415128CVEs tracked
4633Last 7 days
16417Last 30 days
1756CISA KEV
Recently published CVEs
4633 results| CVE | CVSS | Attack conditions / Impact | EPSS | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-115845 | 6.4
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
Scope change
C:LI:LA:N
|
0.4% | Incomplete validation in the run_script Python sandbox in AWS MCP Server An incomplete list of disallowed inputs in the Python code validator of the run_script tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolat… |
2026-10-23 |
| CVE-2026-115570 | 7.4
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:HI:HA:N
|
0.5% | Electron: Mitigation for compromised eMudhra intermediate certificates Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not block compromised eMudhr… |
2026-10-23 |
| CVE-2026-115569 | 3.3
CNA (via NVD) v3.1 |
LocalNo authUser action
C:LI:NA:N
|
0.2% | Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read fil… Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-controlled Jest projects paths outside the project root through absolute paths, … |
2026-10-23 |
| CVE-2026-112342 | 7.1
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
C:LI:HA:N
|
0.4% | Tandoor Recipes < 2.7.0 Cross-Space Permission Cache Poisoning Tandoor Recipes before 2.7.0 contains an improper cache-key design in cookbook/helper/permission_helper.py that allows authenticated users to retain stale group-based permissions across different spac… |
2026-10-23 |
| CVE-2026-115863 | 7.6
CNA (via NVD) v3.1 |
AdjacentNo authNo interaction
C:LI:LA:H
|
0.4% | ConnMan through 2.0 has a stack-based buffer overflow via a DHCPv6 Reply message. This occurs in get_domains in gdhcp/client.c. It copies a fixed NS_MAXDNAME (1025) bytes from a DHCPv6 DOMAIN_LIST (op… | 2026-10-23 |
| CVE-2026-115813 | 5.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
Scope change
C:LI:NA:N
|
0.3% | Server-side request forgery in the model download path in Amazon Web Services Multi Model … Server-side request forgery in the model download path in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to send requests to internal network destinations via a cr… |
2026-10-23 |
| CVE-2026-115812 | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
0.7% | Relative path traversal during model archive extraction in Amazon Web Services Multi Model… Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier might allow remote actors to execute arbitrary code via a crafted model archive. … |
2026-10-23 |
| CVE-2026-115567 | 5.8
CNA (via NVD) v4.0 |
LocalLoginNo interactionConditions
C:NI:LA:H
|
0.1% | Tokio: Race condition in `tokio::time::Interval` Tokio is a runtime for writing applications with Rust. In 1.54.0, a race condition between tokio::time::Interval::poll_tick (including .tick().await) and the multi-threaded runtime's time driver could… |
2026-10-23 |
| CVE-2026-110975 | 7.4
CNA (via NVD) v3.1 |
AdjacentNo authNo interaction
Scope change
C:HI:NA:N
|
0.3% | Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint (GET /datasources) and t… |
2026-10-23 |
| CVE-2026-87901 | 8.3
CNA (via NVD) v3.0 |
NetworkNo authUser action
C:HI:HA:L
|
0.4% | Improper sanitization in the registration module allows reflected Cross-Site Scripting. | 2026-10-23 |
| CVE-2026-115810 | 7.7
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
Scope change
C:HI:NA:N
|
0.4% | Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL Tandoor Recipes before 2.7.0 contains a server-side request forgery vulnerability in the Pestle importer that allows authenticated low-privileged users to force the server to issue GET requests to arb… |
2026-10-23 |
| CVE-2026-106074 | 4.8
CNA (via NVD) v3.0 |
NetworkNo authNo interactionConditions
C:LI:LA:N
|
0.3% | A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, and `crypto.randomInt()` to be saved into user-land startup snapshots (`--build-sn… | 2026-10-23 |
| CVE-2026-106073 | 3.3
CNA (via NVD) v3.0 |
LocalLoginNo interaction
C:LI:NA:N
|
0.2% | A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered `fs.re… | 2026-10-23 |
| CVE-2026-106072 | 6.7
CNA (via NVD) v3.0 |
NetworkAdminNo interaction
C:HI:HA:L
|
0.3% | A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP endpoint when the client connects using a non-canonical IPv4 spelling, such as `0177.0.0.1`, … | 2026-10-23 |
| CVE-2026-106071 | 3.6
CNA (via NVD) v3.0 |
LocalLoginNo interactionConditions
C:LI:LA:N
|
0.1% | A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildcard `--allow-fs-read` or `--allow-fs-write` rule. When the requested path is shorter than … | 2026-10-23 |
| CVE-2026-106070 | 3.7
CNA (via NVD) v3.0 |
NetworkNo authNo interactionConditions
C:NI:LA:N
|
0.3% | A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entry after the local and central header validation fails. When `zipEntry.modified` is read o… | 2026-10-23 |
| CVE-2026-106069 | 7.4
CNA (via NVD) v3.0 |
NetworkNo authNo interactionConditions
C:HI:HA:N
|
0.2% | A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different IP address than the one the client connected to, when the host is a non-canonical IPv4 li… | 2026-10-23 |
| CVE-2026-105483 | 7.4
CNA (via NVD) v3.0 |
NetworkNo authNo interactionConditions
C:HI:HA:N
|
0.2% | A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenticate a connection to an IPv4 address when the host is written with non-ASCII characters, s… | 2026-10-23 |
| CVE-2026-105482 | 7.4
CNA (via NVD) v3.0 |
NetworkNo authNo interactionConditions
C:HI:HA:N
|
0.4% | A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.resolve*() functions and dns.reverse(). This is an incomplete fix of CVE-2026-48930, which o… | 2026-10-23 |
| CVE-2026-105481 | 6.5
CNA (via NVD) v3.0 |
NetworkNo authNo interactionConditions
C:LI:HA:N
|
0.2% | A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent before the client has sent the request. This is an incomplete fix of CVE-2026-48931. The g… | 2026-10-23 |
| CVE-2026-57845 | 8.8
CNA (via NVD) v3.1 |
NetworkNo authUser action
C:HI:HA:H
|
0.6% | Hugging Face Datasets 5.1.0 Pickle Deserialization RCE via Pandas Builder Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the dep… |
2026-10-23 |
| CVE-2026-52356 | — | Not scored | 0.8% | An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metachara… | 2026-10-23 |
| CVE-2026-50787 | — | Not scored | 0.3% | e-SIC Livre (esiclivre) v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters (l, a, tf, ql) without… | 2026-10-23 |
| CVE-2025-45528 | — | Not scored | 0.2% | An issue in Nitro Software, Inc Nitro PDF Pro for macOS v.14.7 allows a local attacker to execute arbitrary code via a crafted PDF | 2026-10-23 |
| CVE-2026-58497 | 8.6
CNA (via NVD) v4.0 |
NetworkNo authUser action
C:HI:HA:N
|
0.3% | Uni-CLI: Legacy HTTP MCP transport accepted browser-originated localhost requests Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCP. Prior to version 0.225.2, Uni-CLI exposed the legacy JSON-RPC-over-HTTP MCP tr… |
2026-10-23 |
| CVE-2026-55486 | 9.3
CNA (via NVD) v3.1 |
NetworkNo authUser action
Scope change
C:HI:HA:N
|
0.5% | Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected … The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.08 to before version 26.05, the IIIF Auth 2.0 endpoints auth/login and auth/token… |
2026-10-23 |
| CVE-2026-55465 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:NA:N
|
0.4% | Goobi viewer: Solr injection via unvalidated region parameter in spatial search The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/{… |
2026-10-23 |
| CVE-2026-55463 | 6.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:LA:N
|
0.2% | Goobi viewer: WebSocket endpoints lack server-side authentication and origin validation The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 4.11.0 to before version 26.05, several Jakarta WebSocket endpoints in goobi-viewer-… |
2026-10-23 |
| CVE-2026-55459 | 7.4
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:HI:HA:N
|
0.2% | Goobi viewer: OpenID JWT audience not enforced by the verifier The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 25.01 to before version 26.05, AuthenticationEndpoint.verifyOpenIdToken builds its v… |
2026-10-23 |
| CVE-2026-55457 | 7.4
CNA (via NVD) v3.1 |
NetworkNo authNo interactionConditions
C:HI:HA:N
|
0.5% | Goobi viewer: Empty webapi.authorization.token default permits unauthenticated authorizati… The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, Configuration.getWebApiToken returns the empty string when webapi.authori… |
2026-10-23 |
| CVE-2026-55444 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:NA:N
|
0.4% | Goobi viewer: Solr query injection via the legacy RSS servlet q and filterQuery parameters The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the legacy RSS servlet (RssResolver, GET /rss/) accepts the q and filterQ… |
2026-10-23 |
| CVE-2026-55442 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:NA:N
|
0.4% | Goobi viewer: cleanUpQuery double-brace bypass allows arbitrary Solr local-param injection The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 23.03 to before version 26.05, SolrTools.cleanUpQuery() strips Solr local-parameter … |
2026-10-23 |
| CVE-2026-55222 | 5.1
CNA (via NVD) v3.1 |
LocalNo authNo interactionConditions
C:NI:HA:N
|
0.1% | Isar: Unprivileged user ownership of trusted repository GPG public keys storage after boot… Isar is an integration system for automated root filesystem generation. In versions 0.11 and newer, /etc/apt/trusted.gpg.d is created manually during bootstrap setup to be able to deploy local keys. B… |
2026-10-23 |
| CVE-2026-54668 | 8.7
CNA (via NVD) v4.0 |
NetworkLoginNo interaction
C:HI:HA:H
|
0.4% | Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEAD… Kitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Library Suite. Prior to version 3.9.2, org.kitodo.production.helper.XMLUtils exposes several XML… |
2026-10-23 |
| CVE-2026-53942 | 9.9
CNA (via NVD) v3.1 |
NetworkLoginNo interaction
Scope change
C:HI:HA:L
|
0.5% | Conda Organization Infrastructure: Pwn Request in update workflow allows PR-controlled tem… Conda Organization Infrastructure is a centralized location for infrastructure codes. Prior to commit 9c0f238, a GitHub Actions Pwn Request vulnerability appears to remain present in conda/conda. The … |
2026-10-23 |
| CVE-2026-49442 | 5.3
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:LI:NA:N
|
0.4% | Cacti: User Enumeration via Error Messages Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeration vulnerability allows an attacker to identify valid usernames on the Cacti service. When … |
2026-10-23 |
| CVE-2026-46652 | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
1.1% | Path traversal via HTTP `Content-Disposition` header in ExternalFilesDownloader enables re… The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, ExternalFilesDownloader.getFilename() extracts the de… |
2026-10-23 |
| CVE-2026-46651 | 9.8
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:HI:HA:H
|
0.7% | Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi … The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 24.03 to before version 26.05, the DownloadTaskEndpoint WebSocket endpoint (/tasks/d… |
2026-10-23 |
| CVE-2026-46531 | 5.5
CNA (via NVD) v3.1 |
NetworkAdminNo interaction
C:HI:LA:N
|
0.3% | Cacti: Authenticated Stored 2nd-Order SQL Injection in automation_tree_rule_items.field (i… Cacti is an open source performance and fault management framework. From version 1.2.27 to before version 1.2.31, Cacti contains an authenticated stored second-order SQL injection in the automation tr… |
2026-10-23 |
| CVE-2026-46347 | 6.8
CNA (via NVD) v3.1 |
NetworkNo authUser actionConditions
C:HI:HA:N
|
0.4% | Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Rese… The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, when a password reset link is visited, the application generates a replac… |
2026-10-23 |
| CVE-2026-46346 | 6.5
CNA (via NVD) v3.1 |
NetworkNo authNo interaction
C:NI:LA:L
|
0.5% | Goobi viewer: Predictable Password Reset Token Allows Unauthorized Password Reset The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. Prior to version 26.05, the password reset token is predictably based on the time of the reset re… |
2026-10-23 |
| CVE-2026-39902 | 7.2
CNA (via NVD) v3.1 |
NetworkAdminNo interaction
C:HI:HA:H
|
0.6% | Cacti: Authenticated RCE on Data Input Cacti is an open source performance and fault management framework. Prior to version 1.2.31, the prior blocklist ([;&| `$\\n\r]) omitted single-quote, double-quote, redirect operators, subshell parens… |
2026-10-23 |
| CVE-2026-115478 | 7.1
CNA (via NVD) v4.0 |
NetworkLoginNo interaction
C:NI:HA:L
|
0.4% | obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle … obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, `create_entity`, `link_entities`, `rename_entity`, `unlink_entities` and `delete_enti… |
2026-10-23 |
| CVE-2026-115477 | 7.1
CNA (via NVD) v4.0 |
NetworkLoginNo interaction
C:NI:HA:L
|
0.5% | obsidian-tc: Declined human-in-the-loop confirmations can permit destructive calls over HT… obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.31.4, on a Streamable HTTP deployment with `auth.jwtSecret` configured and a 2026-07-28-er… |
2026-10-23 |
| CVE-2026-112333 | 5.4
CNA (via NVD) v3.1 |
NetworkLoginUser action
Scope change
C:LI:LA:N
|
0.2% | GFI Archiver < 15.14 Stored XSS via MailInsights.aspx GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or … |
2026-10-23 |
| CVE-2026-106765 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authUser actionConditions
C:HI:HA:H
|
0.7% | An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList function. | 2026-10-23 |
| CVE-2026-106764 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authUser actionConditions
C:HI:HA:H
|
0.7% | An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch function. | 2026-10-23 |
| CVE-2026-106763 | 7.5
CNA (via NVD) v3.1 |
NetworkNo authUser actionConditions
C:HI:HA:H
|
0.7% | An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the escapeShellString and sanitizeCode functions. | 2026-10-23 |
| CVE-2026-102786 | 8.6
CNA (via NVD) v4.0 |
NetworkNo authActive action
C:HI:HA:L
|
0.4% | Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attri… Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca Gallery 4.5.0 - 6.1.5 |
2026-10-23 |
| CVE-2026-93640 | 7.8
CNA (via NVD) v3.1 |
LocalLoginNo interaction
C:HI:HA:H
|
0.1% | Zimbra Collaboration Suite Local Privilege Escalation via Unrestricted zmunbound Sudo Conf… A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows the Unix zimbra account to access files with root privileges. The passwordless su… |
2026-10-23 |