Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
401,078 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-65356 | 5.5 Medium | An access issue was addressed with improved access controls. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to access sensitive user data. | Oct 20, 2026 |
| CVE-2026-28854 | 7.5 High | The issue was addressed with additional app bundle integrity checks. This issue is fixed in macOS Golden Gate 27. A maliciously modified app may not be prevented from launching. | Oct 20, 2026 |
| CVE-2026-28853 | 7.8 High | The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to elevate privileges. | Oct 20, 2026 |
| CVE-2026-28850 | 5.5 Medium | An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.8, visionOS 27. An app may be able to access sensitive user data. | Oct 20, 2026 |
| CVE-2026-105298 | 6.3 Medium | Pingora HTTP/2 :authority and Host header mismatch enables cache poisoning and host-based access control bypass | Oct 20, 2026 |
| CVE-2026-77938 | 7.1 High | Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance | Oct 20, 2026 |
| CVE-2026-77937 | 8.6 High | Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header | Oct 20, 2026 |
| CVE-2026-77936 | 9.3 Critical | Letta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access | Oct 20, 2026 |
| CVE-2026-77935 | 8.7 High | Coze Studio through 0.5.1 Cross-Space Workflow IDOR via Workflow API Handlers | Oct 20, 2026 |
| CVE-2026-77934 | 8.7 High | Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner | Oct 20, 2026 |
| CVE-2026-77933 | 9.3 Critical | DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment | Oct 20, 2026 |
| CVE-2026-77932 | 9.3 Critical | DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent | Oct 20, 2026 |
| CVE-2026-77930 | 9.3 Critical | EvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents | Oct 20, 2026 |
| CVE-2026-77926 | 8.7 High | Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool | Oct 20, 2026 |
| CVE-2026-75128 | 9.3 Critical | Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint | Oct 20, 2026 |
| CVE-2026-109444 | 9.3 Critical | OpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection | Oct 20, 2026 |
| CVE-2026-109443 | 8.7 High | JoySafeter through 1.0.0 Authenticated RCE via Copilot Standard Mode Shell | Oct 20, 2026 |
| CVE-2026-109442 | 9.3 Critical | piflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell | Oct 20, 2026 |
| CVE-2026-109441 | 6.9 Medium | LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge | Oct 20, 2026 |
| CVE-2026-109440 | 8.7 High | LangAlpha through 2026.09.07 Indirect Prompt Injection RCE via Bash and ExecuteCode | Oct 20, 2026 |
| CVE-2026-109395 | 8.8 High | Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder | Oct 20, 2026 |
| CVE-2026-105297 | 7.5 High | Pingora HTTP/2 server memory exhaustion through unbounded default header-list and concurrent-stream limits | Oct 20, 2026 |
| CVE-2026-95168 | 7.8 High | An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and Rule.from_path in thefuck/types.py | Oct 20, 2026 |
| CVE-2025-60496 | 5.5 Medium | A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. | Oct 20, 2026 |
| CVE-2025-60494 | 5.5 Medium | A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file. | Oct 20, 2026 |
| CVE-2025-60475 | 5.5 Medium | A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. | Oct 20, 2026 |
| CVE-2026-105453 | 8.4 High | IBM Sterling Connect:Direct for Unix Improper Privilege Management | Oct 19, 2026 |
| CVE-2026-107366 | 8.3 High | Langflow OSS Authorization Bypass Through User-Controlled Key | Oct 19, 2026 |
| CVE-2026-107400 | 8.8 High | Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication | Oct 19, 2026 |
| CVE-2026-109126 | 8.8 High | IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials | Oct 19, 2026 |
| CVE-2026-8355 | 5.4 Medium | IBM ContextForge MCP Gateway is affected by server-side request forgery | Oct 19, 2026 |
| CVE-2026-112373 | 7.1 High | H3C Magic NX15 usrlist sub_416874 stack-based overflow | Oct 19, 2026 |
| CVE-2025-36061 | 6.5 Medium | TS4500 Tape Library Denial of Service | Oct 19, 2026 |
| CVE-2025-36069 | 5.5 Medium | TS4500 Tape Library Insufficient Session Expiration | Oct 19, 2026 |
| CVE-2025-36252 | 6.3 Medium | TS4500 Tape Library Insufficient Session Expiration | Oct 19, 2026 |
| CVE-2026-19178 | 6.8 Medium | TS4500 Tape Library Race Condition | Oct 19, 2026 |
| CVE-2026-77684 | 5.7 Medium | Bluetooth Classic HFP Hands-Free: TX buffer leak on RFCOMM disconnect leads to permanent Bluetooth denial of service | Oct 19, 2026 |
| CVE-2026-19595 | 6.1 Medium | Zephyr RTIO syscall verifier validates output parameters for read instead of write access | Oct 19, 2026 |
| CVE-2026-112372 | 5.1 Medium | H3C Magic NX15 upload importprofile path traversal | Oct 19, 2026 |
| CVE-2026-112371 | 9.4 Critical | H3C Magic NX15 RPC esps write code injection | Oct 19, 2026 |
| CVE-2026-112991 | 6.3 Medium | MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url() | Oct 19, 2026 |
| CVE-2026-112370 | 9.4 Critical | H3C Magic NX15 usrlist sub_416874 os command injection | Oct 19, 2026 |
| CVE-2026-112901 | 6.9 Medium | Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes | Oct 19, 2026 |
| CVE-2026-112900 | 9.2 Critical | Pillow: Argument Injection in Ghostscript call, potentially leading into RCE | Oct 19, 2026 |
| CVE-2026-112898 | 6.9 Medium | Pillow: Image.quantize() with empty palette leaks uninitialized stack memory | Oct 19, 2026 |
| CVE-2026-112897 | 8.7 High | Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips | Oct 19, 2026 |
| CVE-2026-112896 | 8.8 High | Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read | Oct 19, 2026 |
| CVE-2026-112895 | 8.7 High | Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310) | Oct 19, 2026 |
| CVE-2026-112894 | 8.7 High | Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id) | Oct 19, 2026 |
| CVE-2026-112893 | 8.2 High | Pillow: Invalid free in FreeType glyph rendering when a stroker is active | Oct 19, 2026 |
Every record here comes from the CVE Program's CVE List. © 1999-2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.