Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-59274 | 6.5 (v3.1) | Unbounded decompression in UnZipTransformer enables zi… |
Spring |
Spring Integration |
2026-08-27T05:20:35.041Z | 2026-08-27T14:13:56.857Z |
| cve-2025-62341 | 3.7 (v3.1) | HCL Connections is vulnerable to server-side request f… |
HCLSoftware |
Connections |
2026-08-26T22:15:56.136Z | 2026-08-27T14:13:47.312Z |
| cve-2026-40877 | Combodo iTop: PHP Object Injection Leading to Remote C… |
Combodo |
iTop |
2026-08-24T18:57:55.017Z | 2026-08-27T14:10:34.908Z | |
| cve-2026-47666 | Penpot: Stored XSS via custom font family name injecte… |
penpot |
penpot |
2026-08-26T22:47:49.788Z | 2026-08-27T14:08:58.826Z | |
| cve-2026-80183 | 7.1 (v4.0) | In OpenStack Keystone before 29.0.3, any authenti… |
OpenStack |
Keystone |
2026-08-26T23:16:43.059Z | 2026-08-27T14:08:09.543Z |
| cve-2026-47845 | 5.3 (v3.1) | Reactor Netty HTTP Server may incorrectly evaluate pro… |
Spring |
Reactor Netty |
2026-08-26T23:28:39.360Z | 2026-08-27T14:02:35.899Z |
| cve-2026-81421 | ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-… |
ddfourtwo |
sentry-selfhosted-mcp |
2026-08-26T23:45:09.560Z | 2026-08-27T14:01:32.252Z | |
| cve-2026-71941 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:04.706Z | 2026-08-27T13:53:21.910Z |
| cve-2026-62326 | Weblate Has Uncontrolled Resource Consumption via |
WeblateOrg |
weblate |
2026-08-26T20:36:25.043Z | 2026-08-27T13:52:30.709Z | |
| cve-2026-71936 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models Buffer Overflow vi… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:08:01.136Z | 2026-08-27T13:52:16.469Z |
| cve-2026-55227 | Observable object existence disclosure in private Webl… |
WeblateOrg |
weblate |
2026-08-26T20:10:39.333Z | 2026-08-27T13:51:40.681Z | |
| cve-2026-71931 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:57.684Z | 2026-08-27T13:51:25.835Z |
| cve-2026-71926 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:54.287Z | 2026-08-27T13:50:32.141Z |
| cve-2026-54245 | Fleet: SQL injection in Okta conditional access endpoi… |
fleetdm |
fleet |
2026-08-26T19:13:22.415Z | 2026-08-27T13:49:51.927Z | |
| cve-2026-71921 | 9.3 (v4.0) 9.8 (v3.1) | DrayTek VigorSwitch Multiple Models Pre-Authentication… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:50.939Z | 2026-08-27T13:49:51.843Z |
| cve-2026-71916 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorSwitch Multiple Models OS Command Injecti… |
DrayTek Corporation |
VigorSwitch G2540xs |
2026-08-24T17:07:47.614Z | 2026-08-27T13:49:12.955Z |
| cve-2026-77611 | SeaweedFS: Authenticated S3 object-scope bypass in Put… |
seaweedfs |
seaweedfs |
2026-08-26T21:31:27.046Z | 2026-08-27T13:48:29.258Z | |
| cve-2026-55182 | LibreNMS: Remote Code Execution by Signal Alert Transp… |
librenms |
librenms |
2026-08-26T21:50:04.014Z | 2026-08-27T13:47:10.632Z | |
| cve-2026-74233 | 9.3 (v4.0) 9.8 (v3.1) | Zbtlink MQWrt infosrvd Command Injection |
Zbtlink |
WE1326 |
2026-08-27T10:40:11.313Z | 2026-08-27T13:41:32.924Z |
| cve-2026-79040 | N/A | Uninitialized resource in GPU in Google Chrome on… |
Google |
Chrome |
2026-08-25T20:10:51.182Z | 2026-08-27T13:38:31.458Z |
| cve-2026-59355 | 6.1 (v3.1) | Spring Authorization Server: Open Redirect via request… |
VMware |
Spring Authorization Server |
2026-08-27T06:35:09.607Z | 2026-08-27T13:37:30.618Z |
| cve-2026-19441 | 5.3 (v3.1) | Unauthenticated API Allows Analytics Data Manipulation… |
IKAS Technology Inc. |
Rush |
2026-08-21T07:55:42.402Z | 2026-08-27T13:37:13.859Z |
| cve-2026-79028 | N/A | Observable discrepancy in Network in Google Chrom… |
Google |
Chrome |
2026-08-25T20:10:16.864Z | 2026-08-27T13:35:22.092Z |
| cve-2026-81573 | 8.6 (v3.1) | Improper Access Control in Local-Only Configuration Commands |
wibu-systems-ag |
codemeter-runtime |
2026-08-27T07:09:09.122Z | 2026-08-27T13:33:47.763Z |
| cve-2026-81574 | 8.2 (v3.1) | Format String Vulnerability in Logger |
wibu-systems-ag |
codemeter-runtime |
2026-08-27T07:11:56.916Z | 2026-08-27T13:32:50.315Z |
| cve-2026-81575 | 7.5 (v3.1) | Missing Sanity Checks for Buffer Lengths |
wibu-systems-ag |
codemeter-runtime |
2026-08-27T07:13:19.937Z | 2026-08-27T13:28:47.967Z |
| cve-2026-10573 | 6.3 (v4.0) | 1734 POINT I/OTM - Denial of Service via Malformed Inp… |
Rockwell Automation |
1734 POINT I/O |
2026-07-14T14:54:39.924Z | 2026-08-27T13:26:59.261Z |
| cve-2026-47861 | 6.3 (v3.1) | UDP adapter sends ack to attacker-supplied host:port p… |
Spring |
Spring Integration |
2026-08-26T23:49:25.980Z | 2026-08-27T13:14:00.079Z |
| cve-2026-81576 | 7.7 (v3.1) | Improper Authentication of Session Handles |
wibu-systems-ag |
codemeter-runtime |
2026-08-27T07:14:11.299Z | 2026-08-27T13:13:33.594Z |
| cve-2026-47874 | 5.3 (v3.1) | Reactor Netty HTTP Server Denial of Service With Pipel… |
Spring |
Reactor Netty |
2026-08-26T23:49:26.907Z | 2026-08-27T13:12:29.108Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2020-avi-642 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-641 | Multiples vulnérabilités dans le Plug-in Citrix Gateway pour Windows | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-640 | Multiples vulnérabilités dans Google Chrome OS | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-639 | Vulnérabilité dans F5 BIG-IP | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-638 | Vulnérabilité dans IBM QRadar SIEM | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-637 | Multiples vulnérabilités dans le noyau Linux d'Ubuntu | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-636 | Multiples vulnérabilités dans les produits Microsoft | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-635 | Vulnérabilité dans Microsoft .Net | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-634 | Multiples vulnérabilités dans Microsoft Windows | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-633 | Multiples vulnérabilités dans Microsoft Office | 2020-10-14T00:00:00.000000 | 2020-10-14T00:00:00.000000 |
| certfr-2020-avi-632 | Multiples vulnérabilités dans les produits Siemens | 2020-10-13T00:00:00.000000 | 2020-10-13T00:00:00.000000 |
| certfr-2020-avi-631 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2020-10-13T00:00:00.000000 | 2020-10-13T00:00:00.000000 |
| certfr-2020-avi-630 | Multiples vulnérabilités dans les produits SAP | 2020-10-13T00:00:00.000000 | 2020-10-13T00:00:00.000000 |
| certfr-2020-avi-629 | Multiples vulnérabilités dans les produits IBM | 2020-10-13T00:00:00.000000 | 2020-10-13T00:00:00.000000 |
| certfr-2020-avi-628 | Multiples vulnérabilités dans phpMyAdmin | 2020-10-12T00:00:00.000000 | 2020-10-12T00:00:00.000000 |
| certfr-2020-avi-627 | Multiples vulnérabilités dans IBM Db2 | 2020-10-12T00:00:00.000000 | 2020-10-12T00:00:00.000000 |
| certfr-2020-avi-626 | Multiples vulnérabilités dans Apache Tomcat | 2020-10-12T00:00:00.000000 | 2020-10-12T00:00:00.000000 |
| certfr-2020-avi-625 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2020-10-09T00:00:00.000000 | 2020-10-09T00:00:00.000000 |
| certfr-2020-avi-624 | Vulnérabilité dans Ruby on Rails | 2020-10-08T00:00:00.000000 | 2020-10-09T00:00:00.000000 |
| certfr-2020-avi-623 | Vulnérabilité dans le noyau Linux de Red Hat | 2020-10-08T00:00:00.000000 | 2020-10-08T00:00:00.000000 |
| certfr-2020-avi-622 | Multiples vulnérabilités dans les produits Cisco | 2020-10-08T00:00:00.000000 | 2020-10-08T00:00:00.000000 |
| certfr-2020-avi-621 | Multiples vulnérabilités dans Google Chrome | 2020-10-07T00:00:00.000000 | 2020-10-07T00:00:00.000000 |
| certfr-2020-avi-620 | Multiples vulnérabilités dans Mozilla Thunderbird | 2020-10-07T00:00:00.000000 | 2020-10-07T00:00:00.000000 |
| certfr-2020-avi-619 | Multiples vulnérabilités dans Google Android | 2020-10-06T00:00:00.000000 | 2020-10-06T00:00:00.000000 |
| certfr-2020-avi-618 | Multiples vulnérabilités dans les produits Stormshield | 2020-10-05T00:00:00.000000 | 2020-10-05T00:00:00.000000 |
| certfr-2020-avi-617 | Multiples vulnérabilités dans GitLab | 2020-10-02T00:00:00.000000 | 2020-10-02T00:00:00.000000 |
| certfr-2020-avi-616 | Multiples vulnérabilités dans Apple macOS | 2020-10-02T00:00:00.000000 | 2020-10-02T00:00:00.000000 |
| certfr-2020-avi-615 | Multiples vulnérabilités dans PHP | 2020-10-02T00:00:00.000000 | 2020-10-02T00:00:00.000000 |
| certfr-2020-avi-614 | Multiples vulnérabilités dans le noyau Linux de Debian LTS | 2020-10-02T00:00:00.000000 | 2020-10-02T00:00:00.000000 |
| certfr-2020-avi-613 | Vulnérabilité dans Fortinet FortiOS | 2020-10-01T00:00:00.000000 | 2020-10-01T00:00:00.000000 |