Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77237 | 6.5 (v3.1) 8.2 (v4.0) | Missing type validation in xQueueAddToSet in FreeRTOS-Kernel |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:52:13.360Z | 2026-08-21T20:15:45.332Z |
| cve-2026-71494 | Infracost: Terraform Cloud and registry token disclosu… |
infracost |
infracost |
2026-08-21T17:50:43.655Z | 2026-08-21T19:23:57.520Z | |
| cve-2026-62675 | Omnigent: Uploaded Agent Bundle Allows Authenticated R… |
omnigent-ai |
omnigent |
2026-08-21T17:49:00.242Z | 2026-08-21T18:11:40.698Z | |
| cve-2026-77236 | 7.3 (v3.1) 8.3 (v4.0) | Missing size validation in SecureContext_AllocateConte… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:47:49.957Z | 2026-08-21T20:15:07.195Z |
| cve-2026-62674 | Omnigent: Shared Agent Bundle Overwrite Leads to Authe… |
omnigent-ai |
omnigent |
2026-08-21T17:47:37.976Z | 2026-08-25T17:43:46.509Z | |
| cve-2026-62677 | Omnigent: Unvalidated os_env.cwd in agent bundle yield… |
omnigent-ai |
omnigent |
2026-08-21T17:44:37.312Z | 2026-08-21T21:43:48.824Z | |
| cve-2026-62676 | Omnigent Guardrail policy bypass: shell-command parser… |
omnigent-ai |
omnigent |
2026-08-21T17:42:21.563Z | 2026-08-26T17:32:00.761Z | |
| cve-2026-77235 | 7.3 (v3.1) 8.3 (v4.0) | Missing privilege check in SecureContext_FreeContext i… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:42:12.312Z | 2026-08-27T16:46:35.660Z |
| cve-2026-77234 | 8.8 (v3.1) 9.3 (v4.0) | Improper input validation in FreeRTOS-Kernel timer com… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:40:04.335Z | 2026-08-27T16:46:43.844Z |
| cve-2026-41451 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via User Substitution in… |
tclahr |
uac |
2026-08-21T17:36:02.423Z | 2026-08-26T17:30:58.128Z |
| cve-2026-41450 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via command_collector.sh |
tclahr |
uac |
2026-08-21T17:35:04.844Z | 2026-08-21T17:47:29.453Z |
| cve-2026-41449 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via run_command.sh |
tclahr |
uac |
2026-08-21T17:33:50.841Z | 2026-08-21T18:10:48.585Z |
| cve-2026-17252 | 7.1 (v4.0) | Unauthenticated Denial of Service via Composed HTTP Pa… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:51.552Z | 2026-08-25T22:45:36.155Z |
| cve-2026-17251 | 7.1 (v4.0) | Unauthenticated Denial of Service via Null Pointer Der… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:45.791Z | 2026-08-21T17:40:36.098Z |
| cve-2026-17250 | 8.5 (v4.0) | Authenticated Remote Code Execution via Stack-Based Bu… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:38.888Z | 2026-08-25T03:56:42.953Z |
| cve-2026-74583 | net/sched: cls_route: fix fastmap use-after-free on filter |
Linux |
Linux |
2026-08-21T16:31:55.886Z | 2026-08-25T05:40:10.077Z | |
| cve-2026-74582 | packet: use consistent hard_header_len in non-ring sen… |
Linux |
Linux |
2026-08-21T16:31:55.283Z | 2026-08-27T12:39:47.499Z | |
| cve-2026-74581 | net: ipv6: clear suppressed fib6 rule result |
Linux |
Linux |
2026-08-21T16:31:54.683Z | 2026-08-25T05:40:07.594Z | |
| cve-2026-74580 | vhost: reset the vring metadata cache on vring reconfi… |
Linux |
Linux |
2026-08-21T16:31:54.076Z | 2026-08-25T05:40:06.380Z | |
| cve-2026-39909 | 9.2 (v4.0) 8.1 (v3.1) | llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler |
ggml-org |
llama.cpp |
2026-08-21T16:28:26.774Z | 2026-08-25T03:56:41.455Z |
| cve-2026-54789 | mod_auth_openidc has out-of-bounds read and write in s… |
OpenIDC |
mod_auth_openidc |
2026-08-21T16:13:23.073Z | 2026-08-21T17:24:15.943Z | |
| cve-2026-22681 | 8.3 (v4.0) 8.5 (v3.1) | OpenViking < 0.3.4 SSRF via /api/v1/resources |
Volcengine |
OpenViking |
2026-08-21T16:13:07.416Z | 2026-08-21T16:45:44.095Z |
| cve-2026-75933 | Jet Admin Stored XSS |
Jet Admin |
Jet Admin |
2026-08-21T16:11:47.849Z | 2026-08-21T16:46:26.315Z | |
| cve-2026-75932 | Jet Admin tenant isolation failure |
Jet Admin |
Jet Admin |
2026-08-21T16:11:24.871Z | 2026-08-21T16:45:46.719Z | |
| cve-2026-75928 | Brushfire unauthenticated information disclosure |
Brushfire |
Online Experience |
2026-08-21T16:10:59.762Z | 2026-08-21T16:44:39.357Z | |
| cve-2026-49114 | ONNX symlink-following and path-traversal arbitrary fi… |
ONNX |
ONNX |
2026-08-21T16:10:56.241Z | 2026-08-21T16:43:10.933Z | |
| cve-2026-69502 | 10 (v3.1) | Azure SQL Database Elevation of Privilege Vulnerability |
Microsoft |
Azure SQL Database |
2026-08-21T16:03:56.685Z | 2026-08-31T20:08:18.674Z |
| cve-2026-77815 | 8.7 (v4.0) 7.5 (v3.1) | Infinite Image Browsing Resolves Paths With normpath, … |
zanllp |
infinite-image-browsing |
2026-08-21T15:03:09.325Z | 2026-08-26T17:30:14.359Z |
| cve-2026-77814 | 8.7 (v4.0) 7.5 (v3.1) | Infinite Image Browsing is_path_trusted Prefix Compari… |
zanllp |
infinite-image-browsing |
2026-08-21T15:03:08.589Z | 2026-08-21T17:33:29.308Z |
| cve-2026-77087 | 9.4 (v4.0) 9.6 (v3.1) | Paperclip before 0.3.1 Remote Code Execution via DNS R… |
paperclipai |
paperclip |
2026-08-21T15:03:07.894Z | 2026-08-21T15:51:14.365Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0460 | Vulnérabilité dans Microsoft Edge | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0459 | Multiples vulnérabilités dans Google Chrome | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0458 | Multiples vulnérabilités dans les produits Citrix | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0457 | Vulnérabilité dans VMware Tools | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0456 | Multiples vulnérabilités dans Apache Struts 2 | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0455 | Multiples vulnérabilités dans Adobe Commerce et Magento | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0454 | Multiples vulnérabilités dans les produits SAP | 2023-06-14T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0453 | Multiples vulnérabilités dans les produits Siemens | 2023-06-13T00:00:00.000000 | 2023-06-14T00:00:00.000000 |
| certfr-2023-avi-0452 | Multiples vulnérabilités dans les produits Schneider Electric | 2023-06-13T00:00:00.000000 | 2023-06-13T00:00:00.000000 |
| certfr-2023-avi-0451 | Multiples vulnérabilités dans les produits Fortinet | 2023-06-13T00:00:00.000000 | 2023-06-13T00:00:00.000000 |
| certfr-2023-avi-0450 | Multiples vulnérabilités dans Mozilla Thunderbird | 2023-06-12T00:00:00.000000 | 2023-06-12T00:00:00.000000 |
| certfr-2023-avi-0449 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0448 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0447 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0446 | Multiples vulnérabilités dans les produits IBM | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0445 | Multiples vulnérabilités dans le noyau Linux de DebianLTS | 2023-06-09T00:00:00.000000 | 2023-06-09T00:00:00.000000 |
| certfr-2023-avi-0444 | Multiples vulnérabilités dans les produits IBM | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0443 | Multiples vulnérabilités dans les produits Cisco | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0442 | Vulnérabilité dans SPIP | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0441 | Multiples vulnérabilités dans VMware Aria Operations for Networks | 2023-06-08T00:00:00.000000 | 2023-06-08T00:00:00.000000 |
| certfr-2023-avi-0440 | Vulnérabilité dans Microsoft Edge | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0439 | Multiples vulnérabilités dans Trend Micro Apex One | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0438 | Multiples vulnérabilités dans Mozilla Firefox et Firefox ESR | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0437 | Multiples vulnérabilités dans Postfix | 2023-06-07T00:00:00.000000 | 2023-06-07T00:00:00.000000 |
| certfr-2023-avi-0436 | Multiples vulnérabilités dans GitLab | 2023-06-06T00:00:00.000000 | 2023-06-06T00:00:00.000000 |
| certfr-2023-avi-0435 | Vulnérabilité dans Google Chrome | 2023-06-06T00:00:00.000000 | 2023-06-06T00:00:00.000000 |
| certfr-2023-avi-0434 | Vulnérabilité dans SolarWinds Serv-U | 2023-06-06T00:00:00.000000 | 2023-06-06T00:00:00.000000 |
| certfr-2023-avi-0433 | Vulnérabilité dans Moxa CN2600 Series | 2023-06-05T00:00:00.000000 | 2023-06-05T00:00:00.000000 |
| certfr-2023-avi-0432 | Multiples vulnérabilités dans Microsoft Edge | 2023-06-05T00:00:00.000000 | 2023-06-05T00:00:00.000000 |
| certfr-2023-avi-0431 | Vulnérabilité dans le noyau Linux de RedHat | 2023-06-02T00:00:00.000000 | 2023-06-02T00:00:00.000000 |