Recent vulnerabilities


ID CVSS Description Vendor Product Published Updated
cve-2026-79752 CakePHP: Multiple methods in FunctionsBuilder vulnerab… cakephp
cakephp
2026-09-17T14:49:56.936Z 2026-09-17T15:20:00.313Z
cve-2026-61793 Nuxt OG Image has unauthenticated SSRF via `fonts[].pa… nuxt-modules
og-image
2026-09-17T14:48:52.552Z 2026-09-17T15:15:46.383Z
cve-2026-81447 6.8 (v3.1) Dell OpenManage Server Administrator, versions pr… Dell
OpenManage Server Administrator Managed Node (Patch) for Windows
2026-09-17T14:47:54.450Z 2026-09-18T03:56:02.106Z
cve-2026-63459 Vendure: Stored XSS in the Admin Dashboard via unsafe … vendurehq
vendure
2026-09-17T14:45:39.650Z 2026-09-21T20:46:16.224Z
cve-2026-63461 Vendure: Shop API list queries can return non-public e… vendurehq
vendure
2026-09-17T14:43:01.879Z 2026-09-17T19:19:43.824Z
cve-2026-63472 Vendure: External-authentication account takeover: ext… vendurehq
vendure
2026-09-17T14:40:31.353Z 2026-09-17T15:21:11.192Z
cve-2026-63460 Vendure: Unauthenticated ReDoS via `regex` filter on S… vendurehq
vendure
2026-09-17T14:38:45.282Z 2026-09-17T15:04:11.699Z
cve-2026-80356 7.3 (v3.1) Dell OpenManage Server Administrator, versions pr… Dell
OpenManage Server Administrator Managed Node (Patch) for Windows
2026-09-17T14:38:22.873Z 2026-09-17T15:26:27.602Z
cve-2026-71538 @cyclonedx/cyclonedx-npm: Shell Injection via Unsaniti… CycloneDX
cyclonedx-node-npm
2026-09-17T14:35:39.144Z 2026-09-17T15:30:52.840Z
cve-2026-81446 7.4 (v3.1) Dell OpenManage Server Administrator, versions pr… Dell
OpenManage Server Administrator Managed Node (Patch) for Windows
2026-09-17T14:32:30.538Z 2026-09-19T14:21:53.228Z
cve-2026-85078 sanic chunked trailer request smuggling allows hidden … sanic-org
sanic
2026-09-17T14:28:37.286Z 2026-09-17T19:19:53.849Z
cve-2026-81445 7.2 (v3.1) Dell OpenManage Server Administrator, versions pr… Dell
OpenManage Server Administrator Managed Node (Patch) for Windows
2026-09-17T14:27:25.225Z 2026-09-18T03:55:50.936Z
cve-2026-85077 Sanic: HTTP response header injection via missing CR/L… sanic-org
sanic
2026-09-17T14:26:39.826Z 2026-09-21T20:45:15.589Z
cve-2026-77614 Opencast: Session fixation in login enables account ta… opencast
opencast
2026-09-17T14:23:27.476Z 2026-09-17T15:33:11.344Z
cve-2026-92987 8.7 (v4.0) 7.5 (v3.1) roxmltree through 0.21.1 Denial of Service via Quadrat… RazrFalcon
roxmltree
2026-09-17T14:22:10.913Z 2026-09-24T14:22:59.550Z
cve-2026-92986 8.6 (v4.0) 8.8 (v3.1) SiYuan before 3.8.4 Cross-Site Scripting via Document Title siyuan-note
siyuan
2026-09-17T14:22:10.251Z 2026-09-17T19:20:06.691Z
cve-2026-92985 8.6 (v4.0) 8.8 (v3.1) SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labels siyuan-note
siyuan
2026-09-17T14:22:09.581Z 2026-09-17T15:23:20.675Z
cve-2026-92984 8.5 (v4.0) 8.1 (v3.1) HUBzero CMS through 2.2.32 Session Fixation via Query-… hubzero
hubzero-cms
2026-09-17T14:22:08.931Z 2026-09-21T20:43:24.447Z
cve-2026-92983 8.7 (v4.0) 7.5 (v3.1) InternLM LMDeploy through 0.17.0 Memory Exhaustion via… InternLM
lmdeploy
2026-09-17T14:22:08.232Z 2026-09-18T19:18:29.048Z
cve-2026-88952 9.1 (v4.0) OAuth2 sign-in attached to an existing account without… team-alembic
ash_authentication
2026-09-17T14:15:19.506Z 2026-09-17T19:32:55.621Z
cve-2026-81453 6.5 (v3.1) Dell OpenManage Server Administrator, versions pr… Dell
OpenManage Server Administrator Managed Node (Patch) for Windows
2026-09-17T14:02:21.594Z 2026-09-17T19:20:17.852Z
cve-2026-81829 5.3 (v3.1) Smallrye-jwt: quarkus-smallrye-jwt: smallrye-jwt: unau… Red Hat
Red Hat build of Quarkus 3.27.5.SP2
2026-09-17T14:01:30.083Z 2026-10-09T16:26:17.785Z
cve-2026-92879 vgmstream mus_acm.c parse_mus resource consumption n/a
vgmstream
2026-09-17T14:00:13.224Z 2026-09-17T15:36:51.641Z
cve-2026-81443 6.4 (v3.1) Dell OpenManage Server Administrator, versions pr… Dell
OpenManage Server Administrator Managed Node (Patch) for Windows
2026-09-17T13:52:36.356Z 2026-09-19T14:21:53.407Z
cve-2026-81442 8.1 (v3.1) Dell OpenManage Server Administrator, versions pr… Dell
OpenManage Server Administrator Managed Node (Patch) for Windows
2026-09-17T13:46:43.663Z 2026-09-17T15:37:58.502Z
cve-2026-92963 6.9 (v4.0) 5.3 (v3.1) vm2 before 3.11.2 Information Disclosure via Internal State patriksimek
vm2
2026-09-17T13:46:18.972Z 2026-09-18T19:15:28.242Z
cve-2026-92962 2.1 (v4.0) vm2 before 3.11.4 Defense Invariant Violation via setu… patriksimek
vm2
2026-09-17T13:46:18.295Z 2026-09-17T15:40:44.491Z
cve-2026-92961 8.7 (v4.0) 7.5 (v3.1) vm2 before 3.11.6 Memory Exhaustion DoS via bufferAllo… patriksimek
vm2
2026-09-17T13:46:17.621Z 2026-09-21T20:52:43.708Z
cve-2026-92960 10 (v4.0) 10 (v3.1) vm2 before 3.11.6 Process-wide State Exposure via os and dns patriksimek
vm2
2026-09-17T13:46:16.952Z 2026-09-17T14:22:01.645Z
cve-2026-71568 5.3 (v3.1) BMCtest exposes Ironic without authentication and TLS … openshift-metal3
bmctest
2026-09-17T13:46:16.878Z 2026-09-17T19:34:27.498Z
ID CVSS Description Vendor Product Published Updated
ID Description Package Published Updated
ID Description Type
ID Description Updated
ID Description Updated
ID Description Updated
ID Description