[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-92450 | 22 Oct 2026 | CVSS 7.5 | Kiloview E3 FirmwareThe authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as… | |
| CVE-2026-110243 | 22 Oct 2026 | CVSS 9.9 | Kiloview E3 FirmwareThe network management service on affected Kiloview E3 NDI encoder firmware fails to validate the network interface name accepted by its link… | |
| CVE-2026-110491 | 22 Oct 2026 | CVSS 7.5 | Kiloview E3 FirmwareThe ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service… | |
| CVE-2026-110825 | 22 Oct 2026 | CVSS 7.5 | Kiloview E3 FirmwareThe ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration write operations without requiring… | |
| CVE-2026-107861 | 22 Oct 2026 | CVSS 9.9 | Kiloview E3 FirmwareThe system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming… | |
| CVE-2026-97785 | 22 Oct 2026 | CVSS 10.0 | Microsoft Entra application proxyImproper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network. | |
| CVE-2026-96616 | 22 Oct 2026 | CVSS 6.5 | Kiloview E3 FirmwareAuthentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime… | |
| CVE-2026-96185 | 22 Oct 2026 | CVSS 7.5 | Microsoft Exchange OnlineStack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network. | |
| CVE-2026-83938 | 22 Oct 2026 | CVSS 10.0 | Microsoft Azure Kubernetes Configuration ServiceMissing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a… | |
| CVE-2026-115221 | 22 Oct 2026 | CVSS 5.4 | Red Hat Enterprise Linux 10A flaw was found in FreeIPA. An improper authorization check allows an authenticated host to retrieve and revoke digital certificates assigned to… | |
| CVE-2026-115424 | 22 Oct 2026 | CVSS 5.5 | Red Hat OpenShift Container Platform 4A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the application fails to properly sanitize… | |
| CVE-2026-115449 | 22 Oct 2026 | CVSS 3.5 | Red Hat Enterprise Linux 10A flaw was found in libslirp. When handling ICMP echo requests, the reply length is not updated to match the actual data received from the host… | |
| CVE-2026-114620 | 22 Oct 2026 | CVSS 5.4 | authlibAuthlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the… | |
| CVE-2026-114615 | 22 Oct 2026 | CVSS 7.4 | authlibAuthlib is a Python library which builds OAuth and OpenID Connect servers. From 1.3.1 until 1.9.0, OctKey.import_key() checks asymmetric-key markers… | |
| CVE-2026-114616 | 22 Oct 2026 | CVSS 7.4 | authlibAuthlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and… | |
| CVE-2026-114617 | 22 Oct 2026 | CVSS 4.2 | authlibAuthlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDMixin.parse_id_token() reads the nonce_supported… | |
| CVE-2026-114618 | 22 Oct 2026 | CVSS 6.8 | authlibAuthlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.get_audiences()… | |
| CVE-2026-114619 | 22 Oct 2026 | CVSS 4.6 | authlibAuthlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, OpenIDImplicitGrant.validate_authorization_request()… | |
| CVE-2026-111594 | 22 Oct 2026 | CVSS 8.1 | InterSystems IRIS for HealthInterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to… | |
| CVE-2026-110063 | 22 Oct 2026 | CVSS 10.0 | Microsoft VM Inspector for Azure Virtual MachinesImproper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate… | |
| CVE-2026-111100 | 22 Oct 2026 | CVSS 5.3 | Kiloview E3 FirmwareThe ONVIF device service on the E3 responds to certain informational requests without requiring authentication. A remote, unauthenticated party can… | |
| CVE-2026-109122 | 22 Oct 2026 | CVSS 9.1 | Kiloview E3 FirmwareThe network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when configuring static routes via the… | |
| CVE-2026-108456 | 22 Oct 2026 | CVSS 7.7 | Microsoft Azure AI FoundryServer-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a network. | |
| CVE-2026-105014 | 22 Oct 2026 | CVSS 9.1 | Microsoft Azure PipelinesImproper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute… | |
| CVE-2026-105265 | 22 Oct 2026 | CVSS 5.3 | Kiloview E3 FirmwareA vulnerability exists in the the time zone parameter and does not properly validate user input, which may allow an authenticated user to cause… | |
| CVE-2026-115417 | 22 Oct 2026 | CVSS 7.5 | aws-c-mqttMemory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2 might allow a remote actor to… | |
| CVE-2026-115419 | 22 Oct 2026 | CVSS 8.1 | AWS strands-agentsThe A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not… | |
| CVE-2026-114583 | 22 Oct 2026 | CVSS 6.9 | Python Software Foundation CPythontarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names, to redirect later archive… | |
| CVE-2026-114614 | 22 Oct 2026 | CVSS 2.6 | authlibAuthlib is a Python library which builds OAuth and OpenID Connect servers. From 0.13 until 1.8.0, authlib.common.security.is_secure_transport() uses… | |
| CVE-2026-114625 | 22 Oct 2026 | CVSS 9.9 | Arista Networks VeloCloud OrchestratorVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality… | |
| CVE-2026-115509 | 22 Oct 2026 | CVSS 4.2 | jitsucom jitsuJitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await… | |
| CVE-2026-115398 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem… | |
| CVE-2026-115503 | 22 Oct 2026 | CVSS 5.5 | NationalSecurityAgency ghidraGhidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows… | |
| CVE-2026-115504 | 22 Oct 2026 | CVSS 7.8 | HEASARC cfitsioCFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths… | |
| CVE-2026-115505 | 22 Oct 2026 | CVSS 7.6 | sahlberg libsmb2libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and… | |
| CVE-2026-115506 | 22 Oct 2026 | CVSS 7.5 | libexpatlibexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c… | |
| CVE-2026-115507 | 22 Oct 2026 | CVSS 3.5 | go-vikunja vikunjaVikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates… | |
| CVE-2026-115508 | 22 Oct 2026 | CVSS 6.5 | unclecode crawl4aiCrawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated… | |
| CVE-2026-112330 | 22 Oct 2026 | CVSS 7.5 | GDATASoftwareAG motornetMotor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the… | |
| CVE-2026-112331 | 22 Oct 2026 | CVSS 7.5 | GDATASoftwareAG motornetMotor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash… | |
| CVE-2026-112332 | 22 Oct 2026 | CVSS 7.5 | GDATASoftwareAG motornetMotor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish… | |
| CVE-2026-95718 | 22 Oct 2026 | CVSS 5.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95719 | 22 Oct 2026 | CVSS 4.9 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95720 | 22 Oct 2026 | CVSS 4.4 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95721 | 22 Oct 2026 | CVSS 3.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95712 | 22 Oct 2026 | CVSS 7.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95713 | 22 Oct 2026 | CVSS 7.0 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95714 | 22 Oct 2026 | CVSS 6.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95715 | 22 Oct 2026 | CVSS 6.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95716 | 22 Oct 2026 | CVSS 6.5 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95717 | 22 Oct 2026 | CVSS 5.5 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95704 | 22 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95705 | 22 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95706 | 22 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95707 | 22 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95708 | 22 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95709 | 22 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95710 | 22 Oct 2026 | CVSS 7.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-95711 | 22 Oct 2026 | CVSS 7.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79895 | 22 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79955 | 22 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79956 | 22 Oct 2026 | CVSS 7.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79885 | 22 Oct 2026 | CVSS 8.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79886 | 22 Oct 2026 | CVSS 8.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79887 | 22 Oct 2026 | CVSS 8.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79888 | 22 Oct 2026 | CVSS 8.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79889 | 22 Oct 2026 | CVSS 8.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79890 | 22 Oct 2026 | CVSS 8.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79891 | 22 Oct 2026 | CVSS 8.1 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79892 | 22 Oct 2026 | CVSS 7.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79893 | 22 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79894 | 22 Oct 2026 | CVSS 7.5 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79876 | 22 Oct 2026 | CVSS 9.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79877 | 22 Oct 2026 | CVSS 8.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79878 | 22 Oct 2026 | CVSS 8.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79879 | 22 Oct 2026 | CVSS 8.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79880 | 22 Oct 2026 | CVSS 8.7 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79881 | 22 Oct 2026 | CVSS 8.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79882 | 22 Oct 2026 | CVSS 8.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79883 | 22 Oct 2026 | CVSS 8.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79884 | 22 Oct 2026 | CVSS 8.2 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79867 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79868 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79869 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79870 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79871 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79872 | 22 Oct 2026 | CVSS 9.4 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79873 | 22 Oct 2026 | CVSS 9.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79874 | 22 Oct 2026 | CVSS 9.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79875 | 22 Oct 2026 | CVSS 9.3 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79858 | 22 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79859 | 22 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79860 | 22 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79861 | 22 Oct 2026 | CVSS 9.8 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79862 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79863 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79864 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79865 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79866 | 22 Oct 2026 | CVSS 9.6 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided | |
| CVE-2026-79849 | 22 Oct 2026 | CVSS 10.0 | Hewlett Packard Enterprise (HPE) Unknown productNo description provided |
Page 1 of 168