|
cve-2026-83599
|
|
Netdata: WebSocket Decompression Bomb
|
netdata
|
netdata
|
2026-09-22T16:54:56.419Z |
2026-09-22T17:43:29.548Z |
|
cve-2026-13087
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'This CVE was reserved in error and duplicates CVE-2026-89530.'}], 'providerMetadata': {'orgId': '53f830b8-0a3f-465b-8143-3b8a9948e749', 'shortName': 'redhat', 'dateUpdated': '2026-09-30T16:22:30.667Z'}, 'x_generator': {'engine': 'cvelib 1.8.0'}}
|
N/A
|
N/A
|
2026-09-22T16:51:42.042Z |
2026-09-30T16:22:30.667Z |
|
cve-2026-84301
|
|
FastGPT safe axios SSRF guard still allows DNS rebindi…
|
labring
|
FastGPT
|
2026-09-22T16:50:19.790Z |
2026-09-25T23:45:50.724Z |
|
cve-2026-95818
|
3.6 (v3.1)
|
AT_SECURE program buffer overflow via $ORIGIN processing
|
The GNU C Library
|
glibc
|
2026-09-22T16:50:07.239Z |
2026-09-22T18:21:56.373Z |
|
cve-2026-76805
|
|
Nuclei: Environment Variable Disclosure via Response-D…
|
projectdiscovery
|
nuclei
|
2026-09-22T16:48:49.791Z |
2026-09-22T18:19:16.720Z |
|
cve-2026-76802
|
|
Nuclei: Arbitrary Command Execution via DAST Code Sign…
|
projectdiscovery
|
nuclei
|
2026-09-22T16:47:00.360Z |
2026-09-22T17:04:53.745Z |
|
cve-2026-87902
|
N/A
|
An unauthenticated attacker can make `get_page_te…
|
WordPress
|
WordPress
|
2026-09-22T16:44:15.048Z |
2026-09-26T03:55:51.560Z |
|
cve-2026-76819
|
N/A
|
{'rejectedReasons': [{'lang': 'en', 'value': 'Further research determined the issue results from a dependency.'}], 'providerMetadata': {'orgId': 'a0819718-46f1-4df5-94e2-005712e83aaa', 'shortName': 'GitHub_M', 'dateUpdated': '2026-09-22T16:45:29.510Z'}}
|
N/A
|
N/A
|
2026-09-22T16:43:24.861Z |
2026-09-22T16:45:29.510Z |
|
cve-2026-76804
|
|
Nuclei: Local File Read via Workflow File-Protocol Gat…
|
projectdiscovery
|
nuclei
|
2026-09-22T16:41:46.188Z |
2026-09-28T19:17:51.204Z |
|
cve-2026-76803
|
|
Nuclei: Local File Read via MySQL Client Sandbox Bypass
|
projectdiscovery
|
nuclei
|
2026-09-22T16:27:59.627Z |
2026-09-25T23:44:38.902Z |
|
cve-2026-83803
|
|
Sentry: Unsafe pickle deserialization in Relocation Feature
|
getsentry
|
sentry
|
2026-09-22T16:24:13.720Z |
2026-09-22T17:43:35.934Z |
|
cve-2026-86062
|
|
LightRAG: Stored Cross-Site Scripting (XSS) in the Lig…
|
HKUDS
|
LightRAG
|
2026-09-22T16:21:43.846Z |
2026-09-22T18:17:00.212Z |
|
cve-2026-85740
|
|
LightRAG: SSRF via IPv6-transition address bypass (NAT…
|
HKUDS
|
LightRAG
|
2026-09-22T16:20:11.620Z |
2026-09-28T19:33:46.769Z |
|
cve-2026-85734
|
|
LightRAG: No Rate Limiting on /login Endpoint Allows B…
|
HKUDS
|
LightRAG
|
2026-09-22T16:18:14.144Z |
2026-09-22T17:43:42.025Z |
|
cve-2026-94455
|
7.1 (v3.1)
|
Unauthenticated /enterprise/create-user mints lifetime…
|
GitroomHQ
|
postiz-app
|
2026-09-22T16:17:00.413Z |
2026-09-22T18:14:13.947Z |
|
cve-2026-85725
|
|
LightRAG: Plaintext Passwords Compared Without Constan…
|
HKUDS
|
LightRAG
|
2026-09-22T16:16:36.326Z |
2026-09-25T23:43:12.253Z |
|
cve-2026-85709
|
|
LightRAG: Sensitive Information Exposure Through Raw E…
|
HKUDS
|
LightRAG
|
2026-09-22T16:13:53.046Z |
2026-09-22T18:12:17.281Z |
|
cve-2026-86059
|
|
Dokploy: Git Provider Credential Exposure via Unprotec…
|
Dokploy
|
dokploy
|
2026-09-22T16:11:56.795Z |
2026-09-22T17:12:07.183Z |
|
cve-2026-94456
|
9.1 (v3.1)
|
Unauthenticated recovery of the Math.random() state be…
|
GitroomHQ
|
postiz-app
|
2026-09-22T16:11:33.674Z |
2026-09-22T18:11:17.502Z |
|
cve-2026-56682
|
|
9Router: Login Brute-Force Lockout Bypass via Spoofabl…
|
decolua
|
9router
|
2026-09-22T16:09:07.512Z |
2026-09-22T17:23:12.515Z |
|
cve-2026-56681
|
|
9Router: Authentication Bypass in Public LLM API via S…
|
decolua
|
9router
|
2026-09-22T16:02:25.018Z |
2026-09-28T19:31:54.707Z |
|
cve-2026-86805
|
6.3 (v3.1)
|
AT_SECURE programs may load attacker-controlled code v…
|
The GNU C Library
|
glibc
|
2026-09-22T15:55:17.117Z |
2026-09-23T03:55:58.505Z |
|
cve-2026-86698
|
2.3 (v4.0)
|
Refresh tokens accepted as private repository credenti…
|
hexpm
|
hexpm
|
2026-09-22T15:51:57.998Z |
2026-09-22T18:09:08.676Z |
|
cve-2026-75517
|
|
Novu: Cross-Environment Integration Manipulation (IDOR)
|
novuhq
|
novu
|
2026-09-22T15:51:24.246Z |
2026-09-22T17:43:48.795Z |
|
cve-2026-90462
|
5.4 (v3.1)
|
Sssd: sssd: fail-open in ldap ppolicy access check all…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-22T15:50:00.863Z |
2026-11-06T01:44:04.856Z |
|
cve-2026-75511
|
|
Novu: Server-Side Request Forgery (SSRF) via Chat Prov…
|
novuhq
|
novu
|
2026-09-22T15:49:37.481Z |
2026-09-25T23:42:12.190Z |
|
cve-2026-75510
|
|
Novu: Stored XSS in In-App Inbox via notification redi…
|
novuhq
|
novu
|
2026-09-22T15:47:19.922Z |
2026-09-22T15:59:27.761Z |
|
cve-2026-94640
|
7.5 (v3.1)
|
Rpcbind: unbounded memory allocation in rpcbind statis…
|
Red Hat
|
Red Hat Enterprise Linux 10
|
2026-09-22T15:39:49.022Z |
2026-11-05T00:13:15.816Z |
|
cve-2026-70410
|
|
Apache Calcite Avatica: Unrestricted class initializat…
|
Apache Software Foundation
|
Apache Calcite Avatica
|
2026-09-22T15:39:14.408Z |
2026-09-22T19:19:02.893Z |
|
cve-2026-88010
|
|
Traefik: BasicAuth singleflight coalescing reintroduce…
|
traefik
|
traefik
|
2026-09-22T15:38:25.969Z |
2026-09-22T16:00:11.588Z |