Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-116368 | DeepSeek Harness Browser Auth browser-auth.ts improper… |
DeepSeek |
Harness |
2026-10-26T15:45:16.223Z | 2026-10-26T19:38:50.597Z | |
| cve-2026-115678 | N/A | Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre… |
Keil |
MDK-Middleware |
2026-10-26T15:38:06.766Z | 2026-10-26T16:17:28.313Z |
| cve-2026-112346 | 9.3 (v4.0) 9.8 (v3.1) | OpenHands Software Agent SDK < 1.52.0 Unauthenticated … |
OpenHands |
OpenHands Software Agent SDK |
2026-10-26T15:34:30.749Z | 2026-11-04T19:16:39.224Z |
| cve-2026-116367 | DeepSeek Harness sandbox.ts createContext |
DeepSeek |
Harness |
2026-10-26T15:30:15.468Z | 2026-11-02T17:44:41.105Z | |
| cve-2026-115748 | 8.8 (v3.1) | Apache Vysper: Authorization bypass |
Apache Software Foundation |
Apache Vysper |
2026-10-26T15:01:40.644Z | 2026-11-02T21:22:43.925Z |
| cve-2026-115721 | 7.5 (v3.1) | Apache Vysper: Unbounded allocation |
Apache Software Foundation |
Apache Vysper |
2026-10-26T15:01:18.445Z | 2026-11-02T21:21:31.594Z |
| cve-2026-116544 | 6.3 (v4.0) 3.7 (v3.1) | Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via par… |
open5gs |
open5gs |
2026-10-26T14:59:42.931Z | 2026-10-26T16:15:00.617Z |
| cve-2026-116543 | 8.7 (v4.0) 7.5 (v3.1) | Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write v… |
open5gs |
open5gs |
2026-10-26T14:59:42.212Z | 2026-11-02T17:42:53.156Z |
| cve-2026-116542 | 6.9 (v4.0) 5.3 (v3.1) | Netty netty-tcnative before 2.0.84.Final SNI Hostname … |
netty |
netty-tcnative |
2026-10-26T14:59:41.528Z | 2026-10-31T01:27:08.152Z |
| cve-2026-116541 | 8.2 (v4.0) 5.9 (v3.1) | netty-tcnative before 2.0.84.Final Denial of Service v… |
netty |
netty-tcnative |
2026-10-26T14:59:40.847Z | 2026-10-26T19:48:35.492Z |
| cve-2026-116540 | 8.2 (v4.0) 5.9 (v3.1) | netty-tcnative 2.0.66.Final before 2.0.84.Final Use-Af… |
netty |
netty-tcnative |
2026-10-26T14:59:40.154Z | 2026-10-26T16:15:16.184Z |
| cve-2026-116539 | 8.2 (v4.0) 5.9 (v3.1) | Netty netty-tcnative before 2.0.84.Final Heap Buffer O… |
netty |
netty-tcnative |
2026-10-26T14:59:39.460Z | 2026-11-02T17:40:46.434Z |
| cve-2026-116538 | 2.3 (v4.0) 4.7 (v3.1) | HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body… |
mganss |
HtmlSanitizer |
2026-10-26T14:59:38.815Z | 2026-10-31T01:25:48.693Z |
| cve-2026-116489 | 7.7 (v4.0) 7.5 (v3.1) | Timescale pgvectorscale before 0.9.1 Type Confusion vi… |
timescale |
pgvectorscale |
2026-10-26T14:59:38.170Z | 2026-11-04T16:02:12.074Z |
| cve-2026-85297 | 7.7 (v4.0) | Bucket Squatting in Cloud Run MCP leads to Service Acc… |
Google Cloud |
Cloud Run MCP |
2026-10-26T14:58:30.464Z | 2026-11-02T21:12:52.542Z |
| cve-2026-99099 | x86/CPU/AMD: Fix AMD TLBI Erratum #1718 |
Linux |
Linux |
2026-10-26T14:52:04.997Z | 2026-10-31T12:42:48.094Z | |
| cve-2026-99098 | N/A | dm-integrity: fix buffer overflow in inline mode with … |
Linux |
Linux |
2026-10-26T14:52:04.416Z | 2026-10-26T14:52:04.416Z |
| cve-2026-99097 | N/A | tee: shm: reject zero-sized allocations in tee_dyn_shm… |
Linux |
Linux |
2026-10-26T14:52:03.824Z | 2026-10-26T14:52:03.824Z |
| cve-2026-99096 | N/A | io_uring/register: don't exempt disabled rings from ta… |
Linux |
Linux |
2026-10-26T14:52:03.236Z | 2026-10-26T14:52:03.236Z |
| cve-2026-99095 | N/A | drm/vc4: drain the hangcheck timer and works on V3D unbind |
Linux |
Linux |
2026-10-26T14:52:02.647Z | 2026-10-30T12:41:42.869Z |
| cve-2026-99094 | Bluetooth: btintel_pcie: fix TX descriptor bounds check |
Linux |
Linux |
2026-10-26T14:52:02.053Z | 2026-10-31T12:42:42.980Z | |
| cve-2026-99093 | N/A | mm: don't schedule deferred kernel page table freeing … |
Linux |
Linux |
2026-10-26T14:52:01.450Z | 2026-10-26T14:52:01.450Z |
| cve-2026-99092 | N/A | riscv: patch: fix handling of bpf-jit execmem addresses |
Linux |
Linux |
2026-10-26T14:52:00.860Z | 2026-10-26T14:52:00.860Z |
| cve-2026-99091 | N/A | Bluetooth: MGMT: Fix status of pending commands flushe… |
Linux |
Linux |
2026-10-26T14:52:00.262Z | 2026-10-30T12:41:41.779Z |
| cve-2026-99090 | N/A | drm/amdgpu: serialize vblank counter reads against GPU reset |
Linux |
Linux |
2026-10-26T14:51:59.654Z | 2026-10-27T15:53:00.938Z |
| cve-2026-99089 | N/A | ASoC: samsung: i2s: enable op_clk in probe to balance … |
Linux |
Linux |
2026-10-26T14:51:59.055Z | 2026-10-30T12:41:40.718Z |
| cve-2026-99088 | N/A | net: openvswitch: validate transport header presence i… |
Linux |
Linux |
2026-10-26T14:51:58.460Z | 2026-10-30T12:41:39.655Z |
| cve-2026-90885 | 7.5 (v3.1) | Apache Camel: Camel-Saxon XML External Entity Processi… |
Apache Software Foundation |
Apache Camel |
2026-10-26T14:47:03.155Z | 2026-10-26T15:35:49.414Z |
| cve-2026-77062 | 6.9 (v4.0) | Clickjacking in boneIO |
boneIO |
boneIO |
2026-10-26T14:46:12.663Z | 2026-10-26T15:35:49.560Z |
| cve-2026-94386 | 4.8 (v3.1) | Apache Camel: Camel-OAuth Cross-Scope Token Reuse via … |
Apache Software Foundation |
Apache Camel |
2026-10-26T14:46:11.551Z | 2026-10-26T15:35:49.712Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-1006 | Multiples vulnérabilités dans Grafana | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1005 | Multiples vulnérabilités dans les produits Citrix | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1004 | Vulnérabilité dans Joomla | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-1003 | Vulnérabilité dans Veeam Backup | 2022-11-09T00:00:00.000000 | 2022-11-09T00:00:00.000000 |
| certfr-2022-avi-999 | Multiples vulnérabilités dans Foxit PDF | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-998 | Multiples vulnérabilités dans Android | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-997 | Multiples vulnérabilités dans IBM Tivoli | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-1002 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-1001 | Multiples vulnérabilités dans les produits Siemens | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-1000 | Multiples vulnérabilités dans les produits Schneider | 2022-11-08T00:00:00.000000 | 2022-11-08T00:00:00.000000 |
| certfr-2022-avi-996 | Vulnérabilité dans Python 3 | 2022-11-07T00:00:00.000000 | 2022-11-07T00:00:00.000000 |
| certfr-2022-avi-995 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-11-04T00:00:00.000000 | 2022-11-04T00:00:00.000000 |
| certfr-2022-avi-994 | Multiples vulnérabilités dans VMware Spring | 2022-11-04T00:00:00.000000 | 2022-11-04T00:00:00.000000 |
| certfr-2022-avi-993 | Multiples vulnérabilités dans Tenable Nessus | 2022-11-04T00:00:00.000000 | 2022-11-04T00:00:00.000000 |
| certfr-2022-avi-992 | Multiples vulnérabilités dans PHP | 2022-11-04T00:00:00.000000 | 2022-11-04T00:00:00.000000 |
| certfr-2022-avi-991 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2022-11-03T00:00:00.000000 | 2022-11-03T00:00:00.000000 |
| certfr-2022-avi-990 | Multiples vulnérabilités dans les produits Microsoft | 2022-11-03T00:00:00.000000 | 2022-11-03T00:00:00.000000 |
| certfr-2022-avi-989 | Multiples vulnérabilités dans les produits Tenable | 2022-11-03T00:00:00.000000 | 2022-11-03T00:00:00.000000 |
| certfr-2022-avi-988 | Multiples vulnérabilités dans les produits Cisco | 2022-11-03T00:00:00.000000 | 2022-11-03T00:00:00.000000 |
| certfr-2022-avi-987 | Multiples vulnérabilités dans GitLab | 2022-11-03T00:00:00.000000 | 2022-11-03T00:00:00.000000 |
| certfr-2022-avi-986 | Multiples vulnérabilités dans Splunk | 2022-11-03T00:00:00.000000 | 2022-11-04T00:00:00.000000 |
| certfr-2022-avi-985 | Multiples vulnérabilités dans OpenSSL | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-984 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-983 | Multiples vulnérabilités dans Apple Xcode | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-982 | Multiples vulnérabilités dans les produits Kaspersky | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-981 | Multiples vulnérabilités dans les produits Foxit | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-980 | Vulnérabilité dans Microsoft Edge | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-979 | Vulnérabilité dans Belden Industrial HiVision | 2022-11-02T00:00:00.000000 | 2022-11-03T00:00:00.000000 |
| certfr-2022-avi-978 | Multiples vulnérabilités dans VMware Spring | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-977 | Multiples vulnérabilités dans Citrix Hypervisor | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |