Vulnerability Intelligence · All CVEs
Every Published CVE, Searchable.
Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status.
Synced hourly · figures as of Oct 19, 2026
391,982 vulnerabilities · newest first
- CVE-2026-16487High 8.1Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an…Published Oct 19, 2026
- CVE-2026-112086Medium 5.3The manipulation of the argument _target_ results…Published Oct 19, 2026
- CVE-2026-112083Medium 6.9A security flaw has been discovered in sgl-project SGLang up to 0.5.19.Published Oct 19, 2026
- CVE-2026-112082High 8.7This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording…Published Oct 19, 2026
- CVE-2026-112081Medium 5.3A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64.Published Oct 19, 2026
- CVE-2026-108121Medium 6.9Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration…Published Oct 19, 2026
- CVE-2026-108120High 7.7Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended…Published Oct 19, 2026
- CVE-2026-106933Medium 6.8The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to…Published Oct 19, 2026
- CVE-2026-106028Medium 5.3The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and…Published Oct 19, 2026
- CVE-2026-106014Medium 5.3The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without…Published Oct 19, 2026
- CVE-2026-112080Medium 5.3A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b.Published Oct 19, 2026
- CVE-2026-112079Medium 5.3The manipulation of the argument vectors.vocab leads to…Published Oct 19, 2026
- CVE-2026-112078Medium 5.3Executing a manipulation of the argument ckpt_path can lead to code injection.Published Oct 19, 2026
- CVE-2026-112077Medium 6.3A vulnerability was detected in radareorg radare2 6.2.0/6.2.2.Published Oct 19, 2026
- CVE-2026-112076Medium 6.3A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28.Published Oct 19, 2026
- CVE-2026-112075Medium 5.3A weakness has been identified in unslothai unsloth up to 0.1.501-beta.Published Oct 19, 2026
- CVE-2026-112074Medium 5.3Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pixel.cpp of the component Conversion API.Published Oct 19, 2026
- CVE-2026-112073Medium 5.3Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul.Published Oct 19, 2026
- CVE-2026-112045Medium 5.3A vulnerability was detected in donetick up to 0.1.82.Published Oct 19, 2026
- CVE-2026-111440High 7.0在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String 为参数的构造函数，再转换为 Log。缺少 asSubclass(Log.class) 校验，非 Log 实现类也会在类型检查前被实例化。因此，当攻击者可控制…Published Oct 19, 2026
- CVE-2026-112044Medium 6.9A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29.Published Oct 19, 2026
- CVE-2026-112043Medium 5.3A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0.Published Oct 19, 2026
- CVE-2026-112042Medium 5.1A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.Published Oct 19, 2026
- CVE-2026-111441High 8.1在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpy_s() 拷贝输入，既未校验 lenTotal >=…Published Oct 19, 2026
- CVE-2026-103091Critical 9.3Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in mcp_service.go) and OIDC registration flow (GET /info and POST /register in…Published Oct 19, 2026
- CVE-2026-102503Critical 9.3Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through…Published Oct 19, 2026
- CVE-2026-112041Medium 6.3Such manipulation leads to…Published Oct 19, 2026
- CVE-2026-112040Medium 5.3A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.Published Oct 19, 2026
- CVE-2026-112039Medium 4.8Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component…Published Oct 19, 2026
- CVE-2026-112038Medium 4.8Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service.Published Oct 19, 2026
- CVE-2026-112037Medium 6.3Executing a…Published Oct 19, 2026
- CVE-2026-108984High 7.5A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .Published Oct 19, 2026
- CVE-2026-108983Critical 9.8A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .Published Oct 19, 2026
- CVE-2026-112036Medium 5.3A vulnerability was detected in Artifex MuPDF up to 1.28.5.Published Oct 19, 2026
- CVE-2026-112035Medium 5.3A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16.Published Oct 19, 2026
- CVE-2026-112034Medium 5.3A weakness has been identified in aircheng-org iWebShop-5 up to 5.16.Published Oct 19, 2026
- CVE-2026-112033Medium 5.3The manipulation of the…Published Oct 19, 2026
- CVE-2026-112032Medium 5.1The manipulation leads to sql injection.Published Oct 19, 2026
- CVE-2026-112031Medium 5.1A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1.Published Oct 19, 2026
- CVE-2026-112030Medium 5.3Performing a manipulation results in use of default password.Published Oct 19, 2026
- CVE-2026-112112Low 2.3An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure.Published Oct 18, 2026
- CVE-2026-112111Medium 5.1The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode.Published Oct 18, 2026
- CVE-2026-112029Low 2.0Such manipulation of the argument salt/password leads to…Published Oct 18, 2026
- CVE-2026-112028Medium 6.9Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the…Published Oct 18, 2026
- CVE-2026-112027Medium 6.9A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.Published Oct 18, 2026
- CVE-2026-112026Medium 6.3A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.Published Oct 18, 2026
- CVE-2026-112025Medium 6.9A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930.Published Oct 18, 2026
- CVE-2026-97859UnscoredSeven Gitea API routes under /api/v1/users/{username} (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were registered without the individualPermsChecker middleware that enforces the visibility of…Published Oct 18, 2026
- CVE-2026-97204UnscoredDeleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap.Published Oct 18, 2026
- CVE-2026-110494UnscoredAdding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment.Published Oct 18, 2026
| CVE | Title | Severity | Published |
|---|---|---|---|
| CVE-2026-16487 | Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an… | High 8.1 | |
| CVE-2026-112086 | The manipulation of the argument _target_ results… | Medium 5.3 | |
| CVE-2026-112083 | A security flaw has been discovered in sgl-project SGLang up to 0.5.19. | Medium 6.9 | |
| CVE-2026-112082 | This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording… | High 8.7 | |
| CVE-2026-112081 | A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. | Medium 5.3 | |
| CVE-2026-108121 | Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's SME Server version 11.0rc1-215, allowing an attacker with high privileges to inject reserved Apache configuration… | Medium 6.9 | |
| CVE-2026-108120 | Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended… | High 7.7 | |
| CVE-2026-106933 | The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME type for the WordPress media library unconditionally, allowing authenticated users with the Author role or higher to… | Medium 6.8 | |
| CVE-2026-106028 | The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating WooCommerce coupons, allowing unauthenticated attackers to create arbitrary coupons, including 100%-off and… | Medium 5.3 | |
| CVE-2026-106014 | The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment notification received on its hosted-payment return handler, allowing unauthenticated attackers to mark orders as paid without… | Medium 5.3 | |
| CVE-2026-112080 | A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b. | Medium 5.3 | |
| CVE-2026-112079 | The manipulation of the argument vectors.vocab leads to… | Medium 5.3 | |
| CVE-2026-112078 | Executing a manipulation of the argument ckpt_path can lead to code injection. | Medium 5.3 | |
| CVE-2026-112077 | A vulnerability was detected in radareorg radare2 6.2.0/6.2.2. | Medium 6.3 | |
| CVE-2026-112076 | A security vulnerability has been detected in alexta69 MeTube up to 2026.09.28. | Medium 6.3 | |
| CVE-2026-112075 | A weakness has been identified in unslothai unsloth up to 0.1.501-beta. | Medium 5.3 | |
| CVE-2026-112074 | Affected by this issue is the function ncnn::yuv420sp2rgb of the file src/mat_pixel.cpp of the component Conversion API. | Medium 5.3 | |
| CVE-2026-112073 | Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. | Medium 5.3 | |
| CVE-2026-112045 | A vulnerability was detected in donetick up to 0.1.82. | Medium 5.3 | |
| CVE-2026-111440 | 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger 类名调用 Class.forName 加载类后，直接反射调用以 String 为参数的构造函数，再转换为 Log。缺少 asSubclass(Log.class) 校验，非 Log 实现类也会在类型检查前被实例化。因此，当攻击者可控制… | High 7.0 | |
| CVE-2026-112044 | A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d29. | Medium 6.9 | |
| CVE-2026-112043 | A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. | Medium 5.3 | |
| CVE-2026-112042 | A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. | Medium 5.1 | |
| CVE-2026-111441 | 在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中，内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析 lenUsed 与 lenTotal 后，仅检查输入长度足以覆盖 HLL_HEAD_SIZE + lenUsed，随后按 lenTotal 分配缓冲区、按 lenUsed 调用 memcpy_s() 拷贝输入，既未校验 lenTotal >=… | High 8.1 | |
| CVE-2026-103091 | Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough in mcp_service.go) and OIDC registration flow (GET /info and POST /register in… | Critical 9.3 | |
| CVE-2026-102503 | Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go) in Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through… | Critical 9.3 | |
| CVE-2026-112041 | Such manipulation leads to… | Medium 6.3 | |
| CVE-2026-112040 | A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. | Medium 5.3 | |
| CVE-2026-112039 | Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component… | Medium 4.8 | |
| CVE-2026-112038 | Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. | Medium 4.8 | |
| CVE-2026-112037 | Executing a… | Medium 6.3 | |
| CVE-2026-108984 | A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . | High 7.5 | |
| CVE-2026-108983 | A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe . | Critical 9.8 | |
| CVE-2026-112036 | A vulnerability was detected in Artifex MuPDF up to 1.28.5. | Medium 5.3 | |
| CVE-2026-112035 | A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.16. | Medium 5.3 | |
| CVE-2026-112034 | A weakness has been identified in aircheng-org iWebShop-5 up to 5.16. | Medium 5.3 | |
| CVE-2026-112033 | The manipulation of the… | Medium 5.3 | |
| CVE-2026-112032 | The manipulation leads to sql injection. | Medium 5.1 | |
| CVE-2026-112031 | A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. | Medium 5.1 | |
| CVE-2026-112030 | Performing a manipulation results in use of default password. | Medium 5.3 | |
| CVE-2026-112112 | An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. | Low 2.3 | |
| CVE-2026-112111 | The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the [bs_tcontent] shortcode. | Medium 5.1 | |
| CVE-2026-112029 | Such manipulation of the argument salt/password leads to… | Low 2.0 | |
| CVE-2026-112028 | Affected by this issue is some unknown functionality of the file App/Home/Controller/VoteController.class.php of the… | Medium 6.9 | |
| CVE-2026-112027 | A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. | Medium 6.9 | |
| CVE-2026-112026 | A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. | Medium 6.3 | |
| CVE-2026-112025 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. | Medium 6.9 | |
| CVE-2026-97859 | Seven Gitea API routes under /api/v1/users/{username} (followers, following, following/{target}, starred, subscriptions, keys and gpg_keys) were registered without the individualPermsChecker middleware that enforces the visibility of… | Unscored | |
| CVE-2026-97204 | Deleting a label compared the ID of the repository in the request against the organization ID of organization labels, and the two ID sequences overlap. | Unscored | |
| CVE-2026-110494 | Adding attachments to a release checked the repository and release of an attachment but not whether it was already linked to an issue or comment. | Unscored |
Showing 201–250 of 391,982. Narrow the filters to see the rest.
Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.
FAQ
Common Questions.
The Known Exploited Vulnerabilities catalog is the US government list of flaws that attackers are using in real attacks. Each entry carries a due date by which federal agencies must patch, which makes it a useful priority list for everyone else too.
Known Exploited holds CVEs with confirmed exploitation. Emerging Threats holds CVEs not on that list yet, but with a high exploit forecast or a weaponized exploit. The Watchlist holds CVEs with a middling publication score that move up when new evidence arrives.
CVSS rates how bad a flaw would be if exploited, on a 0 to 10 scale. EPSS estimates how likely it is to be exploited in the next 30 days. A critical CVSS score with a tiny EPSS can often wait; a high EPSS with a known exploit should not.
CISA sets a remediation due date for every catalog entry. Overdue means that date has passed, so the flaw has been exploitable and listed for longer than the agency deadline allowed.
It shows which products and versions are affected. To know which of your own internet-facing assets run a vulnerable version, the Brandefense platform maps new CVEs against your attack surface continuously.
Which Of These Are On Your Attack Surface?
Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.
About this list. Every published CVE keeps a row, so any identifier resolves to its severity, dates and exploitation status. Filter by severity and year here; the other filters work on the curated lists.