Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-113440 | 6 (v4.0) | HTTP/1.1 and HTTP/2 redirects resend basic_auth and co… |
benoitc |
hackney |
2026-10-26T13:49:17.377Z | 2026-11-02T21:11:47.935Z |
| cve-2026-115700 | 6.9 (v4.0) | SSRF allowlist bypass via percent-encoded bracketed IP… |
benoitc |
hackney |
2026-10-26T13:49:02.744Z | 2026-11-02T21:10:51.594Z |
| cve-2026-112880 | 2.1 (v4.0) | CRLF injection in Proxy-Authorization header built fro… |
benoitc |
hackney |
2026-10-26T13:48:46.589Z | 2026-10-26T15:35:50.632Z |
| cve-2026-116283 | Kameleo Local API profiles information disclosure |
n/a |
Kameleo |
2026-10-26T13:45:21.554Z | 2026-10-31T01:23:35.054Z | |
| cve-2026-107656 | 9.6 (v3.1) | An authentication bypass using an alternate path … |
Fortinet |
FortiSandbox |
2026-10-26T13:45:03.962Z | 2026-10-27T06:54:55.555Z |
| cve-2026-111590 | N/A | SSRF in Harbor webhook delivery allows ProjectAdmin to… |
Harbor |
Harbor |
2026-10-26T13:39:48.420Z | 2026-10-26T13:39:48.420Z |
| cve-2026-108529 | 8.7 (v4.0) | SETTINGS and stream-0 WINDOW_UPDATE frames trigger qua… |
mtrudel |
bandit |
2026-10-26T13:35:26.080Z | 2026-10-26T15:35:50.781Z |
| cve-2026-59107 | 9.2 (v4.0) 9.8 (v3.1) | Shared SSH Authentication Key in vSolution Matrix File… |
WolfVision |
Cynap Pro, Cynap Core Pro |
2026-10-26T13:33:12.851Z | 2026-11-02T21:08:32.723Z |
| cve-2026-110499 | 8.7 (v4.0) | Client-chosen HPACK encoder table size is applied unca… |
mtrudel |
bandit |
2026-10-26T13:32:38.613Z | 2026-10-26T15:35:50.929Z |
| cve-2026-109584 | 8.7 (v4.0) | HTTP/2 cookie crumb join expands a small HPACK header … |
mtrudel |
bandit |
2026-10-26T13:32:22.359Z | 2026-10-26T15:35:51.081Z |
| cve-2026-111103 | 8.2 (v4.0) | HTTP/2 StreamError recovery rolls back connection stat… |
mtrudel |
bandit |
2026-10-26T13:32:06.340Z | 2026-10-26T15:35:51.229Z |
| cve-2026-111101 | 8.7 (v4.0) | HTTP/1.1 chunked request bodies made of 1-byte chunks … |
mtrudel |
bandit |
2026-10-26T13:31:48.184Z | 2026-10-26T15:35:51.401Z |
| cve-2026-113436 | 8.7 (v4.0) | Quadratic bignum parsing of Content-Length and Host po… |
mtrudel |
bandit |
2026-10-26T13:31:35.033Z | 2026-10-26T15:35:51.556Z |
| cve-2026-110314 | 6.3 (v4.0) | WebSocket frames keep reaching the WebSock after a ser… |
mtrudel |
bandit |
2026-10-26T13:31:18.257Z | 2026-11-02T21:00:10.938Z |
| cve-2026-114213 | 8.7 (v4.0) | WebSocket 1-byte continuation frames bypass `max_fragm… |
mtrudel |
bandit |
2026-10-26T13:30:58.262Z | 2026-10-26T15:35:51.785Z |
| cve-2026-114216 | 6.3 (v4.0) | Chunk extensions accept bare LF and CR, enabling reque… |
mtrudel |
bandit |
2026-10-26T13:30:41.225Z | 2026-10-26T15:35:51.933Z |
| cve-2026-115269 | 8.7 (v4.0) | HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the req… |
mtrudel |
bandit |
2026-10-26T13:30:24.621Z | 2026-10-26T15:35:52.079Z |
| cve-2026-108525 | 8.7 (v4.0) | HTTP/2 inbound flow control is not enforced, letting a… |
mtrudel |
bandit |
2026-10-26T13:29:42.520Z | 2026-10-26T15:35:52.227Z |
| cve-2026-116282 | Kameleo Cookie Controller w.cs CookieController.ListCo… |
n/a |
Kameleo |
2026-10-26T13:15:17.127Z | 2026-10-26T16:15:47.691Z | |
| cve-2026-59106 | 9.3 (v4.0) 9.8 (v3.1) | Unauthenticated RCE Vulnerability in WolfProt interfac… |
WolfVision |
Cynap Pure (Next Gen), Cynap Bridge |
2026-10-26T13:15:02.436Z | 2026-10-26T15:35:52.374Z |
| cve-2026-116488 | 7 (v4.0) 6.8 (v3.1) | NXP MCUXpresso SDK USB Middleware before 2.13.0 Heap O… |
NXP |
mcuxsdk-middleware-usb |
2026-10-26T13:08:53.415Z | 2026-10-31T01:22:44.936Z |
| cve-2026-116487 | 5.1 (v4.0) 4.6 (v3.1) | NXP MCUXpresso SDK USB Middleware before 2.13.0 RNDIS … |
NXP |
mcuxsdk-middleware-usb |
2026-10-26T13:08:52.737Z | 2026-11-04T19:37:15.328Z |
| cve-2026-116486 | 2 (v4.0) 4.5 (v3.1) | Objenesis before 3.6 Type Confusion via Class Name Ins… |
easymock |
objenesis |
2026-10-26T13:08:52.051Z | 2026-10-26T16:15:59.231Z |
| cve-2026-116485 | 9.3 (v4.0) 9.8 (v3.1) | danmu_api before 1.21.7 Authentication Bypass via Defa… |
huangxd- |
danmu_api |
2026-10-26T13:08:51.363Z | 2026-11-02T17:36:34.013Z |
| cve-2026-116219 | 8.6 (v4.0) 7.2 (v3.1) | Dolibarr ERP CRM before 24.0.0 OS Command Injection vi… |
Dolibarr |
dolibarr |
2026-10-26T13:08:50.681Z | 2026-10-31T01:21:13.486Z |
| cve-2026-116218 | 7.2 (v4.0) 7.6 (v3.1) | Dolibarr ERP CRM 19.0.0 before 23.0.4 SQL Injection vi… |
Dolibarr |
dolibarr |
2026-10-26T13:08:49.982Z | 2026-10-26T17:47:50.586Z |
| cve-2026-116217 | 5.3 (v4.0) 6.1 (v3.1) | RosarioSIS before 12.9.2 Reflected XSS via menu_id in … |
francoisjacquet |
rosariosis |
2026-10-26T13:08:49.288Z | 2026-10-26T17:47:49.908Z |
| cve-2026-116216 | 6.9 (v4.0) 5.3 (v3.1) | MacCMS v10 through 2026.1000.4056 Comment Impersonatio… |
maccmspro |
maccms10 |
2026-10-26T13:08:48.563Z | 2026-11-02T17:35:24.018Z |
| cve-2026-116215 | 2.3 (v4.0) 3.1 (v3.1) | MacCMS v10 through 2026.1000.4056 Race Condition via C… |
maccmspro |
maccms10 |
2026-10-26T13:08:47.862Z | 2026-10-31T01:20:31.938Z |
| cve-2026-116214 | 9.3 (v4.0) 9.1 (v3.1) | MacCMS v10 before 2026.1000.4054 Account Takeover via … |
maccmspro |
maccms10 |
2026-10-26T13:08:47.141Z | 2026-11-04T20:39:45.870Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-946 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-10-24T00:00:00.000000 | 2022-10-24T00:00:00.000000 |
| certfr-2022-avi-945 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-10-24T00:00:00.000000 | 2022-10-24T00:00:00.000000 |
| certfr-2022-avi-944 | Multiples vulnérabilités dans les produits Synology | 2022-10-24T00:00:00.000000 | 2022-10-24T00:00:00.000000 |
| certfr-2022-avi-943 | Vulnérabilité dans Siemens Siveillance Video Mobile Server V2022 R2 | 2022-10-24T00:00:00.000000 | 2022-10-24T00:00:00.000000 |
| certfr-2022-avi-942 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-10-21T00:00:00.000000 | 2022-10-21T00:00:00.000000 |
| certfr-2022-avi-941 | Multiples vulnérabilités dans le noyau Linux de Debian | 2022-10-21T00:00:00.000000 | 2022-10-21T00:00:00.000000 |
| certfr-2022-avi-940 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-10-21T00:00:00.000000 | 2022-10-21T00:00:00.000000 |
| certfr-2022-avi-939 | Multiples vulnérabilités dans les produits SolarWinds | 2022-10-20T00:00:00.000000 | 2022-10-20T00:00:00.000000 |
| certfr-2022-avi-938 | Multiples vulnérabilités dans les produits Cisco | 2022-10-20T00:00:00.000000 | 2022-10-20T00:00:00.000000 |
| certfr-2022-avi-937 | Multiples vulnérabilités dans les produits F5 | 2022-10-20T00:00:00.000000 | 2022-10-20T00:00:00.000000 |
| certfr-2022-avi-936 | Vulnérabilité dans OwnCloud | 2022-10-20T00:00:00.000000 | 2022-10-20T00:00:00.000000 |
| certfr-2022-avi-935 | Multiples vulnérabilités dans Oracle WebLogic Server | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-934 | Multiples vulnérabilités dans Oracle Virtualization | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-933 | Multiples vulnérabilités dans Oracle Systems | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-932 | Multiples vulnérabilités dans Oracle PeopleSoft | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-931 | Multiples vulnérabilités dans Oracle MySQL | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-930 | Multiples vulnérabilités dans Oracle Java SE | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-929 | Multiples vulnérabilités dans Oracle Database Server | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-928 | Multiples vulnérabilités dans les produits IBM | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-927 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-926 | Multiples vulnérabilités dans les produits Mozilla | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-925 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-10-19T00:00:00.000000 | 2022-10-19T00:00:00.000000 |
| certfr-2022-avi-924 | Multiples vulnérabilités dans IBM QRadar | 2022-10-18T00:00:00.000000 | 2022-10-18T00:00:00.000000 |
| certfr-2022-avi-923 | Multiples vulnérabilités dans WordPress | 2022-10-18T00:00:00.000000 | 2022-10-18T00:00:00.000000 |
| certfr-2022-avi-922 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-10-17T00:00:00.000000 | 2022-10-17T00:00:00.000000 |
| certfr-2022-avi-921 | Multiples vulnérabilités dans Microsoft Edge | 2022-10-17T00:00:00.000000 | 2022-10-17T00:00:00.000000 |
| certfr-2022-avi-920 | Multiples vulnérabilités dans les produits Adobe | 2022-10-17T00:00:00.000000 | 2022-10-17T00:00:00.000000 |
| certfr-2022-avi-919 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-10-14T00:00:00.000000 | 2022-10-14T00:00:00.000000 |
| certfr-2022-avi-918 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-10-14T00:00:00.000000 | 2022-10-14T00:00:00.000000 |
| certfr-2022-avi-917 | Multiples vulnérabilités dans Ivanti Connect Secure | 2022-10-14T00:00:00.000000 | 2022-10-14T00:00:00.000000 |