[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-101902 | 28 Sep 2026 | CVSS 6.9 | Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP MethodAxios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-instance requests that omit an… | Fix |
| CVE-2026-101903 | 28 Sep 2026 | CVSS 8.2 | Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters… | Fix |
| CVE-2026-101904 | 28 Sep 2026 | CVSS 6.9 | Axios: Header Injection via Inherited headers After Minimal InterceptorAxios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function normalizes inherited… | Fix |
| CVE-2026-101905 | 28 Sep 2026 | CVSS 7.6 | Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnectionAxios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies… | Fix |
| CVE-2026-101101 | 28 Sep 2026 | CVSS 4.3 | ag-ui-protocol ag-uiA vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of the file legacy/convert.ts of… | |
| CVE-2026-101102 | 28 Sep 2026 | CVSS 6.3 | deepseek-ai deepseek-harnessA vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The… | |
| CVE-2026-101898 | 28 Sep 2026 | CVSS 7.0 | Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controlsAxios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply… | Fix |
| CVE-2026-101099 | 28 Sep 2026 | CVSS 4.3 | ag-ui-protocol ag-uiA vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParser.kt of the component Kotlin… | |
| CVE-2026-101100 | 28 Sep 2026 | CVSS 5.4 | ag-ui-protocol ag-uiA flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsMiddleware of the file… | |
| CVE-2026-88815 | 28 Sep 2026 | CVSS 6.2 | VulnerabilityDBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv… | |
| CVE-2026-88816 | 28 Sep 2026 | CVSS 7.5 | VulnerabilityDBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref uses the string pointer of the… | |
| CVE-2026-85644 | 28 Sep 2026 | CVSS 7.5 | VulnerabilityXS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS::Parse::Infix generates for a… | |
| CVE-2026-86102 | 28 Sep 2026 | CVSS 9.3 | WatchGuard APAn OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access to the AP to execute arbitrary… | |
| CVE-2026-87114 | 28 Sep 2026 | CVSS 7.1 | Red Hat OpenShift Container Platform 4.19A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's… | |
| CVE-2026-87969 | 28 Sep 2026 | CVSS 8.6 | WatchGuard APAn OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execute arbitrary operating system… | |
| CVE-2026-55096 | 28 Sep 2026 | CVSS 7.1 | leshchenko1979 fast-mcp-telegramfast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools accept files as a list of http(s)… | |
| CVE-2026-48100 | 28 Sep 2026 | CVSS 8.7 | polybase payyPayy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, agg_agg forwards the compacted… | |
| CVE-2026-54160 | 28 Sep 2026 | CVSS 8.2 | networkupstools nutNetwork UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. Prior to… | |
| CVE-2026-101082 | 28 Sep 2026 | CVSS 5.3 | PMWebA weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of… | |
| CVE-2026-101083 | 28 Sep 2026 | CVSS 5.3 | PMWebA security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library encryptionhelper.dll. Such… | |
| CVE-2026-101098 | 28 Sep 2026 | CVSS 4.3 | ag-ui-protocol ag-uiA security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the function readAllBytes of the file… | |
| CVE-2026-101891 | 28 Sep 2026 | CVSS 9.3 | WatchGuard APAn improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticated attacker with network… | |
| CVE-2026-101894 | 28 Sep 2026 | CVSS 9.1 | @xhmikosr/decompress: Path traversal via symlink chainThe decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies on lexical… | Fix |
| CVE-2026-101081 | 28 Sep 2026 | CVSS 9.1 | D-Link DI-8400A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp of the file menu_nat_more.asp… | |
| CVE-2026-97399 | 28 Sep 2026 | CVSS 3.7 | The GNU C Library glibcThe strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit… | |
| CVE-2026-91154 | 28 Sep 2026 | CVSS 6.9 | MarcosCamara01 Ecommerce TemplateMissing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.ts, revalidateProducts) in… | |
| CVE-2026-93348 | 28 Sep 2026 | CVSS 8.1 | unslothai unsloth-zooUnsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the… | |
| CVE-2026-88805 | 28 Sep 2026 | CVSS 8.1 | SUSE RancherIncorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the account was logged out. Affected… | |
| CVE-2026-88808 | 28 Sep 2026 | CVSS 8.8 | SUSE RancherA vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters using its own cluster-admin… | |
| CVE-2026-88804 | 28 Sep 2026 | CVSS 9.6 | SUSE RancherAn unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripting attack in the Rancher UI… | |
| CVE-2026-101861 | 28 Sep 2026 | CVSS 4.1 | langflow-ai langflowLangflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows authenticated attackers to… | |
| CVE-2026-12342 | 28 Sep 2026 | CVSS 9.6 | SailPoint Technologies IdentityIQThis vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the IdentityIQ server due to… | |
| CVE-2026-101077 | 28 Sep 2026 | CVSS 10.0 | Netcore NR289-GEA flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation… | |
| CVE-2026-101078 | 28 Sep 2026 | CVSS 6.3 | deepseek-ai deepseek-harnessA vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file… | |
| CVE-2026-101079 | 28 Sep 2026 | CVSS 2.8 | agentverus-scannerA vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the… | |
| CVE-2026-101080 | 28 Sep 2026 | CVSS 4.8 | Tencent AI-Infra-GuardA vulnerability was identified in Tencent AI-Infra-Guard up to 4.5.2/4.6.2. This affects the function startsWith of the file… | |
| CVE-2026-101076 | 28 Sep 2026 | CVSS 10.0 | Netcore NR289-GEA vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI… | |
| CVE-2026-93539 | 28 Sep 2026 | CVSS 5.4 | SUSE RancherA vulnerability was discovered in Fleet's Git webhook receiver (the gitjob webhook service). When a webhook secret is not configured, incoming… | |
| CVE-2026-93540 | 28 Sep 2026 | CVSS 6.5 | SUSE RancherA privilege mismatch was found in Fleet. When a bundle requested namespace labels or annotations through the namespaceLabels and namespaceAnnotations… | |
| CVE-2026-96538 | 28 Sep 2026 | CVSS 8.7 | EnterpriseDB WarehousePGWarehousePG (WHPG) 7.x before 7.6.0-WHPG is affected by a missing authorization vulnerability (CWE-862) in the built-in server-side file functions… | |
| CVE-2026-80359 | 28 Sep 2026 | CVSS 6.8 | Dell Boot Optimized Server Storage (BOSS)Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control… | |
| CVE-2026-93538 | 28 Sep 2026 | CVSS 7.1 | SUSE RancherA cross-tenant authorization issue was discovered in SUSE Rancher Fleet. During agent-initiated cluster registration, cluster labels supplied by the… | |
| CVE-2026-70413 | 28 Sep 2026 | CVSS 5.6 | Dell Live Optics CollectorDell Live Optics Collector, versions prior to 27.2.13.310, contain(s) a Use of Hard-coded Password vulnerability. A low privileged attacker with… | |
| CVE-2026-80357 | 28 Sep 2026 | CVSS 7.0 | Dell Boot Optimized Server Storage (BOSS)Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control… | |
| CVE-2026-80358 | 28 Sep 2026 | CVSS 5.1 | Dell Boot Optimized Server Storage (BOSS)Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access Control… | |
| CVE-2026-4556 | 28 Sep 2026 | CVSS 7.8 | Extegrity Exam4Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the… | |
| CVE-2026-101075 | 28 Sep 2026 | CVSS 10.0 | Netcore NR289-GEA security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi… | |
| CVE-2026-101333 | 28 Sep 2026 | CVSS 3.7 | Red Hat Build of KeycloakA flaw was found in the Micrometer user-event metrics listener of Keycloak, a solution for integrated identity and access management. The issue… | |
| CVE-2026-101073 | 28 Sep 2026 | CVSS 8.3 | Netcore NR289-GEA security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file /bin/boa of the component CGI… | |
| CVE-2026-101074 | 28 Sep 2026 | CVSS 9.8 | Netcore NR289-GEA weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the… | |
| CVE-2026-97335 | 28 Sep 2026 | CVSS 7.7 | Canonical LXDIncorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later (fixed in 5.0.10, 5.21.8 and 6.10)… | |
| CVE-2026-93537 | 28 Sep 2026 | CVSS 6.5 | SUSE RancherA user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to… | |
| CVE-2026-86595 | 28 Sep 2026 | CVSS 8.8 | Iron Mountain Archiving Services Inc. enVisionImproper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision… | |
| CVE-2026-87798 | 28 Sep 2026 | CVSS 5.8 | Canonical LXDImproper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10… | |
| CVE-2026-87799 | 28 Sep 2026 | CVSS 9.9 | Canonical LXDImproper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux… | |
| CVE-2026-90924 | 28 Sep 2026 | CVSS 9.8 | Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEMUse of default credentials vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Try Common or… | |
| CVE-2026-90925 | 28 Sep 2026 | CVSS 7.1 | Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEMImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software, Telecommunications and Consultancy… | |
| CVE-2026-90926 | 28 Sep 2026 | CVSS 8.8 | Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEMImproper Control of Generation of Code ('Code Injection') vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co… | |
| CVE-2026-85185 | 28 Sep 2026 | CVSS 9.6 | Canonical LXDPath traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an… | |
| CVE-2026-85526 | 28 Sep 2026 | CVSS 9.9 | Canonical LXDPath traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to… | |
| CVE-2026-86334 | 28 Sep 2026 | CVSS 4.2 | Canonical LXDPath traversal in the CLI client image export and copy functionality in Canonical LXD from 4.0.2 before 4.0.14, 5.0.10, 5.21.8, and 6.10 on all… | |
| CVE-2026-86335 | 28 Sep 2026 | CVSS 6.3 | Canonical LXDMissing Authorization in imageDownload in Canonical LXD before 5.0.10, 5.21.8, and 6.10 on Linux allows a project-restricted client to access private… | |
| CVE-2026-73641 | 28 Sep 2026 | CVSS 5.1 | Dayforce ESS ExcelityDayforce ESS Excelity is vulnerable to Reflected XSS in multiple endpoints. An attacker can prepare a specially crafted URL that, when opened… | |
| CVE-2026-73642 | 28 Sep 2026 | CVSS 9.2 | Dayforce ESS ExcelityDayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path… | |
| CVE-2026-73640 | 28 Sep 2026 | CVSS 9.3 | Dayforce ESS ExcelityDayforce ESS Excelity is vulnerable to Time Based-Blind SQL Injection in password recovery functionality. The unauthenticated attacker can prepare… | |
| CVE-2026-15952 | 28 Sep 2026 | CVSS 6.4 | ABB Protection and control IED manager (PCM600)Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600). This issue affects Protection… | |
| CVE-2026-15953 | 28 Sep 2026 | CVSS 5.0 | ABB Protection and control IED manager (PCM600)Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ABB Protection and control IED manager (PCM600). This… | |
| CVE-2026-101070 | 28 Sep 2026 | CVSS 5.3 | dbgateA security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file… | |
| CVE-2026-101071 | 28 Sep 2026 | CVSS 6.3 | Acrel Electric Unet Web ServiceA vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file… | |
| CVE-2026-101072 | 28 Sep 2026 | CVSS 10.0 | Netcore NR289-GEA vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI… | |
| CVE-2026-82936 | 28 Sep 2026 | CVSS 5.9 | F&F Filipowski mH-DEVELOPERmH-DEVELOPER smart home module is vulnerable to Denial of Service due to uncontrolled resource consumption. The Express bodyParser is configured with… | |
| CVE-2026-86330 | 28 Sep 2026 | CVSS 7.2 | Red Hat Openshift Data Foundation 4An OS command injection flaw was found in the set_hostname_internal function of NooBaa's cluster_internal_api. This component is responsible for… | |
| CVE-2026-82326 | 28 Sep 2026 | CVSS 4.1 | Enocta Educational Technologies Inc. Enocta PlatformImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Enocta Educational Technologies Inc. Enocta… | |
| CVE-2026-82928 | 28 Sep 2026 | CVSS 7.7 | F&F Filipowski mH-DEVELOPERmH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorized_keys, serving as a potential backdoor. The SSH daemon… | |
| CVE-2026-82929 | 28 Sep 2026 | CVSS 6.3 | F&F Filipowski mH-DEVELOPERmH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts… | |
| CVE-2026-82930 | 28 Sep 2026 | CVSS 6.4 | F&F Filipowski mH-DEVELOPERmH-DEVELOPER smart home module does not verify tokens in its authorization middleware, leaving all HTTP API and WebSocket endpoints accessible… | |
| CVE-2026-82932 | 28 Sep 2026 | CVSS 5.3 | F&F Filipowski mH-DEVELOPERmH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and… | |
| CVE-2026-82933 | 28 Sep 2026 | CVSS 6.0 | F&F Filipowski mH-DEVELOPERmH-DEVELOPER smart home module sends its web interface and API traffic over unencrypted HTTP. Passwords, authentication tokens, and device commands… | |
| CVE-2026-82935 | 28 Sep 2026 | CVSS 6.9 | F&F Filipowski mH-DEVELOPERmH-DEVELOPER smart home module ships with an end-of-life, unsupported Debian 8 and Node.js runtime v17.0.1 in its production firmware. This exposes… | |
| CVE-2026-52749 | 28 Sep 2026 | CVSS 5.3 | Kaon AR2140The Kaon AR2140X router improperly issues session cookies in responses to unauthenticated HTTP requests. This vulnerability allows a remote attacker… | |
| CVE-2026-59563 | 28 Sep 2026 | CVSS 4.6 | zscaler-mcp-serverZscaler MCP Server versions 0.7.0 and 0.7.1 has an issue where HMAC confirmation tokens were not bound to the target resource identifier, allowing an… | |
| CVE-2026-82323 | 28 Sep 2026 | CVSS 8.1 | Enocta Educational Technologies Inc. Enocta PlatformAuthorization bypass through User-Controlled key vulnerability in Enocta Educational Technologies Inc. Enocta Platform allows Exploitation of Trusted… | |
| CVE-2026-101292 | 28 Sep 2026 | CVSS 8.2 | Red Hat JBoss Enterprise Application Platform 7.4.25Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMessage.getFederationPolicy(). The method… | |
| CVE-2026-12265 | 28 Sep 2026 | CVSS 8.8 | Zohocorp DDI CentralZohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive… | |
| CVE-2026-18825 | 28 Sep 2026 | CVSS 5.3 | github.com/antono connect-corsAn Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross… | |
| CVE-2026-52748 | 28 Sep 2026 | CVSS 7.1 | Kaon AR2140The Kaon AR2140X router contains a vulnerability where the backup functionality is accessible without authentication. This allows an unauthenticated… | |
| CVE-2026-101066 | 28 Sep 2026 | CVSS 7.3 | dbgateA vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file… | |
| CVE-2026-101067 | 28 Sep 2026 | CVSS 7.3 | dbgateA vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the… | |
| CVE-2026-101068 | 28 Sep 2026 | CVSS 6.5 | dbgateA security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file… | |
| CVE-2026-101069 | 28 Sep 2026 | CVSS 6.5 | dbgateA weakness has been identified in dbgate up to 7.3.1. Affected is the function exportModelSql of the file… | |
| CVE-2026-101055 | 28 Sep 2026 | CVSS 5.3 | Thinkware U3000A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the function GET_STATUS of the component TCP… | |
| CVE-2026-94194 | 28 Sep 2026 | CVSS 6.3 | elixir-mint mintInconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in elixir-mint mint allows a malicious HTTP/1 server… | |
| CVE-2026-87752 | 28 Sep 2026 | CVSS 6.1 | Rolantis Information Technologies Tourism Industry and Trade Co. Ltd. AgentisImproper neutralization of input during web page generation ('cross-site scripting') vulnerability in Rolantis Information Technologies Tourism… | |
| CVE-2026-91043 | 28 Sep 2026 | CVSS 8.2 | elixir-mint mintAllocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to exhaust memory on the… | |
| CVE-2026-92103 | 28 Sep 2026 | CVSS 6.3 | elixir-mint mintAllocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a malicious HTTP/2 server to make the client hold up to… | |
| CVE-2026-78424 | 28 Sep 2026 | CVSS 8.8 | SUSE NeuVectorImproper parameter handling in NeuVector allows any authenticated user who holds the namespaced Runtime Policies (write) permission or anyone with… | |
| CVE-2026-101053 | 28 Sep 2026 | CVSS 7.3 | Thinkware U3000A vulnerability was determined in Thinkware U3000 up to 1.02.04. This impacts the function PUT_FILE of the file /tmp/wpa_supplicant.conf of the… | |
| CVE-2026-101054 | 28 Sep 2026 | CVSS 5.3 | Thinkware U3000A vulnerability was identified in Thinkware U3000 up to 1.02.04. Affected is the function get_file of the file /tmp/wpa_supplicant.conf of the… | |
| CVE-2026-12264 | 28 Sep 2026 | CVSS 8.8 | Zohocorp DDI CentralZohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitrary file write via HA Failover Config sync upload leading to remote… | |
| CVE-2026-19444 | 28 Sep 2026 | CVSS 6.5 | KubernetesA path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container… |
Page 145 of 168