[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110761 | 14 Oct 2026 | CVSS 8.8 | ILIAS-eLearning e.V. ILIASILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Test creation or import… | |
| CVE-2026-110762 | 14 Oct 2026 | CVSS 3.7 | bbPressbbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view restricted subforum posts because… | |
| CVE-2026-110248 | 14 Oct 2026 | CVSS 5.3 | AWS SageMaker Python SDKInsertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before… | |
| CVE-2026-110536 | 14 Oct 2026 | CVSS 10.0 | D-Link DIR-868LA vulnerability was determined in D-Link DIR-868L 2.01b05. This impacts the function system of the file /htdocs/cgibin of the component HNAP CGI… | |
| CVE-2026-109506 | 14 Oct 2026 | CVSS 5.9 | TP-Link Systems Inc. RE190 v5Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow. An… | |
| CVE-2026-104141 | 14 Oct 2026 | CVSS 8.7 | dataeaseDataEase is an open source data visualization and analysis tool. Authenticated users with datasource access can supply crafted schema names… | |
| CVE-2026-104142 | 14 Oct 2026 | CVSS 8.7 | dataeaseDataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users can store crafted FieldGroupDTO.min… | |
| CVE-2026-104143 | 14 Oct 2026 | CVSS 8.7 | dataeaseDataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users can store a crafted custom dateFormat for a… | |
| CVE-2026-103930 | 14 Oct 2026 | CVSS 3.7 | yhirose cpp-httplibcpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream in httplib.h accepts a caller-controlled path that… | |
| CVE-2026-103974 | 14 Oct 2026 | CVSS 5.4 | lichess-org lilalichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d378fe20f80d4c790c6fdee54c4, a user who can add a… | |
| CVE-2026-102756 | 14 Oct 2026 | CVSS 5.1 | dataeaseDataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users who can edit dataset fields and chart… | |
| CVE-2026-102899 | 14 Oct 2026 | CVSS 7.6 | getsentry sentrySentry is an application monitoring and error tracking platform. From 26.5.0 until 26.7.2, the SAML SSO identity-linking flow allows an attacker who… | |
| CVE-2026-102944 | 14 Oct 2026 | CVSS 7.5 | yhirose cpp-httplibcpp-httplib is a C++ header-only HTTP/HTTPS library. Prior to 0.51.0, create_redirect_client() removes Host, Proxy-Authorization, and Authorization… | |
| CVE-2026-102460 | 14 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse… | |
| CVE-2026-102471 | 14 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or… | |
| CVE-2026-102479 | 14 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP… | |
| CVE-2026-102682 | 14 Oct 2026 | CVSS 5.6 | Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creationPipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. From 0.0.98 until 1.6.0, the pipecat-ai… | Fix |
| CVE-2026-102748 | 14 Oct 2026 | CVSS 9.2 | Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of ServiceDgraph is an open source distributed GraphQL database. Prior to 25.4.0, Dgraph Zero registers administrative HTTP routes on port 6080 without… | Fix |
| CVE-2026-102755 | 14 Oct 2026 | CVSS 5.1 | dataeaseDataEase is an open source data visualization and analysis tool. Prior to 2.10.26, authenticated users with folder creation permission can store… | |
| CVE-2026-102354 | 14 Oct 2026 | CVSS 6.8 | alam00000 bentopdfBentoPDF is a privacy-focused PDF toolkit that runs in the browser. In versions through 2.8.6, cloudflare/cors-proxy-worker.js performs a… | |
| CVE-2026-100406 | 14 Oct 2026 | CVSS 8.2 | dbt-labs dbt-coredbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From… | |
| CVE-2026-92157 | 14 Oct 2026 | CVSS 6.5 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0… | |
| CVE-2026-92158 | 14 Oct 2026 | CVSS 7.2 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0… | |
| CVE-2026-92159 | 14 Oct 2026 | CVSS 6.5 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0… | |
| CVE-2026-92160 | 14 Oct 2026 | CVSS 6.5 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0… | |
| CVE-2026-92150 | 14 Oct 2026 | CVSS 7.5 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0… | |
| CVE-2026-92152 | 14 Oct 2026 | CVSS 9.3 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. From 4.1.0 until 4.2.0… | |
| CVE-2026-92154 | 14 Oct 2026 | CVSS 8.1 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0… | |
| CVE-2026-92155 | 14 Oct 2026 | CVSS 7.5 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0… | |
| CVE-2026-92156 | 14 Oct 2026 | CVSS 6.5 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0… | |
| CVE-2026-88164 | 14 Oct 2026 | CVSS 8.8 | Microsoft SharePoint Server Subscription EditionMissing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. | Fix |
| CVE-2026-86847 | 14 Oct 2026 | CVSS 6.5 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor… | |
| CVE-2026-86848 | 14 Oct 2026 | CVSS 8.8 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost vhost-crypto. The indirect-descriptor snapshot double-fetches a guest descriptor next index, allowing a malicious… | |
| CVE-2026-86849 | 14 Oct 2026 | CVSS 6.5 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost vhost-crypto. Integer overflow in chain length checks, and missing length checks on the RSA path, can overflow a… | |
| CVE-2026-86856 | 14 Oct 2026 | CVSS 6.5 | Red Hat Fast Datapath for RHEL 10A flaw was found in the DPDK nfp vDPA driver. Stack and heap buffers sized for a single queue pair can be overflowed when more virtqueues are… | |
| CVE-2026-86566 | 14 Oct 2026 | CVSS 6.5 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost. A guest with runt RX descriptors can underflow the copy length in vhost enqueue, causing a denial of service in a… | |
| CVE-2026-86567 | 14 Oct 2026 | CVSS 8.8 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost. The VDUSE handler fails to invalidate vring pointers when the IOTLB is invalidated, leading to use-after-unmap. | |
| CVE-2026-86845 | 14 Oct 2026 | CVSS 6.5 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost vhost-crypto. Session cleanup can leave a stale cached session pointer, and the data path does not check the… | |
| CVE-2026-86846 | 14 Oct 2026 | CVSS 6.5 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost vhost-crypto. A guest can supply an avail-ring descriptor index that is used without bounds checking, causing an… | |
| CVE-2026-86461 | 14 Oct 2026 | CVSS 8.8 | foliovision FV Flowplayer Video PlayerThe FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212… | |
| CVE-2026-79957 | 14 Oct 2026 | CVSS 8.1 | ServiceNext SerTecServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID… | |
| CVE-2026-76083 | 14 Oct 2026 | CVSS 4.9 | getredash redashRedash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/query_runner/json_ds.py… | |
| CVE-2026-77371 | 14 Oct 2026 | CVSS 9.3 | getredash redashRedash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's _connect() path in… | |
| CVE-2026-55573 | 14 Oct 2026 | CVSS 9.8 | e107inc e107e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps POST parameter and passes it to… | |
| CVE-2026-54554 | 14 Oct 2026 | CVSS 7.5 | fogprojectFOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to 1.5.10.1870, the management adInfo() endpoint in… | |
| CVE-2026-55572 | 14 Oct 2026 | CVSS 10.0 | e107inc e107e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the… | |
| CVE-2026-110777 | 14 Oct 2026 | CVSS 5.7 | GNOME evolution-data-serverA flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local… | |
| CVE-2026-42093 | 14 Oct 2026 | CVSS 8.7 | getredash redashRedash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in… | |
| CVE-2026-109527 | 14 Oct 2026 | CVSS 7.5 | modelcontextprotocol python-sdkThe Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and… | |
| CVE-2026-108480 | 14 Oct 2026 | CVSS 8.2 | SkydropxMissing Authorization vulnerability in Skydropx Skydropx skydropx allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… | |
| CVE-2026-108483 | 14 Oct 2026 | CVSS 7.1 | hippooo Hippoo Mobile App for WooCommerceImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in hippooo Hippoo Mobile App for WooCommerce… | |
| CVE-2026-108484 | 14 Oct 2026 | CVSS 7.1 | WPManageNinja Best Payments Plugin for WPImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPManageNinja Best Payments Plugin for WP… | |
| CVE-2026-108151 | 14 Oct 2026 | CVSS 5.3 | PluginUs.Net MDTFImproper Control of Generation of Code ('Code Injection') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows Code… | |
| CVE-2026-108390 | 14 Oct 2026 | CVSS 9.9 | hestiacpHestia Control Panel is a lightweight and powerful control panel for the modern web. From version 1.9.7 through 1.10.4, update_object_value() in… | |
| CVE-2026-108395 | 14 Oct 2026 | CVSS 7.5 | modelcontextprotocol io.modelcontextprotocol.sdk:mcpThe Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. From version 0.8.0 through 0.12.0 in the… | |
| CVE-2026-106465 | 14 Oct 2026 | CVSS 8.7 | Eclipse Foundation NetX DuoThe NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The… | |
| CVE-2026-107348 | 14 Oct 2026 | CVSS 5.9 | PgBouncerInteger overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of… | |
| CVE-2026-107349 | 14 Oct 2026 | CVSS 7.5 | PgBouncerAn infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denial of service. A StartupMessage whose… | |
| CVE-2026-107350 | 14 Oct 2026 | CVSS 8.8 | PgBouncerImproper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as… | |
| CVE-2026-106464 | 14 Oct 2026 | CVSS 8.7 | Eclipse Foundation NetX Duo`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is… | |
| CVE-2026-105066 | 14 Oct 2026 | CVSS 7.1 | SimplyRETS Real Estate IDXImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SimplyRETS SimplyRETS Real Estate IDX… | |
| CVE-2026-103975 | 14 Oct 2026 | CVSS 6.5 | Appium: Symlink based Zip Slip in @appium/support ZIP extractionAppium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support… | Fix |
| CVE-2026-104103 | 14 Oct 2026 | CVSS 8.1 | ludwig-ai ludwigLudwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8… | |
| CVE-2026-103081 | 14 Oct 2026 | CVSS 7.5 | VillaTheme SalevoImproper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects… | |
| CVE-2026-103414 | 14 Oct 2026 | CVSS 8.4 | Eclipse Foundation GUIXThe GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent… | |
| CVE-2026-103415 | 14 Oct 2026 | CVSS 9.3 | Eclipse Foundation NetX DuoWhen a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits… | |
| CVE-2026-102476 | 14 Oct 2026 | CVSS 9.1 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose… | |
| CVE-2026-101982 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSA Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a… | |
| CVE-2026-101983 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSA Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network… | |
| CVE-2026-102077 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series… | |
| CVE-2026-101964 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent… | |
| CVE-2026-101972 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSAn Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… | |
| CVE-2026-101975 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF… | |
| CVE-2026-101976 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which… | |
| CVE-2026-101979 | 14 Oct 2026 | CVSS 8.8 | Juniper Networks Junos OSA Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read… | |
| CVE-2026-101981 | 14 Oct 2026 | CVSS 8.8 | Juniper Networks Junos OSA Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… | |
| CVE-2026-101952 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Improper Validation of Consistency within Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS… | |
| CVE-2026-101954 | 14 Oct 2026 | CVSS 9.8 | Juniper Networks Junos OSAn Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS… | |
| CVE-2026-101959 | 14 Oct 2026 | CVSS 6.5 | Juniper Networks Junos OSA Function Call With Incorrect Variable or Reference as Argument vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and… | |
| CVE-2026-101961 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a… | |
| CVE-2026-101962 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS… | |
| CVE-2026-101963 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSAn Incorrect Calculation vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos EVO allows a remote BGP EVPN… | |
| CVE-2026-100413 | 14 Oct 2026 | CVSS 7.0 | seaweedfsSeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private… | |
| CVE-2026-101949 | 14 Oct 2026 | CVSS 7.5 | Juniper Networks Junos OSA NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an… | |
| CVE-2026-0322 | 14 Oct 2026 | CVSS 7.2 | Code injection in PAN-OS management interface gives root on firewallsA remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with… | Exploited |
| CVE-2026-96596 | 14 Oct 2026 | CVSS 5.9 | erlang rebar3Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), hexpm hex_core (hex_erl_tar module)… | |
| CVE-2026-92153 | 14 Oct 2026 | CVSS 7.1 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0… | |
| CVE-2026-93635 | 14 Oct 2026 | CVSS 5.3 | Zimbra Collaboration SuiteLDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to alter external LDAP search filters. On… | |
| CVE-2026-93637 | 14 Oct 2026 | CVSS 3.7 | Zimbra Collaboration SuiteAn authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password… | |
| CVE-2026-94200 | 14 Oct 2026 | CVSS 8.2 | Erlang OTPImproper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store… | |
| CVE-2026-92151 | 14 Oct 2026 | CVSS 7.5 | nasa fprimeF´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0… | |
| CVE-2026-86562 | 14 Oct 2026 | CVSS 7.8 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost. A TOCTOU double-fetch of control-queue descriptors allows a heap buffer overflow with attacker-controlled content… | |
| CVE-2026-86563 | 14 Oct 2026 | CVSS 7.8 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost. A double-offset bug in vhost log mapping calculation can lead to incorrect memory access. | |
| CVE-2026-86565 | 14 Oct 2026 | CVSS 8.2 | Red Hat Fast Datapath for RHEL 10A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in… | |
| CVE-2026-77524 | 14 Oct 2026 | CVSS 9.9 | KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthenticationKEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create… | Fix |
| CVE-2026-77564 | 14 Oct 2026 | CVSS 3.3 | Talos Linux: Support bundle does not redact registry credentialsTalos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from… | Fix |
| CVE-2026-75083 | 14 Oct 2026 | CVSS 5.9 | zephyrproject zephyrThe receive path of the NXP KW41Z IEEE 802.15.4 driver, kw41z_rx() in drivers/ieee802154/ieee802154_kw41z.c, computed the payload size as pkt_len =… | |
| CVE-2026-75084 | 14 Oct 2026 | CVSS 6.8 | zephyrproject zephyrThe CC1200 sub-GHz IEEE 802.15.4 driver takes the PHY packet length from the first byte of the radio's RX FIFO in get_packet_length() and validates… | |
| CVE-2026-75085 | 14 Oct 2026 | CVSS 4.2 | zephyrproject zephyrThe STM32WBA IEEE 802.15.4 driver in drivers/ieee802154/ieee802154_stm32wba.c computed the packet length of a received frame as pkt_len =… | |
| CVE-2026-76519 | 14 Oct 2026 | CVSS 9.8 | Crafted email attachment gives root on Cisco Secure Email GatewayA vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to… | ExploitedFix |
Page 53 of 168