Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-41450 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via command_collector.sh |
tclahr |
uac |
2026-08-21T17:35:04.844Z | 2026-08-21T17:47:29.453Z |
| cve-2026-41449 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via run_command.sh |
tclahr |
uac |
2026-08-21T17:33:50.841Z | 2026-08-21T18:10:48.585Z |
| cve-2026-17252 | 7.1 (v4.0) | Unauthenticated Denial of Service via Composed HTTP Pa… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:51.552Z | 2026-09-03T23:30:17.745Z |
| cve-2026-17251 | 7.1 (v4.0) | Unauthenticated Denial of Service via Null Pointer Der… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:45.791Z | 2026-08-21T17:40:36.098Z |
| cve-2026-17250 | 8.5 (v4.0) | Authenticated Remote Code Execution via Stack-Based Bu… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:38.888Z | 2026-08-25T03:56:42.953Z |
| cve-2026-74583 | net/sched: cls_route: fix fastmap use-after-free on filter |
Linux |
Linux |
2026-08-21T16:31:55.886Z | 2026-08-25T05:40:10.077Z | |
| cve-2026-74582 | packet: use consistent hard_header_len in non-ring sen… |
Linux |
Linux |
2026-08-21T16:31:55.283Z | 2026-08-27T12:39:47.499Z | |
| cve-2026-74581 | net: ipv6: clear suppressed fib6 rule result |
Linux |
Linux |
2026-08-21T16:31:54.683Z | 2026-08-25T05:40:07.594Z | |
| cve-2026-74580 | vhost: reset the vring metadata cache on vring reconfi… |
Linux |
Linux |
2026-08-21T16:31:54.076Z | 2026-08-25T05:40:06.380Z | |
| cve-2026-39909 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-02T21:26:27.029Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'vulncheck'}} | N/A | N/A | 2026-08-21T16:28:26.774Z | 2026-09-02T21:26:27.029Z |
| cve-2026-54789 | mod_auth_openidc has out-of-bounds read and write in s… |
OpenIDC |
mod_auth_openidc |
2026-08-21T16:13:23.073Z | 2026-09-02T19:06:57.449Z | |
| cve-2026-22681 | 8.3 (v4.0) 8.5 (v3.1) | OpenViking < 0.3.4 SSRF via /api/v1/resources |
Volcengine |
OpenViking |
2026-08-21T16:13:07.416Z | 2026-08-21T16:45:44.095Z |
| cve-2026-75933 | Jet Admin Stored XSS |
Jet Admin |
Jet Admin |
2026-08-21T16:11:47.849Z | 2026-08-21T16:46:26.315Z | |
| cve-2026-75932 | Jet Admin tenant isolation failure |
Jet Admin |
Jet Admin |
2026-08-21T16:11:24.871Z | 2026-08-21T16:45:46.719Z | |
| cve-2026-75928 | Brushfire unauthenticated information disclosure |
Brushfire |
Online Experience |
2026-08-21T16:10:59.762Z | 2026-08-21T16:44:39.357Z | |
| cve-2026-49114 | ONNX symlink-following and path-traversal arbitrary fi… |
ONNX |
ONNX |
2026-08-21T16:10:56.241Z | 2026-08-21T16:43:10.933Z | |
| cve-2026-69502 | 10 (v3.1) | Azure SQL Database Elevation of Privilege Vulnerability |
Microsoft |
Azure SQL Database |
2026-08-21T16:03:56.685Z | 2026-09-03T21:26:14.097Z |
| cve-2026-77815 | 8.7 (v4.0) 7.5 (v3.1) | Infinite Image Browsing Resolves Paths With normpath, … |
zanllp |
infinite-image-browsing |
2026-08-21T15:03:09.325Z | 2026-08-26T17:30:14.359Z |
| cve-2026-77814 | 8.7 (v4.0) 7.5 (v3.1) | Infinite Image Browsing is_path_trusted Prefix Compari… |
zanllp |
infinite-image-browsing |
2026-08-21T15:03:08.589Z | 2026-08-21T17:33:29.308Z |
| cve-2026-77087 | 9.4 (v4.0) 9.6 (v3.1) | Paperclip before 0.3.1 Remote Code Execution via DNS R… |
paperclipai |
paperclip |
2026-08-21T15:03:07.894Z | 2026-08-21T15:51:14.365Z |
| cve-2026-50278 | iccDEV: CIccEmbedIO::Read8() size_t underflow |
InternationalColorConsortium |
iccDEV |
2026-08-21T14:57:10.283Z | 2026-08-26T17:29:06.120Z | |
| cve-2026-63343 | Arbitrary File Read/Write: metadata.yaml symlink in im… |
lxc |
incus |
2026-08-21T14:53:26.109Z | 2026-08-21T21:44:03.623Z | |
| cve-2026-63125 | Incus vulnerable to root RCE via image backup.yaml symlink |
lxc |
incus |
2026-08-21T14:49:16.844Z | 2026-08-21T15:02:55.718Z | |
| cve-2026-62941 | Incus: Cross-project instance copy bypasses target pro… |
lxc |
incus |
2026-08-21T14:47:56.724Z | 2026-08-21T16:44:16.507Z | |
| cve-2026-62940 | Incus has a project restriction bypass via instance mi… |
lxc |
incus |
2026-08-21T14:47:13.386Z | 2026-08-21T15:13:46.664Z | |
| cve-2026-75501 | N/A | CVE-2026-75501 |
Calix |
GS7 XGS (GS5239XG) |
2026-08-21T14:47:04.279Z | 2026-08-25T19:26:53.449Z |
| cve-2026-62867 | Incus has an argument injection in storage volume bloc… |
lxc |
incus |
2026-08-21T14:45:35.859Z | 2026-08-21T21:44:10.367Z | |
| cve-2026-62313 | Incus: Project restriction `restricted.containers.priv… |
lxc |
incus |
2026-08-21T14:44:27.324Z | 2026-08-26T17:27:33.674Z | |
| cve-2026-55622 | Incus has a project restriction bypass in instance cop… |
lxc |
incus |
2026-08-21T14:40:35.432Z | 2026-08-21T15:35:57.698Z | |
| cve-2026-55621 | Incus has a project restriction bypass for custom volu… |
lxc |
incus |
2026-08-21T14:39:43.775Z | 2026-08-21T16:41:23.236Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-486 | Vulnérabilité dans le noyau Linux de SUSE | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-485 | Multiples vulnérabilités dans Mozilla Thunderbird | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-484 | Multiples vulnérabilités dans Mozilla Firefox et Firefox ESR | 2022-05-23T00:00:00.000000 | 2022-05-23T00:00:00.000000 |
| certfr-2022-avi-483 | Multiples vulnérabilités dans les produits Nextcloud | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-482 | Vulnérabilité dans Oracle E-Business Suite | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-481 | Multiples vulnérabilités dans les produits IBM | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-480 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-479 | Vulnérabilité dans Grafana Enterprise | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-478 | Vulnérabilité dans le noyau Linux de Red Hat | 2022-05-20T00:00:00.000000 | 2022-05-20T00:00:00.000000 |
| certfr-2022-avi-477 | Vulnérabilité dans IBM PowerVC | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-476 | Multiples vulnérabilités dans les produits VMware | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-475 | Multiples vulnérabilités dans Trend Micro Apex One | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-474 | Vulnérabilité dans ISC Bind | 2022-05-19T00:00:00.000000 | 2022-05-19T00:00:00.000000 |
| certfr-2022-avi-473 | Multiples vulnérabilités dans les produits Aruba | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-472 | Multiples vulnérabilités dans les produits IBM | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-471 | Vulnérabilité dans SolarWinds Serv-U | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-470 | Vulnérabilité dans VMware Sping Security | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-469 | Vulnérabilité dans SonicWall SSL-VPN SMA100 | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-468 | Multiples vulnérabilités dans Moodle | 2022-05-18T00:00:00.000000 | 2022-05-18T00:00:00.000000 |
| certfr-2022-avi-467 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-17T00:00:00.000000 | 2022-05-17T00:00:00.000000 |
| certfr-2022-avi-466 | Multiples vulnérabilités dans les produits Apple | 2022-05-17T00:00:00.000000 | 2022-05-17T00:00:00.000000 |
| certfr-2022-avi-465 | Vulnérabilité dans VMware Spring Security | 2022-05-17T00:00:00.000000 | 2022-05-17T00:00:00.000000 |
| certfr-2022-avi-464 | Multiples vulnérabilités dans Microsoft Edge | 2022-05-16T00:00:00.000000 | 2022-05-16T00:00:00.000000 |
| certfr-2022-avi-463 | Vulnérabilité dans OpenLDAP | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-462 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-461 | Multiples vulnérabilités dans SonicWall SSLVPN SMA 1000 | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-460 | Vulnérabilité dans PostgreSQL | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-459 | Multiples vulnérabilités dans les produits IBM | 2022-05-13T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-458 | Multiples vulnérabilités dans les produits Check Point | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-457 | Vulnérabilité dans Stormshield Network Security | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |