|
cve-2026-94200
|
8.2 (v4.0)
|
TLS 1.3 client ticket store crashed by NewSessionTicke…
|
Erlang
|
OTP
|
2026-10-14T16:55:23.328Z |
2026-10-16T20:09:04.559Z |
|
cve-2026-105659
|
8.7 (v4.0)
|
HTTP/2 blocked-send deadlines reset on every WINDOW_UP…
|
mtrudel
|
bandit
|
2026-10-14T16:54:46.484Z |
2026-10-16T20:07:01.914Z |
|
cve-2026-109869
|
7.5 (v3.1)
|
undici vulnerable to Denial of Service via unhandled e…
|
undici
|
undici
|
2026-10-15T18:08:31.243Z |
2026-10-16T20:06:00.782Z |
|
cve-2026-109924
|
5.9 (v3.1)
|
undici vulnerable to Denial of Service via unbounded m…
|
undici
|
undici
|
2026-10-15T18:16:48.452Z |
2026-10-16T20:05:22.386Z |
|
cve-2026-109841
|
5.9 (v3.1)
|
undici vulnerable to Subresource Integrity bypass via …
|
undici
|
undici
|
2026-10-15T18:22:06.283Z |
2026-10-16T20:04:41.388Z |
|
cve-2026-109829
|
7.4 (v3.1)
|
undici vulnerable to cache poisoning and cross-user di…
|
undici
|
undici
|
2026-10-15T18:28:04.954Z |
2026-10-16T20:04:09.504Z |
|
cve-2026-109383
|
7.4 (v3.1)
|
undici vulnerable to TLS certificate validation bypass…
|
undici
|
undici
|
2026-10-15T18:34:01.468Z |
2026-10-16T20:03:30.839Z |
|
cve-2026-105660
|
6.9 (v4.0)
|
Unvalidated HTTP/1 request-target authority lets a cli…
|
mtrudel
|
bandit
|
2026-10-15T18:37:02.485Z |
2026-10-16T20:02:38.784Z |
|
cve-2026-87018
|
7.5 (v3.1)
|
undici vulnerable to Denial of Service via TLS 1.2 cer…
|
undici
|
undici
|
2026-10-15T18:38:25.613Z |
2026-10-16T20:01:29.402Z |
|
cve-2026-109932
|
5.9 (v3.1)
|
undici WebSocket client vulnerable to Denial of Servic…
|
undici
|
undici
|
2026-10-15T18:44:22.571Z |
2026-10-16T20:00:38.791Z |
|
cve-2026-111235
|
9.1 (v3.1)
|
OpenNMS REST authorization bypass via non-canonical HT…
|
The OpenNMS Group
|
Meridian
|
2026-10-15T18:45:06.685Z |
2026-10-16T19:59:35.614Z |
|
cve-2026-87029
|
5.9 (v3.1)
|
undici vulnerable to Denial of Service via unhandled e…
|
undici
|
undici
|
2026-10-15T18:48:36.902Z |
2026-10-16T19:58:52.997Z |
|
cve-2026-111252
|
6.5 (v3.1)
|
OpenNMS denial of service via XML entity expansion
|
The OpenNMS Group
|
Meridian
|
2026-10-15T18:56:18.803Z |
2026-10-16T19:58:01.259Z |
|
cve-2026-30971
|
|
ZoneMinder: Authenticated RCE via command injection in…
|
ZoneMinder
|
zoneminder
|
2026-10-16T19:40:51.681Z |
2026-10-16T19:57:11.752Z |
|
cve-2026-111718
|
7.1 (v4.0)
6.5 (v3.1)
|
AipexBase through commit 690adb9 SQL Injection via /ap…
|
kuafuai
|
aipexbase
|
2026-10-16T17:40:06.267Z |
2026-10-16T19:56:23.952Z |
|
cve-2026-105040
|
8.8 (v3.1)
|
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
|
EnergizeLab
|
NestJS auth service
|
2026-10-15T20:43:47.669Z |
2026-10-16T19:56:03.407Z |
|
cve-2026-105039
|
9.6 (v3.1)
|
EnergizeLab Station Middleware Admin APIs Missing Role…
|
EnergizeLab
|
station-middleware
|
2026-10-15T20:43:38.761Z |
2026-10-16T19:55:16.658Z |
|
cve-2026-105038
|
9.8 (v3.1)
|
EnergizeLab Eilik Unauthenticated AI Model Administrat…
|
EnergizeLab
|
FastAPI AI inference server
|
2026-10-15T20:43:30.618Z |
2026-10-16T19:54:32.126Z |
|
cve-2026-105037
|
9.9 (v3.1)
|
EnergizeLab Station Middleware Authenticated Path Trav…
|
EnergizeLab
|
station-middleware
|
2026-10-15T20:43:13.599Z |
2026-10-16T19:53:45.885Z |
|
cve-2026-111673
|
9.3 (v4.0)
9.8 (v3.1)
|
IceCMS through 4.1.5 Missing Authentication via /User …
|
Thecosy
|
IceCMS
|
2026-10-16T17:39:33.876Z |
2026-10-16T19:53:09.859Z |
|
cve-2026-105036
|
7.5 (v3.1)
|
EnergizeLab Firmware Updates Downloaded over HTTP With…
|
EnergizeLab
|
Robot firmware (mode 104000)
|
2026-10-15T20:43:04.229Z |
2026-10-16T19:53:00.841Z |
|
cve-2026-105035
|
7.8 (v3.1)
|
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
|
EnergizeLab
|
FirmwareUpdater
|
2026-10-15T20:42:53.222Z |
2026-10-16T19:51:58.826Z |
|
cve-2026-111703
|
5.3 (v4.0)
6.3 (v3.1)
|
yshop-crm through 2.1.3 IDOR via CRM customer by-id en…
|
guchengwuyue
|
yshop-crm
|
2026-10-16T17:39:55.802Z |
2026-10-16T19:51:05.638Z |
|
cve-2026-105034
|
8.2 (v3.1)
|
EnergizeLab Eilik Unauthenticated Device-Token Issuanc…
|
EnergizeLab
|
NestJS auth service
|
2026-10-15T20:42:42.975Z |
2026-10-16T19:50:56.544Z |
|
cve-2026-105033
|
8.8 (v3.1)
|
EnergizeLab AI Station Default Root Credentials with S…
|
EnergizeLab
|
AI Station firmware (RK3562)
|
2026-10-15T20:42:34.038Z |
2026-10-16T19:50:15.092Z |
|
cve-2026-105032
|
9.1 (v3.1)
|
EnergizeLab Eilik AI Skill Upload Unauthenticated Path…
|
EnergizeLab
|
FastAPI AI inference server
|
2026-10-15T20:42:04.726Z |
2026-10-16T19:48:56.951Z |
|
cve-2024-58397
|
6.9 (v4.0)
6.1 (v3.1)
|
MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4Fil…
|
enzo1982
|
mp4v2
|
2026-10-15T21:43:16.269Z |
2026-10-16T19:45:43.877Z |
|
cve-2026-111708
|
9.3 (v4.0)
9.8 (v3.1)
|
WhaTicket Community through commit cf04795 Admin Self-…
|
canove
|
whaticket-community
|
2026-10-16T17:39:59.242Z |
2026-10-16T19:45:36.979Z |
|
cve-2026-111279
|
8.7 (v4.0)
7.5 (v3.1)
|
Dragonfly through 2.0.2 Unbounded Memory Allocation vi…
|
dragonflydb
|
dragonfly
|
2026-10-15T21:43:23.862Z |
2026-10-16T19:43:45.103Z |
|
cve-2026-111284
|
5.1 (v4.0)
5.4 (v3.1)
|
Aureus ERP through 1.6.0 Stored XSS via Time Off Holid…
|
Webkul
|
Aureus ERP
|
2026-10-15T21:43:27.434Z |
2026-10-16T19:42:44.500Z |