Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 81 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-125612 |
8.8 (3.1)
|
DIAEnergie - SQL Injection Vulnerability |
Deltaww |
DIAEnergie |
2026-11-10T02:59:53.843Z | 2026-11-10T03:02:35.668Z |
| CVE-2026-88708 |
5.3 (4.0)
|
An off-by-one error in certain ASUS Router firmwa… |
ASUS |
Router firmware |
2026-11-10T02:00:37.636Z | 2026-11-10T02:00:37.636Z |
| CVE-2026-88707 |
7.1 (4.0)
|
An out-of-bounds write in certain ASUS Router fir… |
ASUS |
Router firmware |
2026-11-10T02:00:26.182Z | 2026-11-10T02:00:26.182Z |
| CVE-2026-88710 |
8.7 (4.0)
|
Improper neutralization of special elements used … |
ASUS |
Router firmware |
2026-11-10T02:00:17.828Z | 2026-11-10T02:00:17.828Z |
| CVE-2026-88709 |
7 (4.0)
|
Improper neutralization of special elements used … |
ASUS |
Router firmware |
2026-11-10T02:00:09.343Z | 2026-11-10T02:00:09.343Z |
| CVE-2026-109799 |
7.5 (3.1)
|
Improper verification of JWT signature in IASContextPr… |
SAP_SE |
SAP Cloud SDK for Python |
2026-11-10T01:04:31.245Z | 2026-11-10T01:04:31.245Z |
| CVE-2026-109797 |
7.1 (3.1)
|
Cross-tenant sandbox takeover in SAP/astonish |
SAP_SE |
SAP/astonish |
2026-11-10T01:03:52.532Z | 2026-11-10T01:03:52.532Z |
| CVE-2026-125087 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
Michael-A-Kuykendall Shimmy Inference API server.rs mi… |
Michael-A-Kuykendall |
Shimmy |
2026-11-10T01:00:27.382Z | 2026-11-10T01:00:27.382Z |
| CVE-2026-109805 |
6.4 (3.1)
|
Weak Cryptography in SAP NetWeaver and ABAP Platform (… |
SAP_SE |
SAP NetWeaver and ABAP Platform (Application Server ABAP) |
2026-11-10T00:49:24.750Z | 2026-11-10T00:49:24.750Z |
| CVE-2026-89125 |
6 (3.1)
|
Insecure Storage of Sensitive Information in SAP Web D… |
SAP_SE |
SAP Web Dispatcher and Internet Communication Manager |
2026-11-10T00:46:53.459Z | 2026-11-10T00:46:53.459Z |
| CVE-2026-125086 |
10 (4.0)
10 (3.1)
10 (3.0)
|
D-Link M60 emDaemon MQTT Broker mosquitto.conf system … |
D-Link |
M60 |
2026-11-10T00:45:28.122Z | 2026-11-10T00:45:28.122Z |
| CVE-2026-120017 |
10 (3.1)
|
Missing Authentication in SAP NetWeaver AS ABAP and AB… |
SAP_SE |
SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider) |
2026-11-10T00:43:09.084Z | 2026-11-10T00:43:09.084Z |
| CVE-2026-120016 |
6.1 (3.1)
|
Cross-Site Scripting (XSS) vulnerability in SAP NetWea… |
SAP_SE |
SAP NetWeaver Visual Composer |
2026-11-10T00:42:49.968Z | 2026-11-10T00:42:49.968Z |
| CVE-2026-120015 |
7.5 (3.1)
|
Insufficient Input Validation in SAP Host Agent |
SAP_SE |
SAP Host Agent |
2026-11-10T00:42:33.031Z | 2026-11-10T00:42:33.031Z |
| CVE-2026-120014 |
7.6 (3.1)
|
Cross-Site Request Forgery (CSRF) vulnerability in SAP… |
SAP_SE |
SAP Web Dispatcher and Internet Communication Manager |
2026-11-10T00:42:17.181Z | 2026-11-10T00:42:17.181Z |
| CVE-2026-120010 |
7.5 (3.1)
|
Memory Corruption vulnerability in SAP NetWeaver Appli… |
SAP_SE |
SAP NetWeaver Application Server (SAP Message Server) |
2026-11-10T00:41:59.668Z | 2026-11-10T00:41:59.668Z |
| CVE-2026-120009 |
7.2 (3.1)
|
Code Injection vulnerability in SAP ABAP Developer Too… |
SAP_SE |
SAP ABAP Developer Tools (AMDP Data Preview) |
2026-11-10T00:41:42.882Z | 2026-11-10T00:41:42.882Z |
| CVE-2026-120008 |
8.2 (3.1)
|
Memory Corruption Vulnerability in SAP NetWeaver (Inte… |
SAP_SE |
SAP NetWeaver (Internet Graphics Service) |
2026-11-10T00:41:26.061Z | 2026-11-10T00:41:26.061Z |
| CVE-2026-109811 |
6.5 (3.1)
|
Server-Side Request Forgery (SSRF) vulnerability in SA… |
SAP_SE |
SAP NetWeaver and ABAP Platform (Application Server ABAP) |
2026-11-10T00:41:08.379Z | 2026-11-10T00:41:08.379Z |
| CVE-2026-109810 |
6.1 (3.1)
|
CSS Injection vulnerability in SAP NetWeaver Applicati… |
SAP_SE |
SAP NetWeaver Application Server Java (Web Dynpro Java) |
2026-11-10T00:40:52.312Z | 2026-11-10T00:40:52.312Z |
| CVE-2026-109809 |
6.5 (3.1)
|
Security Vulnerabilities SAP NetWeaver Application Ser… |
SAP_SE |
SAP NetWeaver Application Server Java (NWDI Cockpit) |
2026-11-10T00:40:36.454Z | 2026-11-10T00:40:36.454Z |
| CVE-2026-109808 |
3.1 (3.1)
|
Missing Authorisation Check in SAP Solution Tools Plug… |
SAP_SE |
SAP Solution Tools Plug-In (ST-PI) |
2026-11-10T00:40:21.288Z | 2026-11-10T00:40:21.288Z |
| CVE-2026-109807 |
7.5 (3.1)
|
Multiple Vulnerabilities in SAP NetWeaver (Internet Gr… |
SAP_SE |
SAP NetWeaver (Internet Graphics Service) |
2026-11-10T00:40:03.951Z | 2026-11-10T00:40:03.951Z |
| CVE-2026-109806 |
7.5 (3.1)
|
Multiple Vulnerabilities in SAP NetWeaver (Internet Gr… |
SAP_SE |
SAP NetWeaver (Internet Graphics Service) |
2026-11-10T00:39:47.492Z | 2026-11-10T00:39:47.492Z |
| CVE-2026-109804 |
7.5 (3.1)
|
Information Disclosure in SAP NetWeaver (SAP Message Server) |
SAP_SE |
SAP NetWeaver (SAP Message Server) |
2026-11-10T00:38:58.561Z | 2026-11-10T00:38:58.561Z |
| CVE-2026-109803 |
9.9 (3.1)
|
Code Injection vulnerability in SAP NetWeaver Knowledg… |
SAP_SE |
SAP NetWeaver Knowledge Management (XML Forms) |
2026-11-10T00:38:42.313Z | 2026-11-10T00:38:42.313Z |
| CVE-2026-109802 |
6.5 (3.1)
|
Denial of Service (DoS) vulnerability in SAP NetWeaver… |
SAP_SE |
SAP NetWeaver Application Server for ABAP |
2026-11-10T00:38:26.482Z | 2026-11-10T00:38:26.482Z |
| CVE-2026-109801 |
6.5 (3.1)
|
Security Vulnerabilities SAP NetWeaver Application Ser… |
SAP_SE |
SAP NetWeaver Application Server Java (NWDI Cockpit) |
2026-11-10T00:38:09.883Z | 2026-11-10T00:38:09.883Z |
| CVE-2026-109800 |
7.7 (3.1)
|
Memory Corruption vulnerability in SAP Web Dispatcher |
SAP_SE |
SAP Web Dispatcher |
2026-11-10T00:37:55.180Z | 2026-11-10T00:37:55.180Z |
| CVE-2026-109798 |
9.1 (3.1)
|
XML External Entity (XXE) Vulnerability in SAP Busines… |
SAP_SE |
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) |
2026-11-10T00:37:35.647Z | 2026-11-10T00:37:35.647Z |