Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-94346 | 7.2 (v3.1) | PowerProtect Data Domain Virtual Edition, Feature… |
Dell |
PowerProtect Data Domain Virtual Edition |
2026-10-27T13:23:56.292Z | 2026-10-29T03:56:49.680Z |
| cve-2026-16307 | 4.3 (v3.1) | IDOR in Netiket Information Technologies' EdoWEB |
Netiket Information Technologies |
EdoWEB |
2026-10-27T13:23:02.346Z | 2026-11-04T20:28:31.567Z |
| cve-2026-12887 | 5.1 (v4.0) | In affected versions of Octopus Server, a user wi… |
Octopus Deploy |
Octopus Server |
2026-10-27T13:15:22.608Z | 2026-11-04T17:17:30.463Z |
| cve-2026-117603 | 9.3 (v4.0) 4.3 (v3.1) | Electrum before 4.7.2 Nostr Wallet Connect Plugin Dail… |
spesmilo |
electrum |
2026-10-27T13:09:52.728Z | 2026-11-02T16:01:22.924Z |
| cve-2026-117602 | 8.6 (v4.0) 8.4 (v3.1) | Electrum before 4.7.2 External Plugin Authorization By… |
spesmilo |
electrum |
2026-10-27T13:09:52.040Z | 2026-10-27T13:09:52.040Z |
| cve-2026-117601 | 9.3 (v4.0) 7.5 (v3.1) | Electrum before 4.8.3 Missing Signature Verification o… |
spesmilo |
electrum |
2026-10-27T13:09:51.347Z | 2026-10-28T16:16:43.752Z |
| cve-2026-117573 | 8.5 (v4.0) 7.8 (v3.1) | hagent through commit 761eec6 OS Command Injection via… |
masc-ucsc |
hagent |
2026-10-27T13:08:03.276Z | 2026-11-02T19:17:53.870Z |
| cve-2026-117570 | 4.8 (v4.0) 5.2 (v3.1) | nmap-mcp through commit 3636afa Permissive NSE Script … |
Vorota-ai |
nmap-mcp |
2026-10-27T13:08:02.571Z | 2026-11-02T16:00:36.944Z |
| cve-2026-117569 | 8.5 (v4.0) 7.8 (v3.1) | Kali-GPT through commit a608c74 OS Command Injection v… |
alishahid74 |
kali-gpt |
2026-10-27T13:08:01.873Z | 2026-10-27T13:08:01.873Z |
| cve-2026-117568 | 7.3 (v4.0) 7 (v3.1) | mcp-ffmpeg through 1.0.5 OS Command Injection via vide… |
bitscorp-mcp |
mcp-ffmpeg |
2026-10-27T13:08:01.183Z | 2026-10-28T16:16:50.835Z |
| cve-2026-117567 | 8.5 (v4.0) 7.8 (v3.1) | esp-mcp through commit 28afddf OS Command Injection vi… |
horw |
esp-mcp |
2026-10-27T13:08:00.469Z | 2026-11-02T19:16:58.907Z |
| cve-2026-117566 | 6.9 (v4.0) 5.3 (v3.1) | EasyImages2.0 through 2.8.6 Unauthenticated Path Trave… |
icret |
EasyImages2.0 |
2026-10-27T13:07:59.767Z | 2026-11-02T15:59:35.751Z |
| cve-2026-117565 | 6.9 (v4.0) 5.3 (v3.1) | Artalk before 2.10.1 Unauthenticated SSRF via Comment … |
ArtalkJS |
Artalk |
2026-10-27T13:07:59.080Z | 2026-10-27T13:07:59.080Z |
| cve-2026-117564 | 9.3 (v4.0) 9.8 (v3.1) | nest-admin before 1.0.1 Authentication Bypass via Hard… |
buqiyuan |
nest-admin |
2026-10-27T13:07:58.360Z | 2026-10-28T16:16:56.709Z |
| cve-2026-117563 | 5.3 (v4.0) 5.4 (v3.1) | MrDoc through 1.1.1 Broken Access Control via manage_d… |
zmister2016 |
MrDoc |
2026-10-27T13:07:57.656Z | 2026-11-02T19:15:30.217Z |
| cve-2026-117562 | 6.9 (v4.0) 5.3 (v3.1) | rssant 1.9.0 through 1.9.1 Information Disclosure via … |
anyant |
rssant |
2026-10-27T13:07:56.982Z | 2026-11-02T15:58:02.117Z |
| cve-2026-117561 | 8.5 (v4.0) 7.8 (v3.1) | sf-mcp through 1.3.2 OS Command Injection via Salesfor… |
codefriar |
sf-mcp |
2026-10-27T13:07:56.281Z | 2026-10-27T13:07:56.281Z |
| cve-2026-117560 | 8.5 (v4.0) 7.8 (v3.1) | ATXP Gemini CLI Extension through 1.0.0 OS Command Inj… |
atxp |
gemini-cli-extension |
2026-10-27T13:07:55.594Z | 2026-10-28T16:17:06.328Z |
| cve-2026-117559 | 8.5 (v4.0) 7.8 (v3.1) | DroidMind through 0.4.0 Command Injection via Shell Al… |
hyperb1iss |
droidmind |
2026-10-27T13:07:53.788Z | 2026-11-02T19:14:40.415Z |
| cve-2026-117558 | 8.5 (v4.0) 7.8 (v3.1) | ai-sdlc MCP Server through 0.31.2 Command Injection vi… |
ai-sdlc-framework |
ai-sdlc |
2026-10-27T13:07:53.099Z | 2026-11-02T15:56:03.121Z |
| cve-2026-117557 | 6.9 (v4.0) 6.1 (v3.1) | SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds… |
libsdl-org |
SDL_image |
2026-10-27T13:07:52.419Z | 2026-11-04T16:52:35.775Z |
| cve-2026-117556 | 5.3 (v4.0) 4.3 (v3.1) | zchunk before 1.5.5 Heap Out-of-Bounds Read via read_p… |
zchunk |
zchunk |
2026-10-27T13:07:51.708Z | 2026-10-28T16:17:15.487Z |
| cve-2026-117555 | 6.9 (v4.0) 6.1 (v3.1) | GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read vi… |
GreycLab |
CImg |
2026-10-27T13:07:51.020Z | 2026-11-02T19:13:16.930Z |
| cve-2026-117554 | 5.3 (v4.0) 4.3 (v3.1) | Admidio before 5.0.17 Event Guest Restriction Bypass v… |
admidio |
admidio |
2026-10-27T13:07:50.357Z | 2026-11-02T15:54:22.023Z |
| cve-2026-117553 | 7.7 (v4.0) 7.5 (v3.1) | Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover … |
umbraco |
Umbraco-CMS |
2026-10-27T13:07:49.671Z | 2026-11-04T15:56:36.930Z |
| cve-2026-92546 | 7.5 (v3.1) | Authentication Bypass with X-Agentic-Ally-Token in Kee… |
Keepnet Labs Cybersecurity Inc. |
Agentic AI / Agentic Ally |
2026-10-27T12:58:42.332Z | 2026-11-04T20:28:37.339Z |
| cve-2026-116627 | N/A | Improper neutralization of input during web page … |
Devolutions |
PowerShell Universal |
2026-10-27T12:45:34.223Z | 2026-11-04T17:16:17.133Z |
| cve-2026-15586 | 5.3 (v3.1) | OTP Brute-Force Account Takeover in Idvlabs Software's… |
İdvlabs Software and Consulting Services Inc. |
Ontime |
2026-10-27T12:32:04.384Z | 2026-11-04T20:28:43.704Z |
| cve-2026-114409 | 5.7 (v4.0) | Docker Desktop logs can expose stored third-party cred… |
Docker |
Docker Desktop |
2026-10-27T12:25:57.894Z | 2026-11-04T20:28:50.246Z |
| cve-2026-107590 | 1.9 (v4.0) | Out-of-bounds write vulnerability in QTextCodec iconv-… |
qt |
Qt |
2026-10-27T12:24:53.005Z | 2026-11-04T20:28:57.965Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2023-avi-0662 | Vulnérabilité dans MISP | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0661 | Multiples vulnérabilités dans Microsoft Edge | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0660 | Vulnérabilité dans Juniper Junos OS | 2023-08-18T00:00:00.000000 | 2023-08-18T00:00:00.000000 |
| certfr-2023-avi-0659 | Multiples vulnérabilités dans les produits Moxa | 2023-08-17T00:00:00.000000 | 2023-08-17T00:00:00.000000 |
| certfr-2023-avi-0658 | Multiples vulnérabilités dans les produits Cisco | 2023-08-17T00:00:00.000000 | 2023-08-17T00:00:00.000000 |
| certfr-2023-avi-0657 | Vulnérabilité dans Microsoft Office et OneNote | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0656 | Multiples vulnérabilités dans Tenable Sensor Proxy | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0655 | Multiples vulnérabilités dans Aruba Networking Virtual Intranet Access | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0654 | Multiples vulnérabilités dans Google Chrome | 2023-08-16T00:00:00.000000 | 2023-08-16T00:00:00.000000 |
| certfr-2023-avi-0653 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0652 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0651 | Multiples vulnérabilités dans PostgreSQL | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0650 | Multiples vulnérabilités dans IBM Spectrum Copy Data Management | 2023-08-11T00:00:00.000000 | 2023-08-11T00:00:00.000000 |
| certfr-2023-avi-0649 | Multiples vulnérabilités dans les produits Nextcloud | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0648 | Multiples vulnérabilités dans les produits NetApp | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0647 | Multiples vulnérabilités dans les produits Mitel | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0646 | Vulnérabilité dans MongoDB Ops Manager | 2023-08-10T00:00:00.000000 | 2023-08-10T00:00:00.000000 |
| certfr-2023-avi-0645 | Multiples vulnérabilités dans les produits Microsoft | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0644 | Multiples vulnérabilités dans Microsoft Azure | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0643 | Multiples vulnérabilités dans Microsoft .Net | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0642 | Multiples vulnérabilités dans Microsoft Windows | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0641 | Multiples vulnérabilités dans Microsoft Office | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0640 | Multiples vulnérabilités dans les produits Intel | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0639 | Multiples vulnérabilités dans Xen | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0638 | Multiples vulnérabilités dans Citrix Hypervisor | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0637 | Vulnérabilité dans Fortinet FortiOS | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0636 | Multiples vulnérabilités dans les produits Adobe | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0635 | Multiples vulnérabilités dans les produits SAP | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0634 | Vulnérabilité dans les produits Belden | 2023-08-09T00:00:00.000000 | 2023-08-09T00:00:00.000000 |
| certfr-2023-avi-0633 | Multiples vulnérabilités dans les produits Siemens | 2023-08-08T00:00:00.000000 | 2023-08-08T00:00:00.000000 |