Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-54134 | OctoPrint: File exfiltration possible via query parame… |
OctoPrint |
OctoPrint |
2026-08-21T18:28:15.925Z | 2026-08-26T17:34:27.359Z | |
| cve-2026-35163 | OctoPrint: XSS in Suppressed Command Notifications |
OctoPrint |
OctoPrint |
2026-08-21T18:25:49.564Z | 2026-08-21T19:53:55.905Z | |
| cve-2026-63466 | Unleash: Global Mustache.escape override disables HTML… |
Unleash |
unleash |
2026-08-21T18:21:46.526Z | 2026-08-21T21:43:35.526Z | |
| cve-2026-63462 | Unleash: Unauthenticated single-request DoS via OpenAP… |
Unleash |
unleash |
2026-08-21T18:12:32.807Z | 2026-08-25T17:33:23.689Z | |
| cve-2026-63004 | Unleash: Addon webhook URL is dialed server-side with … |
Unleash |
unleash |
2026-08-21T18:05:20.458Z | 2026-08-21T19:22:22.158Z | |
| cve-2026-71862 | Checkmate: Sensitive Bearer Token Exposure via Public … |
bluewave-labs |
Checkmate |
2026-08-21T18:00:32.871Z | 2026-08-21T21:43:42.303Z | |
| cve-2026-70656 | Checkmate: Regular Expression Denial of Service (ReDoS… |
bluewave-labs |
Checkmate |
2026-08-21T17:59:28.639Z | 2026-08-21T18:07:11.885Z | |
| cve-2026-55241 | Checkmate: Pre-auth Denial of Service via File Upload … |
bluewave-labs |
Checkmate |
2026-08-21T17:57:10.014Z | 2026-08-25T11:51:15.776Z | |
| cve-2026-27875 | 6.9 (v4.0) | Simplex Incident Manager Clear Test |
Johnson Controls |
Simplex Incident Manager / Autocall Fire Administrator |
2026-08-21T17:52:49.383Z | 2026-08-21T20:08:37.055Z |
| cve-2026-71493 | Infracost: Arbitrary file read via config-template rea… |
infracost |
infracost |
2026-08-21T17:52:29.001Z | 2026-08-26T17:33:14.286Z | |
| cve-2026-77237 | 6.5 (v3.1) 8.2 (v4.0) | Missing type validation in xQueueAddToSet in FreeRTOS-Kernel |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:52:13.360Z | 2026-08-21T20:15:45.332Z |
| cve-2026-71494 | Infracost: Terraform Cloud and registry token disclosu… |
infracost |
infracost |
2026-08-21T17:50:43.655Z | 2026-08-21T19:23:57.520Z | |
| cve-2026-62675 | Omnigent: Uploaded Agent Bundle Allows Authenticated R… |
omnigent-ai |
omnigent |
2026-08-21T17:49:00.242Z | 2026-08-21T18:11:40.698Z | |
| cve-2026-77236 | 7.3 (v3.1) 8.3 (v4.0) | Missing size validation in SecureContext_AllocateConte… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:47:49.957Z | 2026-08-21T20:15:07.195Z |
| cve-2026-62674 | Omnigent: Shared Agent Bundle Overwrite Leads to Authe… |
omnigent-ai |
omnigent |
2026-08-21T17:47:37.976Z | 2026-08-25T17:43:46.509Z | |
| cve-2026-62677 | Omnigent: Unvalidated os_env.cwd in agent bundle yield… |
omnigent-ai |
omnigent |
2026-08-21T17:44:37.312Z | 2026-08-21T21:43:48.824Z | |
| cve-2026-62676 | Omnigent Guardrail policy bypass: shell-command parser… |
omnigent-ai |
omnigent |
2026-08-21T17:42:21.563Z | 2026-08-26T17:32:00.761Z | |
| cve-2026-77235 | 7.3 (v3.1) 8.3 (v4.0) | Missing privilege check in SecureContext_FreeContext i… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:42:12.312Z | 2026-08-27T16:46:35.660Z |
| cve-2026-77234 | 8.8 (v3.1) 9.3 (v4.0) | Improper input validation in FreeRTOS-Kernel timer com… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:40:04.335Z | 2026-08-27T16:46:43.844Z |
| cve-2026-41451 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via User Substitution in… |
tclahr |
uac |
2026-08-21T17:36:02.423Z | 2026-08-26T17:30:58.128Z |
| cve-2026-41450 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via command_collector.sh |
tclahr |
uac |
2026-08-21T17:35:04.844Z | 2026-08-21T17:47:29.453Z |
| cve-2026-41449 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via run_command.sh |
tclahr |
uac |
2026-08-21T17:33:50.841Z | 2026-08-21T18:10:48.585Z |
| cve-2026-17252 | 7.1 (v4.0) | Unauthenticated Denial of Service via Composed HTTP Pa… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:51.552Z | 2026-09-03T23:30:17.745Z |
| cve-2026-17251 | 7.1 (v4.0) | Unauthenticated Denial of Service via Null Pointer Der… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:45.791Z | 2026-08-21T17:40:36.098Z |
| cve-2026-17250 | 8.5 (v4.0) | Authenticated Remote Code Execution via Stack-Based Bu… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:38.888Z | 2026-08-25T03:56:42.953Z |
| cve-2026-74583 | net/sched: cls_route: fix fastmap use-after-free on filter |
Linux |
Linux |
2026-08-21T16:31:55.886Z | 2026-08-25T05:40:10.077Z | |
| cve-2026-74582 | packet: use consistent hard_header_len in non-ring sen… |
Linux |
Linux |
2026-08-21T16:31:55.283Z | 2026-08-27T12:39:47.499Z | |
| cve-2026-74581 | net: ipv6: clear suppressed fib6 rule result |
Linux |
Linux |
2026-08-21T16:31:54.683Z | 2026-08-25T05:40:07.594Z | |
| cve-2026-74580 | vhost: reset the vring metadata cache on vring reconfi… |
Linux |
Linux |
2026-08-21T16:31:54.076Z | 2026-08-25T05:40:06.380Z | |
| cve-2026-39909 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-02T21:26:27.029Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'vulncheck'}} | N/A | N/A | 2026-08-21T16:28:26.774Z | 2026-09-02T21:26:27.029Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-516 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-515 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-514 | Multiples vulnérabilités dans Microsoft Edge | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-513 | Multiples vulnérabilités dans Google Chrome | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-512 | Multiples vulnérabilités dans Mozilla Thunderbird | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-511 | Multiples vulnérabilités dans Mozilla Firefox | 2022-06-01T00:00:00.000000 | 2022-06-02T00:00:00.000000 |
| certfr-2022-avi-510 | Multiples vulnérabilités dans IBM QRadar | 2022-06-01T00:00:00.000000 | 2022-06-01T00:00:00.000000 |
| certfr-2022-avi-509 | Vulnérabilité dans Elasticsearch | 2022-05-31T00:00:00.000000 | 2022-05-31T00:00:00.000000 |
| certfr-2022-avi-508 | Vulnérabilité dans Nextcloud Server | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-507 | Vulnérabilité dans Grafana | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-506 | Multiples vulnérabilités dans Ruby on Rails | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-505 | Multiples vulnérabilités dans Google Chrome OS | 2022-05-30T00:00:00.000000 | 2022-05-30T00:00:00.000000 |
| certfr-2022-avi-504 | Multiples vulnérabilités dans Tenable Nessus | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-503 | Vulnérabilité dans QNAP Proxy Server | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-502 | Vulnérabilité dans les produits F-Secure | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-501 | Vulnérabilité dans Drupal Core | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-500 | Vulnérabilité dans le client ownCloud Desktop | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-499 | Multiples vulnérabilités dans les produits Citrix | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-498 | Vulnérabilité dans IBM Spectrum Control | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-497 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-27T00:00:00.000000 | 2022-05-27T00:00:00.000000 |
| certfr-2022-avi-496 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |
| certfr-2022-avi-495 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |
| certfr-2022-avi-494 | Multiples vulnérabilités dans les produits IBM | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |
| certfr-2022-avi-493 | Vulnérabilité dans VMware Tools | 2022-05-25T00:00:00.000000 | 2022-05-25T00:00:00.000000 |
| certfr-2022-avi-492 | Vulnérabilité dans le noyau Linux de Red Hat | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-491 | Multiples vulnérabilités dans Google Chrome OS | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-490 | Vulnérabilité dans le noyau Linux de SUSE | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-489 | Multiples vulnérabilités dans IBM Spectrum Scale | 2022-05-24T00:00:00.000000 | 2022-05-24T00:00:00.000000 |
| certfr-2022-avi-488 | Multiples vulnérabilités dans les produits F-Secure | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-487 | Multiples vulnérabilités dans les produits IBM | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |