Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,369 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-85898 | 8.8 High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Oct 27, 2026 |
| CVE-2026-83831 | 8.8 High | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | Oct 27, 2026 |
| CVE-2026-116775 | 2.3 Low | pageant: unbounded frame buffering on peer-controlled 4-byte length prefix (memory-exhaustion DoS) | Oct 27, 2026 |
| CVE-2026-116774 | 4.3 Medium | russh: peer-declared zero maximum packet size permanently stalls channel writes (silent AsyncWrite hang) | Oct 27, 2026 |
| CVE-2026-116773 | 4.3 Medium | russh's SSH client is susceptible to unbounded allocations via EXT_INFO packets | Oct 27, 2026 |
| CVE-2026-116696 | 3.3 Low | russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages | Oct 27, 2026 |
| CVE-2026-116695 | 5.3 Medium | Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass | Oct 27, 2026 |
| CVE-2026-116694 | 6.3 Medium | OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation | Oct 27, 2026 |
| CVE-2026-116693 | 8.7 High | dd-trace: ReDOS in URL query string obfuscation | Oct 27, 2026 |
| CVE-2026-116692 | 9.8 Critical | MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules | Oct 27, 2026 |
| CVE-2026-103995 | 2.0 Low | Lenient parsing of integers for response body and chunk framing | Oct 27, 2026 |
| CVE-2026-116691 | 6.5 Medium | MLflow CrewAI autologging records LLM provider API keys in logged trace spans | Oct 27, 2026 |
| CVE-2026-112352 | 9.1 Critical | Sunhillo SureLine Authentication Bypass via Session Cookie | Oct 27, 2026 |
| CVE-2026-112351 | 8.7 High | Sunhillo SureLine OS Command Injection via networkDiag.cgi | Oct 27, 2026 |
| CVE-2026-112350 | 8.7 High | Sunhillo SureLine Path Traversal via radarUpdater.cgi | Oct 27, 2026 |
| CVE-2026-116690 | 7.5 High | MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source | Oct 27, 2026 |
| CVE-2026-116689 | 5.9 Medium | follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects | Oct 27, 2026 |
| CVE-2026-116688 | 8.1 High | CKEditor: Cross-site scripting (XSS) in the engine package | Oct 27, 2026 |
| CVE-2026-116687 | 3.1 Low | CKEditor: Cross-site scripting (XSS) in the engine package | Oct 27, 2026 |
| CVE-2026-116686 | 6.5 Medium | Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas | Oct 27, 2026 |
| CVE-2026-116685 | 5.9 Medium | Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies | Oct 27, 2026 |
| CVE-2026-112355 | 8.7 High | MembershipWorks WordPress Plugin < 6.17 Information Disclosure via WordPress REST API | Oct 27, 2026 |
| CVE-2026-116684 | 6.8 Medium | Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server | Oct 27, 2026 |
| CVE-2026-116683 | 7.1 High | CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values | Oct 27, 2026 |
| CVE-2026-118180 | Not scored | Matrix homeserver could redirect the chat session to a local file or network share | Oct 27, 2026 |
| CVE-2026-118179 | Not scored | Request forgery via news: links | Oct 27, 2026 |
| CVE-2026-118178 | Not scored | RSS feed could redirect its subscription to a local file or network share | Oct 27, 2026 |
| CVE-2026-118177 | Not scored | Calendar discovery accepted local file and remote network share locations | Oct 27, 2026 |
| CVE-2026-118176 | Not scored | Bypass of remote UNC path restriction in mailbox: URLs | Oct 27, 2026 |
| CVE-2026-118175 | Not scored | Content of other messages could be included when replying to a crafted message | Oct 27, 2026 |
| CVE-2026-118174 | Not scored | Displaying a message could load an attacker-chosen URL through an OpenPGP key attachment | Oct 27, 2026 |
| CVE-2026-118173 | 6.1 Medium | MISP Guard Incomplete Tag Validation Allows Non-Allowed Taxonomy Tags to Bypass Feed Policy Enforcement | Oct 27, 2026 |
| CVE-2026-115413 | 7.3 High | AWS API MCP Server OAuth Token Audience Validation Bypass | Oct 27, 2026 |
| CVE-2026-118171 | Not scored | CVE-2026-118171 | Oct 27, 2026 |
| CVE-2026-118172 | Not scored | CVE-2026-118172 | Oct 27, 2026 |
| CVE-2026-118170 | Not scored | CVE-2026-118170 | Oct 27, 2026 |
| CVE-2026-57202 | 8.1 High | Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes | Oct 27, 2026 |
| CVE-2026-57188 | 7.1 High | Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling | Oct 27, 2026 |
| CVE-2026-116682 | 8.6 High | FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory | Oct 27, 2026 |
| CVE-2026-117526 | 4.8 Medium | reduxjs redux-devtools Remotedev Server evalAction code injection | Oct 27, 2026 |
| CVE-2026-116680 | 6.4 Medium | Homebox generic notifier SSRF via HTTP redirect after URL validation | Oct 27, 2026 |
| CVE-2026-88812 | 7.8 High | X.Org Server XKB SetGeometry TextDoodad Double Free | Oct 27, 2026 |
| CVE-2026-102816 | 5.3 Medium | Unauthenticated Wireless Regulatory Region Configuration in TP-Link RE305 | Oct 27, 2026 |
| CVE-2026-102815 | 6.9 Medium | Command Injection in tmpServer Allows Local Privilege Escalation in TP-Link RE305 | Oct 27, 2026 |
| CVE-2026-102814 | 8.7 High | Improper Authentication in TP-Link TDDP v2 Allows Root Command Execution in TP-Link RE305 | Oct 27, 2026 |
| CVE-2026-102813 | 6.1 Medium | Administrator Password Reset Through the Verification-Code Interface in TP-Link RE305 | Oct 27, 2026 |
| CVE-2026-102812 | 6.9 Medium | Hardcoded AES-128 Key and Fixed IV in Configuration Backup Encryption in TP-Link RE305 and Archer C7 | Oct 27, 2026 |
| CVE-2026-118132 | Not scored | CVE-2026-118132 | Oct 27, 2026 |
| CVE-2026-108311 | 2.7 Low | Tanium addressed an insufficient logging vulnerability in Tanium Server. | Oct 27, 2026 |
| CVE-2026-108303 | 8.8 High | Tanium addressed an unauthorized code execution vulnerability in Certificate Manager. | Oct 27, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.