Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,618 vulnerabilities match.

CVESeveritySummary
CVE-2026-823903.7 LowCross-session AES key confusion in the Espressif ESP32 hardware crypto driver
CVE-2026-823896.5 MediumBluetooth Classic HFP AG wipes an object still linked in the SDP request list on connect failure, causing a NULL dereference
CVE-2026-823885.3 MediumUse of a released HFP HF object after a failed RFCOMM connect in the Bluetooth Classic host
CVE-2026-197423.7 LowIPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key
CVE-2026-810387.1 HighBluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses
CVE-2026-810394.3 MediumBluetooth Host connection reservation leak when multiple connectable advertising sets share an identity
CVE-2026-1163695.3 MediumSunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection
CVE-2026-1163945.3 MediumWordPress WpEvently plugin <= 5.7.9 - Content Injection vulnerability
CVE-2026-938463.8 LowTeam admin can escalate a team member's permissions via the team member roles endpoint
CVE-2026-1123447.6 HighSyncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape
CVE-2026-1123438.6 HighSyncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
CVE-2026-1156806.5 MediumArm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission
CVE-2026-1156796.5 MediumArm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer
CVE-2026-1163686.9 MediumDeepSeek Harness Browser Auth browser-auth.ts improper authorization
CVE-2026-1156785.3 MediumArm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing
CVE-2026-1123469.3 CriticalOpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE
CVE-2026-1163675.3 MediumDeepSeek Harness sandbox.ts createContext
CVE-2026-1157488.8 HighApache Vysper: Authorization bypass
CVE-2026-1157217.5 HighApache Vysper: Unbounded allocation
CVE-2026-1165446.3 MediumOpen5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output
CVE-2026-1165438.7 HighOpen5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser
CVE-2026-1165426.9 MediumNetty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding
CVE-2026-1165418.2 Highnetty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount
CVE-2026-1165408.2 Highnetty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback
CVE-2026-1165398.2 HighNetty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO
CVE-2026-1165382.3 LowHtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes
CVE-2026-1164897.7 HighTimescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes
CVE-2026-852977.7 HighBucket Squatting in Cloud Run MCP leads to Service Account Takeover
CVE-2026-99099Not scoredx86/CPU/AMD: Fix AMD TLBI Erratum #1718
CVE-2026-99098Not scoreddm-integrity: fix buffer overflow in inline mode with large tag size
CVE-2026-99097Not scoredtee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()
CVE-2026-99096Not scoredio_uring/register: don't exempt disabled rings from task restrictions
CVE-2026-99095Not scoreddrm/vc4: drain the hangcheck timer and works on V3D unbind
CVE-2026-99094Not scoredBluetooth: btintel_pcie: fix TX descriptor bounds check
CVE-2026-99093Not scoredmm: don't schedule deferred kernel page table freeing while booting
CVE-2026-99092Not scoredriscv: patch: fix handling of bpf-jit execmem addresses
CVE-2026-99091Not scoredBluetooth: MGMT: Fix status of pending commands flushed on power off
CVE-2026-99090Not scoreddrm/amdgpu: serialize vblank counter reads against GPU reset
CVE-2026-99089Not scoredASoC: samsung: i2s: enable op_clk in probe to balance runtime PM
CVE-2026-99088Not scorednet: openvswitch: validate transport header presence in set_ipv6_addr
CVE-2026-908857.5 HighApache Camel: Camel-Saxon XML External Entity Processing - XQueryBuilder Parsed a Message Body That Was Already a javax.xml.transform.Source With Saxon's Default Parser Settings, so an External Entity Declared in That Body Was Resolved
CVE-2026-770626.9 MediumClickjacking in boneIO
CVE-2026-943864.8 MediumApache Camel: Camel-OAuth Cross-Scope Token Reuse via an Under-Keyed JVM-Global Client Credentials Token Cache
CVE-2026-770615.3 MediumMissing Authentication for Critical Function in boneIO
CVE-2026-770606.8 MediumIncorrect Permission Assignment for Critical Resource in boneIO
CVE-2026-770598.8 HighTOCTOU Race Condition in boneIO
CVE-2026-770585.1 MediumCross-Site Request Forgery (CSRF) in boneIO
CVE-2026-770572.3 LowImproper Restriction of Excessive Authentication Attempts in boneIO
CVE-2026-770567.1 HighUse of Default Credentials in boneIO
CVE-2026-770559.3 CriticalImproper Privilege Assignment in boneIO

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.