Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-71862 | Checkmate: Sensitive Bearer Token Exposure via Public … |
bluewave-labs |
Checkmate |
2026-08-21T18:00:32.871Z | 2026-08-21T21:43:42.303Z | |
| cve-2026-70656 | Checkmate: Regular Expression Denial of Service (ReDoS… |
bluewave-labs |
Checkmate |
2026-08-21T17:59:28.639Z | 2026-08-21T18:07:11.885Z | |
| cve-2026-55241 | Checkmate: Pre-auth Denial of Service via File Upload … |
bluewave-labs |
Checkmate |
2026-08-21T17:57:10.014Z | 2026-08-25T11:51:15.776Z | |
| cve-2026-27875 | 6.9 (v4.0) | Simplex Incident Manager Clear Test |
Johnson Controls |
Simplex Incident Manager / Autocall Fire Administrator |
2026-08-21T17:52:49.383Z | 2026-08-21T20:08:37.055Z |
| cve-2026-71493 | Infracost: Arbitrary file read via config-template rea… |
infracost |
infracost |
2026-08-21T17:52:29.001Z | 2026-08-26T17:33:14.286Z | |
| cve-2026-77237 | 6.5 (v3.1) 8.2 (v4.0) | Missing type validation in xQueueAddToSet in FreeRTOS-Kernel |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:52:13.360Z | 2026-08-21T20:15:45.332Z |
| cve-2026-71494 | Infracost: Terraform Cloud and registry token disclosu… |
infracost |
infracost |
2026-08-21T17:50:43.655Z | 2026-08-21T19:23:57.520Z | |
| cve-2026-62675 | Omnigent: Uploaded Agent Bundle Allows Authenticated R… |
omnigent-ai |
omnigent |
2026-08-21T17:49:00.242Z | 2026-08-21T18:11:40.698Z | |
| cve-2026-77236 | 7.3 (v3.1) 8.3 (v4.0) | Missing size validation in SecureContext_AllocateConte… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:47:49.957Z | 2026-08-21T20:15:07.195Z |
| cve-2026-62674 | Omnigent: Shared Agent Bundle Overwrite Leads to Authe… |
omnigent-ai |
omnigent |
2026-08-21T17:47:37.976Z | 2026-08-25T17:43:46.509Z | |
| cve-2026-62677 | Omnigent: Unvalidated os_env.cwd in agent bundle yield… |
omnigent-ai |
omnigent |
2026-08-21T17:44:37.312Z | 2026-08-21T21:43:48.824Z | |
| cve-2026-62676 | Omnigent Guardrail policy bypass: shell-command parser… |
omnigent-ai |
omnigent |
2026-08-21T17:42:21.563Z | 2026-08-26T17:32:00.761Z | |
| cve-2026-77235 | 7.3 (v3.1) 8.3 (v4.0) | Missing privilege check in SecureContext_FreeContext i… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:42:12.312Z | 2026-08-27T16:46:35.660Z |
| cve-2026-77234 | 8.8 (v3.1) 9.3 (v4.0) | Improper input validation in FreeRTOS-Kernel timer com… |
FreeRTOS |
FreeRTOS-Kernel |
2026-08-21T17:40:04.335Z | 2026-08-27T16:46:43.844Z |
| cve-2026-41451 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via User Substitution in… |
tclahr |
uac |
2026-08-21T17:36:02.423Z | 2026-08-26T17:30:58.128Z |
| cve-2026-41450 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via command_collector.sh |
tclahr |
uac |
2026-08-21T17:35:04.844Z | 2026-08-21T17:47:29.453Z |
| cve-2026-41449 | 8.5 (v4.0) 7.8 (v3.1) | UAC < 3.3.0 Command Injection via run_command.sh |
tclahr |
uac |
2026-08-21T17:33:50.841Z | 2026-08-21T18:10:48.585Z |
| cve-2026-17252 | 7.1 (v4.0) | Unauthenticated Denial of Service via Composed HTTP Pa… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:51.552Z | 2026-09-03T23:30:17.745Z |
| cve-2026-17251 | 7.1 (v4.0) | Unauthenticated Denial of Service via Null Pointer Der… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:45.791Z | 2026-08-21T17:40:36.098Z |
| cve-2026-17250 | 8.5 (v4.0) | Authenticated Remote Code Execution via Stack-Based Bu… |
TP-Link Systems Inc. |
TL-MR6400 v7.0 |
2026-08-21T17:16:38.888Z | 2026-08-25T03:56:42.953Z |
| cve-2026-74583 | net/sched: cls_route: fix fastmap use-after-free on filter |
Linux |
Linux |
2026-08-21T16:31:55.886Z | 2026-08-25T05:40:10.077Z | |
| cve-2026-74582 | packet: use consistent hard_header_len in non-ring sen… |
Linux |
Linux |
2026-08-21T16:31:55.283Z | 2026-08-27T12:39:47.499Z | |
| cve-2026-74581 | net: ipv6: clear suppressed fib6 rule result |
Linux |
Linux |
2026-08-21T16:31:54.683Z | 2026-08-25T05:40:07.594Z | |
| cve-2026-74580 | vhost: reset the vring metadata cache on vring reconfi… |
Linux |
Linux |
2026-08-21T16:31:54.076Z | 2026-08-25T05:40:06.380Z | |
| cve-2026-39909 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-09-02T21:26:27.029Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'vulncheck'}} | N/A | N/A | 2026-08-21T16:28:26.774Z | 2026-09-02T21:26:27.029Z |
| cve-2026-54789 | mod_auth_openidc has out-of-bounds read and write in s… |
OpenIDC |
mod_auth_openidc |
2026-08-21T16:13:23.073Z | 2026-09-02T19:06:57.449Z | |
| cve-2026-22681 | 8.3 (v4.0) 8.5 (v3.1) | OpenViking < 0.3.4 SSRF via /api/v1/resources |
Volcengine |
OpenViking |
2026-08-21T16:13:07.416Z | 2026-08-21T16:45:44.095Z |
| cve-2026-75933 | Jet Admin Stored XSS |
Jet Admin |
Jet Admin |
2026-08-21T16:11:47.849Z | 2026-08-21T16:46:26.315Z | |
| cve-2026-75932 | Jet Admin tenant isolation failure |
Jet Admin |
Jet Admin |
2026-08-21T16:11:24.871Z | 2026-08-21T16:45:46.719Z | |
| cve-2026-75928 | Brushfire unauthenticated information disclosure |
Brushfire |
Online Experience |
2026-08-21T16:10:59.762Z | 2026-08-21T16:44:39.357Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2022-avi-456 | Multiples vulnérabilités dans les produits SAP | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-455 | Multiples vulnérabilités dans les produits Palo Alto Networks | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-454 | Multiples vulnérabilités dans VMware Spring | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-453 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-452 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-451 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-12T00:00:00.000000 | 2022-05-12T00:00:00.000000 |
| certfr-2022-avi-450 | Multiples vulnérabilités dans les produits Microsoft | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-449 | Multiples vulnérabilités dans Microsoft .Net | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-448 | Multiples vulnérabilités dans Microsoft Windows | 2022-05-11T00:00:00.000000 | 2022-05-13T00:00:00.000000 |
| certfr-2022-avi-447 | Multiples vulnérabilités dans Microsoft Office | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-446 | Multiples vulnérabilités dans Microsoft Edge | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-445 | Vulnérabilité dans F5 BIG-IP | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-444 | Multiples vulnérabilités dans les produits Intel | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-443 | Vulnérabilité dans Apache Tomcat | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-442 | Vulnérabilité dans Zimbra | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-441 | Vulnérabilité dans Adobe ColdFusion | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-440 | Multiples vulnérabilités dans Google Chrome | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-439 | Multiples vulnérabilités dans Axis OS | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-438 | Vulnérabilité dans Nextcloud Talk | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-437 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-11T00:00:00.000000 | 2022-05-11T00:00:00.000000 |
| certfr-2022-avi-436 | Multiples vulnérabilités dans les produits Schneider Electric | 2022-05-10T00:00:00.000000 | 2022-08-22T00:00:00.000000 |
| certfr-2022-avi-435 | Multiples vulnérabilités dans les produits Siemens | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-434 | Multiples vulnérabilités dans les produits ESET | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-433 | Vulnérabilité dans les produits F-Secure | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-432 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-431 | Multiples vulnérabilités dans Liferay Portal | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-430 | Multiples vulnérabilités dans Google ChromeOS | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-429 | Multiples vulnérabilités dans Nessus Network Monitor | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-428 | Vulnérabilité dans Microsoft Azure | 2022-05-10T00:00:00.000000 | 2022-05-10T00:00:00.000000 |
| certfr-2022-avi-427 | Multiples vulnérabilités dans Foxit PDF Reader et Foxit PDF Editor | 2022-05-09T00:00:00.000000 | 2022-06-07T00:00:00.000000 |