Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,369 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-108316 | 4.3 Medium | Tanium addressed an information disclosure vulnerability in Tanium Server. | Oct 27, 2026 |
| CVE-2026-116656 | 7.5 High | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | Oct 27, 2026 |
| CVE-2026-108325 | 6.6 Medium | Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation. | Oct 27, 2026 |
| CVE-2026-116659 | 4.3 Medium | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. | Oct 27, 2026 |
| CVE-2026-108302 | 4.3 Medium | Tanium addressed an improper access controls vulnerability in Comply. | Oct 27, 2026 |
| CVE-2026-108306 | 7.8 High | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | Oct 27, 2026 |
| CVE-2026-108329 | 8.8 High | Tanium addressed an unauthorized code execution vulnerability in Threat Response. | Oct 27, 2026 |
| CVE-2026-108332 | 6.3 Medium | Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. | Oct 27, 2026 |
| CVE-2026-108301 | 6.0 Medium | Tanium addressed an improper access controls vulnerability in Comply. | Oct 27, 2026 |
| CVE-2026-108304 | 7.8 High | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | Oct 27, 2026 |
| CVE-2026-87086 | 7.5 High | Tanium addressed a denial of service vulnerability in Provision. | Oct 27, 2026 |
| CVE-2026-108309 | 5.5 Medium | Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension. | Oct 27, 2026 |
| CVE-2026-116658 | 6.5 Medium | Tanium addressed a denial of service vulnerability in Enforce. | Oct 27, 2026 |
| CVE-2026-108313 | 6.6 Medium | Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server. | Oct 27, 2026 |
| CVE-2026-116649 | 7.1 High | Tanium addressed an improper output sanitization vulnerability in Enforce. | Oct 27, 2026 |
| CVE-2026-116647 | 7.1 High | Tanium addressed an improper output sanitization vulnerability in Comply. | Oct 27, 2026 |
| CVE-2026-116660 | 4.3 Medium | Tanium addressed an improper access controls vulnerability in Enforce. | Oct 27, 2026 |
| CVE-2026-108326 | 6.5 Medium | Tanium addressed an improper certificate validation vulnerability in Stream Client Extension. | Oct 27, 2026 |
| CVE-2026-108330 | 3.6 Low | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. | Oct 27, 2026 |
| CVE-2026-116657 | 5.3 Medium | Tanium addressed a denial of service vulnerability in Enforce. | Oct 27, 2026 |
| CVE-2026-108333 | 2.5 Low | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. | Oct 27, 2026 |
| CVE-2026-108307 | 7.8 High | Tanium addressed a heap-based buffer overflow vulnerability in Index. | Oct 27, 2026 |
| CVE-2026-116679 | 5.4 Medium | Neko: Authorization bypass in legacy WebRTC input handling | Oct 27, 2026 |
| CVE-2026-108310 | 5.3 Medium | Tanium addressed a denial of service vulnerability in Tanium Server. | Oct 27, 2026 |
| CVE-2026-116662 | 7.5 High | Tanium addressed a compression bomb vulnerability in Enforce. | Oct 27, 2026 |
| CVE-2026-108305 | 7.8 High | Tanium addressed a local privilege escalation vulnerability in End-User Notifications. | Oct 27, 2026 |
| CVE-2026-108331 | 3.3 Low | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. | Oct 27, 2026 |
| CVE-2026-87085 | 6.5 Medium | Tanium addressed a SQL injection vulnerability in Provision. | Oct 27, 2026 |
| CVE-2026-108308 | 6.5 Medium | Tanium addressed a SQL injection vulnerability in Patch. | Oct 27, 2026 |
| CVE-2026-117516 | 6.9 Medium | oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection | Oct 27, 2026 |
| CVE-2026-108328 | 4.2 Medium | Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response. | Oct 27, 2026 |
| CVE-2026-116678 | 5.8 Medium | Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs | Oct 27, 2026 |
| CVE-2026-118131 | Not scored | CVE-2026-118131 | Oct 27, 2026 |
| CVE-2026-116677 | 5.3 Medium | OpenWISP Controller CA CRL REST API does not scope requests to managed organizations | Oct 27, 2026 |
| CVE-2026-16491 | 6.5 Medium | CVE-2026-16491 CVE Record | Oct 27, 2026 |
| CVE-2026-117515 | 6.9 Medium | oretnom23 php-travel-agency-system traceapplication.php sql injection | Oct 27, 2026 |
| CVE-2026-116676 | 8.8 High | Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan | Oct 27, 2026 |
| CVE-2026-104353 | 9.9 Critical | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) | Oct 27, 2026 |
| CVE-2026-105780 | 9.9 Critical | Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) | Oct 27, 2026 |
| CVE-2026-105489 | 9.9 Critical | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | Oct 27, 2026 |
| CVE-2026-104350 | 9.3 Critical | Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79) | Oct 27, 2026 |
| CVE-2026-105781 | 10.0 Critical | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | Oct 27, 2026 |
| CVE-2026-104351 | 9.9 Critical | Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) | Oct 27, 2026 |
| CVE-2026-104354 | 9.1 Critical | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | Oct 27, 2026 |
| CVE-2026-105779 | 9.1 Critical | Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) | Oct 27, 2026 |
| CVE-2026-117514 | 6.9 Medium | oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection | Oct 27, 2026 |
| CVE-2026-57189 | 2.3 Low | Asterisk: Possible RED T.140 Generation Accumulation OOB Write | Oct 27, 2026 |
| CVE-2026-57201 | 7.5 High | Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer | Oct 27, 2026 |
| CVE-2026-114598 | 8.7 High | Access of resource using incompatible type ('type confusion') in EPICS Base | Oct 27, 2026 |
| CVE-2026-108015 | 9.1 Critical | eMudhra Compromised Certificate vulnerability impacts HCL Notes Client | Oct 27, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.