.md): JIT miscompilation in the JavaScript Engine: JIT component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117889](https://cve.now/CVE-2026-117889.md): Incorrect boundary conditions in the JavaScript Engine component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117888](https://cve.now/CVE-2026-117888.md): Uninitialized memory in the Graphics: Canvas2D component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117887](https://cve.now/CVE-2026-117887.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117886](https://cve.now/CVE-2026-117886.md): Incorrect boundary conditions in the Graphics: Text component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117885](https://cve.now/CVE-2026-117885.md): Use-after-free in the Layout: Grid component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117884](https://cve.now/CVE-2026-117884.md): Use-after-free in the Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117883](https://cve.now/CVE-2026-117883.md): Use-after-free in the DOM: HTML Parser component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117882](https://cve.now/CVE-2026-117882.md): Use-after-free in the Layout component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117881](https://cve.now/CVE-2026-117881.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117880](https://cve.now/CVE-2026-117880.md): Use-after-free in the XML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117879](https://cve.now/CVE-2026-117879.md): Incorrect boundary conditions in the Layout: Tables component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117878](https://cve.now/CVE-2026-117878.md): Other issue, use-after-free in the Storage: IndexedDB component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117877](https://cve.now/CVE-2026-117877.md): Use-after-free in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117876](https://cve.now/CVE-2026-117876.md): Use-after-free in the Layout: Text and Fonts component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117875](https://cve.now/CVE-2026-117875.md): Use-after-free in the Layout: Scrolling and Overflow component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117874](https://cve.now/CVE-2026-117874.md): Use-after-free in the Internationalization component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117873](https://cve.now/CVE-2026-117873.md): Incorrect boundary conditions in the Audio/Video: Playback component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117872](https://cve.now/CVE-2026-117872.md): Use-after-free in the JavaScript: Standard Library component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117871](https://cve.now/CVE-2026-117871.md): Invalid pointer in the Graphics component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117870](https://cve.now/CVE-2026-117870.md): Use-after-free in the JavaScript Engine component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117869](https://cve.now/CVE-2026-117869.md): Use-after-free in the DOM: Core & HTML component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117868](https://cve.now/CVE-2026-117868.md): Sandbox escape in the DOM: Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117867](https://cve.now/CVE-2026-117867.md): Use-after-free in the Layout component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117866](https://cve.now/CVE-2026-117866.md): Privilege escalation due to use-after-free in the Graphics: Canvas2D component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117865](https://cve.now/CVE-2026-117865.md): Use-after-free in the JavaScript: GC component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117864](https://cve.now/CVE-2026-117864.md): Sandbox escape in the Form Manager component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117863](https://cve.now/CVE-2026-117863.md): Information disclosure due to uninitialized memory in the Audio/Video component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117862](https://cve.now/CVE-2026-117862.md): Privilege escalation due to incorrect boundary conditions in the Networking component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117861](https://cve.now/CVE-2026-117861.md): Sandbox escape in the DOM: Navigation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117860](https://cve.now/CVE-2026-117860.md): Same-origin policy bypass in the DOM: Navigation component (no CVSS, Mozilla Firefox · Mozilla Thunderbird)
- [CVE-2026-117504](https://cve.now/CVE-2026-117504.md): a2aproject a2a-go Distributed Manager distributed\_manager.go Cancel denial of service (CVSS 6.9, a2aproject a2a-go)
- [CVE-2026-90725](https://cve.now/CVE-2026-90725.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 4.9, Dell PowerProtect Data Domain)
- [CVE-2026-117503](https://cve.now/CVE-2026-117503.md): a2aproject a2a-go REST SSE handler rest.go resource consumption (CVSS 6.9, a2aproject a2a-go)
- [CVE-2026-68866](https://cve.now/CVE-2026-68866.md): PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release (CVSS 6.5, Dell PowerProtect Data Domain)
- [CVE-2026-90726](https://cve.now/CVE-2026-90726.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 6.0, Dell PowerProtect Data Domain)
- [CVE-2026-90727](https://cve.now/CVE-2026-90727.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 3.8, Dell PowerProtect Data Domain)
- [CVE-2026-94347](https://cve.now/CVE-2026-94347.md): PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, (CVSS 7.2, Dell PowerProtect Data Domain Virtual Edition)
- [CVE-2026-10537](https://cve.now/CVE-2026-10537.md): Remote unauthenticated information disclosure and denial of service due to unauthenticated service access (CVSS 6.9, BMC Control-M/Enterprise Manager · BMC Control-M/Server)
- [CVE-2026-94346](https://cve.now/CVE-2026-94346.md): PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, (CVSS 7.2, Dell PowerProtect Data Domain Virtual Edition)
- [CVE-2026-16307](https://cve.now/CVE-2026-16307.md): IDOR in Netiket Information Technologies' EdoWEB (CVSS 4.3, Netiket Information Technologies EdoWEB)
- [CVE-2026-12887](https://cve.now/CVE-2026-12887.md): In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a script step so the sc (CVSS 5.1, Octopus Deploy Octopus Server)
- [CVE-2026-117603](https://cve.now/CVE-2026-117603.md): Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass (CVSS 9.3, spesmilo electrum)
- [CVE-2026-117602](https://cve.now/CVE-2026-117602.md): Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution (CVSS 8.6, spesmilo electrum)
- [CVE-2026-117601](https://cve.now/CVE-2026-117601.md): Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions (CVSS 9.3, spesmilo electrum · electrum)
- [CVE-2026-117573](https://cve.now/CVE-2026-117573.md): hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools (CVSS 8.5, masc-ucsc hagent)
- [CVE-2026-117570](https://cve.now/CVE-2026-117570.md): nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan\_vulnerabilities (CVSS 4.8, Vorota-ai nmap-mcp)
- [CVE-2026-117569](https://cve.now/CVE-2026-117569.md): Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters (CVSS 8.5, alishahid74 kali-gpt)
- [CVE-2026-117568](https://cve.now/CVE-2026-117568.md): mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir (CVSS 7.3, bitscorp-mcp mcp-ffmpeg)
- [CVE-2026-117567](https://cve.now/CVE-2026-117567.md): esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters (CVSS 8.5, horw esp-mcp)
- [CVE-2026-117566](https://cve.now/CVE-2026-117566.md): EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php (CVSS 6.9, icret EasyImages2.0)
- [CVE-2026-117565](https://cve.now/CVE-2026-117565.md): Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch (CVSS 6.9, ArtalkJS Artalk)
- [CVE-2026-117564](https://cve.now/CVE-2026-117564.md): nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret (CVSS 9.3, buqiyuan nest-admin)
- [CVE-2026-117563](https://cve.now/CVE-2026-117563.md): MrDoc through 1.1.1 Broken Access Control via manage\_doc\_share (CVSS 5.3, zmister2016 MrDoc)
- [CVE-2026-117562](https://cve.now/CVE-2026-117562.md): rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story\_get Endpoint (CVSS 6.9, anyant rssant)
- [CVE-2026-117561](https://cve.now/CVE-2026-117561.md): sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values (CVSS 8.5, codefriar sf-mcp)
- [CVE-2026-117560](https://cve.now/CVE-2026-117560.md): ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools (CVSS 8.5, atxp gemini-cli-extension)
- [CVE-2026-117559](https://cve.now/CVE-2026-117559.md): DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass (CVSS 8.5, hyperb1iss droidmind)
- [CVE-2026-117558](https://cve.now/CVE-2026-117558.md): ai-sdlc MCP Server through 0.31.2 Command Injection via check\_issue and check\_pr\_status (CVSS 8.5, ai-sdlc-framework ai-sdlc)
- [CVE-2026-117557](https://cve.now/CVE-2026-117557.md): SDL\_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader (CVSS 6.9, libsdl-org SDL\_image)
- [CVE-2026-117556](https://cve.now/CVE-2026-117556.md): zchunk before 1.5.5 Heap Out-of-Bounds Read via read\_preface() (CVSS 5.3, zchunk)
- [CVE-2026-117555](https://cve.now/CVE-2026-117555.md): GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in \_load\_bmp() (CVSS 6.9, GreycLab CImg)
- [CVE-2026-117554](https://cve.now/CVE-2026-117554.md): Admidio before 5.0.17 Event Guest Restriction Bypass via events\_function.php (CVSS 5.3, admidio)
- [CVE-2026-117553](https://cve.now/CVE-2026-117553.md): Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning (CVSS 7.7, Umbraco-CMS)
- [CVE-2026-92546](https://cve.now/CVE-2026-92546.md): Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally (CVSS 7.5, Keepnet Labs Cybersecurity Agentic AI / Agentic Ally)
- [CVE-2026-116627](https://cve.now/CVE-2026-116627.md): Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in Devolutions PowerShell (no CVSS, Devolutions PowerShell Universal)
- [CVE-2026-15586](https://cve.now/CVE-2026-15586.md): OTP Brute-Force Account Takeover in Idvlabs Software's Ontime (CVSS 5.3, İdvlabs Software and Consulting Services Ontime)
- [CVE-2026-114409](https://cve.now/CVE-2026-114409.md): Docker Desktop logs can expose stored third-party credentials (CVSS 5.7, Docker Desktop)
- [CVE-2026-107590](https://cve.now/CVE-2026-107590.md): Out-of-bounds write vulnerability in QTextCodec iconv-based encoding impacts Qt (CVSS 1.9, Qt)
- [CVE-2026-47486](https://cve.now/CVE-2026-47486.md): NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write. (CVSS 7.8, NVIDIA PhysX)
- [CVE-2026-65145](https://cve.now/CVE-2026-65145.md): NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue. (CVSS 10.0, NVIDIA NeMo Agent Toolkit)
- [CVE-2026-65151](https://cve.now/CVE-2026-65151.md): NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue. (CVSS 8.4, NVIDIA NeMo Agent Toolkit)
- [CVE-2026-65120](https://cve.now/CVE-2026-65120.md): NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. (CVSS 7.1, NVIDIA TensorRT-LLM)
- [CVE-2026-24269](https://cve.now/CVE-2026-24269.md): NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery. (CVSS 7.1, NVIDIA TensorRT-LLM)
- [CVE-2026-65119](https://cve.now/CVE-2026-65119.md): NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an attacker could cause inclusi (CVSS 8.4, NVIDIA TensorRT-LLM)
- [CVE-2026-100164](https://cve.now/CVE-2026-100164.md): User Enumeration in Rolantis Information Technologies' Agentis (CVSS 7.5, Rolantis Information Technologies Tourism Industry and Trad…)
- [CVE-2026-106087](https://cve.now/CVE-2026-106087.md): TRO600 contains an arbitrary file read vulnerability. (CVSS 8.7, Hitachi Energy TRO600 Series Firmware)
- [CVE-2026-10756](https://cve.now/CVE-2026-10756.md): TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to (CVSS 7.7, Hitachi Energy TRO600 Series Firmware)
- [CVE-2026-115408](https://cve.now/CVE-2026-115408.md): ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets (CVSS 5.5, Eclipse Foundation Eclipse KeyPont)
- [CVE-2026-13162](https://cve.now/CVE-2026-13162.md): An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system command (CVSS 7.7, Hitachi Energy CoreTec)
- [CVE-2026-113644](https://cve.now/CVE-2026-113644.md): iofogctl command injection via Controller provisioning response (CVSS 5.5, Eclipse Foundation Eclipse ioFog)
- [CVE-2026-90728](https://cve.now/CVE-2026-90728.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 6.3, Dell PowerProtect Data Domain)
- [CVE-2026-105323](https://cve.now/CVE-2026-105323.md): Reflected XSS in Kulga Software's Kulga News Software (CVSS 6.1, Kulga Software and Telecommunications Limited Company Kulga…)
- [CVE-2026-90729](https://cve.now/CVE-2026-90729.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 6.7, Dell PowerProtect Data Domain)
- [CVE-2026-115216](https://cve.now/CVE-2026-115216.md): Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials (CVSS 9.1, Eclipse Foundation Eclipse ioFog)
- [CVE-2026-41022](https://cve.now/CVE-2026-41022.md): Eaton easySoft improperly validates TLS certificates presented by easyE4 devices. (CVSS 5.9, Eaton easySoft)
- [CVE-2026-10752](https://cve.now/CVE-2026-10752.md): Advanced Custom Fields: Extended \<= 0.9.2.6 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via Email Action Dynamic File Field (CVSS 4.8, hwk-fr Advanced Custom Fields: Extended)
- [CVE-2026-109995](https://cve.now/CVE-2026-109995.md): Advanced Views \<= 3.9.6 - Unauthenticated Stored Cross-Site Scripting via Comment Content (CVSS 7.2, wplakeorg Advanced Views – Display Framework – Gutenberg/El…)
- [CVE-2026-90730](https://cve.now/CVE-2026-90730.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 6.5, Dell PowerProtect Data Domain)
- [CVE-2026-112362](https://cve.now/CVE-2026-112362.md): @fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets (CVSS 9.1, @fastify/express)
- [CVE-2026-90731](https://cve.now/CVE-2026-90731.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 4.9, Dell PowerProtect Data Domain)
- [CVE-2026-41021](https://cve.now/CVE-2026-41021.md): Eaton easyE4 uses an insufficiently strong password policy. (CVSS 7.5, Eaton easyE4)
- [CVE-2026-90732](https://cve.now/CVE-2026-90732.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through LTS 2026, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS20 (CVSS 4.9, Dell PowerProtect Data Domain)
- [CVE-2026-117499](https://cve.now/CVE-2026-117499.md): @fastify/session vulnerable to session revocation bypass via a logout race condition (CVSS 3.7, @fastify/session)
- [CVE-2026-56084](https://cve.now/CVE-2026-56084.md): Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 re (CVSS 5.8, Dell PowerProtect Data Domain)
- [CVE-2026-102800](https://cve.now/CVE-2026-102800.md): Joomla Extension - dj-extensions.com - Unauthenticated Stored XSS in DJ-HelpfulArticles \< 1.3.0 (CVSS 8.7, dj-extensions.com DJ-HelpfulArticles extension for Joomla)
- [CVE-2026-41020](https://cve.now/CVE-2026-41020.md): Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication (CVSS 7.5, Eaton easyE4)
- [CVE-2026-4337](https://cve.now/CVE-2026-4337.md): Unrestricted Upload of File in PuMuKIT application (CVSS 8.8, PuMuKIT)
- [CVE-2026-117541](https://cve.now/CVE-2026-117541.md): svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize() (CVSS 6.9, darylldoyle svg-sanitizer)
- [CVE-2026-117540](https://cve.now/CVE-2026-117540.md): svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop (CVSS 8.7, darylldoyle svg-sanitizer)
- [CVE-2026-117539](https://cve.now/CVE-2026-117539.md): darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass (CVSS 5.1, darylldoyle svg-sanitizer)
- [CVE-2026-117538](https://cve.now/CVE-2026-117538.md): REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter (CVSS 2.1, redaxo core · redaxo/source)
- [CVE-2026-117537](https://cve.now/CVE-2026-117537.md): REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter (CVSS 2.1, redaxo core · redaxo/source)
- [CVE-2026-117536](https://cve.now/CVE-2026-117536.md): REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation (CVSS 8.6, redaxo core)
- [CVE-2026-117535](https://cve.now/CVE-2026-117535.md): REDAXO before 5.21.3 Reflected XSS via opener\_link in Media Pool (CVSS 5.1, redaxo core)
- [CVE-2026-117534](https://cve.now/CVE-2026-117534.md): REDAXO before 5.21.3 CSRF in Article History Plugin (CVSS 5.1, redaxo core)
- [CVE-2026-117533](https://cve.now/CVE-2026-117533.md): REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads (CVSS 2.1, redaxo core)
- [CVE-2026-117532](https://cve.now/CVE-2026-117532.md): REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin (CVSS 9.3, redaxo core)
- [CVE-2026-116900](https://cve.now/CVE-2026-116900.md): REDAXO before 5.21.4 Stored XSS via Media and Link Input Widgets (CVSS 5.1, redaxo core)
- [CVE-2026-116899](https://cve.now/CVE-2026-116899.md): REDAXO before 5.21.4 Broken Access Control in Slice Operations (CVSS 7.1, redaxo core)
- [CVE-2026-116898](https://cve.now/CVE-2026-116898.md): REDAXO before 5.21.4 Missing Authorization in Media Pool Bulk Move (CVSS 7.1, redaxo core)
- [CVE-2026-116897](https://cve.now/CVE-2026-116897.md): REDAXO before 5.21.4 Missing Authorization in Version and History Previews (CVSS 7.1, redaxo core)
- [CVE-2026-116896](https://cve.now/CVE-2026-116896.md): REDAXO before 5.21.5 Privilege Escalation via Backup Export of Authentication Tables (CVSS 7.7, redaxo core)
- [CVE-2026-116895](https://cve.now/CVE-2026-116895.md): REDAXO before 5.21.5 CSRF via Safe Mode Toggle Parameter (CVSS 5.1, redaxo core)
- [CVE-2026-116894](https://cve.now/CVE-2026-116894.md): REDAXO before 5.21.5 Insufficient Session Expiration on Password Change (CVSS 2.3, redaxo core)
- [CVE-2026-116893](https://cve.now/CVE-2026-116893.md): REDAXO core before 5.21.5 Missing Authorization in rex\_api\_package API (CVSS 6.1, redaxo core)
- [CVE-2026-117466](https://cve.now/CVE-2026-117466.md): In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full system Administrator. (CVSS 8.6, Octopus Deploy Octopus Server)
- [CVE-2026-117341](https://cve.now/CVE-2026-117341.md): In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event log. (CVSS 7.7, Octopus Deploy Octopus Server)
- [CVE-2026-116870](https://cve.now/CVE-2026-116870.md): In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistently. (CVSS 8.7, Octopus Deploy Octopus Server)
- [CVE-2026-110737](https://cve.now/CVE-2026-110737.md): Push Endpoint Returns Permissive CORS Headers (CVSS 2.3, vaadin)
- [CVE-2026-116892](https://cve.now/CVE-2026-116892.md): SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via Special:Search smw Profile (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116891](https://cve.now/CVE-2026-116891.md): SemanticMediaWiki 4.2.0 before 7.2.1 Reflected XSS via Special:FacetedSearch cstate (CVSS 5.1, SemanticMediaWiki · mediawiki/semantic-media-wiki)
- [CVE-2026-116890](https://cve.now/CVE-2026-116890.md): Semantic MediaWiki 3.0.0 before 7.3.0 Missing Authorization via smwtask API (CVSS 6.9, SemanticMediaWiki)
- [CVE-2026-116889](https://cve.now/CVE-2026-116889.md): SemanticMediaWiki 2.5.0 before 7.3.1 Stored XSS via Special:Browse Code Property (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116888](https://cve.now/CVE-2026-116888.md): SemanticMediaWiki 3.2.0 before 7.3.1 Stored XSS via Special:Browse Group Heading (CVSS 4.8, SemanticMediaWiki)
- [CVE-2026-116887](https://cve.now/CVE-2026-116887.md): Semantic MediaWiki 3.0.0 before 7.3.1 Stored XSS via Special:Browse Keyword Property (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116886](https://cve.now/CVE-2026-116886.md): Semantic MediaWiki before 7.3.1 Stored XSS via External Identifier in Special:Browse (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116885](https://cve.now/CVE-2026-116885.md): Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116884](https://cve.now/CVE-2026-116884.md): SemanticMediaWiki 5.0.0 before 7.3.1 Stored XSS via Tooltip Module data- Attributes (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116883](https://cve.now/CVE-2026-116883.md): Semantic MediaWiki 3.1.0 before 7.3.1 Stored XSS via Schema Descriptions (CVSS 4.8, SemanticMediaWiki)
- [CVE-2026-116882](https://cve.now/CVE-2026-116882.md): Semantic MediaWiki 4.2.0 before 7.3.1 Stored XSS via FacetedSearch Exploration Labels (CVSS 4.8, SemanticMediaWiki)
- [CVE-2026-116881](https://cve.now/CVE-2026-116881.md): Semantic MediaWiki 3.0.0 before 7.3.1 XSS via Property-Value Autocomplete (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116880](https://cve.now/CVE-2026-116880.md): Semantic MediaWiki 3.0.0 before 7.3.1 CSRF via Special:SMWAdmin Maintenance Actions (CVSS 7.1, SemanticMediaWiki)
- [CVE-2026-116879](https://cve.now/CVE-2026-116879.md): Semantic MediaWiki 7.3.0 before 7.3.1 Missing Authorization via smwtask Update Task (CVSS 6.9, SemanticMediaWiki)
- [CVE-2026-116878](https://cve.now/CVE-2026-116878.md): Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity (CVSS 8.7, SemanticMediaWiki)
- [CVE-2026-116877](https://cve.now/CVE-2026-116877.md): Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via #set\_recurring\_event (CVSS 8.7, SemanticMediaWiki)
- [CVE-2026-116876](https://cve.now/CVE-2026-116876.md): Semantic MediaWiki 2.5.0 before 7.3.1 Missing Authorization via Is edit protected (CVSS 7.1, SemanticMediaWiki)
- [CVE-2026-116875](https://cve.now/CVE-2026-116875.md): SemanticMediaWiki 3.0.0 before 7.3.1 Reflected XSS via Special:Ask Separator Parameters (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116874](https://cve.now/CVE-2026-116874.md): SemanticMediaWiki 3.1.0 before 7.3.1 Reflected XSS via JsonResultPrinter Default Parameter (CVSS 5.3, SemanticMediaWiki)
- [CVE-2026-116873](https://cve.now/CVE-2026-116873.md): Semantic MediaWiki 7.3.0 Missing Authorization via smwtask API run-joblist and update (CVSS 6.9, SemanticMediaWiki)
- [CVE-2026-116872](https://cve.now/CVE-2026-116872.md): Semantic MediaWiki 3.0.0 before 7.3.1 Denial of Service via Special:Search Compact Filters (CVSS 8.7, SemanticMediaWiki)
- [CVE-2026-116871](https://cve.now/CVE-2026-116871.md): Semantic MediaWiki 3.0.0 before 7.3.1 Uncontrolled Recursion via Special:Ask (CVSS 8.7, SemanticMediaWiki)
- [CVE-2026-117530](https://cve.now/CVE-2026-117530.md): In JetBrains Junie CLI before 26.8.17 command execution was possible due to incomplete validation of allowlisted commands (CVSS 6.7, JetBrains Junie CLI)
- [CVE-2026-111548](https://cve.now/CVE-2026-111548.md): A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device servers. (CVSS 5.3, Moxa NPort W2150A-W4/W2250A-W4 Series)
- [CVE-2026-82117](https://cve.now/CVE-2026-82117.md): Authentication Bypass by Spoofing Vulnerability in HiRDB (CVSS 9.8, Hitachi HiRDB Server)
- [CVE-2026-82116](https://cve.now/CVE-2026-82116.md): Missing Authentication for Critical Function Vulnerability in HiRDB (CVSS 9.8, Hitachi HiRDB Server)
- [CVE-2026-82118](https://cve.now/CVE-2026-82118.md): Stack-based Buffer Overflow Vulnerability in HiRDB (CVSS 9.8, Hitachi HiRDB Server)
- [CVE-2026-82120](https://cve.now/CVE-2026-82120.md): Heap-based Buffer Overflow Vulnerability in HiRDB (CVSS 9.8, Hitachi HiRDB Server)
- [CVE-2026-82119](https://cve.now/CVE-2026-82119.md): OS Command Injection Vulnerability in HiRDB (CVSS 9.8, Hitachi HiRDB Server)
- [CVE-2026-82121](https://cve.now/CVE-2026-82121.md): Origin Validation Error Vulnerability in HiRDB (CVSS 7.5, Hitachi HiRDB Server)
- [CVE-2026-82122](https://cve.now/CVE-2026-82122.md): Stack-based Buffer Overflow Vulnerability in HiRDB (CVSS 9.4, Hitachi HiRDB Server)
- [CVE-2026-76939](https://cve.now/CVE-2026-76939.md): Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.8, Hitachi JP1/Automatic Job Management System 3 - Manager · H…)
- [CVE-2026-76936](https://cve.now/CVE-2026-76936.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.4, Hitachi JP1/Automatic Job Management System 3 - Manager)
- [CVE-2026-76937](https://cve.now/CVE-2026-76937.md): Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.4, Hitachi JP1/Automatic Job Management System 3 - Manager)
- [CVE-2026-76938](https://cve.now/CVE-2026-76938.md): Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.8, Hitachi JP1/Automatic Job Management System 3 - Manager)
- [CVE-2026-76935](https://cve.now/CVE-2026-76935.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.4, Hitachi JP1/Automatic Job Management System 3 - Manager)
- [CVE-2026-76934](https://cve.now/CVE-2026-76934.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.8, Hitachi JP1/Automatic Job Management System 3 - Manager · H…)
- [CVE-2026-76932](https://cve.now/CVE-2026-76932.md): Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.4, Hitachi JP1/Automatic Job Management System 3 - Manager · H…)
- [CVE-2026-76933](https://cve.now/CVE-2026-76933.md): Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3 (CVSS 9.4, Hitachi JP1/Automatic Job Management System 3 - Manager · H…)
- [CVE-2026-86577](https://cve.now/CVE-2026-86577.md): Out-of-bounds Write Vulnerability in JP1 Products (CVSS 9.4, Hitachi JP1/Integrated Management 3 - Manager · Hitachi… +2)
- [CVE-2026-86576](https://cve.now/CVE-2026-86576.md): Heap-based Buffer Overflow Vulnerability in JP1 Products (CVSS 9.4, Hitachi JP1/Integrated Management 3 - Manager · Hitachi… +2)
- [CVE-2026-86575](https://cve.now/CVE-2026-86575.md): Stack-based Buffer Overflow Vulnerability in JP1 Products (CVSS 9.4, Hitachi JP1/Integrated Management 3 - Manager · Hitachi… +2)
- [CVE-2026-86574](https://cve.now/CVE-2026-86574.md): Heap-based Buffer Overflow Vulnerability in JP1/Base (CVSS 9.8, Hitachi JP1/Base)
- [CVE-2026-107147](https://cve.now/CVE-2026-107147.md): Authentication bypass by spoofing in twofactor\_gauthenticator (CVSS 6.3, alexandregz twofactor\_gauthenticator)
- [CVE-2026-107146](https://cve.now/CVE-2026-107146.md): Insufficient session expiration in twofactor\_gauthenticator (CVSS 6.3, alexandregz twofactor\_gauthenticator)
- [CVE-2026-107145](https://cve.now/CVE-2026-107145.md): Lack of rate-limiting in 2fa code check mechanism in twofactor\_gauthenticator (CVSS 6.3, alexandregz twofactor\_gauthenticator)
- [CVE-2026-102787](https://cve.now/CVE-2026-102787.md): Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5 (CVSS 5.3, phoca.cz Phoca Download extension for Joomla)
- [CVE-2026-102788](https://cve.now/CVE-2026-102788.md): Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox \< 2.20.4.2 (CVSS 9.3, balbooa.com Gridbox extension for Joomla)
- [CVE-2026-102789](https://cve.now/CVE-2026-102789.md): Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox \< 2.20.4.2 (CVSS 9.3, balbooa.com Gridbox extension for Joomla)
- [CVE-2026-117494](https://cve.now/CVE-2026-117494.md): Multiple vulnerabilities in Sisense’s Cloud BI Platform (CVSS 8.3, Sisense Cloud BI Platform)
- [CVE-2026-117493](https://cve.now/CVE-2026-117493.md): Multiple vulnerabilities in Sisense’s Cloud BI Platform (CVSS 8.3, Sisense Cloud BI Platform)
- [CVE-2026-85299](https://cve.now/CVE-2026-85299.md): Missing Authorization in Compute Engine allows Cross-Project Disk Exfiltration (CVSS 8.3, Google Cloud Compute Engine)
- [CVE-2026-92885](https://cve.now/CVE-2026-92885.md): Qode Membership \<= 2.0.6.2 - Authentication Bypass via Social Login (CVSS 9.8, Qode Themes Qode Membership)
- [CVE-2026-65213](https://cve.now/CVE-2026-65213.md): Supermicro BMC IPMI feature contains a Arbitrary Command Execution with Superuser Privileges vulnerability (CVSS 6.6, SMCI MBD-X12SPI)
- [CVE-2026-65211](https://cve.now/CVE-2026-65211.md): Supermicro BMC IPMI feature contains Critical Privilege Escalation and Arbitrary Access vulnerability (CVSS 7.2, SMCI MBD-X12SPI)
- [CVE-2026-65210](https://cve.now/CVE-2026-65210.md): Supermicro BMC IPMI feature contains Arbitrary File Access vulnerability (CVSS 4.9, SMCI MBD-X12SPI)
- [CVE-2026-65220](https://cve.now/CVE-2026-65220.md): Supermicro BMC IPMI feature contains a Privilege escalation vulnerability (CVSS 8.8, SMCI MBD-X12SPI)
- [CVE-2026-65219](https://cve.now/CVE-2026-65219.md): Supermicro BMC contains Unordered RAKP Message 3 Grants an IPMI Session vulnerability (CVSS 7.4, SMCI MBD-X12SPI)
- [CVE-2026-18451](https://cve.now/CVE-2026-18451.md): Supermicro BMC's iKVM feature is vulnerable to KVM session hijacking due to a predictable time-seeded launch token (CVSS 3.1, SMCI MBD-X12SPI)
- [CVE-2026-18450](https://cve.now/CVE-2026-18450.md): Supermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability (CVSS 9.8, SMCI X12SPI)
- [CVE-2026-10511](https://cve.now/CVE-2026-10511.md): Jupiter X Core \<= 4.61.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'forget\_password\_link' Parameter (CVSS 6.4, artbees Jupiter X Core)
- [CVE-2026-18449](https://cve.now/CVE-2026-18449.md): Supermicro BMC contains a SMCRAKP Fixed Key vulnerability (CVSS 7.5, SMCI X12SPI)
- [CVE-2026-107472](https://cve.now/CVE-2026-107472.md): Out-of-bounds read vulnerability in QTextCodec TSCII encoding impacts Qt (CVSS 4.3, Qt)
- [CVE-2026-16521](https://cve.now/CVE-2026-16521.md): Supermicro BMC's syslog feature contains a command injection vulnerability (CVSS 7.2, SMCI MBD-X12STW-F)
- [CVE-2026-111461](https://cve.now/CVE-2026-111461.md): SMS upgrade argument reaches system() unescaped in OnCell G3150A-LTE Series (CVSS 7.5, Moxa OnCell G3150A-LTE Series)
- [CVE-2026-101034](https://cve.now/CVE-2026-101034.md): Security Advisory for offline recovery of Symantec GSS 3.3 RU11 stored domain credentials (CVSS 6.8, Broadcom Symantec Ghost Solution Suite)
- [CVE-2026-111460](https://cve.now/CVE-2026-111460.md): Static HTTPS private key and CA private key in firmware in OnCell G3150A-LTE Series (CVSS 7.7, Moxa OnCell G3150A-LTE Series)
- [CVE-2026-111459](https://cve.now/CVE-2026-111459.md): Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client) (CVSS 7.6, Moxa Remote Connect Suite)
- [CVE-2026-106174](https://cve.now/CVE-2026-106174.md): A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network a (CVSS 6.7, Fortinet FortiOS)
- [CVE-2026-105946](https://cve.now/CVE-2026-105946.md): Out-of-bounds read vulnerability in NTLM authentication handling impacts Qt (CVSS 5.3, qt)
- [CVE-2026-103325](https://cve.now/CVE-2026-103325.md): TiendaCrypto para WooCommerce 1.0.1 - 1.2.1 - Unauthenticated Order Payment Forgery via Webhook HMAC Bypass (CVSS 3.7, TiendaCrypto para WooCommerce)
- [CVE-2026-103359](https://cve.now/CVE-2026-103359.md): PayDunya WooCommerce Payment Gateway 1.1.6 - Unauthenticated Order Payment Completion via Webhook Forgery (CVSS 5.3, PayDunya WooCommerce Payment Gateway)
- [CVE-2026-110910](https://cve.now/CVE-2026-110910.md): qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection (CVSS 3.7, ljharb qs)
- [CVE-2026-75891](https://cve.now/CVE-2026-75891.md): Kirki \<= 6.2.5 - Authenticated (Subscriber+) PHP Object Injection to Administrator Account Takeover via 'get-single-symbol' AJAX Endpoint (CVSS 8.8, themeum Kirki – Freeform Page Builder, Website Builder & Cu…)
- [CVE-2026-103312](https://cve.now/CVE-2026-103312.md): Payment Integration Wompi \<= 4.0.1 - Unauthenticated Payment Confirmation Forgery via IPN Callback (CVSS 5.3, Payment Integration Wompi)
- [CVE-2026-103332](https://cve.now/CVE-2026-103332.md): Payex Payment Gateway for WooCommerce \<= 1.2.10 - Unauthenticated Payment Confirmation Forgery via Empty-Default Secret Key (CVSS 5.3, Payex Payment Gateway for Woocommerce)
- [CVE-2026-117472](https://cve.now/CVE-2026-117472.md): URL prefix handling permits API key read-scope bypass in Psono Server (CVSS 4.3, esaqa Psono)
- [CVE-2026-117471](https://cve.now/CVE-2026-117471.md): User-controlled Duo host permits authenticated SSRF in Psono Server (CVSS 5.4, esaqa Psono)
- [CVE-2026-117470](https://cve.now/CVE-2026-117470.md): WebAuthn assertion replay permits second-factor bypass in Psono Server (CVSS 6.5, esaqa Psono)
- [CVE-2026-117469](https://cve.now/CVE-2026-117469.md): File-transfer type confusion permits unauthorized repository writes in Psono Server (CVSS 5.4, esaqa Psono)
- [CVE-2026-117468](https://cve.now/CVE-2026-117468.md): Device-code claim permits restricted token escalation in Psono Server (CVSS 6.5, esaqa Psono)
- [CVE-2026-111820](https://cve.now/CVE-2026-111820.md): Analytics Insights \<= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title (CVSS 7.2, deconf Analytics Insights – Google Analytics Dashboard for…)
- [CVE-2026-88781](https://cve.now/CVE-2026-88781.md): Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory add (CVSS 6.8, ASUS motherboards firmware)
- [CVE-2026-116640](https://cve.now/CVE-2026-116640.md): Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting (CVSS 5.1, Saruf-Ratul HR-Payroll-Management-System)
- [CVE-2026-116639](https://cve.now/CVE-2026-116639.md): MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting (CVSS 5.1, MD-MAFUJUL-HASAN Online-Payroll-Management-System)
- [CVE-2026-116839](https://cve.now/CVE-2026-116839.md): A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found (CVSS 7.1, Ubiquiti airMAX M)
- [CVE-2026-116838](https://cve.now/CVE-2026-116838.md): A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found (CVSS 8.8, Ubiquiti airMAX M)
- [CVE-2026-116623](https://cve.now/CVE-2026-116623.md): code-projects Simple Content Management System Admin welcome.php authorization (CVSS 6.9, code-projects Simple Content Management System)
- [CVE-2026-116837](https://cve.now/CVE-2026-116837.md): A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, Solar (CVSS 8.8, Ubiquiti airMAX M · Ubiquiti LTU PTMP +2)
- [CVE-2026-116844](https://cve.now/CVE-2026-116844.md): Fclairamb ftpserverlib through 0.32.4 Cleartext FTPES Data Transfer via PROT P (CVSS 6.3, fclairamb ftpserverlib · Syncplify Server!)
- [CVE-2026-116843](https://cve.now/CVE-2026-116843.md): Mistral Vibe before 3.0.3 RCE via Git Filter Drivers in Worktree Mode (CVSS 8.7, mistralai mistral-vibe)
- [CVE-2026-116842](https://cve.now/CVE-2026-116842.md): DevilutionX 1.4.0 through 1.5.5 Heap Buffer Overflow via libmpq\_\_archive\_dup (CVSS 6.9, diasurgical DevilutionX)
- [CVE-2026-116841](https://cve.now/CVE-2026-116841.md): DevilutionX 1.4.0 through 1.5.5 Out-of-Bounds Read via libmpq Hash Table Lookup (CVSS 6.8, diasurgical DevilutionX)
- [CVE-2026-116840](https://cve.now/CVE-2026-116840.md): llama.cpp b5854 before b11275 Integer Overflow in gguf\_init\_from\_reader (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-116829](https://cve.now/CVE-2026-116829.md): llama.cpp b10398 before b11301 Integer Overflow in gguf\_init\_from\_reader (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-116816](https://cve.now/CVE-2026-116816.md): llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer (CVSS 8.5, ggml-org llama.cpp)
- [CVE-2025-71439](https://cve.now/CVE-2025-71439.md): llama.cpp before b5649 Heap Out-of-Bounds Read via llama\_vocab::impl::print\_info (CVSS 6.8, ggml-org llama.cpp)
- [CVE-2024-58400](https://cve.now/CVE-2024-58400.md): llama.cpp before b3701 Out-of-Bounds Read in llama\_decode via Token IDs (CVSS 8.8, ggml-org llama.cpp)
- [CVE-2024-58399](https://cve.now/CVE-2024-58399.md): llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-116836](https://cve.now/CVE-2026-116836.md): A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnera (CVSS 8.8, Ubiquiti airMAX M)
- [CVE-2026-116620](https://cve.now/CVE-2026-116620.md): Tencent RapidJSON Regex stream.h Take out-of-bounds (CVSS 6.9, Tencent RapidJSON)
- [CVE-2026-116608](https://cve.now/CVE-2026-116608.md): DAMO Academy VideoLLaMA2 Model Loading \_\_init\_\_.py load\_pretrained\_model integrity check (CVSS 5.3, DAMO Academy VideoLLaMA2)
- [CVE-2026-116605](https://cve.now/CVE-2026-116605.md): SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security (CVSS 6.9, SourceCodester Online Food Ordering System)
- [CVE-2026-107067](https://cve.now/CVE-2026-107067.md): An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information (CVSS 6.2)
- [CVE-2026-78845](https://cve.now/CVE-2026-78845.md): Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light Bulb 3.30.17 are… (CVSS 9.8)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-10-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.