|
cve-2026-110816
|
5.3 (v3.1)
6.3 (v4.0)
|
qs.stringify with arrayFormat comma throws TypeError o…
|
ljharb
|
qs
|
2026-10-14T22:05:24.015Z |
2026-10-16T20:17:48.588Z |
|
cve-2026-102631
|
5.9 (v4.0)
|
authd: Account takeover via username fallback in ident…
|
Canonical
|
authd
|
2026-10-15T16:42:19.368Z |
2026-10-16T20:16:49.275Z |
|
cve-2026-111688
|
5.3 (v4.0)
4.3 (v3.1)
|
Exrick XBoot through 3.3.4 Data-Scope Bypass via openD…
|
Exrick
|
xboot
|
2026-10-16T17:39:45.564Z |
2026-10-16T20:16:18.861Z |
|
cve-2026-79957
|
8.1 (v3.1)
|
ServiceNext Insecure Direct Object Reference via GetUsarios
|
ServiceNext
|
SerTec
|
2026-10-14T18:01:51.493Z |
2026-10-16T20:15:51.180Z |
|
cve-2026-103415
|
9.3 (v4.0)
|
When a TLS 1.3 client processes a HelloRetryReque…
|
Eclipse Foundation
|
NetX Duo
|
2026-10-14T17:36:17.620Z |
2026-10-16T20:12:39.252Z |
|
cve-2026-107348
|
5.9 (v3.1)
|
Integer overflow causes an infinite loop in message bu…
|
n/a
|
PgBouncer
|
2026-10-14T17:34:29.838Z |
2026-10-16T20:11:22.132Z |
|
cve-2026-103414
|
8.4 (v4.0)
|
The GUIX binary resource (theme) loader sizes its…
|
Eclipse Foundation
|
GUIX
|
2026-10-14T17:32:12.095Z |
2026-10-16T20:10:44.107Z |
|
cve-2026-105236
|
6.3 (v4.0)
|
TLS 1.2 session resumption in ssl crosses SNI virtual-…
|
Erlang
|
OTP
|
2026-10-14T16:55:51.495Z |
2026-10-16T20:09:49.566Z |
|
cve-2026-94200
|
8.2 (v4.0)
|
TLS 1.3 client ticket store crashed by NewSessionTicke…
|
Erlang
|
OTP
|
2026-10-14T16:55:23.328Z |
2026-10-16T20:09:04.559Z |
|
cve-2026-105659
|
8.7 (v4.0)
|
HTTP/2 blocked-send deadlines reset on every WINDOW_UP…
|
mtrudel
|
bandit
|
2026-10-14T16:54:46.484Z |
2026-10-16T20:07:01.914Z |
|
cve-2026-109869
|
7.5 (v3.1)
|
undici vulnerable to Denial of Service via unhandled e…
|
undici
|
undici
|
2026-10-15T18:08:31.243Z |
2026-10-16T20:06:00.782Z |
|
cve-2026-109924
|
5.9 (v3.1)
|
undici vulnerable to Denial of Service via unbounded m…
|
undici
|
undici
|
2026-10-15T18:16:48.452Z |
2026-10-16T20:05:22.386Z |
|
cve-2026-109841
|
5.9 (v3.1)
|
undici vulnerable to Subresource Integrity bypass via …
|
undici
|
undici
|
2026-10-15T18:22:06.283Z |
2026-10-16T20:04:41.388Z |
|
cve-2026-109829
|
7.4 (v3.1)
|
undici vulnerable to cache poisoning and cross-user di…
|
undici
|
undici
|
2026-10-15T18:28:04.954Z |
2026-10-16T20:04:09.504Z |
|
cve-2026-109383
|
7.4 (v3.1)
|
undici vulnerable to TLS certificate validation bypass…
|
undici
|
undici
|
2026-10-15T18:34:01.468Z |
2026-10-16T20:03:30.839Z |
|
cve-2026-105660
|
6.9 (v4.0)
|
Unvalidated HTTP/1 request-target authority lets a cli…
|
mtrudel
|
bandit
|
2026-10-15T18:37:02.485Z |
2026-10-16T20:02:38.784Z |
|
cve-2026-87018
|
7.5 (v3.1)
|
undici vulnerable to Denial of Service via TLS 1.2 cer…
|
undici
|
undici
|
2026-10-15T18:38:25.613Z |
2026-10-16T20:01:29.402Z |
|
cve-2026-109932
|
5.9 (v3.1)
|
undici WebSocket client vulnerable to Denial of Servic…
|
undici
|
undici
|
2026-10-15T18:44:22.571Z |
2026-10-16T20:00:38.791Z |
|
cve-2026-111235
|
9.1 (v3.1)
|
OpenNMS REST authorization bypass via non-canonical HT…
|
The OpenNMS Group
|
Meridian
|
2026-10-15T18:45:06.685Z |
2026-10-16T19:59:35.614Z |
|
cve-2026-87029
|
5.9 (v3.1)
|
undici vulnerable to Denial of Service via unhandled e…
|
undici
|
undici
|
2026-10-15T18:48:36.902Z |
2026-10-16T19:58:52.997Z |
|
cve-2026-111252
|
6.5 (v3.1)
|
OpenNMS denial of service via XML entity expansion
|
The OpenNMS Group
|
Meridian
|
2026-10-15T18:56:18.803Z |
2026-10-16T19:58:01.259Z |
|
cve-2026-30971
|
|
ZoneMinder: Authenticated RCE via command injection in…
|
ZoneMinder
|
zoneminder
|
2026-10-16T19:40:51.681Z |
2026-10-16T19:57:11.752Z |
|
cve-2026-111718
|
7.1 (v4.0)
6.5 (v3.1)
|
AipexBase through commit 690adb9 SQL Injection via /ap…
|
kuafuai
|
aipexbase
|
2026-10-16T17:40:06.267Z |
2026-10-16T19:56:23.952Z |
|
cve-2026-105040
|
8.8 (v3.1)
|
EnergizeLab Eilik User-ID Mass Assignment Account Takeover
|
EnergizeLab
|
NestJS auth service
|
2026-10-15T20:43:47.669Z |
2026-10-16T19:56:03.407Z |
|
cve-2026-105039
|
9.6 (v3.1)
|
EnergizeLab Station Middleware Admin APIs Missing Role…
|
EnergizeLab
|
station-middleware
|
2026-10-15T20:43:38.761Z |
2026-10-16T19:55:16.658Z |
|
cve-2026-105038
|
9.8 (v3.1)
|
EnergizeLab Eilik Unauthenticated AI Model Administrat…
|
EnergizeLab
|
FastAPI AI inference server
|
2026-10-15T20:43:30.618Z |
2026-10-16T19:54:32.126Z |
|
cve-2026-105037
|
9.9 (v3.1)
|
EnergizeLab Station Middleware Authenticated Path Trav…
|
EnergizeLab
|
station-middleware
|
2026-10-15T20:43:13.599Z |
2026-10-16T19:53:45.885Z |
|
cve-2026-111673
|
9.3 (v4.0)
9.8 (v3.1)
|
IceCMS through 4.1.5 Missing Authentication via /User …
|
Thecosy
|
IceCMS
|
2026-10-16T17:39:33.876Z |
2026-10-16T19:53:09.859Z |
|
cve-2026-105036
|
7.5 (v3.1)
|
EnergizeLab Firmware Updates Downloaded over HTTP With…
|
EnergizeLab
|
Robot firmware (mode 104000)
|
2026-10-15T20:43:04.229Z |
2026-10-16T19:53:00.841Z |
|
cve-2026-105035
|
7.8 (v3.1)
|
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
|
EnergizeLab
|
FirmwareUpdater
|
2026-10-15T20:42:53.222Z |
2026-10-16T19:51:58.826Z |