[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111750 | 19 Oct 2026 | CVSS 6.3 | AIOHTTP: Pure-Python parser request smugglingAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP… | Fix |
| CVE-2026-111862 | 19 Oct 2026 | CVSS 9.8 | RankMath Rank Math SEO PRORank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between… | |
| CVE-2026-111061 | 19 Oct 2026 | CVSS 4.3 | russh: Unbounded memory allocation in agent protocol server via crafted constraint recordsrussh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.64.1, the agent server spawns a separate… | Fix |
| CVE-2026-111063 | 19 Oct 2026 | CVSS 6.3 | AIOHTTP: Secure attribute not enforced for shared cookieAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the Secure attribute for a shared cookie is not… | Fix |
| CVE-2026-111064 | 19 Oct 2026 | CVSS 8.2 | aiohttp server lacks an initial request/header timeoutAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the… | Fix |
| CVE-2026-111065 | 19 Oct 2026 | CVSS 6.9 | AIOHTTP: Connector pool exhaustion via Max-Age overflowAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Max-Age processing can overflow and skip closing a… | Fix |
| CVE-2026-111066 | 19 Oct 2026 | CVSS 8.2 | AIOHTTP: File descriptor exhaustion in multipart requestsAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. From 2.0.0 until 3.14.4, multipart request processing can retain an… | Fix |
| CVE-2026-111748 | 19 Oct 2026 | CVSS 6.3 | AIOHTTP: Absolute-form request targets can spoof Request.schemeAIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, an attacker can send an absolute-form request that… | Fix |
| CVE-2026-10743 | 19 Oct 2026 | CVSS 8.8 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN… | |
| CVE-2026-111059 | 19 Oct 2026 | CVSS 6.1 | Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLMercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts… | Fix |
| CVE-2026-107188 | 19 Oct 2026 | CVSS 9.6 | Eptura ArchibusA user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file… | |
| CVE-2026-10572 | 19 Oct 2026 | CVSS 8.8 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when… | |
| CVE-2026-10574 | 19 Oct 2026 | CVSS 8.8 | IBM MQ OperatorIBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when… | |
| CVE-2025-7203 | 19 Oct 2026 | CVSS 4.9 | WSO2 Universal GatewayThe Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore… | |
| CVE-2026-103038 | 19 Oct 2026 | CVSS 8.6 | StreamSoft PingTools Network UtilitiesPingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP service. The application appends… | |
| CVE-2026-107082 | 19 Oct 2026 | CVSS 8.8 | VulnerabilitySlims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection via the opac_hide and promoted… | |
| CVE-2026-107083 | 19 Oct 2026 | CVSS 9.8 | VulnerabilitySENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in… | |
| CVE-2026-107186 | 19 Oct 2026 | CVSS 8.6 | Eptura ArchibusAn unauthenticated user can send a DWR request with isPasswordUppercase as one call method and the next call method can be set to a run workflow… | |
| CVE-2026-107187 | 19 Oct 2026 | CVSS 8.5 | Eptura ArchibusA user can access any database details, such as usernames and passwords by sending a DWR request with a specified workflow rule. The authentication… | |
| CVE-2025-10149 | 19 Oct 2026 | CVSS 8.2 | WSO2 Identity Server as Key ManagerThe SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This… | |
| CVE-2025-13173 | 19 Oct 2026 | CVSS 6.5 | WSO2 API Control PlaneTokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initiated. This… | |
| CVE-2025-13591 | 19 Oct 2026 | CVSS 5.3 | WSO2 Identity ServerThe authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system… | |
| CVE-2025-6623 | 19 Oct 2026 | CVSS 4.3 | WSO2 API ManagerThe carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of… | |
| CVE-2025-7043 | 19 Oct 2026 | CVSS 5.4 | WSO2 API ManagerThe ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use… | |
| CVE-2024-4412 | 19 Oct 2026 | CVSS 2.7 | WSO2 Enterprise IntegratorThe software accepts user-supplied data without sufficient validation, allowing for the injection of malicious Expression Language (EL) code. This… | |
| CVE-2026-112309 | 19 Oct 2026 | CVSS 7.5 | airjp73 @rvf/set-get@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of… | |
| CVE-2026-112310 | 19 Oct 2026 | CVSS 4.3 | docling-project docling-coredocling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain… | |
| CVE-2026-112363 | 19 Oct 2026 | CVSS 5.3 | unclecode crawl4aiCrawl4AI from 0.8.7 through 0.9.5 contains a server-side request forgery vulnerability in the Docker API server that allows unauthenticated attackers… | |
| CVE-2026-112366 | 19 Oct 2026 | CVSS 7.5 | micromatch picomatchPicomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying… | |
| CVE-2026-112368 | 19 Oct 2026 | CVSS 7.5 | MongoDB Inc. PHP DriverAn uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted… | |
| CVE-2026-12254 | 19 Oct 2026 | CVSS 6.4 | Netskope Inc. Netskope ClientNetskope is notified about a potential gap in its agent (NSClient) where a system with Netskope Client while connecting to an access point with… | |
| CVE-2026-112303 | 19 Oct 2026 | CVSS 4.3 | GDevelopGDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource cookie by supplying… | |
| CVE-2026-112304 | 19 Oct 2026 | CVSS 7.5 | Mindee docTRdocTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without… | |
| CVE-2026-112305 | 19 Oct 2026 | CVSS 8.8 | semaphoreui Semaphore UISemaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role to override protected Ansible… | |
| CVE-2026-112306 | 19 Oct 2026 | CVSS 7.2 | nocobaseNocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL… | |
| CVE-2026-112307 | 19 Oct 2026 | CVSS 7.3 | andialbrecht sqlparsesqlparse through 0.6.0 contains a PHP code injection vulnerability that allows attackers to inject PHP expressions by supplying SQL text containing… | |
| CVE-2026-112308 | 19 Oct 2026 | CVSS 7.4 | crewAIInc crewai-toolscrewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows attackers to fetch internal… | |
| CVE-2026-112152 | 19 Oct 2026 | CVSS 7.3 | vraj404 Criminal-Management-SystemA security vulnerability has been detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this… | |
| CVE-2026-112153 | 19 Oct 2026 | CVSS 7.3 | vraj404 Criminal-Management-SystemA vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This affects the function… | |
| CVE-2026-112157 | 19 Oct 2026 | CVSS 3.1 | MemTensor memmy-agentA weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2. The impacted element is the function requireAdminWrite of the file… | |
| CVE-2026-112158 | 19 Oct 2026 | CVSS 6.5 | MikroTik RouterOSA weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing… | |
| CVE-2026-111045 | 19 Oct 2026 | CVSS 7.5 | anshupriyan cli-bridgeCLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses… | |
| CVE-2026-111046 | 19 Oct 2026 | CVSS 2.3 | FOSSBillingFOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core… | |
| CVE-2026-111053 | 19 Oct 2026 | CVSS 6.9 | FOSSBillingFOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated api/guest/system/template_exists… | |
| CVE-2026-111056 | 19 Oct 2026 | CVSS 6.9 | FOSSBillingFOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthenticated POST /api/guest/client/create… | |
| CVE-2026-111057 | 19 Oct 2026 | CVSS 10.0 | Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassMercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in… | Fix |
| CVE-2026-111058 | 19 Oct 2026 | CVSS 9.8 | Mercury: Unauthenticated Remote Code Execution via /api/kernelsMercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow… | Fix |
| CVE-2026-109431 | 19 Oct 2026 | CVSS 8.1 | Camunda 7Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in engine-rest task sub-resources that… | |
| CVE-2026-109432 | 19 Oct 2026 | CVSS 9.8 | Camunda 7Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where AdhocQueryValidator.validate() fails to… | |
| CVE-2026-109433 | 19 Oct 2026 | CVSS 6.5 | Camunda 7Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows… | |
| CVE-2026-107081 | 19 Oct 2026 | CVSS 9.8 | VulnerabilitySQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints (admin/AJAX_lookup_handler.php… | |
| CVE-2026-107566 | 19 Oct 2026 | CVSS 6.5 | Progressive Robot Ltd hMailServerMissing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value action (6.0.0 through 6.3.6) of… | |
| CVE-2026-107567 | 19 Oct 2026 | CVSS 7.5 | Progressive Robot Ltd hMailServerUse of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to… | |
| CVE-2026-107568 | 19 Oct 2026 | CVSS 6.5 | Progressive Robot Ltd hMailServerMissing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0 through 6.3.6) of Progressive Robot… | |
| CVE-2026-107569 | 19 Oct 2026 | CVSS 7.5 | Progressive Robot Ltd hMailServerUnchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to stop the server… | |
| CVE-2026-107571 | 19 Oct 2026 | CVSS 7.8 | Progressive Robot Ltd hMailServerIncorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a local authenticated user to run… | |
| CVE-2026-86375 | 19 Oct 2026 | CVSS 6.2 | Dell Application Installer,Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker… | |
| CVE-2026-112328 | 19 Oct 2026 | CVSS 4.3 | Automattic Sensei LMSThe Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term AJAX handler that allows… | |
| CVE-2026-112329 | 19 Oct 2026 | CVSS 4.3 | Automattic Sensei LMSThe Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy save_new_message handler hooked on the… | |
| CVE-2026-112150 | 19 Oct 2026 | CVSS 7.3 | vraj404 Criminal-Management-SystemA security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown… | |
| CVE-2026-112151 | 19 Oct 2026 | CVSS 7.3 | vraj404 Criminal Management SystemA weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability… | |
| CVE-2026-112149 | 19 Oct 2026 | CVSS 7.3 | vraj404 Criminal-Management-SystemA vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function… | |
| CVE-2026-112147 | 19 Oct 2026 | CVSS 5.3 | ai-genius-automations octoallyA vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file… | |
| CVE-2026-112293 | 19 Oct 2026 | CVSS 5.4 | BoxyHQ saas-starter-kitBoxyHQ Enterprise SaaS Starter Kit through 1.6.0 contains a missing authorization vulnerability that allows non-owner team members to manage billing… | |
| CVE-2026-112294 | 19 Oct 2026 | CVSS 4.3 | sunkaifei FlyCmsFlyCms through commit edfdf724 contains a missing authorization vulnerability in ActionService.counter() that allows authenticated users to modify… | |
| CVE-2026-112295 | 19 Oct 2026 | CVSS 5.4 | sunkaifei FlyCmsFlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to overwrite protected account columns by… | |
| CVE-2026-112296 | 19 Oct 2026 | CVSS 9.8 | sunkaifei FlyCmsFlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote attackers to gain super administrator… | |
| CVE-2026-8168 | 19 Oct 2026 | CVSS 7.1 | qtUncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to cause a denial of service… | |
| CVE-2026-112287 | 19 Oct 2026 | CVSS 7.1 | krayin laravel-crmKrayin CRM before 2.2.7 contains a broken object level authorization vulnerability in EmailController write actions that allows scope-restricted… | |
| CVE-2026-112288 | 19 Oct 2026 | CVSS 3.3 | krayin laravel-crmKrayin CRM 2.2.5 before 2.2.7 contains a server-side request forgery filter bypass that allows users with webhook permissions to reach internal… | |
| CVE-2026-112289 | 19 Oct 2026 | CVSS 5.4 | KoalixSwitzerland koalixcrmKoalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task… | |
| CVE-2026-112290 | 19 Oct 2026 | CVSS 4.7 | MI6 Intelligence Community UI Kit canary web componentsIntelligence Community UI Kit @ukic/canary-web-components 3.0.0-canary.12 before 3.0.0-canary.48 contains a DOM-based cross-site scripting… | |
| CVE-2026-112291 | 19 Oct 2026 | CVSS 5.3 | Flarum Extension ManagerFlarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing… | |
| CVE-2026-112292 | 19 Oct 2026 | CVSS 9.8 | operacle checkcleCheckCle through 1.6.0 contains a missing authorization vulnerability that allows unauthenticated attackers to read, modify and delete records… | |
| CVE-2026-112280 | 19 Oct 2026 | CVSS 6.1 | nkoriyama aribb24libaribb24 (aribb24) through 1.0.3 contains a heap-based buffer overflow vulnerability in src/parser.c that allows attackers to corrupt heap memory… | |
| CVE-2026-112281 | 19 Oct 2026 | CVSS 6.1 | nkoriyama aribb24libaribb24 (aribb24) through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder_handle_csi() in src/decoder.c that allows… | |
| CVE-2026-112282 | 19 Oct 2026 | CVSS 5.5 | VideoLAN libblurayVideoLAN libbluray through 1.5.1 contains an out-of-bounds read vulnerability in clpi_access_point() that allows attackers to crash applications by… | |
| CVE-2026-112283 | 19 Oct 2026 | CVSS 5.5 | VideoLAN libblurayVideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_start_points() in clpi_parse.c that trusts… | |
| CVE-2026-112284 | 19 Oct 2026 | CVSS 3.3 | xqq libaribcaptionlibaribcaption 1.1.0 through 1.1.2 contains a global out-of-bounds read in DecoderImpl::HandleGLGR() that reads past the 78-entry kLatinSpecialTable… | |
| CVE-2026-112285 | 19 Oct 2026 | CVSS 4.3 | TheliaThelia before 3.1.5 and 3.2.x before 3.2.4 contains a business logic vulnerability that allows authenticated customers to bypass coupon usage limits… | |
| CVE-2026-112286 | 19 Oct 2026 | CVSS 6.5 | krayin laravel-crmKrayin CRM before 2.2.7 contains an insecure direct object reference vulnerability that allows scope-restricted authenticated users to read other… | |
| CVE-2026-112273 | 19 Oct 2026 | CVSS 5.3 | libtinslibtins through 4.6 contains a heap out-of-bounds read vulnerability in DNS::compose_name in src/dns.cpp that allows remote attackers to read past… | |
| CVE-2026-112274 | 19 Oct 2026 | CVSS 3.7 | libtinslibtins through 4.6 contains an out-of-bounds read vulnerability in DNS::soa_record::init that allows remote attackers to read past buffer bounds by… | |
| CVE-2026-112275 | 19 Oct 2026 | CVSS 6.1 | NetpbmNetpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr_load_image in… | |
| CVE-2026-112276 | 19 Oct 2026 | CVSS 6.1 | NetpbmNetpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun… | |
| CVE-2026-112277 | 19 Oct 2026 | CVSS 6.5 | rdesktoprdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_plane() in bitmap.c that allows malicious RDP servers to crash… | |
| CVE-2026-112278 | 19 Oct 2026 | CVSS 6.5 | rdesktoprdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_raw_bmpcache() in orders.c that allows malicious RDP servers to… | |
| CVE-2026-112279 | 19 Oct 2026 | CVSS 6.5 | rdesktoprdesktop through 1.9.0 contains a heap out-of-bounds read vulnerability in process_bmpcache2() in orders.c that allows malicious RDP servers to crash… | |
| CVE-2026-112267 | 19 Oct 2026 | CVSS 6.5 | sgl-project sglangSGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated… | |
| CVE-2026-112268 | 19 Oct 2026 | CVSS 6.3 | sgl-project sglang-routersglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to… | |
| CVE-2026-112269 | 19 Oct 2026 | CVSS 6.5 | sgl-project sglangSGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL… | |
| CVE-2026-112270 | 19 Oct 2026 | CVSS 6.5 | sgl-project sglangSGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handle_staging_rsp() that… | |
| CVE-2026-112271 | 19 Oct 2026 | CVSS 5.5 | emersion libdisplay-infolibdisplay-info through 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v1 section parser in displayid.c that occurs when a… | |
| CVE-2026-112272 | 19 Oct 2026 | CVSS 5.5 | emersion libdisplay-infoLibdisplay-info 0.4.0 contains a heap out-of-bounds read vulnerability in the DisplayID v2 section parser in displayid2.c that allows attackers to… | |
| CVE-2026-112264 | 19 Oct 2026 | CVSS 7.8 | BentoMLBentoML through 1.4.39 contains a Dockerfile instruction injection vulnerability that allows attackers to add arbitrary build instructions by… | |
| CVE-2026-112265 | 19 Oct 2026 | CVSS 6.5 | langbot-app LangBotLangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to inject forged Lark/Feishu… | |
| CVE-2026-112266 | 19 Oct 2026 | CVSS 5.9 | sgl-project sglangSGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by… | |
| CVE-2026-112145 | 19 Oct 2026 | CVSS 7.3 | speaches-ai speachesA security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function… | |
| CVE-2026-112146 | 19 Oct 2026 | CVSS 7.4 | D-Link E15A vulnerability was detected in D-Link E15, M32, R15 and R32. This issue affects some unknown processing of the file /etc/emDaemon/passwd of the… | |
| CVE-2026-112222 | 19 Oct 2026 | CVSS 5.4 | SurferMissing Authorization vulnerability in Surfer Surfer surferseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… |
Page 32 of 168