|
cve-2026-94083
|
9.4 (v3.1)
|
Suricata before 8.0.7 has a DoH2 type confusion t…
|
OISF
|
Suricata
|
2026-09-20T01:18:05.744Z |
2026-09-22T15:20:03.227Z |
|
cve-2026-93958
|
|
D-Link R95 DHMAPI ssi system os command injection
|
D-Link
|
R95
|
2026-09-20T01:15:12.415Z |
2026-09-21T18:12:35.896Z |
|
cve-2026-93957
|
|
olivier-ls PHP-FTS Filter Matching SearchEngine.php ma…
|
olivier-ls
|
PHP-FTS
|
2026-09-20T01:00:10.532Z |
2026-09-22T16:03:47.463Z |
|
cve-2026-93956
|
|
olivier-ls PHP-FTS Search SearchEngine.php buildHighli…
|
olivier-ls
|
PHP-FTS
|
2026-09-19T23:00:14.704Z |
2026-09-21T15:09:33.949Z |
|
cve-2026-93993
|
8.6 (v4.0)
8.8 (v3.1)
|
Mistral Vibe before 2.25.5 Remote Code Execution via g…
|
mistralai
|
mistral-vibe
|
2026-09-19T22:58:13.233Z |
2026-09-21T14:08:38.031Z |
|
cve-2026-93992
|
7 (v4.0)
8.1 (v3.1)
|
Gopeed through 2.0.0-beta.3 Arbitrary File Write via P…
|
GopeedLab
|
gopeed
|
2026-09-19T22:58:12.558Z |
2026-09-21T18:31:09.341Z |
|
cve-2026-93991
|
8.3 (v4.0)
7.7 (v3.1)
|
Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Dis…
|
argoproj
|
argo-workflows
|
2026-09-19T22:58:11.895Z |
2026-09-21T20:46:52.269Z |
|
cve-2026-93990
|
8.7 (v4.0)
7.5 (v3.1)
|
Expat before 2.8.5 Malformed UTF-16 Acceptance via Unc…
|
libexpat
|
libexpat
|
2026-09-19T22:58:11.224Z |
2026-11-08T14:09:22.450Z |
|
cve-2026-93989
|
2.3 (v4.0)
3.1 (v3.1)
|
vLLM through 0.29.0 Cross-Request Logits Corruption vi…
|
vllm-project
|
vllm
|
2026-09-19T22:58:10.572Z |
2026-09-22T16:00:44.177Z |
|
cve-2026-93988
|
7.1 (v4.0)
6.5 (v3.1)
|
QloApps through 1.7.0 Arbitrary File Read via getEmailHTML
|
webkul
|
qloapps
|
2026-09-19T22:58:09.912Z |
2026-10-08T15:51:53.637Z |
|
cve-2026-94057
|
4 (v3.1)
|
Exim before 4.100.1 allows SMTP smuggling in whic…
|
Exim
|
Exim
|
2026-09-19T22:55:00.348Z |
2026-09-22T15:59:36.582Z |
|
cve-2026-94056
|
7.5 (v3.1)
|
Exim before 4.100.1, when Proxy-Protocol is used …
|
Exim
|
Exim
|
2026-09-19T22:52:43.612Z |
2026-09-21T18:32:49.509Z |
|
cve-2026-94055
|
3.7 (v3.1)
|
Exim before 4.100.1, when certain non-default TLS…
|
Exim
|
Exim
|
2026-09-19T22:48:57.996Z |
2026-09-21T15:19:07.403Z |
|
cve-2026-94054
|
7 (v3.1)
|
Exim before 4.100.1, when Proxy-Protocol is used …
|
Exim
|
Exim
|
2026-09-19T22:46:24.545Z |
2026-09-22T16:07:39.291Z |
|
cve-2026-93955
|
|
grimmory-tools grimmory Download Endpoint KoboControll…
|
grimmory-tools
|
grimmory
|
2026-09-19T22:15:09.092Z |
2026-09-21T20:20:23.567Z |
|
cve-2026-93954
|
|
grimmory-tools grimmory Settings API Endpoint AppSetti…
|
grimmory-tools
|
grimmory
|
2026-09-19T21:45:11.207Z |
2026-09-22T15:43:56.136Z |
|
cve-2026-82672
|
6.3 (v4.0)
|
Unvalidated chunk-size line tail in Mint HTTP/1 client…
|
elixir-mint
|
mint
|
2026-09-19T17:00:31.648Z |
2026-09-21T18:30:02.604Z |
|
cve-2026-82560
|
N/A
|
Pod::Text versions before 6.1.1 for Perl allow CPU and…
|
|
|
2026-09-19T15:15:52.620Z |
2026-09-21T18:38:31.266Z |
|
cve-2026-94001
|
6.5 (v3.1)
|
Keycloak-services: keycloak-services: admin credential…
|
Red Hat
|
Red Hat build of Keycloak 26.6
|
2026-09-19T14:11:53.859Z |
2026-11-06T17:34:27.133Z |
|
cve-2026-94000
|
6.6 (v3.1)
|
Keycloak-services: keycloak-services: delegated admin …
|
Red Hat
|
Red Hat build of Keycloak 26.6
|
2026-09-19T14:09:17.729Z |
2026-11-06T17:34:25.530Z |
|
cve-2026-93999
|
4.2 (v3.1)
|
Keycloak-services: keycloak-services: token refresh co…
|
Red Hat
|
Red Hat build of Keycloak 26.6
|
2026-09-19T14:09:11.811Z |
2026-11-06T17:34:22.181Z |
|
cve-2026-93987
|
4.6 (v4.0)
3.4 (v3.1)
|
rclone serve docker Path Traversal via Volume Name
|
rclone
|
rclone
|
2026-09-19T11:53:38.413Z |
2026-09-21T18:29:11.792Z |
|
cve-2026-93986
|
2.3 (v4.0)
3.1 (v3.1)
|
rclone before 1.75.1 Path Traversal via Directory List…
|
rclone
|
rclone
|
2026-09-19T11:53:37.737Z |
2026-09-21T20:46:58.617Z |
|
cve-2026-93985
|
9.4 (v4.0)
9.9 (v3.1)
|
OpenPanel js-runtime through 2.3.0 JavaScript Template…
|
Openpanel-dev
|
openpanel
|
2026-09-19T11:53:37.061Z |
2026-10-02T14:00:44.881Z |
|
cve-2026-93984
|
6.9 (v4.0)
5.3 (v3.1)
|
OpenPanel API through 2.3.0 Authentication Bypass via …
|
Openpanel-dev
|
openpanel
|
2026-09-19T11:53:36.376Z |
2026-10-02T14:00:44.275Z |
|
cve-2026-93983
|
5.3 (v4.0)
5 (v3.1)
|
OpenPanel through 2.3.0 SQL Injection via ClickHouse P…
|
Openpanel-dev
|
openpanel
|
2026-09-19T11:53:35.677Z |
2026-10-02T14:00:43.185Z |
|
cve-2026-93982
|
4.8 (v4.0)
3.3 (v3.1)
|
OpenPanel through 2.3.0 MCP Authentication Token in Qu…
|
Openpanel-dev
|
openpanel
|
2026-09-19T11:53:34.982Z |
2026-10-02T14:00:42.472Z |
|
cve-2026-93981
|
2.3 (v4.0)
4.7 (v3.1)
|
hono/jsx before 4.13.7 Cross-Site Scripting via Unesca…
|
honojs
|
hono
|
2026-09-19T11:53:34.294Z |
2026-09-21T20:47:06.182Z |
|
cve-2026-78030
|
N/A
|
DBI versions before 1.653 for Perl load arbitrary modu…
|
|
|
2026-09-19T10:45:10.164Z |
2026-09-20T00:05:29.533Z |
|
cve-2026-93742
|
|
Totolink A3002MU formWsc command injection
|
Totolink
|
A3002MU
|
2026-09-19T08:30:21.147Z |
2026-09-21T18:28:19.220Z |