Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,206 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-103411 | 7.1 High | Session Smart Router: A malicious DHCP server causes information disclosure and a service crash during DHCP option parsing | Oct 28, 2026 |
| CVE-2026-110952 | Not scored | Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default | Oct 28, 2026 |
| CVE-2026-83525 | Not scored | Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request. | Oct 28, 2026 |
| CVE-2026-103410 | 7.5 High | Session Smart Router: Integer overflow causes denial of service during TLS certificate inspection | Oct 28, 2026 |
| CVE-2026-103409 | 9.8 Critical | Session Smart Router: An attacker obtains administrative privileges when an unauthenticated internal endpoint is accessed | Oct 28, 2026 |
| CVE-2026-103408 | 8.8 High | Session Smart Router: An attacker-controlled input causes remote code execution when parsing DHCP options | Oct 28, 2026 |
| CVE-2026-103407 | 8.8 High | Session Smart Router and Session Smart Conductor: Unsanitized input allows arbitrary file read, overwrite, or deletion via the PKI management | Oct 28, 2026 |
| CVE-2026-103406 | 9.8 Critical | Session Smart Conductor: An unauthenticated attacker causes arbitrary command execution during key management. | Oct 28, 2026 |
| CVE-2026-103405 | 5.8 Medium | Session Smart Router and Session Smart Conductor: Unsanitized input causes HTTP response splitting | Oct 28, 2026 |
| CVE-2026-103404 | 6.8 Medium | Session Smart Conductor: Insecure file permissions cause unauthorized access to sensitive routing credentials | Oct 28, 2026 |
| CVE-2026-103403 | 8.8 High | Session Smart Router and Session Smart Conductor: Unvalidated input causes arbitrary file deletion and command execution when deleting audit rules | Oct 28, 2026 |
| CVE-2026-103402 | 8.8 High | Session Smart Router and Session Smart Conductor: Lack of integrity verification in cache files causes arbitrary code execution and privilege escalation | Oct 28, 2026 |
| CVE-2026-103401 | 8.8 High | Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root | Oct 28, 2026 |
| CVE-2026-103400 | 5.5 Medium | Session Smart Router and Session Smart Conductor: Crafted directory names cause arbitrary filesystem unmounting during service cleanup | Oct 28, 2026 |
| CVE-2026-103394 | 3.7 Low | Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates. | Oct 28, 2026 |
| CVE-2026-103393 | 4.3 Medium | Session Smart Router: An attacker can cause an out-of-bounds read during VRRP packet processing | Oct 28, 2026 |
| CVE-2026-103392 | 4.8 Medium | Session Smart Router: A SACK option causes out-of-bounds memory access and TCP payload corruption when TCP sequence stitching is enabled | Oct 28, 2026 |
| CVE-2026-93536 | 5.3 Medium | X.Org Server GestureBuildSprite Use-After-Free | Oct 28, 2026 |
| CVE-2026-103391 | 5.3 Medium | Session Smart Router: An attacker-controlled TCP option causes an out-of-bounds write when using the TCP proxy feature | Oct 28, 2026 |
| CVE-2026-103390 | 5.3 Medium | Session Smart Router and Session Smart Conductor: A malformed HTTP URI causes a service crash during HTTP application identification | Oct 28, 2026 |
| CVE-2026-93524 | 6.9 Medium | X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read | Oct 28, 2026 |
| CVE-2026-93523 | 7.8 High | X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write | Oct 28, 2026 |
| CVE-2026-118510 | 7.7 High | Laravel MongoDB `whereDoesntHave` misses deny records for numeric string IDs | Oct 28, 2026 |
| CVE-2026-93522 | 7.8 High | X.Org Server Glamor CopyArea Heap Buffer Overflow | Oct 28, 2026 |
| CVE-2026-116778 | 8.8 High | FOG: Authenticated low-privileged API user can modify Storage Nodes and reach root command execution | Oct 28, 2026 |
| CVE-2026-116776 | 7.0 High | USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS | Oct 28, 2026 |
| CVE-2026-56828 | 8.8 High | Shopper: read-only team permissions allow administrator creation and permission escalation | Oct 28, 2026 |
| CVE-2026-47235 | 7.5 High | SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array | Oct 28, 2026 |
| CVE-2026-93521 | 7.8 High | X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow | Oct 28, 2026 |
| CVE-2026-59979 | 8.3 High | YosemiteCrew: Missing organization authorization on service and PMS library/template routes | Oct 28, 2026 |
| CVE-2026-44179 | 9.9 Critical | XWiki Pro Macros: excerpt-include title and content injection executes code | Oct 28, 2026 |
| CVE-2026-50542 | 5.4 Medium | Xibo: IDOR (Broken Object-Level Authorization) on GET /layout/status/{id} Allows Arbitrary Layout Metadata Disclosure | Oct 28, 2026 |
| CVE-2026-118029 | 5.9 Medium | Unverified ownership of the default Athena query result location in AWS SDK for pandas | Oct 28, 2026 |
| CVE-2026-50543 | 4.3 Medium | Xibo: Missing Authorization on POST /displaygroup/criteria/{displayGroupId} Allows Arbitrary Scheduling Criteria Injection to Player Devices | Oct 28, 2026 |
| CVE-2026-112357 | 8.5 High | GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation | Oct 28, 2026 |
| CVE-2026-50539 | 6.5 Medium | Xibo: Missing Object-Level Authorization on /notification/export/{id} Allows Authenticated Users to Download Arbitrary Attachments | Oct 28, 2026 |
| CVE-2026-112356 | 5.1 Medium | GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter | Oct 28, 2026 |
| CVE-2026-67187 | 5.1 Medium | Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields | Oct 28, 2026 |
| CVE-2026-115402 | 5.7 Medium | OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash) via a race condition in the TCP connect path. | Oct 28, 2026 |
| CVE-2026-93520 | 7.8 High | X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write | Oct 28, 2026 |
| CVE-2026-93519 | 7.8 High | X.Org Server XFixes Pointer Barrier Event List Buffer Overflow | Oct 28, 2026 |
| CVE-2026-93518 | 7.8 High | X.Org Server XKB ResizeKeyType Numeric Truncation | Oct 28, 2026 |
| CVE-2026-115603 | 8.5 High | WordPress Advanced Ads – Tracking plugin < 4.0.0 - SQL Injection vulnerability | Oct 28, 2026 |
| CVE-2026-115968 | 9.8 Critical | WordPress Ultimate Member plugin <= 2.13.1 - PHP Object Injection vulnerability | Oct 28, 2026 |
| CVE-2026-116390 | 7.2 High | WordPress Filter Everything — WordPress & WooCommerce Filters plugin <= 1.9.7 - PHP Object Injection vulnerability | Oct 28, 2026 |
| CVE-2026-116389 | 8.8 High | WordPress Phoenix Media Rename plugin <= 3.13.5 - PHP Object Injection vulnerability | Oct 28, 2026 |
| CVE-2026-115590 | 7.2 High | WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability | Oct 28, 2026 |
| CVE-2026-116078 | 8.7 High | HTTP/2 request bodies made of 1-byte DATA frames amplify memory use in Bandit | Oct 28, 2026 |
| CVE-2026-50541 | 6.5 Medium | Xibo: IDOR (Broken Object-Level Authorization) on GET /dataset/export/csv/{id} Allows Arbitrary Dataset Export | Oct 28, 2026 |
| CVE-2026-52729 | 7.1 High | Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion | Oct 28, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.