|
cve-2026-100857
|
8.6 (v4.0)
8 (v3.1)
|
AzuraCast before 0.23.4 Remote Code Execution via Liqu…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:48.450Z |
2026-10-08T15:22:06.208Z |
|
cve-2026-100856
|
8.7 (v4.0)
8.8 (v3.1)
|
AzuraCast before 0.23.6 Code Injection via Remote Rela…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:47.778Z |
2026-10-08T15:22:05.345Z |
|
cve-2026-100855
|
7.1 (v4.0)
6.5 (v3.1)
|
AzuraCast before 0.23.6 Missing Permission Check via /play
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:47.099Z |
2026-10-08T15:22:04.312Z |
|
cve-2026-100854
|
5.3 (v4.0)
6.3 (v3.1)
|
AzuraCast before 0.23.6 Metadata Injection via Liquids…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:46.412Z |
2026-10-08T15:22:03.450Z |
|
cve-2026-100853
|
8.2 (v4.0)
5.9 (v3.1)
|
AzuraCast before 0.23.8 On-Demand Download Endpoint Au…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:45.749Z |
2026-09-28T13:25:48.092Z |
|
cve-2026-100852
|
8.7 (v4.0)
8.8 (v3.1)
|
AzuraCast before 0.23.8 Command Injection via Streamer…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:45.077Z |
2026-09-28T16:10:26.151Z |
|
cve-2026-100851
|
7.2 (v4.0)
7.6 (v3.1)
|
AzuraCast before 0.23.8 Broken Access Control via GET …
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:44.349Z |
2026-09-30T15:20:33.536Z |
|
cve-2026-100850
|
4.8 (v4.0)
7.7 (v3.1)
|
AzuraCast before 0.23.8 SSRF and Local File Read via R…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:43.673Z |
2026-09-30T15:54:40.858Z |
|
cve-2026-100849
|
7.1 (v4.0)
7.1 (v3.1)
|
AzuraCast before 0.23.8 SSRF Filter Bypass via Hostnam…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:42.974Z |
2026-09-28T13:57:34.821Z |
|
cve-2026-100848
|
7.1 (v4.0)
7.1 (v3.1)
|
AzuraCast before 0.23.8 Server-Side Request Forgery vi…
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:42.329Z |
2026-09-28T16:38:16.249Z |
|
cve-2026-100847
|
8.7 (v4.0)
7.5 (v3.1)
|
AzuraCast before 0.23.8 DQL Injection via sortOrder
|
AzuraCast
|
AzuraCast
|
2026-09-27T01:28:41.653Z |
2026-09-30T15:19:13.811Z |
|
cve-2026-100846
|
8.8 (v4.0)
7.6 (v3.1)
|
MONAI before 1.5.2 Remote Code Execution via Pickle De…
|
Project-MONAI
|
MONAI
|
2026-09-27T01:28:41.003Z |
2026-10-08T15:22:02.692Z |
|
cve-2026-100845
|
8.5 (v4.0)
7.8 (v3.1)
|
MONAI before 1.6.0 Remote Code Execution via NumpyReader
|
Project-MONAI
|
MONAI
|
2026-09-27T01:28:40.337Z |
2026-09-28T13:56:50.879Z |
|
cve-2026-100844
|
8.6 (v4.0)
8.4 (v3.1)
|
MONAI before 1.6.0 OS Command Injection via dataset_na…
|
Project-MONAI
|
MONAI
|
2026-09-27T01:28:39.672Z |
2026-10-08T15:22:02.046Z |
|
cve-2026-100843
|
8.5 (v4.0)
7.8 (v3.1)
|
MONAI before 1.6.0 Remote Code Execution via algo_from…
|
Project-MONAI
|
MONAI
|
2026-09-27T01:28:38.803Z |
2026-09-30T15:17:39.080Z |
|
cve-2026-100842
|
7.3 (v4.0)
7 (v3.1)
|
MONAI through 1.6.0 _get_fake_spatial_shape eval() San…
|
Project-MONAI
|
MONAI
|
2026-09-27T01:28:38.149Z |
2026-09-30T16:54:11.393Z |
|
cve-2026-100841
|
8.5 (v4.0)
7.8 (v3.1)
|
MONAI through 1.6.0 PersistentDataset Remote Code Exec…
|
Project-MONAI
|
MONAI
|
2026-09-27T01:28:37.499Z |
2026-09-28T13:56:03.312Z |
|
cve-2026-100840
|
8.5 (v4.0)
7.8 (v3.1)
|
MONAI through 1.6.0 Remote Code Execution via bundle c…
|
Project-MONAI
|
MONAI
|
2026-09-27T01:28:36.821Z |
2026-09-28T16:46:00.366Z |
|
cve-2026-100839
|
8.4 (v4.0)
8.4 (v3.1)
|
Contrast before 1.18.0 AML Injection Remote Code Execution
|
edgelesssys
|
contrast
|
2026-09-27T01:28:36.154Z |
2026-10-08T15:22:01.430Z |
|
cve-2026-100838
|
8.6 (v4.0)
8.1 (v3.1)
|
Contrast before 1.19.1 CopyFile Policy Symlink Subversion
|
edgelesssys
|
contrast
|
2026-09-27T01:28:35.498Z |
2026-10-08T15:22:00.652Z |
|
cve-2026-100835
|
9.1 (v4.0)
7.4 (v3.1)
|
Contrast before 1.16.0 Remote Attestation Relay Attack
|
edgelesssys
|
contrast
|
2026-09-27T01:28:33.471Z |
2026-09-30T15:16:05.311Z |
|
cve-2026-100834
|
8.2 (v4.0)
5.9 (v3.1)
|
http4k before 6.48.0.0 Digest Authentication Replay Pr…
|
http4k
|
http4k
|
2026-09-27T01:28:32.781Z |
2026-10-29T21:15:27.491Z |
|
cve-2026-100833
|
8.6 (v4.0)
9.6 (v3.1)
|
Contrast before 1.23.1 Image Substitution via Policy G…
|
edgelesssys
|
contrast
|
2026-09-27T01:28:32.099Z |
2026-10-09T13:22:54.929Z |
|
cve-2026-100725
|
8.3 (v4.0)
6.5 (v3.1)
|
http4k before 6.48.0.0 Cookie Scoping Bypass via Basic…
|
http4k
|
http4k
|
2026-09-27T01:28:31.397Z |
2026-10-29T21:15:26.791Z |
|
cve-2026-100724
|
6.3 (v4.0)
5.4 (v3.1)
|
http4k before 6.49.0.0 Host Header Routing Bypass via …
|
http4k
|
http4k
|
2026-09-27T01:28:30.710Z |
2026-10-29T21:15:26.111Z |
|
cve-2026-100723
|
6.9 (v4.0)
7.5 (v3.1)
|
vm2 before 3.12.2 Memory Disclosure via zlib Buffer Pool
|
patriksimek
|
vm2
|
2026-09-27T01:28:30.027Z |
2026-10-01T18:04:57.414Z |
|
cve-2026-100722
|
8.9 (v4.0)
6.8 (v3.1)
|
vm2 before 3.12.2 Host Process Termination via Constru…
|
patriksimek
|
vm2
|
2026-09-27T01:28:29.295Z |
2026-09-28T13:51:49.241Z |
|
cve-2026-100721
|
9.5 (v4.0)
9 (v3.1)
|
vm2 before 3.12.2 Authorization Bypass via Custom Resolver
|
patriksimek
|
vm2
|
2026-09-27T01:28:28.596Z |
2026-09-28T16:51:10.611Z |
|
cve-2025-71426
|
7.1 (v4.0)
7.1 (v3.1)
|
Contrast before 1.4.1 Coordinator Impersonation via Un…
|
edgelesssys
|
contrast
|
2026-09-27T01:28:27.915Z |
2026-10-08T15:21:39.266Z |
|
cve-2025-71425
|
8.5 (v4.0)
7.3 (v3.1)
|
Contrast before 1.8.1 Information Disclosure via Logging
|
edgelesssys
|
contrast
|
2026-09-27T01:28:27.270Z |
2026-10-08T15:21:38.434Z |