Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2026-76308 | 6.5 (v3.1) | Missing Authorization through the REST API in Splunk SOAR |
Splunk |
Splunk SOAR |
2026-10-21T22:52:11.575Z | 2026-10-26T16:46:46.763Z |
| cve-2026-114716 | 8.5 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T01:17:45.277Z | 2026-10-26T16:46:46.624Z |
| cve-2026-114720 | 7.1 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T01:32:44.426Z | 2026-10-26T16:46:46.479Z |
| cve-2026-114728 | 5.3 (v3.1) | Roundcube Webmail before 1.6.20 and 1.7.x before … |
Roundcube |
Webmail |
2026-10-22T02:02:49.325Z | 2026-10-26T16:46:46.332Z |
| cve-2026-65184 | 9.8 (v3.1) | Avocent ACS8000 wsserver command injection |
Vertiv |
Avocent ACS8000 |
2026-10-26T14:07:08.235Z | 2026-10-26T16:46:46.017Z |
| cve-2026-93328 | 9.3 (v4.0) | Missing Authorization in MCP Toolbox for Databases all… |
Google Cloud |
MCP Toolbox for Databases (googleapis/mcp-toolbox) |
2026-10-26T14:24:09.012Z | 2026-10-26T16:46:45.879Z |
| cve-2026-93849 | 6.5 (v3.1) | Mattermost allows authenticated users to trigger exces… |
Mattermost |
Mattermost |
2026-10-26T14:25:26.554Z | 2026-10-26T16:46:45.736Z |
| cve-2026-93850 | 6.5 (v3.1) | Unbounded memory consumption during PDF text extraction |
Mattermost |
Mattermost |
2026-10-26T14:26:56.502Z | 2026-10-26T16:46:45.587Z |
| cve-2026-93848 | 2.7 (v3.1) | Mattermost OpenID discovery endpoint request bypasses … |
Mattermost |
Mattermost |
2026-10-26T14:28:23.565Z | 2026-10-26T16:46:45.446Z |
| cve-2026-77054 | 6.9 (v4.0) | Cleartext Storage of Sensitive Information in boneIO |
boneIO |
boneIO |
2026-10-26T14:45:45.813Z | 2026-10-26T16:46:45.059Z |
| cve-2026-77056 | 7.1 (v4.0) | Use of Default Credentials in boneIO |
boneIO |
black_debian_images |
2026-10-26T14:45:53.279Z | 2026-10-26T16:46:44.867Z |
| cve-2026-77058 | 5.1 (v4.0) | Cross-Site Request Forgery (CSRF) in boneIO |
boneIO |
boneIO |
2026-10-26T14:45:59.416Z | 2026-10-26T16:46:44.686Z |
| cve-2026-116175 | 7.1 (v4.0) 6.5 (v3.1) | vLLM 0.19.0 before 0.24.0 Audio Decompression Bomb DoS… |
vllm-project |
vllm |
2026-10-25T13:20:15.794Z | 2026-10-26T16:43:35.143Z |
| cve-2026-116179 | 8.7 (v4.0) 7.5 (v3.1) | vLLM 0.18.0 before 0.31.0 Memory Exhaustion via media_… |
vllm-project |
vllm |
2026-10-25T13:20:18.520Z | 2026-10-26T16:43:21.928Z |
| cve-2026-116183 | 8.7 (v4.0) 7.5 (v3.1) | phpMyFAQ before 4.1.10 Authorization Bypass via /api/f… |
thorsten |
phpMyFAQ |
2026-10-25T13:20:21.213Z | 2026-10-26T16:42:50.439Z |
| cve-2026-116187 | 6.1 (v4.0) 5 (v3.1) | Rclone v1.68.0 before v1.75.2 Authorization Bypass in … |
rclone |
rclone |
2026-10-25T13:20:23.849Z | 2026-10-26T16:42:27.522Z |
| cve-2026-116191 | 8.7 (v4.0) 7.5 (v3.1) | Rclone before 1.75.2 Path Traversal via serve webdav MKCOL |
rclone |
rclone |
2026-10-25T13:20:26.490Z | 2026-10-26T16:42:11.109Z |
| cve-2026-116195 | 7 (v4.0) 6.1 (v3.1) | Rclone before 1.75.2 Path Traversal via translateLink … |
rclone |
rclone |
2026-10-25T13:20:29.131Z | 2026-10-26T16:42:00.376Z |
| cve-2026-116199 | 9.2 (v4.0) 8.1 (v3.1) | Snipe-IT before 8.6.3 Authentication Bypass via Google… |
grokability |
snipe-it |
2026-10-25T13:20:31.815Z | 2026-10-26T16:41:49.682Z |
| cve-2026-116203 | 5.3 (v4.0) 6.1 (v3.1) | YesWiki before 4.7.0 Stored XSS via filtertags Action … |
YesWiki |
yeswiki |
2026-10-25T13:20:34.532Z | 2026-10-26T16:41:41.933Z |
| cve-2026-116207 | 8.8 (v4.0) 9.1 (v3.1) | YesWiki 4.6.0 before 4.7.0 SQL Injection via Bazar Ent… |
YesWiki |
yeswiki |
2026-10-25T13:20:37.473Z | 2026-10-26T16:41:15.236Z |
| cve-2026-116053 | dbcli mycli Whitelist source.py source_special_command… |
dbcli |
mycli |
2026-10-25T13:30:09.456Z | 2026-10-26T16:40:46.983Z | |
| cve-2026-116056 | KodCloud KodExplorer Remote Download web.function.php … |
KodCloud |
KodExplorer |
2026-10-25T15:15:13.191Z | 2026-10-26T16:40:18.242Z | |
| cve-2026-116060 | SourceCodester Performance Indicator System adddealer.… |
SourceCodester |
Performance Indicator System |
2026-10-25T16:30:18.104Z | 2026-10-26T16:39:45.412Z | |
| cve-2026-116063 | DedeCMS update_guide.php require_once code injection |
n/a |
DedeCMS |
2026-10-25T17:45:12.345Z | 2026-10-26T16:39:15.047Z | |
| cve-2026-95127 | N/A | An issue in libass v.0.17.5 allows a remote attac… |
n/a |
n/a |
2026-10-13T00:00:00.000Z | 2026-10-26T16:39:02.900Z |
| cve-2026-116096 | ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_p… |
ggml-org |
llama.cpp |
2026-10-25T23:00:24.282Z | 2026-10-26T16:38:49.498Z | |
| cve-2026-116099 | Fusion Creators Studio SCP Containment Breach Multipla… |
Fusion Creators Studio |
SCP Containment Breach Multiplayer |
2026-10-25T23:45:16.547Z | 2026-10-26T16:38:24.659Z | |
| cve-2026-116102 | QuantGeekDev docker-mcp docker_executor.py _build_wind… |
QuantGeekDev |
docker-mcp |
2026-10-26T00:30:20.752Z | 2026-10-26T16:37:59.373Z | |
| cve-2026-116105 | HeyCyan App Network Security Configuration AndroidMani… |
n/a |
HeyCyan App |
2026-10-26T01:15:18.741Z | 2026-10-26T16:37:38.696Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certa-2005-avi-140 | Vulnérabilité dans MSN Messenger | 2005-04-13T00:00:00.000000 | 2005-04-13T00:00:00.000000 |
| certa-2005-avi-139 | Multiples vulnérabilités de Microsoft Word | 2005-04-13T00:00:00.000000 | 2005-04-13T00:00:00.000000 |
| certa-2005-avi-138 | Multiples vulnérabilités des systèmes Microsoft Windows | 2005-04-13T00:00:00.000000 | 2005-04-13T00:00:00.000000 |
| certa-2005-avi-137 | Vulnérabilité de Microsoft Message Queuing | 2005-04-13T00:00:00.000000 | 2005-04-13T00:00:00.000000 |
| certa-2005-avi-135 | Vulnérabilités dans le traitement des paquets ICMP | 2005-04-13T00:00:00.000000 | 2005-04-13T00:00:00.000000 |
| certa-2005-avi-134 | Multiples vulnérabilités dans Internet Explorer | 2005-04-13T00:00:00.000000 | 2005-04-13T00:00:00.000000 |
| certa-2005-avi-133 | Vulnérabilité de Microsoft Exchange Server | 2005-04-13T00:00:00.000000 | 2005-04-13T00:00:00.000000 |
| certa-2005-avi-136 | Vulnérabilité dans l'interpréteur de commandes Windows | 2005-04-12T00:00:00.000000 | 2005-04-12T00:00:00.000000 |
| certa-2005-avi-132 | Vulnérabilité de portupgrade | 2005-04-12T00:00:00.000000 | 2005-04-12T00:00:00.000000 |
| certa-2005-avi-130 | Vulnérabilité dans Lotus Domino | 2005-04-08T00:00:00.000000 | 2005-04-08T00:00:00.000000 |
| certa-2005-avi-129 | Vulnérabilité du serveur d'application ColdFusion | 2005-04-08T00:00:00.000000 | 2005-04-08T00:00:00.000000 |
| certa-2005-avi-127 | Vulnérabilités de SSH sous Cisco IOS | 2005-04-08T00:00:00.000000 | 2005-04-08T00:00:00.000000 |
| certa-2005-avi-122 | Multiples vulnérabilités dans ImageMagick | 2005-03-25T00:00:00.000000 | 2005-04-04T00:00:00.000000 |
| certa-2005-avi-125 | Vulnérabilité des équipements Cisco VPN Concentrator | 2005-03-31T00:00:00.000000 | 2005-03-31T00:00:00.000000 |
| certa-2005-avi-020 | Vulnérabilité de ImageMagick | 2005-01-20T00:00:00.000000 | 2005-03-31T00:00:00.000000 |
| certa-2005-avi-123 | Multiples vulnérabilités de Norton AntiVirus | 2005-03-29T00:00:00.000000 | 2005-03-29T00:00:00.000000 |
| certa-2005-avi-110 | Vulnérabilités dans Mysql | 2005-03-14T00:00:00.000000 | 2005-03-29T00:00:00.000000 |
| certa-2005-avi-107 | Vulnérabilité de xv | 2005-03-11T00:00:00.000000 | 2005-03-25T00:00:00.000000 |
| certa-2005-avi-120 | Vulnérabilité de Solaris | 2005-03-24T00:00:00.000000 | 2005-03-24T00:00:00.000000 |
| certa-2005-avi-117 | Vulnérabilités dans OpenSLP | 2005-03-15T00:00:00.000000 | 2005-03-24T00:00:00.000000 |
| certa-2005-avi-118 | Vulnérabilité dans les produits McAfee | 2005-03-21T00:00:00.000000 | 2005-03-21T00:00:00.000000 |
| certa-2005-avi-095 | Multiples vulnérabilités dans Mozilla | 2005-03-02T00:00:00.000000 | 2005-03-21T00:00:00.000000 |
| certa-2005-avi-093 | Vulnérabilités dans cURL/libcURL | 2005-03-01T00:00:00.000000 | 2005-03-17T00:00:00.000000 |
| certa-2005-avi-116 | Vulnérabilité dans OpenBSD | 2005-03-14T00:00:00.000000 | 2005-03-14T00:00:00.000000 |
| certa-2005-avi-115 | Vulnérabilité dans OpenVMS | 2005-03-14T00:00:00.000000 | 2005-03-14T00:00:00.000000 |
| certa-2005-avi-113 | Vulnérabilité dans les produits Avaya | 2005-03-14T00:00:00.000000 | 2005-03-14T00:00:00.000000 |
| certa-2005-avi-112 | Déni de service sous HP Tru64 Unix | 2005-03-14T00:00:00.000000 | 2005-03-14T00:00:00.000000 |
| certa-2005-avi-111 | Vulnérabilité de Trillian Basic | 2005-03-14T00:00:00.000000 | 2005-03-14T00:00:00.000000 |
| certa-2005-avi-109 | Mulitples vulnérabilités dans Novell iChain FTP Server | 2005-03-14T00:00:00.000000 | 2005-03-14T00:00:00.000000 |
| certa-2005-avi-108 | Vulnérabilité de Microsoft Exchange Server 2003 | 2005-03-14T00:00:00.000000 | 2005-03-14T00:00:00.000000 |