Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,369 vulnerabilities match.

CVESeveritySummary
CVE-2026-938627.2 HighFireware OS Out-of-Bounds Read in FireCluster Sync Allows Denial of Service
CVE-2026-1127099.2 CriticalFireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
CVE-2026-904647.2 HighFireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
CVE-2026-1035939.1 CriticalFireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution
CVE-2026-1138816.1 MediumFireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
CVE-2026-934348.7 HighFireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
CVE-2026-904428.6 HighFireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
CVE-2026-1127109.2 CriticalFireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
CVE-2026-823325.6 MediumFireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
CVE-2026-938579.2 CriticalFireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
CVE-2026-938669.2 CriticalFireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
CVE-2026-938647.1 HighFireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
CVE-2026-1035949.5 CriticalFireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
CVE-2026-1043816.0 MediumFireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
CVE-2026-1111078.7 HighFireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
CVE-2026-938659.2 CriticalFireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection
CVE-2026-1098232.3 LowHost filesystem path disclosure via DNS rebinding
CVE-2026-1175105.3 MediumDexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal
CVE-2026-1175095.3 Mediumcrownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal
CVE-2026-1041897.5 High3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share
CVE-2026-1115858.8 HighInteger Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow
CVE-2026-1115847.3 HighLocal Privilege Escalation via Race Condition in TeamViewer Patch Management for Windows
CVE-2026-1115837.3 HighLocal Privilege Escalation during Advanced Asset Management Installation in TeamViewer Client for Windows
CVE-2026-1115827.3 HighLocal Privilege Escalation via DLL Hijacking in TeamViewer Monitoring for Windows
CVE-2026-923777.8 HighLocal Privilege Escalation via DLL Sideloading in TeamViewer Patch Management for Windows
CVE-2026-923767.8 HighLocal Privilege Escalation via IPC Broker Impersonation in TeamViewer Remote Management Monitoring for Windows
CVE-2026-923757.8 HighLocal privilege escalation via improper IPC access control in TeamViewer Remote Management Monitoring
CVE-2026-923747.8 HighPrivilege Escalation via Insecure Package Handling in TeamViewer Full Client and Host for macOS
CVE-2026-923728.8 HighOut-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
CVE-2026-1175075.3 Mediuma2aproject a2a-java TaskManager.saveTaskEvent race condition
CVE-2026-1175065.3 Mediuma2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption
CVE-2026-1176048.7 HighGrav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback
CVE-2026-1175055.3 Mediuma2aproject a2a-java ChildQueue queue.offer resource consumption
CVE-2026-1059875.1 MediumStored XSS in KGS Software tia Viewer
CVE-2026-118027Not scoredFrame poisoning in the Layout component
CVE-2026-118026Not scoredInvalid pointer in the JavaScript: GC component
CVE-2026-118025Not scoredOther issue in the SVG component
CVE-2026-118024Not scoredUse-after-free in the Graphics: Text component
CVE-2026-118023Not scoredSandbox escape due to use-after-free in the Graphics: WebRender component
CVE-2026-118022Not scoredSandbox escape due to use-after-free in the Disability Access APIs component
CVE-2026-118021Not scoredSandbox escape due to use-after-free in the XPCOM component
CVE-2026-118020Not scoredUse-after-free in the Layout component
CVE-2026-118019Not scoredRace condition, use-after-free in the DOM: File component
CVE-2026-118018Not scoredSpoofing issue in the Downloads component in Firefox for Android
CVE-2026-118017Not scoredUse-after-free in the SVG component
CVE-2026-118016Not scoredUse-after-free in the DOM: Core & HTML component
CVE-2026-118015Not scoredUse-after-free in the DOM: Core & HTML component
CVE-2026-118014Not scoredUse-after-free in the JavaScript Engine: JIT component
CVE-2026-118013Not scoredUse-after-free in the Layout: Images, Video, and HTML Frames component
CVE-2026-118012Not scoredUse-after-free in the DOM: Animation component

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.