|
cve-2026-102006
|
5.5 (v3.1)
|
VxWorks 7 Memory allocation
|
Wind River Systems Inc
|
VxWorks 7
|
2026-09-28T20:46:35.447Z |
2026-09-30T13:42:51.624Z |
|
cve-2026-102275
|
|
PyJWT accepts inconsistent OKP x/d JWKs, causing publi…
|
jpadilla
|
pyjwt
|
2026-09-28T20:46:33.169Z |
2026-09-29T13:56:09.869Z |
|
cve-2026-101187
|
|
Ziroom ZHOME A0101 USB Device Management API zrUsb.lua…
|
Ziroom
|
ZHOME A0101
|
2026-09-28T20:45:07.763Z |
2026-09-29T19:23:32.717Z |
|
cve-2026-91096
|
N/A
|
In proxygen from v2024.10.28.00 until v2026.09.28…
|
Facebook
|
proxygen
|
2026-09-28T20:44:57.363Z |
2026-09-30T19:47:55.479Z |
|
cve-2026-91095
|
N/A
|
In proxygen from v2024.10.28.00 until v2026.09.28…
|
Facebook
|
proxygen
|
2026-09-28T20:44:45.928Z |
2026-09-30T19:49:15.429Z |
|
cve-2026-84895
|
N/A
|
In proxygen from v2026.04.06.00 until v2026.09.28…
|
Facebook
|
proxygen
|
2026-09-28T20:44:34.886Z |
2026-10-01T14:02:23.724Z |
|
cve-2026-102274
|
|
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
|
jpadilla
|
pyjwt
|
2026-09-28T20:42:28.355Z |
2026-09-29T19:38:02.520Z |
|
cve-2026-102273
|
|
PyJWT accepts public JWK containers as HMAC secrets
|
jpadilla
|
pyjwt
|
2026-09-28T20:38:28.161Z |
2026-09-29T13:44:49.200Z |
|
cve-2026-102272
|
|
PyJWT BOM Bypass
|
jpadilla
|
pyjwt
|
2026-09-28T20:36:31.530Z |
2026-09-29T14:45:44.138Z |
|
cve-2026-102271
|
|
PyJWT: Public keys in DER form are accepted as HMAC se…
|
jpadilla
|
pyjwt
|
2026-09-28T20:31:53.066Z |
2026-10-01T14:57:42.294Z |
|
cve-2026-101146
|
|
Eleveo Quality Management GWT RPC QMUtilsService Utils…
|
Eleveo
|
Quality Management
|
2026-09-28T20:30:09.527Z |
2026-10-20T22:44:38.165Z |
|
cve-2026-102270
|
|
PyJWT: ReDoS vulnerability when calling the `is_pem_fo…
|
jpadilla
|
pyjwt
|
2026-09-28T20:29:24.479Z |
2026-09-29T19:36:54.944Z |
|
cve-2026-102269
|
|
PyJWT: Non-canonical signature segments enable raw-tok…
|
jpadilla
|
pyjwt
|
2026-09-28T20:27:54.521Z |
2026-09-29T13:49:47.562Z |
|
cve-2026-102268
|
|
PyJWT: Asymmetric-PEM detection bypass: whitespace/lin…
|
jpadilla
|
pyjwt
|
2026-09-28T20:26:13.674Z |
2026-09-29T13:59:11.421Z |
|
cve-2026-102267
|
|
PyJWT: PyJWKClient follows redirects when fetching JWKS
|
jpadilla
|
pyjwt
|
2026-09-28T20:23:33.556Z |
2026-10-01T14:56:29.970Z |
|
cve-2026-102266
|
|
PyJWK accepts empty HMAC keys, bypassing PyJWT's empty…
|
jpadilla
|
pyjwt
|
2026-09-28T20:21:26.164Z |
2026-09-29T19:35:42.049Z |
|
cve-2026-100392
|
|
InvoicePlane: Primary Administrator Privilege Downgrad…
|
InvoicePlane
|
InvoicePlane
|
2026-09-28T20:16:19.121Z |
2026-09-29T19:25:16.682Z |
|
cve-2026-102005
|
5.5 (v3.1)
|
VxWorks Memory Allocation
|
Wind River Inc
|
VxWorks 7
|
2026-09-28T20:15:52.709Z |
2026-09-28T20:43:19.687Z |
|
cve-2026-100371
|
|
InvoicePlane: Incomplete Authorization Remediation in …
|
InvoicePlane
|
InvoicePlane
|
2026-09-28T20:15:17.155Z |
2026-09-29T13:51:08.087Z |
|
cve-2026-101145
|
|
Eleveo Call Recording Software User Management userAdd…
|
Eleveo
|
Call Recording Software
|
2026-09-28T20:15:09.632Z |
2026-10-20T22:44:19.391Z |
|
cve-2026-101918
|
|
PyJWT: Unauthenticated RecursionError DoS in pre-verif…
|
jpadilla
|
pyjwt
|
2026-09-28T20:11:55.278Z |
2026-09-29T13:57:29.516Z |
|
cve-2026-101917
|
|
PyJWT: PyJWKClient still amplifies unauthenticated JWK…
|
jpadilla
|
pyjwt
|
2026-09-28T20:07:44.237Z |
2026-09-28T20:35:25.908Z |
|
cve-2026-100370
|
|
DOMSanitizer - Incomplete data: URL Sanitization in DO…
|
rhukster
|
dom-sanitizer
|
2026-09-28T20:07:09.470Z |
2026-09-28T20:40:03.613Z |
|
cve-2026-101916
|
|
@grpc/grpc-js: In certain configurations, getAuthConte…
|
grpc
|
grpc-node
|
2026-09-28T20:01:53.640Z |
2026-10-01T14:54:55.987Z |
|
cve-2026-101144
|
|
Eleveo Call Recording Software Query Builder searchAct…
|
Eleveo
|
Call Recording Software
|
2026-09-28T20:00:07.419Z |
2026-10-20T22:26:37.059Z |
|
cve-2026-18416
|
3.7 (v3.1)
|
Out-of-bounds read in CoAP well-known-core Uri-Query h…
|
zephyrproject
|
zephyr
|
2026-09-28T20:00:02.425Z |
2026-11-04T05:00:29.717Z |
|
cve-2026-18415
|
6.3 (v3.1)
|
Out-of-bounds write in the IEEE 802.15.4 L2 transmit p…
|
zephyrproject
|
zephyr
|
2026-09-28T20:00:01.312Z |
2026-11-04T05:00:28.316Z |
|
cve-2026-18414
|
7.8 (v3.1)
|
Out-of-bounds write in the ADI MAX32 ADC driver due to…
|
zephyrproject
|
zephyr
|
2026-09-28T20:00:00.133Z |
2026-11-04T05:00:26.879Z |
|
cve-2026-18413
|
7.8 (v3.1)
|
Out-of-bounds write in the NXP MCUX LPADC ADC driver d…
|
zephyrproject
|
zephyr
|
2026-09-28T19:59:58.873Z |
2026-11-04T05:00:25.423Z |
|
cve-2026-16513
|
7.8 (v3.1)
|
Missing write validation of user-supplied handle point…
|
zephyrproject
|
zephyr
|
2026-09-28T19:59:57.736Z |
2026-11-04T05:00:24.005Z |