[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-53711 | 13 Oct 2026 | CVSS 5.1 | IBM mcp-context-forgeMCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt… | |
| CVE-2026-18228 | 13 Oct 2026 | CVSS 7.1 | Commvault CloudHyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update… | |
| CVE-2026-4869 | 13 Oct 2026 | CVSS 5.4 | Flexera InstallShieldA potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running compressed Basic MSI setup with… | |
| CVE-2026-53418 | 13 Oct 2026 | CVSS 8.1 | Zoom Communications Zoom WorkplaceImproper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an unauthenticated user to… | |
| CVE-2026-53420 | 13 Oct 2026 | CVSS 8.0 | Zoom Communications Zoom WorkplaceBuffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network… | |
| CVE-2026-53709 | 13 Oct 2026 | CVSS 9.8 | IBM mcp-context-forgeMCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a known JWT_SECRET_KEY… | |
| CVE-2026-11730 | 13 Oct 2026 | CVSS 5.4 | NETGEAR EX3700Insufficient session randomness vulnerability in the listed NETGEAR Extender models allows a network-adjacent attacker having network access (such as… | |
| CVE-2026-11731 | 13 Oct 2026 | CVSS 8.8 | NETGEAR RAX30An authentication bypass vulnerability in the listed NETGEAR RAX series models allows an unauthenticated attacker with adjacent access to the… | |
| CVE-2026-11732 | 13 Oct 2026 | CVSS 8.8 | NETGEAR CAX30An insufficient input validation vulnerability in the website blocking feature (Block Sites) of the listed NETGEAR router models allows a… | |
| CVE-2026-12655 | 13 Oct 2026 | CVSS 8.8 | Rockwell Automation 1732E ArmorBlock® I/OA security issue exists within 1732E ArmorBlock® I/O, where an unauthenticated attacker can change the device's webserver password without valid… | |
| CVE-2026-12656 | 13 Oct 2026 | CVSS 8.7 | Rockwell Automation 1732E ArmorBlock® I/OA denial-of-service security issue exists in the affected product and version. The security issue stems from improper handling of network storm… | |
| CVE-2026-109521 | 13 Oct 2026 | CVSS 7.3 | girishsaraf Online-Appointment-Booking-SystemA vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown… | |
| CVE-2026-109522 | 13 Oct 2026 | CVSS 7.3 | girishsaraf Online-Appointment-Booking-SystemA vulnerability has been found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected is an… | |
| CVE-2026-109523 | 13 Oct 2026 | CVSS 7.3 | girishsaraf Online-Appointment-Booking-SystemA vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this… | |
| CVE-2026-108184 | 13 Oct 2026 | CVSS 7.4 | Zoom Communications Zoom ClientsImproper certificate validation in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an information disclosure via… | |
| CVE-2026-108185 | 13 Oct 2026 | CVSS 7.4 | Zoom Communications Zoom ClientsImproper certificate validation in the My Notes feature of certain Zoom Clients may allow an unauthenticated user to conduct an information… | |
| CVE-2026-104192 | 13 Oct 2026 | CVSS 9.6 | dragonflydb dragonflyDragonfly is an in-memory data store built for modern application workloads. Prior to 1.40, OpaqueObjLoader::CreateStream in src/server/rdb_load.cc… | |
| CVE-2026-106108 | 13 Oct 2026 | CVSS 5.7 | Quasar Framework: App Vite SSG page output paths can escape the configured distribution directoryQuasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions… | Fix |
| CVE-2026-107460 | 13 Oct 2026 | CVSS 9.1 | Apache Software Foundation Apache Fesod (Incubating)Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be… | |
| CVE-2026-107917 | 13 Oct 2026 | CVSS 4.5 | NETGEAR R7300DSTInsufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the… | |
| CVE-2026-107918 | 13 Oct 2026 | CVSS 4.5 | NETGEAR R7300DSTInsufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the… | |
| CVE-2026-102342 | 13 Oct 2026 | CVSS 5.4 | Ammonia: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.3, 4.0.3, and 4.1.4, applications that allow the SVG animate or set… | Fix |
| CVE-2026-102603 | 13 Oct 2026 | CVSS 5.3 | Gotify: Insufficiently Protected Password Change endpointGotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint (POST… | Fix |
| CVE-2026-103028 | 13 Oct 2026 | CVSS 4.3 | SFTPGo source-side file-pattern filter bypass during copy operationsSFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source… | Fix |
| CVE-2026-102250 | 13 Oct 2026 | CVSS 8.6 | Schneider Electric Sage RTU 1410CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized… | |
| CVE-2024-34319 | 13 Oct 2026 | CVSS 6.5 | VulnerabilityA Server-Side Request Forgery (SSRF) in the serviceURL parameter of ProPhoenix Law RMS v2022.2403.3.101 allows attackers to force the application… | |
| CVE-2026-93907 | 13 Oct 2026 | CVSS 8.1 | IBM WebSphere Application ServerIBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound… | |
| CVE-2026-95680 | 13 Oct 2026 | CVSS 8.0 | IBM WebSphere Application ServerIBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation… | |
| CVE-2026-93346 | 13 Oct 2026 | CVSS 5.3 | wazuh-managerWazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers to bypass max_login_attempts… | |
| CVE-2026-93347 | 13 Oct 2026 | CVSS 4.9 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read… | |
| CVE-2026-77361 | 13 Oct 2026 | CVSS 4.7 | The-40-Thieves obsidian-tcobsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a… | |
| CVE-2026-77362 | 13 Oct 2026 | CVSS 4.3 | The-40-Thieves obsidian-tcobsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, bridge tools do not consistently apply the… | |
| CVE-2026-74043 | 13 Oct 2026 | CVSS 9.0 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows… | |
| CVE-2026-74045 | 13 Oct 2026 | CVSS 7.1 | wazuh-managerWazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from input but written bounded by… | |
| CVE-2026-74047 | 13 Oct 2026 | CVSS 6.5 | wazuh-managerWazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with agent:read to retrieve the… | |
| CVE-2026-74034 | 13 Oct 2026 | CVSS 7.5 | wazuh-managerWazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue upgrade_custom commands with… | |
| CVE-2026-74035 | 13 Oct 2026 | CVSS 7.2 | wazuh-managerWazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user places the reserved user guard and… | |
| CVE-2026-74036 | 13 Oct 2026 | CVSS 7.2 | wazuh-agentWazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by file path rather than… | |
| CVE-2026-74037 | 13 Oct 2026 | CVSS 7.2 | wazuh-managerWazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because check_token never consults the… | |
| CVE-2026-74040 | 13 Oct 2026 | CVSS 9.1 | wazuh-managerWazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in MasterHandler.process_files_from_worker allowing a… | |
| CVE-2026-74041 | 13 Oct 2026 | CVSS 9.1 | wazuh-managerWazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector that bypasses remote-command… | |
| CVE-2026-74030 | 13 Oct 2026 | CVSS 4.9 | wazuh-agentWazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that allows a manager-controlled policy… | |
| CVE-2026-74031 | 13 Oct 2026 | CVSS 6.5 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows malicious… | |
| CVE-2026-74032 | 13 Oct 2026 | CVSS 4.3 | wazuh-managerWazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog… | |
| CVE-2026-74033 | 13 Oct 2026 | CVSS 6.1 | wazuh-managerWazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB list handlers that allows… | |
| CVE-2026-109965 | 13 Oct 2026 | CVSS 7.1 | oraios serenaSerena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing… | |
| CVE-2026-109966 | 13 Oct 2026 | CVSS 5.3 | marcopiovanello yt-dlp-web-uiyt-dlp-web-ui through 4.0.0 contains an argument injection vulnerability that allows unauthenticated remote attackers to inject yt-dlp options by… | |
| CVE-2026-109967 | 13 Oct 2026 | CVSS 7.5 | marcopiovanello yt-dlp-web-uiyt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote… | |
| CVE-2026-109959 | 13 Oct 2026 | CVSS 4.3 | espocrmEspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability that allows authenticated users to read audited field values restricted by… | |
| CVE-2026-109960 | 13 Oct 2026 | CVSS 7.7 | froxlorFroxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by… | |
| CVE-2026-109961 | 13 Oct 2026 | CVSS 8.5 | froxlorFroxlor 0.10.0 before 2.3.14 contains a newline injection vulnerability that allows authenticated customers to inject arbitrary entries into the… | |
| CVE-2026-109962 | 13 Oct 2026 | CVSS 4.3 | froxlorFroxlor 0.10.0 before 2.3.14 contains a missing authorization vulnerability that allows reseller accounts to read full-admin-only MySQL server and… | |
| CVE-2026-109963 | 13 Oct 2026 | CVSS 4.3 | froxlorFroxlor before 2.3.14 contains an insecure direct object reference vulnerability in the email template editor (admin_templates.php) because the mail… | |
| CVE-2026-109964 | 13 Oct 2026 | CVSS 5.6 | ImageMagickImageMagick before 7.1.2-33 and 6.9.13-58 contains a heap buffer underwrite vulnerability in DecodeImage() in coders/pict.c on 32-bit builds due to… | |
| CVE-2026-109953 | 13 Oct 2026 | CVSS 5.3 | FreeRDPFreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress… | |
| CVE-2026-109954 | 13 Oct 2026 | CVSS 6.5 | parse-community parse-serverParse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's… | |
| CVE-2026-109955 | 13 Oct 2026 | CVSS 5.3 | honojs honoHono from 4.12.4 before 4.13.11 contains a middleware bypass vulnerability in serveStatic that allows unauthenticated attackers to skip prefix… | |
| CVE-2026-109956 | 13 Oct 2026 | CVSS 7.0 | nltkNLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying… | |
| CVE-2026-109957 | 13 Oct 2026 | CVSS 4.3 | espocrmEspoCRM before 10.0.7 contains an insecure direct object reference vulnerability that allows authenticated users with Import scope access to read… | |
| CVE-2026-109958 | 13 Oct 2026 | CVSS 4.3 | espocrmEspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read restricted emailAddress values… | |
| CVE-2026-109948 | 13 Oct 2026 | CVSS 4.3 | FreeRDPFreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP… | |
| CVE-2026-109949 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.0.0 before 3.32.0 contains an improper restriction of excessive authentication attempts in its virtual smartcard GIDS implementation, which… | |
| CVE-2026-109950 | 13 Oct 2026 | CVSS 4.3 | FreeRDPFreeRDP from 3.0.0 before 3.32.0 contains a heap out-of-bounds read vulnerability that allows a malicious RD Gateway to crash clients by sending… | |
| CVE-2026-109951 | 13 Oct 2026 | CVSS 5.3 | FreeRDPFreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel… | |
| CVE-2026-109952 | 13 Oct 2026 | CVSS 5.3 | FreeRDPThe FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOL_RDSTLS or PROTOCOL_HYBRID_EX against its enabled protocol set in… | |
| CVE-2026-109941 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows malicious RD Gateways to hang clients by… | |
| CVE-2026-109942 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c because… | |
| CVE-2026-109943 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.29.0 before 3.32.0 contains a double free in the client's async-update message proxy, which shallow-copies the parser-owned PolygonSC or… | |
| CVE-2026-109944 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard-emulation context, so… | |
| CVE-2026-109945 | 13 Oct 2026 | CVSS 5.9 | FreeRDPFreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARD_IOCTL_DISCONNECT and SCARD_IOCTL_TRANSMIT… | |
| CVE-2026-109946 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 conversion, so an odd width reaches an… | |
| CVE-2026-109947 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client… | |
| CVE-2026-109678 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has a reachable assertion: the emulated… | |
| CVE-2026-109679 | 13 Oct 2026 | CVSS 5.3 | FreeRDPFreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body… | |
| CVE-2026-109680 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.18.0 before 3.32.0 has a heap-based out-of-bounds write in freerdp_interruptible_get_line, which shrinks the buffer to 32 bytes while… | |
| CVE-2026-109938 | 13 Oct 2026 | CVSS 6.5 | FreeRDPPositive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the… | |
| CVE-2026-109939 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/orders.c, which accesses… | |
| CVE-2026-109940 | 13 Oct 2026 | CVSS 4.3 | FreeRDPFreeRDP 3.0.0-beta1 before 3.32.0 on Unix builds with PKCS#11 support has a stack-based buffer overflow in wprintKeyName() in WinPR's NCrypt PKCS#11… | |
| CVE-2026-109676 | 13 Oct 2026 | CVSS 8.8 | FreeRDPFreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed… | |
| CVE-2026-109677 | 13 Oct 2026 | CVSS 6.5 | FreeRDPFreeRDP from 2.0.0-beta1 before 3.28.0 contains an out-of-bounds read vulnerability in smartcard_LocateCardsByATRA_Call because the ATR pattern cbAtr… | |
| CVE-2026-109519 | 13 Oct 2026 | CVSS 8.3 | YouTransferA vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component… | |
| CVE-2026-109520 | 13 Oct 2026 | CVSS 8.8 | Colorful iGameCenterA flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library… | |
| CVE-2026-109409 | 13 Oct 2026 | CVSS 5.3 | HBAI-Ltd Toonflow-appA flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child_process.exec of the file… | |
| CVE-2026-109410 | 13 Oct 2026 | CVSS 2.4 | macrozheng mallA vulnerability has been found in macrozheng mall 1.0.3 dcaa93b. The impacted element is the function OmsOrderServiceImpl.updateMoneyInfo of the file… | |
| CVE-2026-107832 | 13 Oct 2026 | CVSS 3.7 | fastify is vulnerable to header validation bypass via case-sensitive propertyNamesfastify is a fast and low overhead web framework for Node.js. In versions 5.12.2 through 5.12.5, the routine that lowercases header names declared in… | Fix |
| CVE-2025-58771 | 13 Oct 2026 | CVSS 7.1 | AMI AptioVAMI APTIOV contains vulnerabilities in BIOS where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this… | |
| CVE-2025-58772 | 13 Oct 2026 | CVSS 8.2 | AMI AptioVAMI APTIOV contains vulnerabilities in BIOS where users may cause “Classic Buffer Overflow” by local access. Successful exploitation of this… | |
| CVE-2025-58773 | 13 Oct 2026 | CVSS 7.1 | AMI AptioVAMI APTIOV contains vulnerabilities in BIOS where users may cause "Out-of-bounds Write” by local access. Successful exploitation of this… | |
| CVE-2025-58774 | 13 Oct 2026 | CVSS 8.3 | AMI AptioVAMI APTIOV contains vulnerabilities in BIOS where users may cause “Buffer Access with Incorrect Length Value” by local access. Successful… | |
| CVE-2026-0893 | 13 Oct 2026 | CVSS 5.8 | AMI AptioVAMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access… | |
| CVE-2026-103499 | 13 Oct 2026 | CVSS 7.5 | IBM WebSphere Application Server - LibertyIBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote… | |
| CVE-2026-65164 | 13 Oct 2026 | CVSS 8.1 | NVIDIA AIStore frameworkNVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an… | |
| CVE-2026-65170 | 13 Oct 2026 | CVSS 8.6 | NVIDIA AIStore frameworkNVIDIA AIStore for Linux contains a vulnerability in the experimental HT backend where an unauthenticated remote attacker may cause server-side… | |
| CVE-2026-65172 | 13 Oct 2026 | CVSS 8.6 | NVIDIA AIStore frameworkNVIDIA AIStore for Linux and Kubernetes contains a missing authorization vulnerability in the ETL management API where an unauthenticated remote… | |
| CVE-2026-65173 | 13 Oct 2026 | CVSS 9.1 | NVIDIA AIStore frameworkNVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker… | |
| CVE-2026-65180 | 13 Oct 2026 | CVSS 7.8 | NVIDIA Megatron-LMNVIDIA Megatron-LM contains a vulnerability in checkpoint loading where an Attacker may cause an RCE by convincing a user to load a maliciously… | |
| CVE-2026-67456 | 13 Oct 2026 | CVSS 4.4 | NVIDIA WarpNVIDIA Warp contains a vulnerability where an attacker could cause a heap-based buffer overflow. A successful exploit of this vulnerability might… | |
| CVE-2026-65141 | 13 Oct 2026 | CVSS 7.8 | NVIDIA Isaac LabNVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to… | |
| CVE-2026-65147 | 13 Oct 2026 | CVSS 7.3 | NVIDIA DALINVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds read. A successful exploit of this vulnerability… | |
| CVE-2026-65148 | 13 Oct 2026 | CVSS 7.3 | NVIDIA DALINVIDIA DALI contains a vulnerability where an attacker could cause a stack-based buffer overflow. A successful exploit of this vulnerability might… |
Page 79 of 168