|
cve-2026-105035
|
7.8 (v3.1)
|
EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key
|
EnergizeLab
|
FirmwareUpdater
|
2026-10-15T20:42:53.222Z |
2026-10-16T19:51:58.826Z |
|
cve-2026-111703
|
5.3 (v4.0)
6.3 (v3.1)
|
yshop-crm through 2.1.3 IDOR via CRM customer by-id en…
|
guchengwuyue
|
yshop-crm
|
2026-10-16T17:39:55.802Z |
2026-10-16T19:51:05.638Z |
|
cve-2026-105034
|
8.2 (v3.1)
|
EnergizeLab Eilik Unauthenticated Device-Token Issuanc…
|
EnergizeLab
|
NestJS auth service
|
2026-10-15T20:42:42.975Z |
2026-10-16T19:50:56.544Z |
|
cve-2026-105033
|
8.8 (v3.1)
|
EnergizeLab AI Station Default Root Credentials with S…
|
EnergizeLab
|
AI Station firmware (RK3562)
|
2026-10-15T20:42:34.038Z |
2026-10-16T19:50:15.092Z |
|
cve-2026-105032
|
9.1 (v3.1)
|
EnergizeLab Eilik AI Skill Upload Unauthenticated Path…
|
EnergizeLab
|
FastAPI AI inference server
|
2026-10-15T20:42:04.726Z |
2026-10-16T19:48:56.951Z |
|
cve-2024-58397
|
6.9 (v4.0)
6.1 (v3.1)
|
MP4v2 through 2.1.3 Heap Out-of-Bounds Read via MP4Fil…
|
enzo1982
|
mp4v2
|
2026-10-15T21:43:16.269Z |
2026-10-16T19:45:43.877Z |
|
cve-2026-111708
|
9.3 (v4.0)
9.8 (v3.1)
|
WhaTicket Community through commit cf04795 Admin Self-…
|
canove
|
whaticket-community
|
2026-10-16T17:39:59.242Z |
2026-10-16T19:45:36.979Z |
|
cve-2026-111279
|
8.7 (v4.0)
7.5 (v3.1)
|
Dragonfly through 2.0.2 Unbounded Memory Allocation vi…
|
dragonflydb
|
dragonfly
|
2026-10-15T21:43:23.862Z |
2026-10-16T19:43:45.103Z |
|
cve-2026-111284
|
5.1 (v4.0)
5.4 (v3.1)
|
Aureus ERP through 1.6.0 Stored XSS via Time Off Holid…
|
Webkul
|
Aureus ERP
|
2026-10-15T21:43:27.434Z |
2026-10-16T19:42:44.500Z |
|
cve-2026-111322
|
9.3 (v4.0)
9.8 (v3.1)
|
Archon 0.2.13 through 0.11.1 Missing Authentication vi…
|
coleam00
|
Archon
|
2026-10-15T21:43:31.045Z |
2026-10-16T19:41:55.935Z |
|
cve-2026-111698
|
7.1 (v4.0)
6.5 (v3.1)
|
HUIZHI ChargeOS cloud through 3.0.9 Unpaid Wallet Cred…
|
roinli
|
HUIZHI-ChargeOS-cloud
|
2026-10-16T17:39:52.360Z |
2026-10-16T19:41:02.118Z |
|
cve-2026-59966
|
|
Tandoor Recipes: ReDoS (Regular Expression Denial of S…
|
TandoorRecipes
|
recipes
|
2026-10-16T19:18:57.453Z |
2026-10-16T19:40:13.402Z |
|
cve-2026-111273
|
6.9 (v4.0)
6.1 (v3.1)
|
unarr through 1.1.1 Off-by-One Heap Buffer Overflow vi…
|
selmf
|
unarr
|
2026-10-15T21:43:19.717Z |
2026-10-16T19:39:08.849Z |
|
cve-2026-111632
|
5.3 (v4.0)
5.4 (v3.1)
|
Aureus ERP through 1.6.0 Multi-Company Authorization B…
|
aureuserp
|
aureuserp
|
2026-10-16T17:39:05.550Z |
2026-10-16T19:33:21.197Z |
|
cve-2026-111627
|
8.6 (v4.0)
7.2 (v3.1)
|
HestiaCP before 1.10.5 Protected Admin Bypass via Cron…
|
hestiacp
|
hestiacp
|
2026-10-16T17:39:02.155Z |
2026-10-16T19:32:00.506Z |
|
cve-2026-111622
|
7.6 (v4.0)
6.8 (v3.1)
|
smart-sso through 2.1.1 OAuth2 Authorization Code Thef…
|
a466350665
|
smart-sso
|
2026-10-16T17:38:58.736Z |
2026-10-16T19:29:48.555Z |
|
cve-2026-111617
|
6.9 (v4.0)
6.5 (v3.1)
|
WHartTest through 2.8.1 Missing Authentication on UI-A…
|
MGdaasLab
|
WHartTest
|
2026-10-16T17:38:55.285Z |
2026-10-16T19:28:17.272Z |
|
cve-2026-111612
|
8.7 (v4.0)
7.5 (v3.1)
|
netdisk-fast-download through 0.4.8 Credential Disclos…
|
qaiu
|
netdisk-fast-download
|
2026-10-16T17:38:51.828Z |
2026-10-16T19:27:08.464Z |
|
cve-2026-80754
|
|
Input: synaptics-rmi4 - fix F55 transmitter electrode …
|
Linux
|
Linux
|
2026-09-03T08:26:33.180Z |
2026-10-16T19:26:36.322Z |
|
cve-2026-80737
|
|
serial: amba-pl011: synchronize DMA teardown
|
Linux
|
Linux
|
2026-09-03T08:21:52.539Z |
2026-10-16T19:26:36.178Z |
|
cve-2026-80731
|
|
net: remove CAP_SYS_RAWIO zero-padding in dev_validate…
|
Linux
|
Linux
|
2026-09-03T08:21:48.924Z |
2026-10-16T19:26:36.020Z |
|
cve-2026-80725
|
|
net: gro: properly validate BIG TCP aggregation criteria
|
Linux
|
Linux
|
2026-08-29T06:39:35.212Z |
2026-10-16T19:26:35.734Z |
|
cve-2026-80723
|
|
of: reserved_mem: prevent OOB when too many dynamic re…
|
Linux
|
Linux
|
2026-08-28T06:53:18.485Z |
2026-10-16T19:26:35.582Z |
|
cve-2026-80722
|
|
wifi: mac80211: validate individual TWT params before …
|
Linux
|
Linux
|
2026-08-28T06:53:17.886Z |
2026-10-16T19:26:35.418Z |
|
cve-2026-80721
|
|
Bluetooth: ISO: ensure no dangling hcon references in …
|
Linux
|
Linux
|
2026-08-28T06:53:17.278Z |
2026-10-16T19:26:35.259Z |
|
cve-2026-80717
|
|
sctp: validate Adaptation Indication parameter length
|
Linux
|
Linux
|
2026-08-28T06:53:14.886Z |
2026-10-16T19:26:35.092Z |
|
cve-2026-80716
|
|
ALSA: pcm: wake linked drain waiters on unlink
|
Linux
|
Linux
|
2026-08-28T06:53:14.286Z |
2026-10-16T19:26:34.951Z |
|
cve-2026-80714
|
|
ipvs: do not propagate one-packet flag to synced conns
|
Linux
|
Linux
|
2026-08-28T06:53:13.069Z |
2026-10-16T19:26:34.808Z |
|
cve-2026-80709
|
|
s390/zcrypt: Fix wrong domain value verification with …
|
Linux
|
Linux
|
2026-08-28T06:53:09.439Z |
2026-10-16T19:26:34.515Z |
|
cve-2026-80707
|
|
can: j1939: transport: j1939_session_fresh_new(): init…
|
Linux
|
Linux
|
2026-08-28T06:53:08.244Z |
2026-10-16T19:26:34.357Z |