|
cve-2026-91147
|
5.9 (v3.1)
|
Cockpit: cockpit: denial of service in `cockpit-ws` du…
|
Red Hat
|
Red Hat Enterprise Linux 8
|
2026-09-18T16:43:51.546Z |
2026-11-06T01:44:51.477Z |
|
cve-2026-91149
|
7.5 (v3.1)
|
Cockpit: cockpit: denial of service via unbounded conn…
|
Red Hat
|
Red Hat Enterprise Linux 9
|
2026-09-18T16:43:46.021Z |
2026-11-05T00:04:35.837Z |
|
cve-2026-77608
|
|
Semantic MediaWiki has reflected XSS in `Special:Searc…
|
SemanticMediaWiki
|
SemanticMediaWiki
|
2026-09-18T16:43:43.868Z |
2026-09-21T20:49:46.468Z |
|
cve-2026-77240
|
|
WACRM: Database-layer authorization bypasses
|
ArnasDon
|
wacrm
|
2026-09-18T16:43:42.155Z |
2026-09-23T19:04:56.356Z |
|
cve-2026-77606
|
|
Semantic MediaWiki has reflected XSS in Special:Ask pl…
|
SemanticMediaWiki
|
SemanticMediaWiki
|
2026-09-18T16:41:42.731Z |
2026-09-22T14:59:11.461Z |
|
cve-2026-77301
|
|
adm-zip: Uncontrolled memory allocation via the declar…
|
cthackers
|
adm-zip
|
2026-09-18T16:38:47.064Z |
2026-09-18T17:11:11.964Z |
|
cve-2026-93579
|
6.5 (v3.1)
|
Io.netty/netty-codec-http2: netty: http/2 header field…
|
Red Hat
|
Red Hat Build of Debezium 3.6
|
2026-09-18T16:38:29.480Z |
2026-11-06T17:32:55.109Z |
|
cve-2026-77339
|
|
Process Compose: Browser DNS rebinding lets websites c…
|
F1bonacc1
|
process-compose
|
2026-09-18T16:37:19.072Z |
2026-09-18T16:49:46.487Z |
|
cve-2026-58197
|
|
ToolHive: containerized MCP servers can reach host ser…
|
stacklok
|
toolhive
|
2026-09-18T16:34:55.213Z |
2026-09-18T16:51:27.459Z |
|
cve-2026-61795
|
|
Capsule: hostnameRegexHandler.OnUpdate validates stale…
|
projectcapsule
|
capsule
|
2026-09-18T16:31:42.182Z |
2026-09-21T20:49:59.055Z |
|
cve-2026-93534
|
|
spatie Scotty Self Update SelfUpdater.php update code …
|
spatie
|
Scotty
|
2026-09-18T16:30:13.085Z |
2026-09-18T17:14:11.112Z |
|
cve-2026-61672
|
|
Capsule: Tenant owner bypasses Capsule's forbidden nam…
|
projectcapsule
|
capsule
|
2026-09-18T16:29:23.339Z |
2026-09-22T14:57:51.810Z |
|
cve-2026-61794
|
|
Capsule: Malformed ForbiddenAnnotations.Regex can bypa…
|
projectcapsule
|
capsule
|
2026-09-18T16:26:18.669Z |
2026-09-22T14:55:27.246Z |
|
cve-2026-62943
|
|
btrbk: SSH Command Filter Bypass in ssh_filter_btrbk.sh
|
digint
|
btrbk
|
2026-09-18T16:24:48.513Z |
2026-09-21T20:50:09.611Z |
|
cve-2026-81321
|
9.8 (v3.1)
9.3 (v4.0)
|
CareCam CM2507 Cleartext Storage of Sensitive Information
|
CareCam
|
HMT.CM2507 Firmware
|
2026-09-18T16:22:32.721Z |
2026-09-19T14:11:43.399Z |
|
cve-2026-93338
|
6.9 (v4.0)
5.3 (v3.1)
|
Grandstream GWN7660ELR < 1.0.27.6 Information Disclosu…
|
Grandstream Networks
|
GWN7660ELR
|
2026-09-18T16:21:33.261Z |
2026-09-18T17:24:47.072Z |
|
cve-2026-81505
|
|
Convoy: Cross-Tenant Source IDOR Leaks Plaintext Messa…
|
frain-dev
|
convoy
|
2026-09-18T16:21:17.278Z |
2026-09-18T17:15:48.985Z |
|
cve-2026-73863
|
|
NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()`…
|
nanomq
|
nanomq
|
2026-09-18T16:20:18.290Z |
2026-09-24T20:59:45.777Z |
|
cve-2026-85497
|
9.8 (v3.1)
9.3 (v4.0)
|
CareCam CM2507 Use of Password Hash With Insufficient …
|
CareCam
|
HMT.CM2507 Firmware
|
2026-09-18T16:19:23.396Z |
2026-09-21T18:46:26.392Z |
|
cve-2026-61633
|
|
NanoMQ: Infinite Loop in UNSUBSCRIBE Decoder Leading t…
|
nanomq
|
nanomq
|
2026-09-18T16:18:57.029Z |
2026-09-18T17:26:49.956Z |
|
cve-2026-44639
|
|
NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing
|
nanomq
|
nanomq
|
2026-09-18T16:17:56.222Z |
2026-09-18T17:21:50.284Z |
|
cve-2026-85478
|
3.5 (v3.1)
2.4 (v4.0)
|
CareCam CM2507 Missing Authentication for Critical Function
|
CareCam
|
HMT.CM2507 Firmware
|
2026-09-18T16:16:20.994Z |
2026-09-21T18:45:56.301Z |
|
cve-2026-93533
|
|
spatie Scotty Doctor DoctorCommand.php checkRemoteTool…
|
spatie
|
Scotty
|
2026-09-18T16:15:10.984Z |
2026-09-23T16:15:47.740Z |
|
cve-2026-81305
|
6.8 (v3.1)
7 (v4.0)
|
CareCam CM2507 Inclusion of Functionality from Untrust…
|
CareCam
|
HMT.CM2507 Firmware
|
2026-09-18T16:12:32.342Z |
2026-09-19T14:11:43.556Z |
|
cve-2026-61682
|
|
kcp front-proxy does not strip inbound X-Remote-* iden…
|
kcp-dev
|
kcp
|
2026-09-18T16:11:46.443Z |
2026-09-21T20:50:17.494Z |
|
cve-2026-54147
|
|
http4k: `DigestAuthProvider.verify` ignored configured…
|
http4k
|
http4k
|
2026-09-18T16:10:40.692Z |
2026-09-18T17:28:07.389Z |
|
cve-2026-11537
|
4.3 (v3.1)
|
IBM WebSphere Application Server prior to 9.0.5.29 and…
|
IBM
|
WebSphere Application Server
|
2026-09-18T16:10:32.090Z |
2026-09-19T14:11:43.715Z |
|
cve-2026-84400
|
3.1 (v3.1)
2.3 (v4.0)
|
CareCam CM2507 Missing Authentication for Critical Function
|
CareCam
|
HMT.CM2507 Firmware
|
2026-09-18T16:10:28.768Z |
2026-09-19T14:11:43.861Z |
|
cve-2026-54148
|
|
http4k: `DigestAuthProvider.verify` did not bind to re…
|
http4k
|
http4k
|
2026-09-18T16:09:44.361Z |
2026-09-22T14:54:12.650Z |
|
cve-2026-11381
|
8.8 (v3.1)
|
IBM MQ for HPE NonStop is vulnerable to a denial of se…
|
IBM
|
MQ for HPE NonStop
|
2026-09-18T16:09:44.204Z |
2026-09-19T03:56:53.756Z |