|
cve-2026-69197
|
|
Umbraco: Delivery API leaks protected (Public Access) …
|
umbraco
|
Umbraco-CMS
|
2026-09-17T15:44:24.988Z |
2026-09-17T17:23:18.418Z |
|
cve-2026-81515
|
|
Steeltoe.Discovery.Eureka: malformed enum/bool/timesta…
|
SteeltoeOSS
|
security-advisories
|
2026-09-17T15:40:11.704Z |
2026-09-21T20:50:19.404Z |
|
cve-2026-81516
|
|
Steeltoe.Discovery.Consul: malformed 'secure' metadata…
|
SteeltoeOSS
|
security-advisories
|
2026-09-17T15:38:09.014Z |
2026-09-17T19:19:01.075Z |
|
cve-2026-81868
|
|
Steeltoe: Header-forwarded client cert lacks proof of …
|
SteeltoeOSS
|
security-advisories
|
2026-09-17T15:36:23.149Z |
2026-09-23T18:46:54.265Z |
|
cve-2026-75523
|
|
Steeltoe.Management.Endpoint: HttpExchanges URI maskin…
|
SteeltoeOSS
|
security-advisories
|
2026-09-17T15:35:01.362Z |
2026-09-17T17:23:55.524Z |
|
cve-2026-85715
|
|
ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memor…
|
mattiasw
|
ExifReader
|
2026-09-17T15:33:02.213Z |
2026-09-17T15:54:27.224Z |
|
cve-2026-86864
|
8.8 (v3.1)
8.7 (v4.0)
|
pgAdmin 4: Argument and connection-string injection vi…
|
pgadmin.org
|
pgAdmin 4
|
2026-09-17T15:31:00.492Z |
2026-09-17T16:00:02.215Z |
|
cve-2026-86863
|
9.8 (v3.1)
9.3 (v4.0)
|
pgAdmin 4: Authentication bypass via a client-controll…
|
pgadmin.org
|
pgAdmin 4
|
2026-09-17T15:30:58.077Z |
2026-09-17T16:01:16.146Z |
|
cve-2026-86862
|
6.5 (v3.1)
7.1 (v4.0)
|
pgAdmin 4: Connection-string injection via the databas…
|
pgadmin.org
|
pgAdmin 4
|
2026-09-17T15:30:56.175Z |
2026-09-17T16:02:27.894Z |
|
cve-2026-86861
|
5.9 (v3.1)
6 (v4.0)
|
pgAdmin 4: File Manager save_file writes through a sym…
|
pgadmin.org
|
pgAdmin 4
|
2026-09-17T15:30:51.232Z |
2026-09-17T19:18:18.115Z |
|
cve-2026-92881
|
|
vgmstream AWB parser awb.c init_vgmstream_awb_memory d…
|
n/a
|
vgmstream
|
2026-09-17T15:30:13.793Z |
2026-09-23T16:19:30.188Z |
|
cve-2026-56795
|
8.2 (v3.1)
|
Dell Server Update Utility, versions prior to 26.…
|
Dell
|
Driver Pack For Windows OS
|
2026-09-17T15:24:41.762Z |
2026-09-19T14:21:53.052Z |
|
cve-2026-85999
|
|
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the white…
|
facelessuser
|
soupsieve
|
2026-09-17T15:23:37.457Z |
2026-09-22T20:29:44.838Z |
|
cve-2026-86000
|
|
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDEN…
|
facelessuser
|
soupsieve
|
2026-09-17T15:21:57.724Z |
2026-09-17T15:45:49.251Z |
|
cve-2026-86040
|
|
libp2p: Unbounded RPC decode + synchronous subscriptio…
|
libp2p
|
js-libp2p
|
2026-09-17T15:20:40.724Z |
2026-09-17T19:19:11.341Z |
|
cve-2026-91039
|
9.1 (v4.0)
|
dynamic_oidc identities are not namespaced by connecti…
|
team-alembic
|
ash_authentication
|
2026-09-17T15:19:15.994Z |
2026-09-17T19:40:32.068Z |
|
cve-2026-86039
|
|
libp2p: PeerStore accepts attacker-signed PeerRecords …
|
libp2p
|
js-libp2p
|
2026-09-17T15:19:00.697Z |
2026-09-21T20:48:54.323Z |
|
cve-2026-86038
|
|
libp2p: Gossipsub StrictSign accepts attacker-signed m…
|
libp2p
|
js-libp2p
|
2026-09-17T15:16:57.882Z |
2026-09-17T17:24:35.905Z |
|
cve-2026-93015
|
7 (v4.0)
6.3 (v3.1)
|
BlueKitchen BTstack through 1.8.2 A2DP SEP Discovery O…
|
BlueKitchen GmbH
|
BTstack
|
2026-09-17T15:16:52.858Z |
2026-09-17T19:19:21.674Z |
|
cve-2026-93014
|
7.1 (v4.0)
7.1 (v3.1)
|
RosarioSIS before 12.9 Path Traversal in File Deletion…
|
RosarioSIS
|
RosarioSIS
|
2026-09-17T15:16:52.130Z |
2026-09-17T15:47:11.421Z |
|
cve-2026-93013
|
5.3 (v4.0)
4.3 (v3.1)
|
RAGFlow through 0.27.2 Tenant Import Endpoints Path Tr…
|
infiniflow
|
ragflow
|
2026-09-17T15:16:51.432Z |
2026-09-21T20:47:39.278Z |
|
cve-2026-76834
|
9.2 (v4.0)
8.1 (v3.1)
|
b2evolution CMS 6.7.8 through 7.2.5 Object Injection v…
|
b2evolution
|
b2evolution CMS
|
2026-09-17T15:16:50.748Z |
2026-09-18T18:04:44.762Z |
|
cve-2026-12284
|
3.8 (v3.1)
|
Mattermost Desktop App Missing IPC Sender Validation i…
|
Mattermost
|
Mattermost
|
2026-09-17T15:11:52.297Z |
2026-09-17T19:18:45.112Z |
|
cve-2026-76781
|
5.5 (v3.1)
|
Libxml2: libxml2: null pointer dereference parsing nex…
|
Red Hat
|
Red Hat Hardened Images
|
2026-09-17T15:11:29.256Z |
2026-11-06T00:44:08.813Z |
|
cve-2026-75588
|
2.6 (v3.1)
|
Mattermost Desktop App plugin popout scheme validation…
|
Mattermost
|
Mattermost
|
2026-09-17T15:09:40.829Z |
2026-09-17T19:22:50.101Z |
|
cve-2026-92880
|
|
vgmstream EA SCHl parser vadpcm_decoder.c vadpcm_read_…
|
n/a
|
vgmstream
|
2026-09-17T15:00:12.927Z |
2026-09-22T15:45:01.168Z |
|
cve-2026-26950
|
8.1 (v3.1)
|
Dell SmartFabric Manager, versions prior to 2.2.1…
|
Dell
|
SmartFabric Manager
|
2026-09-17T14:58:46.459Z |
2026-09-18T03:56:15.240Z |
|
cve-2026-87742
|
7.5 (v3.1)
|
Quarkus-websockets-next: denial of service (oom) in qu…
|
Red Hat
|
Red Hat build of Quarkus 3.27.5.SP2
|
2026-09-17T14:57:44.414Z |
2026-10-09T15:37:02.180Z |
|
cve-2026-54471
|
3.5 (v3.1)
|
Dell SmartFabric Manager, versions prior to 2.2.1…
|
Dell
|
SmartFabric Manager
|
2026-09-17T14:54:15.771Z |
2026-09-17T15:19:34.373Z |
|
cve-2026-79752
|
|
CakePHP: Multiple methods in FunctionsBuilder vulnerab…
|
cakephp
|
cakephp
|
2026-09-17T14:49:56.936Z |
2026-09-17T15:20:00.313Z |