Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 84 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-96596 |
5.9 (4.0)
|
erl_tar:extract/2 loops forever on a GNU sparse member… |
Erlang |
OTP |
2026-10-14T16:56:18.530Z | 2026-10-16T20:08:17.542Z |
| CVE-2026-96542 |
5 (3.1)
|
EA Javelin Anticheat Installer Local Privilege Escalation |
Electronic Arts |
EA Javelin Anticheat (EA Javelin Anticheat Installer) |
2026-10-16T21:00:54.224Z | 2026-10-16T21:00:54.224Z |
| CVE-2026-94200 |
8.2 (4.0)
|
TLS 1.3 client ticket store crashed by NewSessionTicke… |
Erlang |
OTP |
2026-10-14T16:55:23.328Z | 2026-10-16T20:09:04.559Z |
| CVE-2026-80092 |
5.3 (3.1)
|
Microsoft Identity Web Elevation of Privilege Vulnerability |
Microsoft |
microsoft-identity-web |
2026-10-16T17:12:01.521Z | 2026-10-16T21:24:33.506Z |
| CVE-2026-79957 |
8.1 (3.1)
|
ServiceNext Insecure Direct Object Reference via GetUsarios |
ServiceNext |
SerTec |
2026-10-14T18:01:51.493Z | 2026-10-16T20:15:51.180Z |
| CVE-2026-69080 |
N/A
|
Apache Kylin: Broken Access Control in QuerySQLBlackli… |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:37:50.174Z | 2026-10-16T20:11:26.758Z |
| CVE-2026-69077 |
N/A
|
Apache Kylin: JobController allows unauthorized cross-… |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:33:20.218Z | 2026-10-16T20:11:24.825Z |
| CVE-2026-69076 |
N/A
|
Apache Kylin: Unauthorized cross-project job discard |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:32:39.538Z | 2026-10-16T20:11:22.119Z |
| CVE-2026-68573 |
N/A
|
Apache Kylin: Unauthenticated Metastore Cleanup |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:32:22.205Z | 2026-10-16T20:11:20.096Z |
| CVE-2026-68572 |
N/A
|
Apache Kylin: Unauthorized SQL execution to Spark SQL env |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:32:03.193Z | 2026-10-16T20:11:17.995Z |
| CVE-2026-64862 |
6.5 (3.1)
|
Frappe HR: Missing Authorization on PWA API Endpoints … |
frappe |
hrms |
2026-10-16T20:52:53.666Z | 2026-10-16T20:52:53.666Z |
| CVE-2026-55796 |
6.5 (3.1)
|
Frappe HR: SQL Injection in HRMS Salary Payments via E… |
frappe |
hrms |
2026-10-16T20:50:01.927Z | 2026-10-16T20:50:01.927Z |
| CVE-2026-104040 |
4.4 (3.1)
|
Sssd: sssd: information disclosure via odata injection… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-10-06T01:00:44.515Z | 2026-10-06T13:00:58.986Z |
| CVE-2026-21589 |
N/A
|
N/A | N/A | 2026-10-05T21:30:00.390Z | 2026-10-16T20:39:09.943Z | |
| CVE-2026-111688 |
5.3 (4.0)
4.3 (3.1)
|
Exrick XBoot through 3.3.4 Data-Scope Bypass via openD… |
Exrick |
xboot |
2026-10-16T17:39:45.564Z | 2026-10-16T20:16:18.861Z |
| CVE-2026-110816 |
5.3 (3.1)
6.3 (4.0)
|
qs.stringify with arrayFormat comma throws TypeError o… |
ljharb |
qs |
2026-10-14T22:05:24.015Z | 2026-10-16T20:17:48.588Z |
| CVE-2026-109924 |
5.9 (3.1)
|
undici vulnerable to Denial of Service via unbounded m… |
undici |
undici |
2026-10-15T18:16:48.452Z | 2026-10-16T20:05:22.386Z |
| CVE-2026-109869 |
7.5 (3.1)
|
undici vulnerable to Denial of Service via unhandled e… |
undici |
undici |
2026-10-15T18:08:31.243Z | 2026-10-16T20:06:00.782Z |
| CVE-2026-109841 |
5.9 (3.1)
|
undici vulnerable to Subresource Integrity bypass via … |
undici |
undici |
2026-10-15T18:22:06.283Z | 2026-10-16T20:04:41.388Z |
| CVE-2026-109829 |
7.4 (3.1)
|
undici vulnerable to cache poisoning and cross-user di… |
undici |
undici |
2026-10-15T18:28:04.954Z | 2026-10-16T20:04:09.504Z |
| CVE-2026-109383 |
7.4 (3.1)
|
undici vulnerable to TLS certificate validation bypass… |
undici |
undici |
2026-10-15T18:34:01.468Z | 2026-10-16T20:03:30.839Z |
| CVE-2026-108743 |
N/A
|
Apache Kylin: spark job OS command injection |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:44:37.833Z | 2026-10-16T20:09:55.764Z |
| CVE-2026-108709 |
N/A
|
Apache Kylin: Unauthenticated Metadata Broadcast (insi… |
Apache Software Foundation |
Apache Kylin |
2026-10-16T19:38:21.601Z | 2026-10-16T20:09:53.732Z |
| CVE-2026-108374 |
7.7 (3.1)
|
ERPNext: Unauthorised status modification due to missi… |
frappe |
erpnext |
2026-10-16T20:38:32.806Z | 2026-10-16T20:38:32.806Z |
| CVE-2026-108373 |
6.5 (3.1)
|
ERPNext: Unauthorised access to financial data due to … |
frappe |
erpnext |
2026-10-16T20:48:46.241Z | 2026-10-16T20:48:46.241Z |
| CVE-2026-108337 |
7.4 (4.0)
|
Password Reset Code Accessible in User Listing API |
Hitachi Vantara |
Remot Ops Agent |
2026-10-14T21:43:08.247Z | 2026-10-16T20:18:39.031Z |
| CVE-2026-107349 |
7.5 (3.1)
|
Infinite loop on empty option name in startup options … |
n/a |
PgBouncer |
2026-10-14T17:34:33.785Z | 2026-10-16T20:19:16.649Z |
| CVE-2026-107348 |
5.9 (3.1)
|
Integer overflow causes an infinite loop in message bu… |
n/a |
PgBouncer |
2026-10-14T17:34:29.838Z | 2026-10-16T20:11:22.132Z |
| CVE-2026-106465 |
8.7 (4.0)
|
The NetX Secure DTLS server sends a HelloVerifyRe… |
Eclipse Foundation |
NetX Duo |
2026-10-14T17:47:11.013Z | 2026-10-16T20:14:45.833Z |
| CVE-2026-106464 |
8.7 (4.0)
|
`_nx_secure_x509_parse_signature_data` computes t… |
Eclipse Foundation |
NetX Duo |
2026-10-14T17:41:43.585Z | 2026-10-16T20:13:45.214Z |