Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77061 | 5.3 (v4.0) | Missing Authentication for Critical Function in boneIO |
boneIO |
boneIO |
2026-10-26T14:46:09.722Z | 2026-10-26T15:35:49.857Z |
| cve-2026-77060 | 6.8 (v4.0) | Incorrect Permission Assignment for Critical Resource … |
boneIO |
black_debian_images |
2026-10-26T14:46:06.547Z | 2026-10-26T15:35:49.996Z |
| cve-2026-77059 | 8.8 (v4.0) | TOCTOU Race Condition in boneIO |
boneIO |
boneIO |
2026-10-26T14:46:02.659Z | 2026-10-26T15:35:50.139Z |
| cve-2026-77058 | 5.1 (v4.0) | Cross-Site Request Forgery (CSRF) in boneIO |
boneIO |
boneIO |
2026-10-26T14:45:59.416Z | 2026-10-26T16:46:44.686Z |
| cve-2026-77057 | 2.3 (v4.0) | Improper Restriction of Excessive Authentication Attem… |
boneIO |
boneIO |
2026-10-26T14:45:56.237Z | 2026-11-02T19:43:06.380Z |
| cve-2026-77056 | 7.1 (v4.0) | Use of Default Credentials in boneIO |
boneIO |
black_debian_images |
2026-10-26T14:45:53.279Z | 2026-10-26T16:46:44.867Z |
| cve-2026-77055 | 9.3 (v4.0) | Improper Privilege Assignment in boneIO |
boneIO |
black_debian_images |
2026-10-26T14:45:49.260Z | 2026-11-02T19:43:06.534Z |
| cve-2026-77054 | 6.9 (v4.0) | Cleartext Storage of Sensitive Information in boneIO |
boneIO |
boneIO |
2026-10-26T14:45:45.813Z | 2026-10-26T16:46:45.059Z |
| cve-2026-77053 | 8.7 (v4.0) | Missing Authentication in Default Configuration in boneIO |
boneIO |
boneIO |
2026-10-26T14:45:42.165Z | 2026-11-02T19:43:06.691Z |
| cve-2026-77052 | 8.7 (v4.0) | Missing Authentication for Node-RED in boneIO |
boneIO |
boneIO |
2026-10-26T14:45:37.056Z | 2026-11-02T19:43:06.832Z |
| cve-2026-116340 | iFlytek astron-agent Console Knowledge-List Endpoint F… |
iFlytek |
astron-agent |
2026-10-26T14:45:22.395Z | 2026-10-31T01:24:33.712Z | |
| cve-2026-112345 | 8.6 (v4.0) 8.1 (v3.1) | TTLock Android App < 9.8.260718 Hardcoded BLE Pairing … |
Sciener |
TTLock |
2026-10-26T14:43:29.943Z | 2026-10-27T10:14:05.557Z |
| cve-2026-3322 | 5.6 (v4.0) | Privilege escalation via request replaying in Lobster_pro |
Lobster DATA GmbH |
Lobster_pro |
2026-10-26T14:41:12.655Z | 2026-10-27T08:11:20.312Z |
| cve-2026-110748 | Apache SIS: CWE-22: improper limitation of paths to GM… |
Apache Software Foundation |
Apache SIS |
2026-10-26T14:40:39.690Z | 2026-11-03T17:22:30.459Z | |
| cve-2026-92171 | 6.5 (v3.1) | Infinispan-operator: infinispan operator: sensitive in… |
Red Hat |
Red Hat Data Grid 8 |
2026-10-26T14:35:11.009Z | 2026-11-02T17:39:17.339Z |
| cve-2026-116497 | 5.5 (v3.1) | Gssproxy: gssproxy: null pointer dereference in gssx_i… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-26T14:31:23.205Z | 2026-10-26T17:57:34.509Z |
| cve-2026-116339 | iFlytek astron-agent DDL Whitelist exec_ddl.py incompl… |
iFlytek |
astron-agent |
2026-10-26T14:30:18.662Z | 2026-10-26T16:15:37.067Z | |
| cve-2026-93848 | 2.7 (v3.1) | Mattermost OpenID discovery endpoint request bypasses … |
Mattermost |
Mattermost |
2026-10-26T14:28:23.565Z | 2026-10-26T16:46:45.446Z |
| cve-2026-93850 | 6.5 (v3.1) | Unbounded memory consumption during PDF text extraction |
Mattermost |
Mattermost |
2026-10-26T14:26:56.502Z | 2026-10-26T16:46:45.587Z |
| cve-2026-93849 | 6.5 (v3.1) | Mattermost allows authenticated users to trigger exces… |
Mattermost |
Mattermost |
2026-10-26T14:25:26.554Z | 2026-10-26T16:46:45.736Z |
| cve-2026-93328 | 9.3 (v4.0) | Missing Authorization in MCP Toolbox for Databases all… |
Google Cloud |
MCP Toolbox for Databases (googleapis/mcp-toolbox) |
2026-10-26T14:24:09.012Z | 2026-10-26T16:46:45.879Z |
| cve-2026-110733 | Apache SIS: SQL injection via unvalidated ORDER BY sor… |
Apache Software Foundation |
Apache SIS |
2026-10-26T14:15:55.097Z | 2026-10-26T16:29:01.382Z | |
| cve-2026-93847 | 3.5 (v3.1) | Improper post type validation on scheduled post endpoints |
Mattermost |
Mattermost |
2026-10-26T14:15:12.711Z | 2026-11-02T19:43:06.964Z |
| cve-2026-65184 | 9.8 (v3.1) | Avocent ACS8000 wsserver command injection |
Vertiv |
Avocent ACS8000 |
2026-10-26T14:07:08.235Z | 2026-10-26T16:46:46.017Z |
| cve-2026-115930 | 7.6 (v4.0) 6.8 (v3.1) | MongoDB Shell (mongosh) bundled with Node.js trusts ce… |
MongoDB, Inc. |
mongosh |
2026-10-26T14:02:51.248Z | 2026-11-02T19:43:07.098Z |
| cve-2026-116284 | Kameleo Local API user-info information disclosure |
n/a |
Kameleo |
2026-10-26T14:00:21.191Z | 2026-11-02T17:37:42.934Z | |
| cve-2026-116516 | 6.5 (v3.1) | Insufficient length validation when parsing Zoom chat … |
Mattermost |
Mattermost |
2026-10-26T13:56:57.973Z | 2026-10-26T15:35:50.283Z |
| cve-2026-97200 | 8.2 (v4.0) | Unbounded response body buffering and decompression in… |
benoitc |
hackney |
2026-10-26T13:49:40.392Z | 2026-10-26T15:35:50.487Z |
| cve-2026-115693 | 9.1 (v4.0) | Custom cacerts or cacertfile do not restrict trust to … |
benoitc |
hackney |
2026-10-26T13:49:29.374Z | 2026-11-02T19:43:07.244Z |
| cve-2026-113440 | 6 (v4.0) | HTTP/1.1 and HTTP/2 redirects resend basic_auth and co… |
benoitc |
hackney |
2026-10-26T13:49:17.377Z | 2026-11-02T21:11:47.935Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-976 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-975 | Vulnérabilité dans Apache Tomcat | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-974 | Multiples vulnérabilités dans Xen | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-973 | Multiples vulnérabilités dans les produits Fortinet | 2022-11-02T00:00:00.000000 | 2022-11-02T00:00:00.000000 |
| certfr-2022-avi-972 | Vulnérabilité dans Azure CLI | 2022-10-31T00:00:00.000000 | 2022-10-31T00:00:00.000000 |
| certfr-2022-avi-971 | Multiples vulnérabilités dans PHP | 2022-10-31T00:00:00.000000 | 2022-10-31T00:00:00.000000 |
| certfr-2022-avi-970 | Vulnérabilité dans Nextcloud Server | 2022-10-31T00:00:00.000000 | 2022-10-31T00:00:00.000000 |
| certfr-2022-avi-969 | Vulnérabilité dans les produits NetApp | 2022-10-31T00:00:00.000000 | 2022-10-31T00:00:00.000000 |
| certfr-2022-avi-968 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-10-28T00:00:00.000000 | 2022-10-28T00:00:00.000000 |
| certfr-2022-avi-967 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-10-28T00:00:00.000000 | 2022-10-28T00:00:00.000000 |
| certfr-2022-avi-966 | Multiples vulnérabilités dans les produits Synology | 2022-10-28T00:00:00.000000 | 2022-10-28T00:00:00.000000 |
| certfr-2022-avi-965 | Multiples vulnérabilités dans Microsoft Edge | 2022-10-28T00:00:00.000000 | 2022-10-28T00:00:00.000000 |
| certfr-2022-avi-964 | Vulnérabilité dans Google Chrome | 2022-10-28T00:00:00.000000 | 2022-10-28T00:00:00.000000 |
| certfr-2022-avi-963 | Multiples vulnérabilités dans Apple iOS et iPadOS | 2022-10-28T00:00:00.000000 | 2022-10-28T00:00:00.000000 |
| certfr-2022-avi-962 | Multiples vulnérabilités dans Tenable Nessus | 2022-10-28T00:00:00.000000 | 2022-10-28T00:00:00.000000 |
| certfr-2022-avi-961 | Multiples vulnérabilités dans Nextcloud Server | 2022-10-27T00:00:00.000000 | 2022-10-27T00:00:00.000000 |
| certfr-2022-avi-960 | Multiples vulnérabilités dans les produits IBM | 2022-10-27T00:00:00.000000 | 2022-10-27T00:00:00.000000 |
| certfr-2022-avi-959 | Multiples vulnérabilités dans Tenable Nessus | 2022-10-27T00:00:00.000000 | 2022-10-27T00:00:00.000000 |
| certfr-2022-avi-958 | Multiples vulnérabilités dans Wireshark | 2022-10-27T00:00:00.000000 | 2022-10-27T00:00:00.000000 |
| certfr-2022-avi-957 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-956 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-955 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-954 | Multiples vulnérabilités dans Joomla | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-953 | Multiples vulnérabilités dans Google Chrome | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-952 | Multiples vulnérabilités dans IBM QRadar | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-951 | Multiples vulnérabilités dans VMware Cloud Foundation | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-950 | Multiples vulnérabilités dans les produits Aruba | 2022-10-26T00:00:00.000000 | 2022-10-26T00:00:00.000000 |
| certfr-2022-avi-949 | Multiples vulnérabilités dans Samba | 2022-10-25T00:00:00.000000 | 2022-10-25T00:00:00.000000 |
| certfr-2022-avi-948 | Multiples vulnérabilités dans Mozilla Thunderbird | 2022-10-25T00:00:00.000000 | 2022-10-25T00:00:00.000000 |
| certfr-2022-avi-947 | Multiples vulnérabilités dans les produits Apple | 2022-10-25T00:00:00.000000 | 2022-10-25T00:00:00.000000 |