Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-77874 8.6 (v3.1) IBM Enterprise Build of Quarkus is affected by multipl… IBM
Enterprise Build of Quarkus
2026-09-24T14:22:53.822Z 2026-09-24T14:53:15.426Z
cve-2026-77825 4.9 (v3.1) IBM ContextForge MCP Gateway is affected by path traversal IBM
ContextForge MCP Gateway
2026-09-24T14:21:18.507Z 2026-09-26T22:51:20.182Z
cve-2026-56736 phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML E… thorsten
phpMyFAQ
2026-09-24T14:21:17.025Z 2026-09-24T14:52:17.024Z
cve-2026-6544 6.2 (v3.1) Multiple Vulnerabilities in IBM Concert Software IBM
Concert
2026-09-24T14:18:35.637Z 2026-09-24T17:49:47.771Z
cve-2026-12559 7.3 (v4.0) Stored Cross-Site Scripting (XSS) in OpenText Vendor I… OpenText
Vendor Invoice Management for SAP Solutions
2026-09-24T14:18:21.380Z 2026-09-24T14:51:31.952Z
cve-2026-19492 3.2 (v3.1) This Power System update is being released to address IBM
PowerVM Hypervisor
2026-09-24T14:17:15.907Z 2026-09-24T14:50:57.288Z
cve-2026-18870 4.3 (v3.1) This Power System update is being released to address IBM
PowerVM Hypervisor
2026-09-24T14:15:38.345Z 2026-09-24T14:58:01.062Z
cve-2026-90481 9.2 (v4.0) In PortSwigger Burp Suite DAST (formerly Burp Sui… PortSwigger
Burp Suite DAST
2026-09-24T14:14:18.341Z 2026-09-24T14:55:31.110Z
cve-2026-18857 3.4 (v3.1) This Power System update is being released to address IBM
OPENBMC
2026-09-24T14:13:50.386Z 2026-09-24T14:54:35.705Z
cve-2026-18104 3.3 (v3.1) IBM Db2 Mirror for i is vulnerable to obtain sensitive… IBM
Db2 Mirror for i
2026-09-24T14:11:44.621Z 2026-09-26T22:51:20.307Z
cve-2026-17511 3.4 (v3.1) This Power System update is being released to address IBM
PowerVM Hypervisor
2026-09-24T14:09:29.970Z 2026-09-24T17:50:44.911Z
cve-2026-17504 5.1 (v3.1) This Power System update is being released to address IBM
PowerVM Hypervisor
2026-09-24T14:07:42.487Z 2026-09-24T14:31:41.326Z
cve-2026-17503 5.1 (v3.1) This Power System update is being released to address IBM
PowerVM Hypervisor
2026-09-24T14:06:05.304Z 2026-09-24T14:58:10.635Z
cve-2026-17413 5.1 (v3.1) This Power System update is being released to address IBM
PowerVM Hypervisor
2026-09-24T14:03:13.828Z 2026-09-24T14:56:11.866Z
cve-2026-97062 5.1 (v4.0) 5.4 (v3.1) Aureus ERP 1.6.0 Stored XSS via SVG File Upload Webkul
Aureus ERP
2026-09-24T13:52:02.569Z 2026-10-12T21:14:17.471Z
cve-2026-97061 5.3 (v4.0) 4.3 (v3.1) Black Candy through 3.2.1 Information Disclosure via P… blackcandy-org
Black Candy
2026-09-24T13:52:01.486Z 2026-09-29T02:46:25.322Z
cve-2026-97059 8.8 (v4.0) 8.2 (v3.1) DCMTK through 3.7.0 Heap Over-read via NumberOfFrames OFFIS
DCMTK
2026-09-24T13:52:00.194Z 2026-09-30T20:11:13.147Z
cve-2026-97058 N/A {'providerMetadata': {'orgId': '83251b91-4cc7-4094-a5c7-464a1b83ea10', 'shortName': 'VulnCheck', 'dateUpdated': '2026-10-12T19:33:32.335Z'}, 'rejectedReasons': [{'lang': 'en', 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.', 'supportingMedia': [{'type': 'text/html', 'base64': False, 'value': 'This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.'}]}], 'x_generator': {'engine': 'Vulnogram 1.0.5'}} N/A N/A 2026-09-24T13:51:58.989Z 2026-10-12T19:33:32.335Z
cve-2026-97057 8.7 (v4.0) 7.5 (v3.1) redis-parser through 3.0.0 Denial of Service via Inval… NodeRedis
redis-parser
2026-09-24T13:51:58.036Z 2026-09-24T15:47:51.240Z
cve-2026-77798 6.5 (v3.1) Velociraptor Authenticated Denial of Service Rapid7
Velociraptor
2026-09-24T13:50:40.310Z 2026-09-24T14:48:39.415Z
cve-2026-77797 3.6 (v3.1) Velociraptor Prefetch parser out of bounds Rapid7
Velociraptor
2026-09-24T13:49:41.379Z 2026-09-29T10:39:07.525Z
cve-2026-97360 10 (v4.0) 10 (v3.1) HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write v… rejetto
hfs2
2026-09-24T13:32:32.185Z 2026-09-24T15:00:30.695Z
cve-2026-97359 10 (v4.0) 10 (v3.1) HFS2 2.4.0 RCE via Multipart Upload Filename Template … rejetto
hfs2
2026-09-24T13:28:18.818Z 2026-09-29T02:44:54.569Z
cve-2026-95521 7.8 (v3.1) Rpm: rpm: shell command injection via macro expansion … Red Hat
Red Hat Enterprise Linux 10
2026-09-24T13:26:56.782Z 2026-11-06T07:38:08.199Z
cve-2026-95519 7.8 (v3.1) Rpm: code execution via macro expansion of manifest en… Red Hat
Red Hat Enterprise Linux 10
2026-09-24T13:26:54.847Z 2026-11-06T07:38:03.175Z
cve-2026-91187 9.3 (v4.0) Improper Verification of Cryptographic Signature in da… dashbit
nimble_zta
2026-09-24T13:20:52.974Z 2026-09-24T14:47:30.520Z
cve-2026-19072 9.9 (v3.1) Velociraptor Investigator reaches SuperUser via hunt E… Rapid7
Velociraptor
2026-09-24T12:52:51.864Z 2026-09-25T03:55:27.705Z
cve-2026-88916 6.8 (v3.1) Admin Access Bypass via Header Fallback in TÜBİTAK ULA… TÜBİTAK ULAKBİM
UlakPDF
2026-09-24T12:49:44.331Z 2026-09-24T14:42:00.710Z
cve-2026-88907 7.4 (v3.1) SAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKB… TÜBİTAK ULAKBİM
UlakPDF
2026-09-24T12:46:21.079Z 2026-09-24T14:41:39.471Z
cve-2026-94416 6.8 (v3.1) Aap-gateway: aap-gateway: authorization bypass via wor… Red Hat
Red Hat Ansible Automation Platform 2.6 for RHEL 9
2026-09-24T12:25:11.735Z 2026-10-21T19:38:23.553Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description