# CVEs published 2026-11-02

474 CVEs were published on November 2, 2026: 26 critical, 150 high. 10 early warnings were posted. Days are UTC.
## Early warnings

- [SZB-dffcdbc311](https://cve.now/SZB-dffcdbc311): Germany says lawmakers' iPhones may have been hacked with spyware
- [SZB-b728804dc9](https://cve.now/SZB-b728804dc9): Abrigo takes Sageworks risk app offline after irregular activity
- [SZB-7a8b5fe3b6](https://cve.now/SZB-7a8b5fe3b6): Google says Videostrong backdoored Android TV boxes in 1.3M-device botnet
- [SZB-c7aa11a23f](https://cve.now/SZB-c7aa11a23f): BTCPay Server maintainer warns of hot wallet thefts on outdated instances
- [SZB-9ad81aaa3b](https://cve.now/SZB-9ad81aaa3b): Microsoft fixes bug that blocked Smart App Control activation after October update
- [SZB-0bed561f10](https://cve.now/SZB-0bed561f10): IBM discloses two critical Langflow flaws allowing unauthenticated code execution
- [SZB-ca48ede9d9](https://cve.now/SZB-ca48ede9d9): BleepingComputer reports over 1,000 exposed GitLab servers unpatched against an exploited RCE flaw
- [SZB-7b2beadb7b](https://cve.now/SZB-7b2beadb7b): Malicious Claude Code extension distributed in Cursor supply chain attack
- [SZB-3a668ff545](https://cve.now/SZB-3a668ff545): DebugBear says DNS records were hijacked via its domain registrar
- [SZB-407cb1f14c](https://cve.now/SZB-407cb1f14c): Ivanti patches two more Connect Secure zero-days chained in attacks

## CVEs

- [CVE-2026-71450](https://cve.now/CVE-2026-71450.md): Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows… (CVSS 8.7, Johnson Controls EasyIO Neo EC and CW Edge Controller)
- [CVE-2026-120597](https://cve.now/CVE-2026-120597.md): Welcart e-Commerce Plugin paymentESCOTT.main.class.php error\_page\_message cross site scripting (CVSS 5.3, Welcart e-Commerce Plugin)
- [CVE-2026-120752](https://cve.now/CVE-2026-120752.md): PyMuPDF 1.25.3 before 2.0 Stack Buffer Overflow via add\_freetext\_annot() Callout (CVSS 7.7, PyMuPDF)
- [CVE-2026-120740](https://cve.now/CVE-2026-120740.md): Hivex: hivex: denial of service via out-of-bounds read in big-data block processing (CVSS 2.0, Red Hat Enterprise Linux)
- [CVE-2026-115215](https://cve.now/CVE-2026-115215.md): NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams… (CVSS 8.7, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-115403](https://cve.now/CVE-2026-115403.md): NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full (CVSS 8.2, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-116635](https://cve.now/CVE-2026-116635.md): Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (CVSS 6.1, aws-serverless-mcp-server)
- [CVE-2026-86596](https://cve.now/CVE-2026-86596.md): s2Member \<= 260927 - Unauthenticated Remote Code Execution via 'item\_name' IPN Parameter (CVSS 9.8, clavaque s2Member – Excellent for All Kinds of Memberships,…)
- [CVE-2026-120091](https://cve.now/CVE-2026-120091.md): Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the… (CVSS 8.7, Temporal Technologies Temporal Server)
- [CVE-2026-105476](https://cve.now/CVE-2026-105476.md): Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate… (CVSS 8.8, WebPros cPanel)
- [CVE-2026-105475](https://cve.now/CVE-2026-105475.md): Improper neutralization of a NUL byte in cPanel allows remote attackers to read any mail account's calendar and contact data. (CVSS 8.7, WebPros cPanel)
- [CVE-2026-116958](https://cve.now/CVE-2026-116958.md): Konflux-ci: unquoted variable expansion in shell command execution (CVSS 6.7, konflux-ci)
- [CVE-2026-58873](https://cve.now/CVE-2026-58873.md): In addDragDropListener of WindowManagerService.java, there is a possible permission bypass due to a missing permission check. (CVSS 8.4, Google Android XR)
- [CVE-2026-120503](https://cve.now/CVE-2026-120503.md): EchoHS GeekezBrowser Public API status information disclosure (CVSS 4.8, EchoHS GeekezBrowser)
- [CVE-2026-116768](https://cve.now/CVE-2026-116768.md): Missing length validation in Absolute Secure Access (CVSS 7.1, Absolute Software Secure Access)
- [CVE-2026-58977](https://cve.now/CVE-2026-58977.md): In is\_valid\_header of timed\_cache\_item.c, there is a possible out-of-bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-29508](https://cve.now/CVE-2026-29508.md): ReadyMedia 1.3.0 - 1.3.3 Stack Buffer Overflow via DFF Parser (CVSS 8.7, ReadyMedia)
- [CVE-2026-116767](https://cve.now/CVE-2026-116767.md): Improper input handling in Secure Access servers (CVSS 7.1, Absolute Software Secure Access)
- [CVE-2026-58930](https://cve.now/CVE-2026-58930.md): An unprivileged application can exploit a lack of package/signature validation in SystemUI's \`RemoteQCController\` when resolving a… (no CVSS, Google Android)
- [CVE-2026-58927](https://cve.now/CVE-2026-58927.md): The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized \`std::weak\_ptr\` within… (no CVSS, Google Android)
- [CVE-2026-58926](https://cve.now/CVE-2026-58926.md): A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a \`buffer\_handle\_t\` while the producer… (no CVSS, Google Android)
- [CVE-2026-58925](https://cve.now/CVE-2026-58925.md): The report details a heap Use-After-Free (UAF) vulnerability within the \`android.hardware.automotive.evs-default\` HAL service, stemming… (no CVSS, Google Android)
- [CVE-2026-58924](https://cve.now/CVE-2026-58924.md): The vulnerability is a heap out-of-bounds read in the EVS HAL's \`getStreamList()\` method. (no CVSS, Google Android)
- [CVE-2026-58915](https://cve.now/CVE-2026-58915.md): A physical occupant on an Android Automotive OS (AAOS) Multi-User Multi-Display (MUMD) passenger display can view sensitive Heads-Up… (no CVSS, Google Android)
- [CVE-2026-49906](https://cve.now/CVE-2026-49906.md): An unprivileged application can bypass the \`android.car.permission.CAR\_DISPLAY\_IN\_CLUSTER\` permission by registering an activity with the… (no CVSS, Google Android)
- [CVE-2026-49903](https://cve.now/CVE-2026-49903.md): The \`ClusterRenderingService.dump()\` method, accessible to processes holding \`android.permission.DUMP\` and… (no CVSS, Google Android)
- [CVE-2026-116766](https://cve.now/CVE-2026-116766.md): Improper input handling in Secure Access server (CVSS 8.3, Absolute Software Secure Access)
- [CVE-2026-16305](https://cve.now/CVE-2026-16305.md): CVE-2026-16305 (no CVSS, INFINITT Healthcare System Manager)
- [CVE-2026-91901](https://cve.now/CVE-2026-91901.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Authorization in Handler for Custom URL Scheme… (CVSS 3.5, Dell Alienware Command Center)
- [CVE-2026-91896](https://cve.now/CVE-2026-91896.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Authentication Bypass by Spoofing vulnerability. (CVSS 3.9, Dell Alienware Command Center)
- [CVE-2026-86365](https://cve.now/CVE-2026-86365.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Input Validation vulnerability. (CVSS 4.2, Dell Alienware Command Center)
- [CVE-2026-116769](https://cve.now/CVE-2026-116769.md): Authentication bypass in Secure Access Servers (CVSS 9.3, Absolute Security Secure Access)
- [CVE-2026-91900](https://cve.now/CVE-2026-91900.md): Dell Alienware Command Center (AWCC), version(s) Versions up to and including 6.14.20.0, contain(s) an Improper Authorization in Handler… (CVSS 5.8, Dell Alienware Command Center)
- [CVE-2026-91899](https://cve.now/CVE-2026-91899.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature… (CVSS 6.4, Dell Alienware Command Center)
- [CVE-2026-91897](https://cve.now/CVE-2026-91897.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Certificate Validation vulnerability. (CVSS 6.4, Dell Alienware Command Center)
- [CVE-2026-97718](https://cve.now/CVE-2026-97718.md): CSRF in Secure Access Server v14.60 (CVSS 9.4, Absolute Security Secure Access)
- [CVE-2026-91894](https://cve.now/CVE-2026-91894.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability. (CVSS 6.7, Dell Alienware Command Center)
- [CVE-2026-91895](https://cve.now/CVE-2026-91895.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. (CVSS 7.1, Dell Alienware Command Center)
- [CVE-2026-59048](https://cve.now/CVE-2026-59048.md): In rb\_cpu\_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2026-59047](https://cve.now/CVE-2026-59047.md): In multiple locations, there is a possible denial of service due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59046](https://cve.now/CVE-2026-59046.md): In \_\_pkvm\_guest\_relinquish\_to\_host of mem\_protect.c, there is a possible out-of-bounds write due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-59045](https://cve.now/CVE-2026-59045.md): In multiple locations, there is a possible memory corruption due to a race condition. (no CVSS, Google Android)
- [CVE-2026-59044](https://cve.now/CVE-2026-59044.md): In multiple locations, there is a possible use-after-free due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-59043](https://cve.now/CVE-2026-59043.md): In arm\_lpae\_split\_blk\_unmap of io-pgtable-arm-common.c, there is a possible memory corruption due to a race condition. (no CVSS, Google Android)
- [CVE-2026-59042](https://cve.now/CVE-2026-59042.md): In \_\_pkvm\_pages\_to\_ppages of mmu.c, there is a possible out-of-bounds write due to a race condition. (no CVSS, Google Android)
- [CVE-2026-59031](https://cve.now/CVE-2026-59031.md): In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59028](https://cve.now/CVE-2026-59028.md): In resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-59022](https://cve.now/CVE-2026-59022.md): In multiple functions of MediaProvider.java, there is a possible permission bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59021](https://cve.now/CVE-2026-59021.md): In multiple locations, there is a possible denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-59020](https://cve.now/CVE-2026-59020.md): In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. (no CVSS, Google Android)
- [CVE-2026-59016](https://cve.now/CVE-2026-59016.md): In sendAnomalyProfile of ProfilingService.java, there is a possible path traversal issue due to path traversal. (no CVSS, Google Android)
- [CVE-2026-59015](https://cve.now/CVE-2026-59015.md): In multiple locations, there is a possible permission bypass due to a confused deputy. (no CVSS, Google Android)
- [CVE-2026-59014](https://cve.now/CVE-2026-59014.md): In multiple locations, there is a possible out-of-bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-59012](https://cve.now/CVE-2026-59012.md): In checkLastKnownCellIdAccessPermission of TelephonyPermissions.java, there is a possible permission bypass due to a missing permission… (no CVSS, Google Android)
- [CVE-2026-59011](https://cve.now/CVE-2026-59011.md): In multiple locations, there is a possible permission bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-91898](https://cve.now/CVE-2026-91898.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Verification of Cryptographic Signature… (CVSS 8.1, Dell Alienware Command Center)
- [CVE-2026-59010](https://cve.now/CVE-2026-59010.md): In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-59008](https://cve.now/CVE-2026-59008.md): In setApplicationRestrictions of DevicePolicyManagerService.java, there is a possible denial of service due to resource exhaustion. (no CVSS, Google Android)
- [CVE-2026-59007](https://cve.now/CVE-2026-59007.md): In decode\_packed\_entry\_number of codebook.c, there is a possible out-of-bounds read due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59006](https://cve.now/CVE-2026-59006.md): In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. (no CVSS, Google Android)
- [CVE-2026-59005](https://cve.now/CVE-2026-59005.md): In insertInternal of MmsProvider.java, there is a possible multiuser isolation issue due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-59004](https://cve.now/CVE-2026-59004.md): In multiple locations, there is a possible permission bypass due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2026-59003](https://cve.now/CVE-2026-59003.md): In getSubscriptionProperty of SubscriptionManagerService.java, there is a possible information disclosure due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-59002](https://cve.now/CVE-2026-59002.md): In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59001](https://cve.now/CVE-2026-59001.md): In checkQueryPermission of TelephonyProvider.java, there is a possible permission bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-59000](https://cve.now/CVE-2026-59000.md): In multiple locations, there is a possible permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-58997](https://cve.now/CVE-2026-58997.md): In validateImageInfo of Bitmap.cpp, there is a possible out-of-bounds read due to a precondition check failure. (no CVSS, Google Android)
- [CVE-2026-58995](https://cve.now/CVE-2026-58995.md): In getEntryFileName of ZipFileRO.cpp, there is a possible memory safety issue due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58994](https://cve.now/CVE-2026-58994.md): In multiple functions of NfcService.java, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58990](https://cve.now/CVE-2026-58990.md): In l2c\_fcr\_process\_peer\_cfg\_req of l2c\_fcr.cc, there is a possible memory safety issue due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-58989](https://cve.now/CVE-2026-58989.md): In setOemUnlockAllowedByUser of OemLockService.java, there is a possible way to bypass FRP due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58988](https://cve.now/CVE-2026-58988.md): In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-58986](https://cve.now/CVE-2026-58986.md): In notifyPictureProfileHandleSelection of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58985](https://cve.now/CVE-2026-58985.md): In handleConnectInternal of RpcServerTrusty.cpp, there is a possible denial of service due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58984](https://cve.now/CVE-2026-58984.md): In multiple locations, there is a possible memory corruption due to a use-after-free. (CVSS 8.4, Google Android)
- [CVE-2026-58979](https://cve.now/CVE-2026-58979.md): In canPresent of PresentationController.java, there is a possible permission bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58978](https://cve.now/CVE-2026-58978.md): In multiple locations, there is a possible permission bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58976](https://cve.now/CVE-2026-58976.md): In getSelectionBySubIds of ProviderUtil.java, there is a possible cross-user data leak due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58975](https://cve.now/CVE-2026-58975.md): In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. (no CVSS, Google Android)
- [CVE-2026-58974](https://cve.now/CVE-2026-58974.md): In multiple locations, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58971](https://cve.now/CVE-2026-58971.md): In \_mupdf\_get\_hdr of wprint\_mupdf.c, there is a possible out-of-bounds read due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-58970](https://cve.now/CVE-2026-58970.md): In deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-58969](https://cve.now/CVE-2026-58969.md): In multiple functions of MediaQualityService.java, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58968](https://cve.now/CVE-2026-58968.md): In oapvd\_vlc\_metadata of oapv\_vlc.c, there is a possible memory corruption due to a double free. (no CVSS, Google Android)
- [CVE-2026-58966](https://cve.now/CVE-2026-58966.md): In multiple functions of hppsfilter.c, there is a possible out-of-bounds write due to a stack buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58965](https://cve.now/CVE-2026-58965.md): In handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-119740](https://cve.now/CVE-2026-119740.md): Nexbox A95X Amlogic S905X UART Unauthenticated Console Access (CVSS 7.0, Nexbox A95X)
- [CVE-2026-58964](https://cve.now/CVE-2026-58964.md): In checkDestination of SmsUsageMonitor.java, there is a possible permission bypass due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58963](https://cve.now/CVE-2026-58963.md): In multiple locations, there is a possible denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58962](https://cve.now/CVE-2026-58962.md): In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58961](https://cve.now/CVE-2026-58961.md): In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background activity launch due to a logic error in the… (no CVSS, Google Android)
- [CVE-2026-58957](https://cve.now/CVE-2026-58957.md): In resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-58956](https://cve.now/CVE-2026-58956.md): In modpowF4 of avb\_rsa.c, there is a possible signature verification bypass due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58955](https://cve.now/CVE-2026-58955.md): In updateNotificationChannel of PreferencesHelper.java, there is a possible ui obfuscation issue due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58953](https://cve.now/CVE-2026-58953.md): In dec\_vlc\_read of oapv\_vlc.c, there is a possible out-of-bounds read due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58951](https://cve.now/CVE-2026-58951.md): In multiple locations, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58949](https://cve.now/CVE-2026-58949.md): In parseMetaData of StagefrightMetadataRetriever.cpp, there is a possible denial of service due to a stack buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58946](https://cve.now/CVE-2026-58946.md): In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-58945](https://cve.now/CVE-2026-58945.md): In multiple locations, there is a possible side channel information leak due to improperly used crypto. (no CVSS, Google Android)
- [CVE-2026-58944](https://cve.now/CVE-2026-58944.md): In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a… (CVSS 8.4, Google Android)
- [CVE-2026-58943](https://cve.now/CVE-2026-58943.md): In run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-58942](https://cve.now/CVE-2026-58942.md): In do\_fault\_around of memory.c, there is a possible use after free due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-58938](https://cve.now/CVE-2026-58938.md): In parseChunk of MPEG4Extractor.cpp, there is a possible denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58937](https://cve.now/CVE-2026-58937.md): In multiple locations, there is a possible persistent denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58936](https://cve.now/CVE-2026-58936.md): In png\_set\_tRNS of pngset.c, there is a possible memory corruption due to a use-after-free. (no CVSS, Google Android)
- [CVE-2026-58934](https://cve.now/CVE-2026-58934.md): In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission bypass due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-58933](https://cve.now/CVE-2026-58933.md): In process of C2SoftApvDec.cpp, there is a possible out-of-bounds read due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58886](https://cve.now/CVE-2026-58886.md): In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58885](https://cve.now/CVE-2026-58885.md): In multiple locations, there is a possible permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-58884](https://cve.now/CVE-2026-58884.md): In startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-58883](https://cve.now/CVE-2026-58883.md): In multiple locations, there is a possible denial of service due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58882](https://cve.now/CVE-2026-58882.md): In decodeWapPdu of WapPushOverSms.java, there is a possible out of bounds read due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-58879](https://cve.now/CVE-2026-58879.md): In descramble of multiple files, there is a possible out-of-bounds write due to improper casting. (no CVSS, Google Android)
- [CVE-2026-58877](https://cve.now/CVE-2026-58877.md): In checkNearbyDevicesPermission of WifiP2pServiceImpl.java, there is a possible permission bypass due to a confused deputy. (no CVSS, Google Android)
- [CVE-2026-58876](https://cve.now/CVE-2026-58876.md): In multiple locations, there is a possible memory safety issue due to a use-after-free. (no CVSS, Google Android)
- [CVE-2026-58875](https://cve.now/CVE-2026-58875.md): In multiple locations, there is a possible denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58871](https://cve.now/CVE-2026-58871.md): In set\_type4\_frame\_classifier of sta\_iface.cpp, there is a possible memory safety issue due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58870](https://cve.now/CVE-2026-58870.md): In onPersistentGroupsChanged of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58868](https://cve.now/CVE-2026-58868.md): In onOutputReceived of FrameDecoder.cpp, there is a possible out-of-bounds write due to a heap buffer overflow. (no CVSS, Google Android)
- [CVE-2026-58867](https://cve.now/CVE-2026-58867.md): In getMessenger of WifiP2pServiceImpl.java, there is a possible permission bypass due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-58866](https://cve.now/CVE-2026-58866.md): In setAccessibilityWindowAttributes of AccessibilityWindowManager.java, there is a possible untrusted/misleading UI issue due to a missing… (CVSS 8.4, Google Android)
- [CVE-2026-58857](https://cve.now/CVE-2026-58857.md): In decrypt of CryptoHalHidl.cpp, there is a possible use-after-free due to a race condition. (no CVSS, Google Android)
- [CVE-2026-58853](https://cve.now/CVE-2026-58853.md): In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. (CVSS 7.5, Google Android)
- [CVE-2026-58847](https://cve.now/CVE-2026-58847.md): In kvm\_vfio\_pviommu\_attach of vfio.c, there is a possible double free due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-58845](https://cve.now/CVE-2026-58845.md): In multiple locations, there is a possible out of bounds write due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-58844](https://cve.now/CVE-2026-58844.md): In multiple locations, there is a possible out of bounds read/write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2026-58838](https://cve.now/CVE-2026-58838.md): In multiple functions of Helpers.java, there is a possible information disclosure due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58837](https://cve.now/CVE-2026-58837.md): In multiple locations, there is a possible background activity launch due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-58836](https://cve.now/CVE-2026-58836.md): In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced Confirmation Mode (ECM) bypass vulnerability that… (CVSS 7.8, Google Android)
- [CVE-2026-58829](https://cve.now/CVE-2026-58829.md): In fuse\_backing\_mmap of backing.c, there is a possible memory corruption due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2026-58828](https://cve.now/CVE-2026-58828.md): In multiple functions of base.c, there is a possible use-after-free due to a race condition. (CVSS 8.4, Google Android)
- [CVE-2026-58827](https://cve.now/CVE-2026-58827.md): In multiple functions of dma-buf.c, there is a possible use after free due to a race condition. (CVSS 8.4, Google Android)
- [CVE-2026-58826](https://cve.now/CVE-2026-58826.md): In ksys\_unshare of fork.c, there is a possible memory corruption due to a use after free. (CVSS 8.4, Google Android)
- [CVE-2026-58825](https://cve.now/CVE-2026-58825.md): In multiple functions of fork.c, there is a possible use after free due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-58824](https://cve.now/CVE-2026-58824.md): In \_\_pkvm\_load\_tracing of trace.c, there is a possible out-of-bounds write due to an incorrect bounds check. (no CVSS, Google Android)
- [CVE-2026-58821](https://cve.now/CVE-2026-58821.md): In multiple functions of SearchRequestDatabaseUtil.java, there is a possible way to access protected data due to SQL injection. (no CVSS, Google Android)
- [CVE-2026-58817](https://cve.now/CVE-2026-58817.md): In parseKnownActivityEmbeddingCerts of ParsingUtils.java, there is a possible permanent denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-58814](https://cve.now/CVE-2026-58814.md): In parseContentType of PduParser.java, there is a possible denial of service due to an integer overflow. (no CVSS, Google Android)
- [CVE-2026-55292](https://cve.now/CVE-2026-55292.md): In rw\_ci\_data\_cback of rw\_ci.cc, there is a possible memory safety issue due to integer underflow. (no CVSS, Google Android)
- [CVE-2026-55289](https://cve.now/CVE-2026-55289.md): In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-55288](https://cve.now/CVE-2026-55288.md): In validEfCfis of SIMRecords.java, there is a possible way to cause a denial of service due to an uncaught exception. (no CVSS, Google Android)
- [CVE-2026-55287](https://cve.now/CVE-2026-55287.md): In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to… (CVSS 8.4, Google Android)
- [CVE-2026-55283](https://cve.now/CVE-2026-55283.md): In multiple locations, there is a possible memory safety issue due to a use-after-free. (CVSS 8.4, Google Android)
- [CVE-2026-55275](https://cve.now/CVE-2026-55275.md): In multiple locations, there is a possible use-after-free due to a race condition. (CVSS 8.4, Google Android)
- [CVE-2026-55272](https://cve.now/CVE-2026-55272.md): In loadDescription of DeviceAdminAdd.java, there is a possible denial of service due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-55271](https://cve.now/CVE-2026-55271.md): In forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-55264](https://cve.now/CVE-2026-55264.md): In checkWhetherCallingAppHasAccess of DownloadProvider.java, there is a possible information leak due to a confused deputy. (no CVSS, Google Android)
- [CVE-2026-55263](https://cve.now/CVE-2026-55263.md): In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading… (no CVSS, Google Android)
- [CVE-2026-55262](https://cve.now/CVE-2026-55262.md): In setNotificationListenerAccessGrantedForUserInternal of NotificationManagerService.java, there is a possible policy desynchronization… (CVSS 8.4, Google Android)
- [CVE-2026-55261](https://cve.now/CVE-2026-55261.md): In nfa\_t4tnfcee\_store\_rx\_buf of nfa\_nfcee\_act.cc, there is a possible way to achieve code execution due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-55257](https://cve.now/CVE-2026-55257.md): In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI. (CVSS 8.4, Google Android)
- [CVE-2026-49935](https://cve.now/CVE-2026-49935.md): In getXmlFileNameForUser of LocaleManagerService.java, there is a possible permission bypass due to a confusable path traversal. (no CVSS, Google Android)
- [CVE-2026-49934](https://cve.now/CVE-2026-49934.md): In multiple functions of MmiUtils.java, there is a possible risk of USSD/MMI code execution due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-49931](https://cve.now/CVE-2026-49931.md): In onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-49924](https://cve.now/CVE-2026-49924.md): In ShortcutInfo of ShortcutInfo.java, there is a possible way to crash the launcher via unauthorized shortcuts due to resource exhaustion. (no CVSS, Google Android)
- [CVE-2026-49923](https://cve.now/CVE-2026-49923.md): In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-49922](https://cve.now/CVE-2026-49922.md): In queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. (CVSS 8.4, Google Android)
- [CVE-2026-49912](https://cve.now/CVE-2026-49912.md): In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up after disablement due to a logic error… (no CVSS, Google Android)
- [CVE-2026-45514](https://cve.now/CVE-2026-45514.md): In multiple functions of SaveUi.java, there is a possible bypass of package installation requirements due to a logic error in the code. (CVSS 8.4, Google Android)
- [CVE-2026-28665](https://cve.now/CVE-2026-28665.md): In onCreate of SettingsApplication.java, there is a possible cross-profile consent dialog label injection due to improper input validation. (no CVSS, Google Android)
- [CVE-2026-28645](https://cve.now/CVE-2026-28645.md): In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the… (CVSS 6.8, Google Android)
- [CVE-2026-28643](https://cve.now/CVE-2026-28643.md): In multiple locations, there is a possible denial of service due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-28632](https://cve.now/CVE-2026-28632.md): In multiple locations, there is a possible way to share files across profiles due to a logic error in the code. (no CVSS, Google Android)
- [CVE-2026-28621](https://cve.now/CVE-2026-28621.md): In getRingtone of RingtoneFactory.java, there is a possible unprivileged access risk due to a missing permission check. (no CVSS, Google Android)
- [CVE-2026-28597](https://cve.now/CVE-2026-28597.md): In writeGrantedUriPermissions of UriGrantsManagerService.java, there is a possible permission bypass due to improper input validation. (CVSS 8.4, Google Android)
- [CVE-2026-28588](https://cve.now/CVE-2026-28588.md): In shouldBlockDirectoryFromTree of ExternalStorageProvider.java, there is a possible way to access protected data due to a logic error in… (CVSS 8.4, Google Android)
- [CVE-2026-0053](https://cve.now/CVE-2026-0053.md): In multiple locations, there is a possible method for a primary user to disable secure nfc on other full users due to insufficient… (no CVSS, Google Android)
- [CVE-2025-26433](https://cve.now/CVE-2025-26433.md): In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. (no CVSS, Google Android)
- [CVE-2025-22436](https://cve.now/CVE-2025-22436.md): In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack. (no CVSS, Google Android)
- [CVE-2026-91893](https://cve.now/CVE-2026-91893.md): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Improper Privilege Management vulnerability. (CVSS 7.8, Dell Alienware Command Center)
- [CVE-2026-119739](https://cve.now/CVE-2026-119739.md): Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET\_CONTR (CVSS 6.9, Nexbox A95X · Amlogic Android SDK)
- [CVE-2026-119738](https://cve.now/CVE-2026-119738.md): Amlogic DroidLogic SubTitleService Infinite Loop via get\_vob\_spu() (CVSS 6.9, Nexbox A95X · Amlogic Android SDK)
- [CVE-2026-119737](https://cve.now/CVE-2026-119737.md): Amlogic pppoe\_wrapper Command Injection via AF\_UNIX Socket (CVSS 8.5, Nexbox A95X · Amlogic Android SDK)
- [CVE-2026-120689](https://cve.now/CVE-2026-120689.md): Uncontrolled Recursion in HDF5 H5B\_\_iterate\_helper() via Crafted File (CVSS 4.3, The HDF Group HDF5)
- [CVE-2026-102435](https://cve.now/CVE-2026-102435.md): Ultra Addons for Contact Form 7 \<= 3.5.54 - Unauthenticated PHP Object Injection to Arbitrary File Deletion via CF7 Form Field (CVSS 9.8, themefic Ultra Addons for Contact Form)
- [CVE-2026-120067](https://cve.now/CVE-2026-120067.md): psqlODBC stack buffer overflow copying ctid and oid values for updatable cursors (CVSS 5.9, PostgreSQL psqlODBC)
- [CVE-2026-120066](https://cve.now/CVE-2026-120066.md): psqlODBC log files are created with default permissions at a predictable path and follow symbolic links (CVSS 5.3, PostgreSQL psqlODBC)
- [CVE-2026-120065](https://cve.now/CVE-2026-120065.md): psqlODBC does not escape a server-supplied column name in its updatable-cursor queries (CVSS 7.1, PostgreSQL psqlODBC)
- [CVE-2026-120064](https://cve.now/CVE-2026-120064.md): psqlODBC does not validate column numbers and row indexes in binding and descriptor functions (CVSS 7.5, PostgreSQL psqlODBC)
- [CVE-2026-120063](https://cve.now/CVE-2026-120063.md): psqlODBC stack buffer overflow when quoting long schema and table names (CVSS 5.9, PostgreSQL psqlODBC)
- [CVE-2026-120062](https://cve.now/CVE-2026-120062.md): psqlODBC SQL injection through SQLSpecialColumns table and schema names (CVSS 7.5, PostgreSQL psqlODBC)
- [CVE-2026-120061](https://cve.now/CVE-2026-120061.md): psqlODBC ODBC escape parser stack buffer overflow (CVSS 7.5, PostgreSQL psqlODBC)
- [CVE-2026-120060](https://cve.now/CVE-2026-120060.md): psqlODBC does not validate server-supplied counts and lengths (CVSS 5.9, PostgreSQL psqlODBC)
- [CVE-2026-120059](https://cve.now/CVE-2026-120059.md): psqlODBC uses a server-supplied column name as a format string (CVSS 6.8, PostgreSQL psqlODBC)
- [CVE-2026-120058](https://cve.now/CVE-2026-120058.md): psqlODBC row cache overflow when a later FETCH changes the column count (CVSS 7.5, PostgreSQL psqlODBC)
- [CVE-2026-120057](https://cve.now/CVE-2026-120057.md): psqlODBC large-object read overflows the application buffer (CVSS 7.5, PostgreSQL psqlODBC)
- [CVE-2026-120497](https://cve.now/CVE-2026-120497.md): Stored cross-site scripting in the HTML report generator of aidlc-traceability in AWS AI-DLC Workflows (CVSS 5.0, AWS aidlc-traceability)
- [CVE-2026-119736](https://cve.now/CVE-2026-119736.md): Attendo Admin Android 3.0.13 Hard-coded MQTT Broker Credentials (CVSS 8.8, Petpooja Munshi)
- [CVE-2026-105606](https://cve.now/CVE-2026-105606.md): Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables \< 3.7.8 (CVSS 9.5, joomlaboat.com Custom Tables extension for Joomla)
- [CVE-2026-119735](https://cve.now/CVE-2026-119735.md): Munshi XSS via Purchase Inquiry Thread Rendering (CVSS 5.1, Petpooja Munshi)
- [CVE-2026-119734](https://cve.now/CVE-2026-119734.md): Munshi IDOR via Purchase Inquiry Thread Endpoint (CVSS 7.1, Petpooja Munshi)
- [CVE-2026-119733](https://cve.now/CVE-2026-119733.md): Munshi Missing Authorization in Company Deletion API (CVSS 7.2, Petpooja Munshi)
- [CVE-2026-119732](https://cve.now/CVE-2026-119732.md): Munshi Broken Object Level Authorization via Invoice Deletion API (CVSS 7.1, Petpooja Munshi)
- [CVE-2026-119731](https://cve.now/CVE-2026-119731.md): Munshi Payment Bypass via Unauthenticated Webhook Endpoint (CVSS 8.7, Petpooja Munshi)
- [CVE-2026-120656](https://cve.now/CVE-2026-120656.md): CVE-2026-120656 (no CVSS, OpenKruise kruise-manager)
- [CVE-2026-105605](https://cve.now/CVE-2026-105605.md): Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds \< 3.11.3 (CVSS 5.3, dj-extensions.com DJ-Classifieds extension for Joomla)
- [CVE-2026-105604](https://cve.now/CVE-2026-105604.md): Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds \< 3.11.3 (CVSS 9.3, dj-extensions.com DJ-Classifieds extension for Joomla)
- [CVE-2026-105603](https://cve.now/CVE-2026-105603.md): Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds \< 3.11.3 (CVSS 9.4, dj-extensions.com DJ-Classifieds extension for Joomla)
- [CVE-2026-81938](https://cve.now/CVE-2026-81938.md): Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir (CVSS 7.7, Grafana Enterprise Metrics · Grafana Mimir)
- [CVE-2026-120416](https://cve.now/CVE-2026-120416.md): AndyFactory newspaper4k Image Extractor image\_extractor.py Article.parse server-side request forgery (CVSS 6.9, AndyFactory newspaper4k)
- [CVE-2026-111048](https://cve.now/CVE-2026-111048.md): FOSSBilling: Low-privileged staff can run JavaScript in administrators' browsers via stored XSS in support ticket notes (CVSS 8.4, FOSSBilling)
- [CVE-2026-119085](https://cve.now/CVE-2026-119085.md): Template injection in the publishing component of awslabs Virtual Engineering Workbench (CVSS 8.8, AWS virtual-engineering-workbench)
- [CVE-2026-120630](https://cve.now/CVE-2026-120630.md): CVE-2026-120630 (no CVSS, CrewAI)
- [CVE-2024-12139](https://cve.now/CVE-2024-12139.md): Content Spoofing via Error Handling in Multiple WSO2 Products Enables Social Engineering Attacks (CVSS 4.3, WSO2 API Manager · WSO2 Identity Server)
- [CVE-2026-120627](https://cve.now/CVE-2026-120627.md): CVE-2026-120627 (no CVSS, Private Internet Access Firefox extension)
- [CVE-2026-120596](https://cve.now/CVE-2026-120596.md): CVE-2026-120596 (CVSS 7.5, Ethernut / egnite Nut/Net TCP/IP Stack)
- [CVE-2026-65059](https://cve.now/CVE-2026-65059.md): Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responses (no CVSS, Furl)
- [CVE-2026-105769](https://cve.now/CVE-2026-105769.md): kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts (CVSS 9.3, chainguard kaniko)
- [CVE-2026-88811](https://cve.now/CVE-2026-88811.md): Rancher credentials disclosed to third-party hosts by the Rancher Manager meta proxy (CVSS 9.1, SUSE Rancher)
- [CVE-2026-119301](https://cve.now/CVE-2026-119301.md): Improper neutralization of quoting syntax in Apache Iceberg SQL identifier generation in AWS SDK for pandas (CVSS 7.9, aws-sdk-pandas)
- [CVE-2026-88810](https://cve.now/CVE-2026-88810.md): Privilege escalation in downstream clusters via GlobalRole inheritedNamespacedRules (CVSS 7.2, SUSE Rancher)
- [CVE-2026-99242](https://cve.now/CVE-2026-99242.md): ntfs: fix race between fallocate and mmap reads (no CVSS, Linux)
- [CVE-2026-99241](https://cve.now/CVE-2026-99241.md): ntfs: take invalidate\_lock in ntfs\_filemap\_page\_mkwrite() (no CVSS, Linux)
- [CVE-2026-99240](https://cve.now/CVE-2026-99240.md): mm/damon/core: error damos\_commit\_quota\_goal() for zero target\_value (no CVSS, Linux)
- [CVE-2026-99239](https://cve.now/CVE-2026-99239.md): Bluetooth: L2CAP: refuse \_\_l2cap\_chan\_add if chan already has conn (CVSS 7.8, Linux)
- [CVE-2026-99238](https://cve.now/CVE-2026-99238.md): tracing: Hold trace\_types\_lock when updating modules in persistent instances (CVSS 7.8, Linux)
- [CVE-2026-99237](https://cve.now/CVE-2026-99237.md): tracing: Hold trace\_types\_lock when resetting last boot data from readers (CVSS 7.8, Linux)
- [CVE-2026-99236](https://cve.now/CVE-2026-99236.md): tracing: Reject incomplete event filter expressions (CVSS 7.8, Linux)
- [CVE-2026-99235](https://cve.now/CVE-2026-99235.md): tracing: Save the event file instead of the compatible histogram (CVSS 7.8, Linux)
- [CVE-2026-99234](https://cve.now/CVE-2026-99234.md): tracing: Unregister field variable histograms when the command fails (no CVSS, Linux)
- [CVE-2026-99233](https://cve.now/CVE-2026-99233.md): tracing/histograms: Verify event\_call identity when updating synth\_event refcount (CVSS 7.8, Linux)
- [CVE-2026-99232](https://cve.now/CVE-2026-99232.md): tracing/syscalls: Use copy\_from\_user for the faultable syscall buffer (no CVSS, Linux)
- [CVE-2026-99231](https://cve.now/CVE-2026-99231.md): io\_uring/waitid: own the request before clearing -\>head (CVSS 7.8, Linux)
- [CVE-2026-99230](https://cve.now/CVE-2026-99230.md): io\_uring/cmd: don't leave list poison in -\>hash\_node (no CVSS, Linux)
- [CVE-2026-99229](https://cve.now/CVE-2026-99229.md): io\_uring/wait: don't spin on a stuck overflow list (no CVSS, Linux)
- [CVE-2026-99228](https://cve.now/CVE-2026-99228.md): io\_uring/io-wq: don't lose the signal that ends work (no CVSS, Linux)
- [CVE-2026-99227](https://cve.now/CVE-2026-99227.md): io\_uring/waitid: prevent cancel reference wrap (CVSS 7.8, Linux)
- [CVE-2026-99226](https://cve.now/CVE-2026-99226.md): keys: Avoid the owner account dereference in named keyring lookup (no CVSS, Linux)
- [CVE-2026-99225](https://cve.now/CVE-2026-99225.md): keys: Check the authorization payload in process keyring searches (no CVSS, Linux)
- [CVE-2026-99224](https://cve.now/CVE-2026-99224.md): keys: Protect the type name while describing a key (CVSS 7.0, Linux)
- [CVE-2026-99223](https://cve.now/CVE-2026-99223.md): keys: make keyring indexes independent of kernel addresses (no CVSS, Linux)
- [CVE-2026-99222](https://cve.now/CVE-2026-99222.md): keys: Protect the read method check against type removal (no CVSS, Linux)
- [CVE-2026-99221](https://cve.now/CVE-2026-99221.md): keys/trusted\_keys: return immediately after TPM unseal failure (no CVSS, Linux)
- [CVE-2026-99220](https://cve.now/CVE-2026-99220.md): asymmetric\_keys: reject trust keys without IDs (no CVSS, Linux)
- [CVE-2026-99219](https://cve.now/CVE-2026-99219.md): ftrace: Initialize modname and offset in print\_rec() (no CVSS, Linux)
- [CVE-2026-99218](https://cve.now/CVE-2026-99218.md): coredump: hold RCU while releasing parked threads (CVSS 7.0, Linux)
- [CVE-2026-99217](https://cve.now/CVE-2026-99217.md): fork: release the files of a failed fork after sched\_cancel\_fork() (no CVSS, Linux)
- [CVE-2026-88809](https://cve.now/CVE-2026-88809.md): Rancher meta proxy allowlist bypass leading to server-side request forgery (CVSS 7.6, SUSE Rancher)
- [CVE-2026-109142](https://cve.now/CVE-2026-109142.md): Krill treats a "local parent" as already-authenticated, letting a CA operator act as any child of any CA on the same server (CVSS 8.4, NLnet Labs Krill)
- [CVE-2026-109141](https://cve.now/CVE-2026-109141.md): Krill users restricted to one CA can make any other CA delegate its prefixes and publish ROAs for them via bulk import (CVSS 8.4, NLnet Labs Krill)
- [CVE-2026-109140](https://cve.now/CVE-2026-109140.md): Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token (CVSS 8.4, NLnet Labs Krill)
- [CVE-2026-16306](https://cve.now/CVE-2026-16306.md): CVE-2026-16306 (no CVSS, INFINITT Healthcare System Manager)
- [CVE-2026-120501](https://cve.now/CVE-2026-120501.md): An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable src (CVSS 6.9, redimp otterwiki)
- [CVE-2026-120500](https://cve.now/CVE-2026-120500.md): An Otter Wiki before 2.26.2 Stored XSS via Math Code Block (CVSS 5.3, redimp otterwiki)
- [CVE-2026-94290](https://cve.now/CVE-2026-94290.md): Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller (CVSS 9.1, SUSE Rancher)
- [CVE-2026-2102](https://cve.now/CVE-2026-2102.md): XSS in wrensec-commons CREST framework HTTP binding via \_mimeType parameter (CVSS 6.1, Wren Security wrensec-commons)
- [CVE-2026-104080](https://cve.now/CVE-2026-104080.md): Control Web Panel (CWP) \< 1.30 OS Command Injection via valid\_token (CVSS 8.6, Control Web Panel)
- [CVE-2026-77881](https://cve.now/CVE-2026-77881.md): Control Web Panel (CWP) \< 1.30 Blind SQL Injection via user Parameter (CVSS 6.9, Control Web Panel)
- [CVE-2026-77880](https://cve.now/CVE-2026-77880.md): Control Web Panel (CWP) \< 1.16 OS Command Injection via /newpass/ (CVSS 8.6, Control Web Panel)
- [CVE-2026-77879](https://cve.now/CVE-2026-77879.md): Control Web Panel (CWP) \< 1.16 SQL Injection via access\_token() API (CVSS 8.5, Control Web Panel)
- [CVE-2026-77878](https://cve.now/CVE-2026-77878.md): Control Web Panel (CWP) \< 1.30 OS Command Injection via restoredatabase API (CVSS 8.6, Control Web Panel)
- [CVE-2026-77877](https://cve.now/CVE-2026-77877.md): Control Web Panel (CWP) \< 1.30 Unauthenticated Loopback API Root Access (CVSS 8.6, Control Web Panel)
- [CVE-2026-77876](https://cve.now/CVE-2026-77876.md): Control Web Panel (CWP) \< 1.16 OS Command Injection via protected\_directory (CVSS 9.3, Control Web Panel)
- [CVE-2026-115654](https://cve.now/CVE-2026-115654.md): User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own (CVSS 6.9, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-115653](https://cve.now/CVE-2026-115653.md): Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode (CVSS 7.0, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-114408](https://cve.now/CVE-2026-114408.md): NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full (CVSS 8.7, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-118052](https://cve.now/CVE-2026-118052.md): Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation (CVSS 6.8, Eclipse Foundation Eclipse ThreadX)
- [CVE-2026-73697](https://cve.now/CVE-2026-73697.md): Control Web Panel (CWP) \< 1.16 File Write and Command Injection via phpini\_editor (CVSS 8.7, Control Web Panel)
- [CVE-2026-73696](https://cve.now/CVE-2026-73696.md): Control Web Panel (CWP) \< 1.12 Execution After Redirect in CWPUserIndex (CVSS 9.3, Control Web Panel)
- [CVE-2026-73695](https://cve.now/CVE-2026-73695.md): Control Web Panel (CWP) \< 1.16 Path Traversal via services/users/index.php (CVSS 8.7, Control Web Panel)
- [CVE-2026-120492](https://cve.now/CVE-2026-120492.md): Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed\_urls (CVSS 6.3, Chainlit)
- [CVE-2026-120491](https://cve.now/CVE-2026-120491.md): Wing FTP Server before 8.2.6 Stored XSS via nowpath in Legacy Activity Page (CVSS 5.1, Wing FTP Software Wing FTP Server)
- [CVE-2026-120489](https://cve.now/CVE-2026-120489.md): Outline before 1.12.0 Incorrect Authorization via authorizeDocumentPublish() Detached Draft (CVSS 5.3, Outline)
- [CVE-2026-120488](https://cve.now/CVE-2026-120488.md): LaraDashboard before 1.4.9 Stored XSS via LaraBuilder design\_json Block Content (CVSS 5.1, LaraDashboard)
- [CVE-2026-120487](https://cve.now/CVE-2026-120487.md): LaraDashboard before 1.4.5 Incorrect Authorization via SettingPolicy Core Upgrades (CVSS 8.6, LaraDashboard)
- [CVE-2026-120461](https://cve.now/CVE-2026-120461.md): Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh\_command/batch (CVSS 8.7, dromara Jpom)
- [CVE-2026-120460](https://cve.now/CVE-2026-120460.md): Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers (CVSS 8.7, dromara Jpom)
- [CVE-2026-120459](https://cve.now/CVE-2026-120459.md): python-jose through 3.5.0 Authentication Bypass via Empty HMAC Key (CVSS 9.1, mpdavis python-jose)
- [CVE-2026-120458](https://cve.now/CVE-2026-120458.md): Kvazaar through 2.3.2 Infinite Loop DoS via Y4M Header Parser (CVSS 6.8, Ultra Video Group Kvazaar)
- [CVE-2026-120457](https://cve.now/CVE-2026-120457.md): libaec through 1.1.7 Out-of-Bounds Read via m\_se\_decode() Second Extension Decoder (CVSS 5.8, Deutsches Klimarechenzentrum libaec)
- [CVE-2026-120456](https://cve.now/CVE-2026-120456.md): L-SMASH through 2.14.5 Heap Out-of-Bounds Write via hdlr and url Boxes (CVSS 6.9, L-SMASH)
- [CVE-2026-120455](https://cve.now/CVE-2026-120455.md): rapidyaml through 0.16.0 Out-of-Bounds Write via ParseEngine::\_add\_annotation() (CVSS 6.9, biojppm rapidyaml)
- [CVE-2026-120454](https://cve.now/CVE-2026-120454.md): The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression (CVSS 6.8, The Sleuth Kit)
- [CVE-2026-120453](https://cve.now/CVE-2026-120453.md): The Sleuth Kit through 4.15.0 Heap Out-of-Bounds Read via HFS+ decmpfs Header (CVSS 4.8, The Sleuth Kit)
- [CVE-2026-120452](https://cve.now/CVE-2026-120452.md): libgphoto2 through 2.5.34 Heap Out-of-Bounds Read/Write via jl2005c Thumbnail Conversion (CVSS 5.2, libgphoto2)
- [CVE-2026-120451](https://cve.now/CVE-2026-120451.md): libgphoto2 through 2.5.34 Buffer Overflow via jl2005c Camera Driver (CVSS 7.0, libgphoto2)
- [CVE-2026-120450](https://cve.now/CVE-2026-120450.md): LaraDashboard 1.4.0 before 1.4.9 Improper Authorization via MCP send-email Tool (CVSS 5.3, LaraDashboard)
- [CVE-2026-120449](https://cve.now/CVE-2026-120449.md): Outline before 1.12.0 Improper Access Control via Public Document Shares (CVSS 6.9, Outline)
- [CVE-2026-120448](https://cve.now/CVE-2026-120448.md): DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint (CVSS 8.6, doramart DoraCMS)
- [CVE-2026-120447](https://cve.now/CVE-2026-120447.md): HotGo 2.8.4 through 2.15.1 Authentication Bypass via Client-Set SMS Verification Code (CVSS 9.2, bufanyun HotGo)
- [CVE-2026-120446](https://cve.now/CVE-2026-120446.md): madong-admin-saas through 5.1.4 Missing Authentication via Platform Tenant Management API (CVSS 8.8, madong-code madong-admin-saas)
- [CVE-2026-120445](https://cve.now/CVE-2026-120445.md): madong-admin-saas through 5.1.4 Incorrect Authorization via /platformapi AccessTokenMiddleware (CVSS 8.7, madong-code madong-admin-saas)
- [CVE-2026-120444](https://cve.now/CVE-2026-120444.md): GoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop (CVSS 7.2, sea-team GoFound)
- [CVE-2026-120443](https://cve.now/CVE-2026-120443.md): GoFound through 1.4.1 Stored XSS via Admin Dashboard Search Results (CVSS 5.1, sea-team GoFound)
- [CVE-2026-120442](https://cve.now/CVE-2026-120442.md): ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass (CVSS 9.3, xianhc ape-volo-admin)
- [CVE-2026-120441](https://cve.now/CVE-2026-120441.md): OwnTone Server through 29.3 SQL Injection via MPD sticker find Command (CVSS 6.9, OwnTone Server)
- [CVE-2026-120440](https://cve.now/CVE-2026-120440.md): QuickJS-NG before 0.16.0 Memory Leak via Atomics.store (CVSS 6.9, QuickJS-NG)
- [CVE-2026-120439](https://cve.now/CVE-2026-120439.md): QuickJS-NG before 0.16.0 Heap Buffer Overflow via TypedArray.prototype.sort (CVSS 8.3, QuickJS-NG)
- [CVE-2026-120438](https://cve.now/CVE-2026-120438.md): QuickJS-NG before 0.16.0 Heap Buffer Overflow via Proxy ownKeys Enumeration (CVSS 8.5, QuickJS-NG)
- [CVE-2026-120437](https://cve.now/CVE-2026-120437.md): Netpbm before 10.86.51, 11.02.30, and 11.15.08 Out-of-Bounds Read via tgatoppm (CVSS 6.9, Netpbm)
- [CVE-2026-120436](https://cve.now/CVE-2026-120436.md): Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow via jbigtopnm (CVSS 8.5, Netpbm)
- [CVE-2026-120435](https://cve.now/CVE-2026-120435.md): Netpbm before 10.86.51, 11.02.30, and 11.15.08 Heap Overflow in xpmtoppm (CVSS 8.5, Netpbm)
- [CVE-2026-120434](https://cve.now/CVE-2026-120434.md): Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Overflow via scanPoly (CVSS 8.5, Netpbm)
- [CVE-2026-120433](https://cve.now/CVE-2026-120433.md): Netpbm before 10.86.51, 11.02.30, and 11.15.08 picttoppm Stack Buffer Overflow via paintPoly (CVSS 8.5, Netpbm)
- [CVE-2026-120432](https://cve.now/CVE-2026-120432.md): Netpbm before 10.86.51, 11.02.30, and 11.15.08 Integer Overflow in winicontopam (CVSS 8.5, Netpbm)
- [CVE-2026-120431](https://cve.now/CVE-2026-120431.md): Netpbm before 10.86.51, 11.02.29, and 11.15.07 sgitopnm Heap Buffer Overflow (CVSS 8.5, Netpbm)
- [CVE-2026-120430](https://cve.now/CVE-2026-120430.md): Camaleon CMS before 2.9.2 IDOR via Admin::CategoriesController (CVSS 5.3, owen2345 Camaleon CMS)
- [CVE-2026-120429](https://cve.now/CVE-2026-120429.md): Camaleon CMS before 2.9.2 Missing Authorization via Admin::MediaController (CVSS 7.1, owen2345 Camaleon CMS)
- [CVE-2026-120428](https://cve.now/CVE-2026-120428.md): PandaWiki 3.65.0 through 3.87.5 Stored XSS via /static-file/ PDF Query-String Bypass (CVSS 5.1, Chaitin PandaWiki)
- [CVE-2026-120427](https://cve.now/CVE-2026-120427.md): MrDoc through 1.1.1 Missing Authorization via get\_doctemp Template Read (CVSS 5.3, zmister2016 MrDoc)
- [CVE-2026-120426](https://cve.now/CVE-2026-120426.md): OpenCSG CSGHub through v2.6.0-ce Unauthenticated Private Repository File Read via Resolve Route (CVSS 8.7, OpenCSG CSGHub)
- [CVE-2026-120425](https://cve.now/CVE-2026-120425.md): Chatify before 1.6.4 Pusher Authorization Bypass via /chat/auth Endpoint (CVSS 7.1, munafio Chatify)
- [CVE-2026-120318](https://cve.now/CVE-2026-120318.md): Product Gallery Slider for WooCommerce 2.3.23 before 2.3.26 Missing Authorization via Codestar AJAX (CVSS 8.6, Codeixer Product Gallery Slider & Additional Variation Imag…)
- [CVE-2025-71450](https://cve.now/CVE-2025-71450.md): inih before r63 Stack Buffer Under-Read in ini\_parse\_stream Discard Loop (CVSS 4.8, benhoyt inih)
- [CVE-2026-74993](https://cve.now/CVE-2026-74993.md): SQL Injection in Starnet Computer Systems' Inventory Tracking Application (CVSS 7.5, Starnet Computer and Network Systems Inventory Tracking App…)
- [CVE-2026-111959](https://cve.now/CVE-2026-111959.md): Apache Arrow Rust: Improper validation of RunEndEncoded arrays allows out of bounds reads (no CVSS, Apache Software Foundation Apache Arrow Rust)
- [CVE-2026-102802](https://cve.now/CVE-2026-102802.md): Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension \< 17.0.1 when used with Articles Anywhere extension… (CVSS 8.9, regularlabs.com Sourcerer Free extension for Joomla · re… +1)
- [CVE-2026-103419](https://cve.now/CVE-2026-103419.md): Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate \< 2.2.11. (CVSS 8.6, joomshaper.com Helix Ultimate extension for Joomla)
- [CVE-2026-103420](https://cve.now/CVE-2026-103420.md): Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5 (CVSS 7.2, php-web-design.com StageIt extension for Joomla)
- [CVE-2026-105600](https://cve.now/CVE-2026-105600.md): Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5 (CVSS 8.6, php-web-design.com StageIt extension for Joomla)
- [CVE-2026-105601](https://cve.now/CVE-2026-105601.md): Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5 (CVSS 5.3, php-web-design.com StageIt extension for Joomla)
- [CVE-2026-105602](https://cve.now/CVE-2026-105602.md): Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate \< 2.2.11. (CVSS 8.6, joomshaper.com Helix Ultimate extension for Joomla)
- [CVE-2026-102801](https://cve.now/CVE-2026-102801.md): Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla \< 3.0.1 (CVSS 5.1, regularlabs.com Users Anywhere (Free, Pro) extension for Jo…)
- [CVE-2026-114364](https://cve.now/CVE-2026-114364.md): Apache Syncope: SQL injection via unsanitized opEvent in Audit Events search (no CVSS, Apache Software Foundation Apache Syncope)
- [CVE-2026-113687](https://cve.now/CVE-2026-113687.md): Apache Syncope: RCE via ProcessGroovyMethodsSandbox bypass (no CVSS, Apache Software Foundation Apache Syncope)
- [CVE-2026-113511](https://cve.now/CVE-2026-113511.md): Apache Syncope: Delegated administration boundaries can be bypassed for Realm update (no CVSS, Apache Software Foundation Apache Syncope)
- [CVE-2026-120463](https://cve.now/CVE-2026-120463.md): Warracker before 1.0.4 Missing Authorization via Paperless-ngx Document Linking (CVSS 6.0, sassanix Warracker)
- [CVE-2026-110535](https://cve.now/CVE-2026-110535.md): Apache Syncope: AuthProfile value escalation via self-service update (no CVSS, Apache Software Foundation Apache Syncope)
- [CVE-2026-109083](https://cve.now/CVE-2026-109083.md): Apache Syncope: Remote Code Execution via Flowable JUEL expression (no CVSS, Apache Software Foundation Apache Syncope)
- [CVE-2026-116606](https://cve.now/CVE-2026-116606.md): Authentication Bypass Allows Global Configuration Restore in Barracuda Email Security Gateway (CVSS 9.3, Barracuda Networks Barracuda Email Security Gateway)
- [CVE-2026-111560](https://cve.now/CVE-2026-111560.md): OS Command Injection in Barracuda Appliances (CVSS 8.6, Barracuda Networks Barracuda Email Security Gateway · Ba… +4)
- [CVE-2026-91903](https://cve.now/CVE-2026-91903.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path… (CVSS 6.1, Dell OpenManage Enterprise)
- [CVE-2026-92886](https://cve.now/CVE-2026-92886.md): Local Privilege Escalation via Polkit Misconfiguration in TÜBİTAK BİLGEM's eta-register (CVSS 7.8, TÜBİTAK BİLGEM Software Technologies Research Institute eta…)
- [CVE-2026-91904](https://cve.now/CVE-2026-91904.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. (CVSS 5.5, Dell OpenManage Enterprise)
- [CVE-2026-91905](https://cve.now/CVE-2026-91905.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. (CVSS 6.4, Dell OpenManage Enterprise)
- [CVE-2026-91906](https://cve.now/CVE-2026-91906.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. (CVSS 5.5, Dell OpenManage Enterprise)
- [CVE-2026-94349](https://cve.now/CVE-2026-94349.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS… (CVSS 8.0, Dell OpenManage Enterprise)
- [CVE-2026-91907](https://cve.now/CVE-2026-91907.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site… (CVSS 6.8, Dell OpenManage Enterprise)
- [CVE-2024-12141](https://cve.now/CVE-2024-12141.md): Open Redirect via Callback URL Validation in WSO2 Products Allows Phishing Attacks (CVSS 4.3, WSO2 Identity Server)
- [CVE-2026-91908](https://cve.now/CVE-2026-91908.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature vulnerability. (CVSS 5.7, Dell OpenManage Enterprise)
- [CVE-2026-91909](https://cve.now/CVE-2026-91909.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a Command ('Argument… (CVSS 4.6, Dell OpenManage Enterprise)
- [CVE-2026-91910](https://cve.now/CVE-2026-91910.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path… (CVSS 5.7, Dell OpenManage Enterprise)
- [CVE-2026-91911](https://cve.now/CVE-2026-91911.md): Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path… (CVSS 6.1, Dell OpenManage Enterprise)
- [CVE-2026-100140](https://cve.now/CVE-2026-100140.md): Integer overflow vulnerability in XML parsing functionality of Qt5Compat impacts Qt (CVSS 1.9, qt)
- [CVE-2024-9517](https://cve.now/CVE-2024-9517.md): Improper Token Renewal in Refresh Token Grant in Multiple WSO2 Products Allows Unauthorized Access to Blocked Accounts (CVSS 4.9, WSO2 API Manager · WSO2 Universal Gateway +7)
- [CVE-2026-120216](https://cve.now/CVE-2026-120216.md): fastify vulnerable to Denial of Service via uncaught exception on handlerTimeout with streaming responses (CVSS 5.9, fastify)
- [CVE-2024-2372](https://cve.now/CVE-2024-2372.md): Open Redirection via Unsanitized User Input in Multiple WSO2 Products Allows Phishing Attacks (CVSS 5.4, WSO2 Open Banking AM · WSO2 API Manager +5)
- [CVE-2026-117518](https://cve.now/CVE-2026-117518.md): @fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape (CVSS 8.2, @fastify/reply-from)
- [CVE-2026-8923](https://cve.now/CVE-2026-8923.md): Remote Code Execution (CVSS 8.7, Zohocorp ManageEngine Eventlog Analyzer · Zohocorp ManageEn…)
- [CVE-2026-117531](https://cve.now/CVE-2026-117531.md): @fastify/multipart vulnerable to Denial of Service via a malformed upload hanging delayed file consumers (CVSS 5.9, @fastify/multipart)
- [CVE-2026-117549](https://cve.now/CVE-2026-117549.md): @fastify/secure-session vulnerable to signature verification bypass via cookie signature removal (CVSS 4.2, @fastify/secure-session)
- [CVE-2025-12544](https://cve.now/CVE-2025-12544.md): Stored Cross-Site Scripting in Multiple WSO2 Products (CVSS 4.8, WSO2 API Manager · WSO2 Carbon API Manager Publisher REST A…)
- [CVE-2026-120215](https://cve.now/CVE-2026-120215.md): @fastify/cors vulnerable to Denial of Service on a CORS preflight with the onSend hook (CVSS 3.7, @fastify/cors)
- [CVE-2026-120213](https://cve.now/CVE-2026-120213.md): @fastify/http-proxy vulnerable to prefix escape via decoded route parameters (CVSS 9.1, @fastify/http-proxy)
- [CVE-2026-2613](https://cve.now/CVE-2026-2613.md): SQL Injection via Admin REST API in Multiple WSO2 Products Allows Database Information Inference and Service Disruption (CVSS 8.7, WSO2 API Manager · WSO2 Traffic Manager +3)
- [CVE-2026-120214](https://cve.now/CVE-2026-120214.md): @fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments (CVSS 5.9, @fastify/http-proxy)
- [CVE-2026-18800](https://cve.now/CVE-2026-18800.md): Information Disclosure via Event Publisher Logging in Multiple WSO2 Products Allows Retrieval of Sensitive Data (CVSS 4.4, WSO2 API Manager · WSO2 Traffic Manager +6)
- [CVE-2026-118871](https://cve.now/CVE-2026-118871.md): SQL Injection vulnerability in ZTE ElasticNet RNIA R18 NGI product (CVSS 6.5, ZTE ElasticNet RNIA R18 NGI)
- [CVE-2025-13647](https://cve.now/CVE-2025-13647.md): Information Disclosure in Multiple WSO2 Products Allows Exposure of Certificate File Paths (CVSS 5.8, WSO2 Identity Server · WSO2 Open Banking IAM)
- [CVE-2024-7075](https://cve.now/CVE-2024-7075.md): Reflected Cross-Site Scripting via User Search Function in Management Console of Multiple WSO2 Products (CVSS 4.6, WSO2 Enterprise Integrator · WSO2 API Manager +2)
- [CVE-2026-107457](https://cve.now/CVE-2026-107457.md): Memory corruption vulnerability in QMqttClient impacts Qt MQTT (CVSS 2.3, Qt)
- [CVE-2026-18199](https://cve.now/CVE-2026-18199.md): Remote Code Execution Vulnerability (CVSS 8.8, Zohocorp ManageEngine Password Manager Pro · Zohocorp Manag…)
- [CVE-2026-101184](https://cve.now/CVE-2026-101184.md): Permission control vulnerability in the Bluetooth module. (CVSS 5.5, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-101178](https://cve.now/CVE-2026-101178.md): Permission control vulnerability in the autofill service module. (CVSS 6.6, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-103310](https://cve.now/CVE-2026-103310.md): PayHere Payment Gateway 2.4.0 - 2.4.5 - Unauthenticated Payment Bypass via Unverified Payment Notification (CVSS 5.3, PayHere Payment Gateway)
- [CVE-2026-101177](https://cve.now/CVE-2026-101177.md): Permission control vulnerability in the Optimizer module. (CVSS 3.7, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-101174](https://cve.now/CVE-2026-101174.md): DoS vulnerability in the DSoftBus module. (CVSS 5.7, Huawei HarmonyOS)
- [CVE-2026-101173](https://cve.now/CVE-2026-101173.md): DoS vulnerability in the DSoftBus module. (CVSS 6.5, Huawei HarmonyOS)
- [CVE-2026-101176](https://cve.now/CVE-2026-101176.md): Permission control vulnerability in the event notification management module. (CVSS 7.1, Huawei HarmonyOS · Huawei EMUI)
- [CVE-2026-101186](https://cve.now/CVE-2026-101186.md): DoS vulnerability in the window module. (CVSS 7.5, Huawei HarmonyOS)
- [CVE-2026-101185](https://cve.now/CVE-2026-101185.md): OOB read vulnerability in the peripheral module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-101183](https://cve.now/CVE-2026-101183.md): UAF vulnerability in the location service module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-101182](https://cve.now/CVE-2026-101182.md): Race condition vulnerability in the location service module. (CVSS 5.9, Huawei HarmonyOS)
- [CVE-2026-101181](https://cve.now/CVE-2026-101181.md): Permission control vulnerability in the WLAN module. (CVSS 5.5, Huawei HarmonyOS)
- [CVE-2026-101180](https://cve.now/CVE-2026-101180.md): DoS vulnerability in the file parsing module. (CVSS 4.3, Huawei HarmonyOS)
- [CVE-2026-101179](https://cve.now/CVE-2026-101179.md): Buffer overflow vulnerability in the file preview module. (CVSS 4.7, Huawei HarmonyOS)
- [CVE-2026-101175](https://cve.now/CVE-2026-101175.md): Null pointer dereference vulnerability in the ArkWeb module. (CVSS 4.3, Huawei HarmonyOS)
- [CVE-2026-101171](https://cve.now/CVE-2026-101171.md): Permission control vulnerability in the background task management module. (CVSS 3.6, Huawei HarmonyOS)
- [CVE-2026-101170](https://cve.now/CVE-2026-101170.md): DoS vulnerability in the file parsing module. (CVSS 4.0, Huawei HarmonyOS)
- [CVE-2026-101172](https://cve.now/CVE-2026-101172.md): Permission control vulnerability in the graphics module. (CVSS 6.2, Huawei HarmonyOS)
- [CVE-2026-120349](https://cve.now/CVE-2026-120349.md): dayrui XunRuiCMS Mobile Site Directory index.php str\_replace code injection (CVSS 6.9, dayrui XunRuiCMS)
- [CVE-2024-5617](https://cve.now/CVE-2024-5617.md): Account Lock Bypass via User Store Synchronization in Multiple WSO2 Products Allows Brute Force Attacks (CVSS 4.8, WSO2 API Manager · WSO2 Identity Server +2)
- [CVE-2025-11969](https://cve.now/CVE-2025-11969.md): Broken Access Control via System REST APIs in Multiple WSO2 Products Allows Unauthorized Administrative Actions (CVSS 9.4, WSO2 API Manager · WSO2 Identity Server as Key Manager +7)
- [CVE-2026-120348](https://cve.now/CVE-2026-120348.md): dayrui XunRuiCMS Email Template Rendering Notice.php \_get\_tpl\_content code injection (CVSS 6.9, dayrui XunRuiCMS)
- [CVE-2026-120347](https://cve.now/CVE-2026-120347.md): dayrui XunRuiCMS Member View.php View sql injection (CVSS 6.9, dayrui XunRuiCMS)
- [CVE-2026-120345](https://cve.now/CVE-2026-120345.md): WAVLINK WN551X3-A DNS Resolution ioos sub\_41a430 os command injection (CVSS 10.0, WAVLINK WN551X3-A)
- [CVE-2026-120344](https://cve.now/CVE-2026-120344.md): WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection (CVSS 10.0, WAVLINK WN551X3-A)
- [CVE-2026-120343](https://cve.now/CVE-2026-120343.md): mathurvishal CloudClassroom-PHP-Project manageassessment2.php cross site scripting (CVSS 5.3, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-120342](https://cve.now/CVE-2026-120342.md): mathurvishal CloudClassroom-PHP-Project viewquery.php sql injection (CVSS 6.9, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-120341](https://cve.now/CVE-2026-120341.md): mathurvishal CloudClassroom-PHP-Project studentdetails.php redirect (CVSS 6.9, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-120340](https://cve.now/CVE-2026-120340.md): mathurvishal CloudClassroom-PHP-Project Global Session session expiration (CVSS 6.3, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-120339](https://cve.now/CVE-2026-120339.md): mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php cross site scripting (CVSS 5.3, mathurvishal CloudClassroom-PHP-Project)
- [CVE-2026-120337](https://cve.now/CVE-2026-120337.md): VStarcam O-KAM SuperIPCam P2P Session Teardown SuperIPCam.exe FUN\_005a2d44 use after free (CVSS 6.9, VStarcam O-KAM SuperIPCam)
- [CVE-2026-120336](https://cve.now/CVE-2026-120336.md): VStarcam O-KAM Client DevDll\_925.dll FUN\_10003EA0 stack-based overflow (CVSS 6.9, VStarcam O-KAM Client)
- [CVE-2026-120335](https://cve.now/CVE-2026-120335.md): deepset-ai farm Model Package Loader language\_model.py WordEmbedding\_LM.load path traversal (CVSS 2.4, deepset-ai farm)
- [CVE-2026-120334](https://cve.now/CVE-2026-120334.md): deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from\_pretrained path traversal (CVSS 5.3, deepset-ai farm)
- [CVE-2026-68591](https://cve.now/CVE-2026-68591.md): In Modem, there is a possible escalation of privilege due to a permissions bypass. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-68590](https://cve.now/CVE-2026-68590.md): In ip\_stack, there is a possible out of bounds read due to improper input validation. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-68589](https://cve.now/CVE-2026-68589.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-68588](https://cve.now/CVE-2026-68588.md): In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20600](https://cve.now/CVE-2026-20600.md): In Modem, there is a possible application crash due to a logic error. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20599](https://cve.now/CVE-2026-20599.md): In Modem, there is a possible escalation of privilege due to a missing permission check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20598](https://cve.now/CVE-2026-20598.md): In Modem, there is a possible out of bounds read due to an integer overflow. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20597](https://cve.now/CVE-2026-20597.md): In Modem, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20596](https://cve.now/CVE-2026-20596.md): In Modem, there is a possible out of bounds read due to improper input validation. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20595](https://cve.now/CVE-2026-20595.md): In neuropilot, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20594](https://cve.now/CVE-2026-20594.md): In Modem, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20593](https://cve.now/CVE-2026-20593.md): In Modem, there is a possible application crash due to improper input validation. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20592](https://cve.now/CVE-2026-20592.md): In Modem, there is a possible information disclosure due to side channel information disclosure. (CVSS 4.1, MediaTek chipset)
- [CVE-2026-20591](https://cve.now/CVE-2026-20591.md): In GPU pdma, there is a possible escalation of privilege due to a missing permission check. (CVSS 8.4, MediaTek chipset)
- [CVE-2026-20590](https://cve.now/CVE-2026-20590.md): In display, there is a possible system crash due to a logic error. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20585](https://cve.now/CVE-2026-20585.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20584](https://cve.now/CVE-2026-20584.md): In usb, there is a possible memory corruption due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20583](https://cve.now/CVE-2026-20583.md): In usb, there is a possible system crash due to use after free. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20582](https://cve.now/CVE-2026-20582.md): In usb, there is a possible memory corruption due to double free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20581](https://cve.now/CVE-2026-20581.md): In usb, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20580](https://cve.now/CVE-2026-20580.md): In usb, there is a possible system crash due to use after free. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20578](https://cve.now/CVE-2026-20578.md): In Modem, there is a possible information disclosure due to side channel information disclosure. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20577](https://cve.now/CVE-2026-20577.md): In Modem, there is a possible permission bypass due to a permissions bypass. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20576](https://cve.now/CVE-2026-20576.md): In afe, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20575](https://cve.now/CVE-2026-20575.md): In afe, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20574](https://cve.now/CVE-2026-20574.md): In afe, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20573](https://cve.now/CVE-2026-20573.md): In afe, there is a possible memory corruption due to double free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20572](https://cve.now/CVE-2026-20572.md): In adsp, there is a possible out of bounds write due to an integer overflow. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20571](https://cve.now/CVE-2026-20571.md): In afe, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20570](https://cve.now/CVE-2026-20570.md): In adsp, there is a possible escalation of privilege due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20569](https://cve.now/CVE-2026-20569.md): In adsp, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20568](https://cve.now/CVE-2026-20568.md): In afe, there is a possible system crash due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20567](https://cve.now/CVE-2026-20567.md): In afe, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20566](https://cve.now/CVE-2026-20566.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 4.8, MediaTek chipset)
- [CVE-2026-20565](https://cve.now/CVE-2026-20565.md): In Modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 8.4, MediaTek chipset)
- [CVE-2026-20564](https://cve.now/CVE-2026-20564.md): In Modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.2, MediaTek chipset)
- [CVE-2026-20563](https://cve.now/CVE-2026-20563.md): In Modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20562](https://cve.now/CVE-2026-20562.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20561](https://cve.now/CVE-2026-20561.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20560](https://cve.now/CVE-2026-20560.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20559](https://cve.now/CVE-2026-20559.md): In GPU pdma, there is a possible memory corruption due to use after free. (CVSS 7.8, MediaTek chipset)
- [CVE-2026-20558](https://cve.now/CVE-2026-20558.md): In GPU pdma, there is a possible escalation of privilege due to use after free. (CVSS 8.4, MediaTek chipset)
- [CVE-2026-20557](https://cve.now/CVE-2026-20557.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20556](https://cve.now/CVE-2026-20556.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20555](https://cve.now/CVE-2026-20555.md): In Modem, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20554](https://cve.now/CVE-2026-20554.md): In Modem, there is a possible system crash due to a missing bounds check. (CVSS 7.1, MediaTek chipset)
- [CVE-2026-20553](https://cve.now/CVE-2026-20553.md): In DA, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.8, MediaTek chipset)
- [CVE-2026-20552](https://cve.now/CVE-2026-20552.md): In ccci, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.5, MediaTek chipset)
- [CVE-2026-20551](https://cve.now/CVE-2026-20551.md): In gnss, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.5, MediaTek chipset)
- [CVE-2026-20550](https://cve.now/CVE-2026-20550.md): In gnss, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.2, MediaTek chipset)
- [CVE-2026-20549](https://cve.now/CVE-2026-20549.md): In Modem, there is a possible out of bounds write due to improper input validation. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20548](https://cve.now/CVE-2026-20548.md): In Modem, there is a possible out of bounds write due to an integer overflow. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20547](https://cve.now/CVE-2026-20547.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20546](https://cve.now/CVE-2026-20546.md): In Modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20545](https://cve.now/CVE-2026-20545.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-20499](https://cve.now/CVE-2026-20499.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.5, MediaTek chipset)
- [CVE-2026-120325](https://cve.now/CVE-2026-120325.md): Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversal (CVSS 5.3, Webpro-nl Knip)
- [CVE-2026-120324](https://cve.now/CVE-2026-120324.md): Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversal (CVSS 6.9, Aklivity Zilla)
- [CVE-2026-120317](https://cve.now/CVE-2026-120317.md): http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity (CVSS 8.2, http4k)
- [CVE-2026-120316](https://cve.now/CVE-2026-120316.md): http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution (CVSS 8.2, http4k)
- [CVE-2026-120315](https://cve.now/CVE-2026-120315.md): LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile (CVSS 8.7, lobehub chat)
- [CVE-2026-120314](https://cve.now/CVE-2026-120314.md): Network-AI 5.14.0 before 5.15.5 Missing Authentication in A2AServer Task Operations (CVSS 6.9, Jovancoding Network-AI)
- [CVE-2026-120313](https://cve.now/CVE-2026-120313.md): Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath (CVSS 8.7, Jovancoding Network-AI)
- [CVE-2026-120312](https://cve.now/CVE-2026-120312.md): Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name (CVSS 8.7, Jovancoding Network-AI)
- [CVE-2026-120311](https://cve.now/CVE-2026-120311.md): Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID (CVSS 8.7, Jovancoding Network-AI)
- [CVE-2026-120310](https://cve.now/CVE-2026-120310.md): Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 Information Disclosure via Object Update Response (CVSS 2.3, parse-community parse-server)
- [CVE-2026-120309](https://cve.now/CVE-2026-120309.md): Nuxt 4.6.0 before 4.6.2 Route Param Confusion via getRouterParam (CVSS 6.3, nuxt)
- [CVE-2026-120323](https://cve.now/CVE-2026-120323.md): samanhappy MCPHub passthroughHeaders.ts information disclosure (CVSS 5.3, samanhappy MCPHub)
- [CVE-2026-120322](https://cve.now/CVE-2026-120322.md): Termix-SSH Termix transferToHost path traversal (CVSS 9.4, Termix-SSH Termix)
- [CVE-2026-120320](https://cve.now/CVE-2026-120320.md): jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore\_context deserialization (CVSS 5.1, jxxghp MoviePilot)
- [CVE-2026-120319](https://cve.now/CVE-2026-120319.md): Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization (CVSS 5.3, Sanluan PublicCMS)
- [CVE-2026-120283](https://cve.now/CVE-2026-120283.md): Linksys E8450 portal.cgi strcpy stack-based overflow (CVSS 10.0, Linksys E8450)
- [CVE-2026-120282](https://cve.now/CVE-2026-120282.md): WAVLINK WN536AX6-A protocol.csp host\_black os command injection (CVSS 9.4, WAVLINK WN536AX6-A)
- [CVE-2026-120281](https://cve.now/CVE-2026-120281.md): WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow (CVSS 10.0, WAVLINK WN536AX6-A)
- [CVE-2026-120280](https://cve.now/CVE-2026-120280.md): WAVLINK WN536AX6-A WireGuard protocol.csp wireguard\_cli\_group handler os command injection (CVSS 10.0, WAVLINK WN536AX6-A)
- [CVE-2026-120279](https://cve.now/CVE-2026-120279.md): WAVLINK WN536AX6-A openvpn\_cli protocol.csp os command injection (CVSS 10.0, WAVLINK WN536AX6-A)
- [CVE-2025-62819](https://cve.now/CVE-2025-62819.md): Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via the RA (Registration… (no CVSS)
- [CVE-2026-106803](https://cve.now/CVE-2026-106803.md): A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims\_registrar\_pcscf module. (no CVSS)
- [CVE-2026-106804](https://cve.now/CVE-2026-106804.md): A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims\_qos\_npn module. (CVSS 7.5)
- [CVE-2026-106805](https://cve.now/CVE-2026-106805.md): A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. (no CVSS)
- [CVE-2026-106806](https://cve.now/CVE-2026-106806.md): A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. (no CVSS)
- [CVE-2026-106807](https://cve.now/CVE-2026-106807.md): A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. (no CVSS)
- [CVE-2026-106808](https://cve.now/CVE-2026-106808.md): OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm\_UEAU Generate Authentication… (CVSS 7.5)
- [CVE-2026-117067](https://cve.now/CVE-2026-117067.md): An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated… (no CVSS)
- [CVE-2026-117068](https://cve.now/CVE-2026-117068.md): An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker… (no CVSS)
- [CVE-2026-117069](https://cve.now/CVE-2026-117069.md): An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker… (no CVSS)
- [CVE-2026-117082](https://cve.now/CVE-2026-117082.md): An authentication bypass vulnerability in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU… (no CVSS)
- [CVE-2026-117127](https://cve.now/CVE-2026-117127.md): Directory Traversal vulnerability in Gleez GleezCMS v.1.2.0 allows a remote attacker to obtain sensitive information via the action\_serve… (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-11-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.