Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-95673 | N/A | {'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-10-30T19:37:06.679Z'}, 'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-92243. Reason: This candidate is a reservation duplicate of CVE-2026-92243. Notes: All CVE users should reference CVE-2026-92243 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}]} | N/A | N/A | 2026-10-30T19:37:06.679Z | |
| cve-2026-97631 | 9.5 (v4.0) | Pre-boot RCE in EDK II PXE driver |
TianoCore |
EDK2 |
2026-10-22T16:32:27.619Z | 2026-10-30T19:34:40.851Z |
| cve-2026-114487 | N/A | Missing authorization in the PAM AD computer impo… |
Devolutions |
Server |
2026-10-22T15:48:35.922Z | 2026-10-30T19:33:39.484Z |
| cve-2026-115419 | 8.1 (v3.1) 8.6 (v4.0) | Unintended disclosure of data element to wrong session… |
AWS |
strands-agents |
2026-10-22T20:04:04.191Z | 2026-10-30T19:30:50.901Z |
| cve-2026-114655 | 6 (v4.0) 5.9 (v3.1) | KMS request injection via unsanitized key vault and pr… |
MongoDB |
libmongocrypt |
2026-10-22T19:14:00.708Z | 2026-10-30T19:30:19.252Z |
| cve-2026-114654 | 6.9 (v4.0) 6.5 (v3.1) | BSON output corruption via out-of-range binary subtype… |
MongoDB |
C# Driver |
2026-10-22T19:13:59.597Z | 2026-10-30T19:27:57.892Z |
| cve-2026-114653 | 7.1 (v4.0) 6.5 (v3.1) | Silent client-side encryption bypass via unescaped fie… |
MongoDB |
C# Driver |
2026-10-22T19:13:58.414Z | 2026-10-30T19:27:22.054Z |
| cve-2026-62301 | MyTube: Visitor Can Access Hidden Video Metadata and Content |
franklioxygen |
MyTube |
2026-10-30T19:26:59.821Z | 2026-10-30T19:26:59.821Z | |
| cve-2026-114652 | 7.1 (v4.0) 6.5 (v3.1) | Update operator injection via single-element list rewr… |
MongoDB |
C# Driver |
2026-10-22T19:13:57.376Z | 2026-10-30T19:26:33.459Z |
| cve-2026-116693 | dd-trace: ReDOS in URL query string obfuscation |
DataDog |
dd-trace-js |
2026-10-27T20:07:01.195Z | 2026-10-30T19:25:57.583Z | |
| cve-2026-114651 | 6.3 (v4.0) 4 (v3.1) | Cross-document data leak via malformed BSON array pars… |
MongoDB |
C# Driver |
2026-10-22T19:13:56.276Z | 2026-10-30T19:25:16.427Z |
| cve-2026-114136 | Django REST framework: JSONParser applies an attacker-… |
encode |
django-rest-framework |
2026-10-21T20:02:41.030Z | 2026-10-30T19:24:46.203Z | |
| cve-2026-79884 | 8.2 (v3.1) | Authentication Bypass leads to Sensitive Information D… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:06.236Z | 2026-10-30T19:24:08.780Z |
| cve-2026-79883 | 8.3 (v3.1) | Unauthenticated Adjacent Buffer Overflow Vulnerability… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:06:05.048Z | 2026-10-30T19:23:20.891Z |
| cve-2026-114606 | draw.io Desktop: Arbitrary local-file read via read-si… |
jgraph |
drawio-desktop |
2026-10-22T16:35:34.251Z | 2026-10-30T19:22:29.193Z | |
| cve-2026-79882 | 8.3 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:58.892Z | 2026-10-30T19:21:58.048Z |
| cve-2026-118264 | Echo: Rejected WebSocket upgrades can bypass Echo rout… |
labstack |
echo |
2026-10-28T19:03:01.533Z | 2026-10-30T19:21:07.156Z | |
| cve-2026-79881 | 8.5 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:52.551Z | 2026-10-30T19:20:40.960Z |
| cve-2026-118260 | Echo: BodyDump captures request and response bodies wi… |
labstack |
echo |
2026-10-28T18:56:56.747Z | 2026-10-30T19:19:59.727Z | |
| cve-2026-79880 | 8.7 (v3.1) | Authenticated Server-Side Request Forgery leads to Rem… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:51.352Z | 2026-10-30T19:19:17.886Z |
| cve-2026-115569 | Fallow: Jest and Vitest `projects` entries let an anal… |
fallow-rs |
fallow |
2026-10-23T18:09:47.722Z | 2026-10-30T19:18:24.488Z | |
| cve-2026-79879 | 8.8 (v3.1) | Unauthenticated Adjacent Memory Corruption Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:49.285Z | 2026-10-30T19:17:50.418Z |
| cve-2026-79878 | 8.8 (v3.1) | Unauthenticated Adjacent Command Injection Vulnerabili… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:48.100Z | 2026-10-30T19:16:43.724Z |
| cve-2026-114510 | Flexible GraphRAG: Cypher/Graph Injection via broken s… |
stevereiner |
flexible-graphrag |
2026-10-22T14:46:52.353Z | 2026-10-30T19:16:29.340Z | |
| cve-2026-119763 | 6.9 (v4.0) 5.3 (v3.1) | changelog.com before commit 7b35e829 Missing Authoriza… |
thechangelog |
changelog.com |
2026-10-30T17:19:55.269Z | 2026-10-30T19:15:19.502Z |
| cve-2026-79877 | 8.8 (v3.1) | Unauthenticated Adjacent Remote Code Execution Vulnera… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:46.912Z | 2026-10-30T19:14:45.772Z |
| cve-2026-79876 | 9.3 (v3.1) | Unauthenticated Adjacent Sensitive Information Disclos… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:45.563Z | 2026-10-30T19:13:38.215Z |
| cve-2026-79875 | 9.3 (v3.1) | Authentication Bypass in the PAPI Protocol of AOS-8 Al… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:43.906Z | 2026-10-30T19:12:17.655Z |
| cve-2026-79868 | 9.6 (v3.1) | Authentication Bypass Vulnerabilities lead to Complete… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:28.687Z | 2026-10-30T19:11:15.364Z |
| cve-2026-79867 | 9.6 (v3.1) | Authentication Bypass Leading to Remote Code Execution… |
Hewlett Packard Enterprise (HPE) |
ArubaOS (AOS) |
2026-10-22T19:05:26.627Z | 2026-10-30T19:10:04.525Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2018-avi-504 | Vulnérabilité dans Aruba BLE Radio | 2018-10-19T00:00:00.000000 | 2018-10-19T00:00:00.000000 |
| certfr-2018-avi-503 | Vulnérabilité dans Blueimp jQuery-File-Upload | 2018-10-19T00:00:00.000000 | 2018-10-19T00:00:00.000000 |
| certfr-2018-avi-502 | Multiples vulnérabilités dans les produits Cisco | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-501 | Multiples vulnérabilités dans Drupal | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-500 | Multiples vulnérabilités dans Moxa ThingsPro Gateway | 2018-10-18T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-490 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-17T00:00:00.000000 | 2018-10-18T00:00:00.000000 |
| certfr-2018-avi-499 | Vulnérabilité dans la bibliothèque libssh | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-498 | Multiples vulnérabilités dans Oracle MySQL | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-497 | Multiples vulnérabilités dans Oracle Virtualization | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-496 | Multiples vulnérabilités dans Oracle Sun Systems | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-495 | Multiples vulnérabilités dans Oracle Java SE | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-494 | Multiples vulnérabilités dans Oracle Database | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-493 | Vulnérabilité dans VMware ESXi, Workstation et Fusion | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-492 | Multiples vulnérabilités dans Google Chrome | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-491 | Vulnérabilité dans Symantec Web Isolation | 2018-10-17T00:00:00.000000 | 2018-10-17T00:00:00.000000 |
| certfr-2018-avi-488 | Multiples vulnérabilités dans Wireshark | 2018-10-12T00:00:00.000000 | 2018-10-12T00:00:00.000000 |
| certfr-2018-avi-487 | Multiples vulnérabilités dans les produits Juniper | 2018-10-11T00:00:00.000000 | 2018-10-11T00:00:00.000000 |
| certfr-2018-avi-486 | Multiples vulnérabilités dans les produits Microsoft | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-485 | Vulnérabilité dans Microsoft .Net | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-484 | Multiples vulnérabilités dans Microsoft Windows | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-483 | Multiples vulnérabilités dans Microsoft Office | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-482 | Multiples vulnérabilités dans Microsoft Edge | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-481 | Multiples vulnérabilités dans Microsoft IE | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-480 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-479 | Multiples vulnérabilités dans Joomla! | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-478 | Multiples vulnérabilités dans le noyau Linux de RedHat | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-477 | Multiples vulnérabilités dans Google Chrome OS | 2018-10-10T00:00:00.000000 | 2018-10-10T00:00:00.000000 |
| certfr-2018-avi-476 | Multiples vulnérabilités dans SCADA Siemens | 2018-10-09T00:00:00.000000 | 2018-10-09T00:00:00.000000 |
| certfr-2018-avi-475 | Multiples vulnérabilités dans Apple iOS | 2018-10-09T00:00:00.000000 | 2018-10-09T00:00:00.000000 |
| certfr-2018-avi-474 | Multiples vulnérabilités dans Apple iCloud | 2018-10-09T00:00:00.000000 | 2018-10-09T00:00:00.000000 |