Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 86 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-128332 |
9.1 (4.0)
7.4 (3.1)
|
listmonk 6.0.0 before 7.0.0-beta.2 TOTP Brute-Force vi… |
knadh |
listmonk |
2026-11-13T09:33:42.195Z | 2026-11-13T18:01:25.904Z |
| CVE-2026-128336 |
6.3 (4.0)
4.8 (3.1)
|
ExcelJS through 4.4.0 Prototype Pollution via __proto_… |
exceljs |
exceljs |
2026-11-13T09:33:38.327Z | 2026-11-13T17:58:50.637Z |
| CVE-2026-128340 |
8.7 (4.0)
7.5 (3.1)
|
ExcelJS through 4.4.0 Memory Exhaustion via Oversized … |
exceljs |
exceljs |
2026-11-13T09:33:35.713Z | 2026-11-13T17:58:05.367Z |
| CVE-2026-97361 |
8.5 (4.0)
|
Improper Privilege Management on B. Braun SpaceCom, Ba… |
B. Braun Melsungen AG |
SpaceCom |
2026-11-13T17:57:12.207Z | 2026-11-13T17:57:12.207Z |
| CVE-2026-97358 |
7 (4.0)
|
Inclusion of Web Functionality from an Untrusted Sourc… |
B. Braun Melsungen AG |
SpaceCom |
2026-11-13T17:55:24.556Z | 2026-11-13T17:55:24.556Z |
| CVE-2026-128344 |
8.7 (4.0)
7.5 (3.1)
|
ExcelJS through 4.4.0 Memory Exhaustion via Oversized … |
exceljs |
exceljs |
2026-11-13T09:33:33.044Z | 2026-11-13T17:55:08.423Z |
| CVE-2026-97357 |
6.9 (4.0)
|
Out-of-bounds write on B. Braun SpaceCom, Battery Pack… |
B. Braun Melsungen AG |
SpaceCom |
2026-11-13T17:54:23.896Z | 2026-11-13T17:54:23.896Z |
| CVE-2026-128079 |
6.8 (4.0)
|
envd: Host file disclosure through requirements path t… |
tensorchord |
envd |
2026-11-13T17:53:46.687Z | 2026-11-13T17:53:46.687Z |
| CVE-2026-124679 |
7.8 (4.0)
|
Apache APISIX: jwe-decrypt and forward-auth may pass a… |
Apache Software Foundation |
Apache APISIX |
2026-11-13T17:53:07.017Z | 2026-11-13T17:53:07.017Z |
| CVE-2026-124716 |
6.4 (4.0)
|
Apache APISIX: authz-keycloak authorization scope mismatch |
Apache Software Foundation |
Apache APISIX |
2026-11-13T17:52:43.301Z | 2026-11-13T17:52:43.301Z |
| CVE-2026-107398 |
7.1 (4.0)
|
Indico: Local file disclosure through offline-copy pat… |
indico |
indico |
2026-11-13T17:52:33.232Z | 2026-11-13T17:52:33.232Z |
| CVE-2026-126814 |
4.8 (4.0)
3.5 (3.1)
|
blueprintUE Self-Hosted Edition before 4.3.6 Arbitrary… |
blueprintue |
blueprintue-self-hosted-edition |
2026-11-11T20:53:14.311Z | 2026-11-13T17:52:17.281Z |
| CVE-2026-124666 |
6.4 (4.0)
|
Apache APISIX: Multi-auth preserves client-supplied Wo… |
Apache Software Foundation |
Apache APISIX |
2026-11-13T17:52:10.094Z | 2026-11-13T17:52:10.094Z |
| CVE-2026-124680 |
7 (4.0)
|
Apache APISIX: Route-level authentication bypass via p… |
Apache Software Foundation |
Apache APISIX |
2026-11-13T17:51:28.431Z | 2026-11-13T17:51:28.431Z |
| CVE-2026-128348 |
2.3 (4.0)
4.2 (3.1)
|
ExcelJS through 4.4.0 Formula Injection via Table Tota… |
exceljs |
exceljs |
2026-11-13T09:33:30.358Z | 2026-11-13T17:51:06.150Z |
| CVE-2026-124719 |
2.3 (4.0)
|
Apache APISIX: identity spoofing in openapi-to-mcp |
Apache Software Foundation |
Apache APISIX |
2026-11-13T17:50:12.030Z | 2026-11-13T17:50:12.030Z |
| CVE-2026-124723 |
6.3 (4.0)
|
Apache APISIX: unauthorized access to mTLS protected r… |
Apache Software Foundation |
Apache APISIX |
2026-11-13T17:49:43.229Z | 2026-11-13T17:49:43.229Z |
| CVE-2026-126810 |
5.1 (4.0)
5.4 (3.1)
|
WWBN AVideo 29.1.0 through 29.7.1 Stored XSS via Chann… |
WWBN |
AVideo |
2026-11-11T20:53:11.690Z | 2026-11-13T17:49:34.254Z |
| CVE-2026-124726 |
6.9 (4.0)
|
Apache APISIX: openapi-to-mcp tool call can reach an A… |
Apache Software Foundation |
Apache APISIX |
2026-11-13T17:49:21.949Z | 2026-11-13T17:49:21.949Z |
| CVE-2026-61417 |
6.5 (3.1)
|
Dell SmartFabric OS10 Software, versions prior to… |
Dell |
SmartFabric OS10 Software |
2026-11-13T09:25:30.595Z | 2026-11-13T17:48:43.409Z |
| CVE-2026-126806 |
9.3 (4.0)
8.7 (3.1)
|
WWBN AVideo 14.3 through 29.7.1 Stored XSS via Video S… |
WWBN |
AVideo |
2026-11-11T20:53:08.751Z | 2026-11-13T17:48:34.218Z |
| CVE-2026-116425 |
5.4 (3.1)
|
Dell PowerScale InsightIQ, Versions 6.3.0 through… |
Dell |
PowerScale InsightIQ |
2026-11-13T09:12:08.116Z | 2026-11-13T17:48:17.421Z |
| CVE-2026-126802 |
8.8 (4.0)
8.2 (3.1)
|
NextScan 1.1.0 through 1.2.0 Hardcoded Credentials in … |
tongcheng-security-team |
NextScan |
2026-11-11T20:53:06.025Z | 2026-11-13T17:47:32.428Z |
| CVE-2026-116453 |
5.4 (3.1)
|
Dell PowerScale InsightIQ, Versions 6.3.0 through… |
Dell |
PowerScale InsightIQ |
2026-11-13T08:45:39.033Z | 2026-11-13T17:47:26.001Z |
| CVE-2026-116421 |
6.4 (3.1)
|
Dell PowerScale InsightIQ, Versions 6.3.0 through… |
Dell |
PowerScale InsightIQ |
2026-11-13T08:29:36.626Z | 2026-11-13T17:46:30.646Z |
| CVE-2026-126798 |
2.1 (4.0)
4.7 (3.1)
|
NextScan 1.1.0 through 1.2.0 Stored XSS via URL Asset … |
tongcheng-security-team |
NextScan |
2026-11-11T20:53:03.298Z | 2026-11-13T17:45:51.928Z |
| CVE-2026-128424 |
5.3 (3.1)
|
Kroxylicious-authorizer-acl: kroxylicious: acl rule fi… |
Red Hat |
streams for Apache Kafka 3 |
2026-11-13T06:09:19.627Z | 2026-11-13T17:45:34.833Z |
| CVE-2026-127285 |
5.3 (4.0)
4.3 (3.1)
4.3 (3.0)
|
Cairo-dock Glx-Dock href Attribute bg_forum.php cross … |
Cairo-dock |
Glx-Dock |
2026-11-13T02:15:23.708Z | 2026-11-13T17:43:56.215Z |
| CVE-2026-128078 |
5.3 (4.0)
|
GLPI: Unexpected access to followups/tasks/solutions g… |
glpi-project |
glpi |
2026-11-13T17:43:49.161Z | 2026-11-13T17:43:49.161Z |
| CVE-2026-127281 |
6.9 (4.0)
7.3 (3.1)
7.3 (3.0)
|
lanyulei ferry JWT Validation auth.go improper authent… |
lanyulei |
ferry |
2026-11-13T01:15:20.637Z | 2026-11-13T17:43:19.450Z |