Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76640 | 7.7 (v4.0) 7.5 (v3.1) | Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisionin… |
Unitree Robotics |
G1 EDU |
2026-08-27T17:52:11.749Z | 2026-08-28T15:53:16.149Z |
| cve-2026-73209 | 6.5 (v3.1) | An attacker that has valid credentials can send c… |
Open-Xchange GmbH |
OX Dovecot Pro |
2026-08-28T10:12:33.625Z | 2026-08-28T15:53:12.773Z |
| cve-2026-82235 | 8.2 (v4.0) 5.9 (v3.1) | filebrowser through 2.63.23 Denial of Service via name… |
filebrowser |
filebrowser |
2026-08-28T10:49:25.222Z | 2026-08-28T15:53:04.375Z |
| cve-2026-82240 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Privilege Escalation via User U… |
budibase |
server |
2026-08-28T10:49:28.683Z | 2026-08-28T15:52:56.424Z |
| cve-2026-82245 | 7.2 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Missing Authorization License M… |
budibase |
server |
2026-08-28T10:49:32.098Z | 2026-08-28T15:52:50.059Z |
| cve-2026-82250 | 7.1 (v4.0) 6.5 (v3.1) | gitoxide gix-packetline before 0.21.5 Denial of Service |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:35.517Z | 2026-08-28T15:52:43.900Z |
| cve-2026-82255 | 7.6 (v4.0) 6.8 (v3.1) | gitoxide 0.25.4 HTTP Credential Leak via Redirect |
GitoxideLabs |
gitoxide |
2026-08-28T10:49:38.916Z | 2026-08-28T15:52:36.828Z |
| cve-2026-82260 | 8.7 (v4.0) 7.5 (v3.1) | SvelteKit before 2.52.2 Memory Exhaustion via Remote F… |
sveltejs |
kit |
2026-08-28T10:49:43.651Z | 2026-08-28T15:52:30.481Z |
| cve-2026-81285 | 7.5 (v3.1) | WordPress Smush Image Compression and Optimization plu… |
WPMU DEV |
Smush Image Compression and Optimization |
2026-08-28T14:33:32.509Z | 2026-08-28T15:52:24.225Z |
| cve-2026-81761 | 4.3 (v3.1) | WordPress WpEvently plugin <= 5.5.0 - Broken Access Co… |
Magepeople inc. |
WpEvently |
2026-08-28T14:33:36.126Z | 2026-08-28T15:52:16.879Z |
| cve-2026-81521 | 7.1 (v4.0) 6.5 (v3.1) | Cross-database write retargeting via unvalidated dotte… |
MongoDB |
GO Driver |
2026-08-27T18:31:45.450Z | 2026-08-28T15:52:13.039Z |
| cve-2026-81523 | 2 (v4.0) 4.4 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
libmongocrypt |
2026-08-27T18:32:24.206Z | 2026-08-28T15:51:12.001Z |
| cve-2026-81524 | 5.3 (v4.0) 5.4 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
C Driver |
2026-08-27T18:32:25.355Z | 2026-08-28T15:50:10.011Z |
| cve-2026-81525 | 8.6 (v4.0) 8.1 (v3.1) | Cross-tenant database retargeting via dot/NUL injectio… |
MongoDB |
PHP Library |
2026-08-27T18:32:26.493Z | 2026-08-28T15:49:03.964Z |
| cve-2026-81526 | 7.1 (v4.0) 6.5 (v3.1) | Cross-database write redirection via unvalidated dotte… |
MongoDB |
Rust Driver |
2026-08-27T18:32:27.704Z | 2026-08-28T15:48:02.435Z |
| cve-2026-81527 | 6.9 (v4.0) 6.5 (v3.1) | NoSQL injection via unquoted constant GroupBy keys in … |
MongoDB |
C# Driver |
2026-08-27T18:32:28.926Z | 2026-08-28T15:46:55.682Z |
| cve-2026-81528 | 5.3 (v4.0) 5.4 (v3.1) | NoSQL injection via array replacement bypassing update… |
MongoDB |
C# Driver |
2026-08-27T18:32:30.215Z | 2026-08-28T15:45:22.840Z |
| cve-2026-82239 | 8.6 (v4.0) 8.1 (v3.1) | Budibase before 3.41.3 Authorization Bypass via dataso… |
budibase |
server |
2026-08-28T10:49:28.004Z | 2026-08-28T15:44:26.965Z |
| cve-2026-81530 | 6.8 (v4.0) 5.6 (v3.1) | KMS master key exposure via unredacted credential seri… |
MongoDB |
C# Driver |
2026-08-27T18:32:32.877Z | 2026-08-28T15:44:10.176Z |
| cve-2026-34616 | 5.5 (v3.1) | DNG SDK | Out-of-bounds Read (CWE-125) |
Adobe |
Adobe DNG Software Development Kit (SDK) |
2026-08-27T18:33:58.874Z | 2026-08-28T15:42:40.150Z |
| cve-2026-82244 | 9.4 (v4.0) 9.1 (v3.1) | Budibase before 3.41.3 Remote Code Execution via Plugi… |
budibase |
server |
2026-08-28T10:49:31.426Z | 2026-08-28T15:40:15.664Z |
| cve-2026-18374 | 4.9 (v3.1) | Passing an effectively empty string to the `,ccs=… |
The GNU C Library |
glibc |
2026-08-27T19:20:40.426Z | 2026-08-28T15:37:10.821Z |
| cve-2026-81931 | 4.8 (v4.0) | Unrestricted upload of file with dangerous type in Pro… |
Roskus |
Prospero Flow CRM |
2026-08-27T19:33:27.288Z | 2026-08-28T15:36:24.352Z |
| cve-2026-77438 | Trilium unauthenticated share-search discloses passwor… |
TriliumNext |
Trilium |
2026-08-27T19:52:55.731Z | 2026-08-28T15:35:12.098Z | |
| cve-2026-81847 | MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal |
MAA-AI |
MaaMCP |
2026-08-27T22:15:13.010Z | 2026-08-28T15:34:36.405Z | |
| cve-2026-81837 | RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts p… |
RooCodeInc |
Roo-Code |
2026-08-27T21:30:11.939Z | 2026-08-28T15:32:48.327Z | |
| cve-2026-81834 | RooCodeInc Roo-Code README File ExecaTerminalProcess c… |
RooCodeInc |
Roo-Code |
2026-08-27T20:00:08.895Z | 2026-08-28T15:32:38.871Z | |
| cve-2026-44629 | 7.9 (v3.1) | Improper access control to the Synergis Softwire … |
Genetec Inc. |
Synergis Softwire |
2026-08-27T22:08:52.736Z | 2026-08-28T15:32:08.304Z |
| cve-2026-77341 | cpp-httplib: CRLF injection via unvalidated HTTP trail… |
yhirose |
cpp-httplib |
2026-08-27T22:16:45.356Z | 2026-08-28T15:30:02.142Z | |
| cve-2026-17610 | 6 (v4.0) | RAIL 802.15.4 Mux missing ACK can lead to DoS |
Silicon Labs |
SiSDK |
2026-08-27T22:17:09.467Z | 2026-08-28T15:29:13.052Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-587 | Multiples vulnérabilités dans les produits Foxit | 2022-06-28T00:00:00.000000 | 2022-06-28T00:00:00.000000 |
| certfr-2022-avi-586 | Multiples vulnérabilités dans Google ChromeOS | 2022-06-28T00:00:00.000000 | 2022-06-28T00:00:00.000000 |
| certfr-2022-avi-585 | Vulnérabilité dans le noyau Linux d'Ubuntu | 2022-06-28T00:00:00.000000 | 2022-06-28T00:00:00.000000 |
| certfr-2022-avi-575 | Vulnérabilité dans OpenSSL c_rehash | 2022-06-22T00:00:00.000000 | 2022-06-28T00:00:00.000000 |
| certfr-2022-avi-584 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-583 | Multiples vulnérabilités dans Synology Router Manager (SRM) | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-582 | Multiples vulnérabilités dans les produits Citrix | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-581 | Multiples vulnérabilités dans Microsoft Edge | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-580 | Multiples vulnérabilités dans IBM Db2 | 2022-06-27T00:00:00.000000 | 2022-06-27T00:00:00.000000 |
| certfr-2022-avi-579 | Vulnérabilité dans Apache Tomcat | 2022-06-23T00:00:00.000000 | 2022-06-23T00:00:00.000000 |
| certfr-2022-avi-578 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-577 | Vulnérabilité dans les produits QNAP | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-576 | Multiples vulnérabilités dans Google Chrome | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-574 | Vulnérabilité dans Siemens SIMATIC WinCC OA | 2022-06-22T00:00:00.000000 | 2022-06-22T00:00:00.000000 |
| certfr-2022-avi-573 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-21T00:00:00.000000 | 2022-06-21T00:00:00.000000 |
| certfr-2022-avi-572 | Vulnérabilité dans les produits IBM | 2022-06-21T00:00:00.000000 | 2022-06-21T00:00:00.000000 |
| certfr-2022-avi-571 | Vulnérabilité dans VMware Spring Data MongoDB | 2022-06-21T00:00:00.000000 | 2022-06-21T00:00:00.000000 |
| certfr-2022-avi-570 | Multiples vulnérabilités dans les produits IBM | 2022-06-20T00:00:00.000000 | 2022-06-20T00:00:00.000000 |
| certfr-2022-avi-569 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-20T00:00:00.000000 | 2022-06-20T00:00:00.000000 |
| certfr-2022-avi-568 | Multiples vulnérabilités dans les produits IBM | 2022-06-17T00:00:00.000000 | 2022-06-17T00:00:00.000000 |
| certfr-2022-avi-567 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-06-17T00:00:00.000000 | 2022-06-17T00:00:00.000000 |
| certfr-2022-avi-566 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2022-06-17T00:00:00.000000 | 2022-06-17T00:00:00.000000 |
| certfr-2022-avi-565 | Multiples vulnérabilités dans Google ChromeOS | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-564 | Multiples vulnérabilités dans Tenable Nessus Agent | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-563 | Vulnérabilité dans VMware Spring Cloud Function | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-562 | Vulnérabilité dans VMware HCX | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-561 | Multiples vulnérabilités dans IBM HTTP Server | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-560 | Multiples vulnérabilités dans les produits Cisco | 2022-06-16T00:00:00.000000 | 2022-06-16T00:00:00.000000 |
| certfr-2022-avi-559 | Multiples vulnérabilités dans les produits Microsoft | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |
| certfr-2022-avi-558 | Vulnérabilité dans Microsoft .Net | 2022-06-15T00:00:00.000000 | 2022-06-15T00:00:00.000000 |