Riskcovery

Vulnerabilities

Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.

398,743 vulnerabilities match.

CVESeveritySummary
CVE-2026-764947.8 HighCisco Expressway Series Software Hardening Release: October 2026 - Code Injection Vulnerabilities
CVE-2026-764937.5 HighCisco Expressway Series Software Hardening Release: October 2026 - Uncaught Exception Vulnerabilities
CVE-2026-764908.6 HighCisco Expressway Series Software Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities
CVE-2026-764895.8 MediumMultiple Cisco Products Snort 3 Generic File Processing Memory Exhaustion Denial of Service Vulnerability
CVE-2026-764927.5 HighCisco Expressway Series Software Hardening Release: October 2026 - NULL Pointer Vulnerabilities
CVE-2026-764917.5 HighCisco Expressway Series Software Hardening Release: October 2026 - Denial of Service Vulnerabilities
CVE-2026-764817.5 HighCisco Unified Communications Products Hardening Release: October 2026 - Improper Check or Handling of Exceptional Conditions Vulnerabilities
CVE-2026-764875.3 MediumCisco Unified Communications Manager Improper Access Control Vulnerability
CVE-2026-1138005.4 MediumElectron: HID and USB permission checks can be attributed to the wrong origin
CVE-2026-764797.8 HighCisco Unified Communications Products Hardening Release: October 2026 - Path Traversal Vulnerabilities
CVE-2026-764788.8 HighCisco Unified Communications Products Hardening Release: October 2026 - Improper Access Control Vulnerabilities
CVE-2026-764768.8 HighCisco Unified Communications Products Hardening Release: October 2026 - Improper Input Validation Vulnerabilities
CVE-2026-1142586.9 Mediumoretnom23 file-management-system-php File Management files.php sql injection
CVE-2026-764778.8 HighCisco Unified Communications Products Hardening Release: October 2026 - Injection Vulnerabilities
CVE-2026-1137995.3 MediumSlack Morphism verifier errors disclose valid HMACs in the logs
CVE-2026-764759.3 CriticalCisco Unified Communications Products Hardening Release: October 2026 - Cross-site Scripting Vulnerabilities
CVE-2026-764749.8 CriticalCisco Unified Communications Products Hardening Release: October 2026 - Improper Authentication Vulnerabilities
CVE-2026-764455.3 MediumMultiple Cisco Products Snort 3 Denial of Service Vulnerability
CVE-2026-764739.8 CriticalCisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
CVE-2026-764355.3 MediumCisco Expressway Series Information Disclosure Vulnerability
CVE-2026-764669.8 CriticalCisco Expressway Series Remote Code Execution Vulnerability
CVE-2026-764625.5 MediumCisco Secure Client Privilege Escalation Vulnerability
CVE-2026-203567.5 HighMultiple Cisco Products Snort 3 Software Hardening Release: October 2026
CVE-2026-202367.5 HighMultiple Cisco Products Snort 3 Software Hardening Release: October 2026
CVE-2026-202215.8 MediumMultiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities
CVE-2026-202917.8 HighMultiple Cisco Products Snort 3 Software Hardening Release: October 2026
CVE-2026-201975.8 MediumMultiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability
CVE-2026-202185.8 MediumCisco Secure Firewall Threat Defense Snort 3 Visual Basic for Applications Buffer Overflow Denial of Service Vulnerability
CVE-2026-1137985.4 MediumElectron: Pointer lock permission requests can be attributed to the wrong frame
CVE-2026-201795.8 MediumMultiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities
CVE-2026-200439.0 CriticalMultiple Cisco Products Snort 3 Software Hardening Release: October 2026
CVE-2026-200195.8 MediumMultiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities
CVE-2026-200115.8 MediumMultiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
CVE-2026-1137973.1 LowElectron: Extension tabs.query returns tab URLs and titles without the tabs permission
CVE-2026-1137964.2 MediumElectron: SameSite cookie restrictions are not applied to windows opened from links
CVE-2026-1137956.0 Mediumpypdf: Possible large memory usage for streams with multiple filters
CVE-2026-1142576.9 Mediumoretnom23 file-management-system-php File Download download.php readfile sql injection
CVE-2026-1137946.0 Mediumpypdf: Possible infinite loop when hitting EOF in standard xref table
CVE-2026-1137936.0 Mediumpypdf: Possible infinite loop when removing tree items
CVE-2026-1137926.0 Mediumpypdf: Possible infinite loop in PdfWriter.find_outline_item
CVE-2026-1142566.9 Mediumoretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection
CVE-2026-1137916.0 Mediumpypdf: Possible large memory usage when parsing content streams
CVE-2026-1137906.0 Mediumpypdf: Possible large memory usage when parsing arrays and dictionaries
CVE-2026-1144907.8 HighIncorrect Authorization in hMailServer
CVE-2026-1144898.1 HighMissing Authorization in hMailServer
CVE-2026-1137896.0 Mediumpypdf: Possible long runtimes/large memory usage when retrieving form fields
CVE-2026-1137889.4 CriticalLagoon core ssh service vulnerable to remote code execution
CVE-2026-1142556.9 Mediumoretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection
CVE-2026-1137876.1 Mediumodf-kit: HTML injection leading to XSS in odtToHtml() via unescaped style attribute values
CVE-2026-1142546.9 Mediumoretnom23 file-management-system-php admin_class.php login sql injection

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.