Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-77815 | 8.7 (v4.0) 7.5 (v3.1) | Infinite Image Browsing Resolves Paths With normpath, … |
zanllp |
infinite-image-browsing |
2026-08-21T15:03:09.325Z | 2026-08-26T17:30:14.359Z |
| cve-2026-48548 | 6.9 (v4.0) 6.5 (v3.1) | Nagios Core CSRF via cmd.cgi |
Nagios Enterprises, LLC. |
Nagios Core |
2026-08-26T15:33:59.685Z | 2026-08-26T17:29:31.213Z |
| cve-2026-50278 | iccDEV: CIccEmbedIO::Read8() size_t underflow |
InternationalColorConsortium |
iccDEV |
2026-08-21T14:57:10.283Z | 2026-08-26T17:29:06.120Z | |
| cve-2026-62313 | Incus: Project restriction `restricted.containers.priv… |
lxc |
incus |
2026-08-21T14:44:27.324Z | 2026-08-26T17:27:33.674Z | |
| cve-2026-48754 | Incus: Nil-pointer dereference in createDependentVolum… |
lxc |
incus |
2026-08-21T14:36:16.011Z | 2026-08-26T17:26:19.767Z | |
| cve-2026-81027 | 8.4 (v4.0) 8.5 (v3.1) | one-api through 0.6.10 Missing Authorization on URL-Pa… |
songquanpeng |
one-api |
2026-08-26T15:44:56.599Z | 2026-08-26T17:25:39.276Z |
| cve-2026-48750 | Incus has an arbitrary file write on host via `exec-ou… |
lxc |
incus |
2026-08-21T14:19:45.109Z | 2026-08-26T17:24:53.540Z | |
| cve-2026-77769 | 6.5 (v3.1) 7.1 (v4.0) | OpenPanel report.list Queries Reports by an Unverified… |
Openpanel-dev |
openpanel |
2026-08-21T11:05:15.644Z | 2026-08-26T17:23:49.786Z |
| cve-2026-75960 | 8.7 (v4.0) 8.1 (v3.1) | Insufficiently Protected Credentials in Rently Smart Home |
Rently |
Smart Home |
2026-08-26T13:20:19.920Z | 2026-08-26T17:10:54.255Z |
| cve-2026-81032 | 9.3 (v4.0) 9.8 (v3.1) | NebulaGraph through 3.8.0 Unauthenticated Read and Mod… |
vesoft-inc |
nebula |
2026-08-26T15:45:00.144Z | 2026-08-26T17:10:45.206Z |
| cve-2026-75896 | 9.1 (v3.1) | Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's… |
TÜBİTAK BİLGEM Software Technologies Research Institute |
Liderahenk |
2026-08-26T13:35:05.852Z | 2026-08-26T17:10:29.246Z |
| cve-2026-80153 | N/A | {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-08-26T16:56:46.568Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]} | N/A | N/A | 2026-08-26T16:56:46.568Z | |
| cve-2026-5917 | 8.6 (v4.0) 8.8 (v3.1) | libgit2 Shell Command Injection via ssh_libssh2 Backend |
libgit2 |
libgit2 |
2026-08-11T21:40:29.078Z | 2026-08-26T16:48:52.924Z |
| cve-2026-78468 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78270. Reason: This candidate is a reservation duplicate of CVE-2026-78270. Notes: All CVE users should reference CVE-2026-78270 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}], 'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-08-26T16:47:00.702Z'}} | N/A | N/A | 2026-08-25T16:23:01.099Z | 2026-08-26T16:47:00.702Z |
| cve-2026-78467 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78272. Reason: This candidate is a reservation duplicate of CVE-2026-78272. Notes: All CVE users should reference CVE-2026-78272 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}], 'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-08-26T16:41:46.643Z'}} | N/A | N/A | 2026-08-25T05:31:27.833Z | 2026-08-26T16:41:46.643Z |
| cve-2026-78466 | N/A | {'rejectedReasons': [{'lang': 'en', 'value': '** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-78278. Reason: This candidate is a reservation duplicate of CVE-2026-78278. Notes: All CVE users should reference CVE-2026-78278 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.'}], 'providerMetadata': {'orgId': 'b15e7b5b-3da4-40ae-a43c-f7aa60e62599', 'shortName': 'Wordfence', 'dateUpdated': '2026-08-26T16:39:13.200Z'}} | N/A | N/A | 2026-08-25T05:31:28.620Z | 2026-08-26T16:39:13.200Z |
| cve-2026-6420 | 6.3 (v3.1) | Keylime: keylime: security bypass due to hardcoded tpm… |
|
|
2026-05-06T10:19:39.121Z | 2026-08-26T16:35:19.571Z |
| cve-2026-48388 | 8.6 (v3.1) | Photoshop Installer | CWE-427: Uncontrolled Search Pat… |
Adobe |
Adobe Photoshop Installer |
2026-07-28T17:46:26.236Z | 2026-08-26T16:28:35.442Z |
| cve-2025-12945 | 1.1 (v4.0) 2.4 (v3.1) | Improper input validation in NETGEAR Nighthawk router R7000P |
NETGEAR |
R7000P |
2025-12-09T17:01:38.595Z | 2026-08-26T16:17:50.127Z |
| cve-2026-58001 | 6.9 (v4.0) 5.7 (v3.1) | WWBN AVideo Cross-Site Request Forgery via videoEditLi… |
WWBN |
AVideo |
2026-08-22T12:26:31.245Z | 2026-08-26T16:16:59.448Z |
| cve-2026-59809 | 6.9 (v4.0) 4.9 (v3.1) | SiYuan before v3.8.0 Secret Exfiltration via http_requ… |
siyuan-note |
siyuan |
2026-08-22T12:26:35.098Z | 2026-08-26T16:16:52.009Z |
| cve-2026-62380 | 6.3 (v4.0) | Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection |
netty |
netty |
2026-08-22T12:26:43.777Z | 2026-08-26T16:16:44.043Z |
| cve-2026-62383 | 6.8 (v4.0) 5.5 (v3.1) | nltk IPIPANCorpusReader Symlink Arbitrary File Read |
nltk |
nltk |
2026-08-22T14:12:36.606Z | 2026-08-26T16:16:35.172Z |
| cve-2026-63311 | 6.9 (v4.0) 5.3 (v3.1) | NLTK before 3.10.0 SSRF via DNS Resolution Failure |
nltk |
nltk |
2026-08-22T14:12:40.063Z | 2026-08-26T16:16:26.704Z |
| cve-2026-68767 | 6.9 (v4.0) 6.1 (v3.1) | hashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Wr… |
hashcat |
hashcat |
2026-08-22T14:12:43.477Z | 2026-08-26T16:16:18.796Z |
| cve-2026-5388 | 9.3 (v4.0) 9.8 (v3.1) | justhtml before 1.15.0 Multiple Security Issues |
EmilStenstrom |
justhtml |
2026-08-23T13:34:09.169Z | 2026-08-26T16:16:10.959Z |
| cve-2026-78203 | 7.1 (v4.0) 7.1 (v3.1) | Ghostwriter before 7.1.2 Cross-Client Report Template … |
GhostManager |
Ghostwriter |
2026-08-24T00:30:44.452Z | 2026-08-26T16:15:50.817Z |
| cve-2026-76847 | 8.7 (v4.0) 8.8 (v3.1) | act 0.2.81 through 0.2.89 Missing Authorization in the… |
nektos |
act |
2026-08-24T13:12:02.474Z | 2026-08-26T16:15:24.489Z |
| cve-2026-71908 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models OS Command Injection v… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:42.271Z | 2026-08-26T16:14:57.367Z |
| cve-2026-71913 | 8.6 (v4.0) 7.2 (v3.1) | DrayTek VigorAP Multiple Models OS Command Injection v… |
DrayTek Corporation |
VigorAP 918R |
2026-08-24T17:07:45.584Z | 2026-08-26T16:14:49.783Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2013-avi-625 | Vulnérabilité dans Xen | 2013-11-12T00:00:00.000000 | 2013-11-12T00:00:00.000000 |
| certa-2013-avi-624 | Multiples vulnérabilités dans Samba | 2013-11-12T00:00:00.000000 | 2013-11-12T00:00:00.000000 |
| certa-2013-avi-623 | Vulnérabilité dans OpenSSH | 2013-11-12T00:00:00.000000 | 2013-11-12T00:00:00.000000 |
| certa-2013-avi-622 | Vulnérabilité dans ISC BIND | 2013-11-08T00:00:00.000000 | 2013-11-08T00:00:00.000000 |
| certa-2013-avi-621 | Vulnérabilité dans IBM Lotus Sametime WebPlayer | 2013-11-08T00:00:00.000000 | 2013-11-08T00:00:00.000000 |
| certa-2013-avi-620 | Vulnérabilité dans Cisco TelePresence VX Clinical Assistant | 2013-11-07T00:00:00.000000 | 2013-11-07T00:00:00.000000 |
| certa-2013-avi-619 | Vulnérabilité dans Cisco WAAS Mobile | 2013-11-07T00:00:00.000000 | 2013-11-07T00:00:00.000000 |
| certa-2013-avi-618 | Vulnérabilité dans Cisco IOS Software | 2013-11-07T00:00:00.000000 | 2013-11-07T00:00:00.000000 |
| certa-2013-avi-617 | Multiples vulnérabilités dans Xen | 2013-11-05T00:00:00.000000 | 2013-11-05T00:00:00.000000 |
| certa-2013-avi-616 | Multiples vulnérabilités dans Wireshark | 2013-11-04T00:00:00.000000 | 2013-11-04T00:00:00.000000 |
| certa-2013-avi-615 | Multiples vulnérabilités dans Cisco IOS XE Software | 2013-10-31T00:00:00.000000 | 2013-10-31T00:00:00.000000 |
| certa-2013-avi-614 | Vulnérabilité dans EMC Unisphere | 2013-10-31T00:00:00.000000 | 2013-10-31T00:00:00.000000 |
| certa-2013-avi-613 | Multiples vulnérabilités dans les produits Mozilla | 2013-10-31T00:00:00.000000 | 2013-10-31T00:00:00.000000 |
| certa-2013-avi-612 | Vulnérabilité dans EMC NetWorker | 2013-10-29T00:00:00.000000 | 2013-10-29T00:00:00.000000 |
| certa-2013-avi-611 | Multiples vulnérabilités dans F5-ARX | 2013-10-29T00:00:00.000000 | 2013-10-29T00:00:00.000000 |
| certa-2013-avi-610 | Multiples vulnérabilités dans McAfee Firewall Enterprise | 2013-10-29T00:00:00.000000 | 2013-10-29T00:00:00.000000 |
| certa-2013-avi-609 | Vulnérabilité dans EMC RSA | 2013-10-25T00:00:00.000000 | 2013-10-25T00:00:00.000000 |
| certa-2013-avi-608 | Vulnérabilité dans Cisco IOS XR | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-607 | Multiples vulnérabilités dans Cisco Identity Services Engine | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-606 | Vulnérabilité dans les produits Cisco | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-605 | Multiples vulnérabilités dans Apple iTunes | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-604 | Multiples vulnérabilités dans Apple Remote Desktop | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-603 | Multiples vulnérabilités dans Apple OS X Server | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-602 | Vulnérabilité dans Apple Keynote | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-601 | Multiples vulnérabilités dans Apple OS X Mavericks | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-600 | Multiples vulnérabilités dans Apple Safari | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-599 | Multiples vulnérabilités dans Apple iOS | 2013-10-24T00:00:00.000000 | 2013-10-24T00:00:00.000000 |
| certa-2013-avi-598 | Vulnérabilité dans Citrix XenDesktop | 2013-10-23T00:00:00.000000 | 2013-10-23T00:00:00.000000 |
| certa-2013-avi-597 | Multiples vulnérabilités dans le noyau Linux de Ubuntu | 2013-10-22T00:00:00.000000 | 2013-10-22T00:00:00.000000 |
| certa-2013-avi-596 | Multiples vulnérabilités dans Apache Struts | 2013-10-21T00:00:00.000000 | 2013-10-21T00:00:00.000000 |