Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
Select from 86 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-43874 |
8.7 (4.0)
|
: Improper Neutralization of Special Elements use… |
Johnson Controls |
iSTAR Ultra |
2026-11-13T21:59:57.409Z | 2026-11-13T21:59:57.409Z |
| CVE-2026-127916 |
2.9 (3.1)
|
MCUboot image hash span is not bounded against the slo… |
mcu-tools |
mcuboot |
2026-11-13T00:23:09.233Z | 2026-11-13T21:59:41.612Z |
| CVE-2026-16664 |
5.1 (3.1)
|
Unchecked serial-recovery image index causes out-of-bo… |
mcu-tools |
mcuboot |
2026-11-13T00:23:05.652Z | 2026-11-13T21:59:26.710Z |
| CVE-2026-114468 |
6 (3.1)
|
IBM App Connect Enterprise Certified Container operato… |
IBM |
App Connect Operator |
2026-11-13T21:59:04.689Z | 2026-11-13T21:59:04.689Z |
| CVE-2026-16662 |
2.4 (3.1)
|
Uninitialised bootloader stack disclosed into the meas… |
mcu-tools |
mcuboot |
2026-11-13T00:23:00.336Z | 2026-11-13T21:59:04.545Z |
| CVE-2025-53700 |
6.3 (4.0)
|
CWE‑922 Insecure Storage of Sensitive Information… |
Johnson Controls |
iSTAR Ultra |
2026-11-13T21:56:12.492Z | 2026-11-13T21:56:12.492Z |
| CVE-2026-110194 |
5.4 (3.1)
|
IBM ContextForge MCP Gateway is affected by a server-s… |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:44:24.821Z | 2026-11-13T21:52:31.533Z |
| CVE-2026-115501 |
5.3 (3.1)
|
IBM i is Affected By A Buffer Overflow Vulnerability i… |
IBM |
i |
2026-11-13T21:46:28.286Z | 2026-11-13T21:51:38.210Z |
| CVE-2026-5514 |
3.3 (3.1)
|
IBM Bob is vulnerable to unauthorized session token ex… |
IBM |
Bob |
2026-11-13T21:51:23.679Z | 2026-11-13T21:51:23.679Z |
| CVE-2025-53699 |
7 (4.0)
|
Missing protection mechanism for alternate hardwa… |
Johnson Controls |
iSTAR Ultra |
2026-11-13T21:50:56.925Z | 2026-11-13T21:50:56.925Z |
| CVE-2026-123628 |
7.5 (3.1)
|
IBM webMethods Integration Server is vulnerable to sen… |
IBM |
webMethods Integration Server |
2026-11-13T21:50:13.487Z | 2026-11-13T21:50:13.487Z |
| CVE-2026-97683 |
2.5 (3.1)
|
IBM Cyber Fraud includes components with multiple know… |
IBM |
Cyber Fraud |
2026-11-13T21:36:07.726Z | 2026-11-13T21:49:12.852Z |
| CVE-2025-53698 |
7 (4.0)
|
Missing protection mechanism for alternate hardwa… |
Johnson Controls |
iSTAR Ultra |
2026-11-13T21:46:48.829Z | 2026-11-13T21:46:48.829Z |
| CVE-2026-105622 |
6.3 (4.0)
|
Zenitel Connect missing lockout and rate limiting on t… |
Zenitel |
Zenitel Connect |
2026-11-13T15:40:23.944Z | 2026-11-13T21:46:22.488Z |
| CVE-2026-105624 |
6.9 (4.0)
|
Zenitel Connect login allows account-lockout denial of… |
Zenitel |
Zenitel Connect |
2026-11-13T15:41:59.393Z | 2026-11-13T21:45:18.832Z |
| CVE-2026-110178 |
4.1 (3.1)
|
IBM ContextForge MCP Gateway is affected by an imprope… |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:44:00.993Z | 2026-11-13T21:44:00.993Z |
| CVE-2026-110199 |
4.8 (3.1)
|
IBM ContextForge MCP Gateway is affected by a DOM-base… |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:43:52.021Z | 2026-11-13T21:43:52.021Z |
| CVE-2026-110279 |
8.1 (3.1)
|
IBM ContextForge MCP Gateway is affected by an imprope… |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:43:43.544Z | 2026-11-13T21:43:43.544Z |
| CVE-2026-94407 |
6.5 (3.1)
|
IBM ContextForge MCP Gateway is affected by a regular … |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:43:35.363Z | 2026-11-13T21:43:35.363Z |
| CVE-2026-105623 |
6.9 (4.0)
|
Zenitel Connect web interface serves production JavaSc… |
Zenitel |
Zenitel Connect |
2026-11-13T15:42:42.515Z | 2026-11-13T21:43:33.794Z |
| CVE-2026-110189 |
6.5 (3.1)
|
IBM ContextForge MCP Gateway is affected by a denial o… |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:43:26.623Z | 2026-11-13T21:43:26.623Z |
| CVE-2026-110195 |
5.4 (3.1)
|
IBM ContextForge MCP Gateway is affected by an authori… |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:43:18.359Z | 2026-11-13T21:43:18.359Z |
| CVE-2026-124021 |
9.2 (4.0)
8.1 (3.1)
|
Control Web Panel < 1.30.6 Authorization Bypass via oa… |
Control Web Panel |
Control Web Panel |
2026-11-13T21:43:13.762Z | 2026-11-13T21:43:13.762Z |
| CVE-2026-110278 |
7.4 (3.1)
|
IBM ContextForge MCP Gateway is affected by an informa… |
IBM |
ContextForge MCP Gateway |
2026-11-13T21:43:09.800Z | 2026-11-13T21:43:09.800Z |
| CVE-2026-124020 |
9.2 (4.0)
8.1 (3.1)
|
Control Web Panel < 1.30.6 Host Header Password Reset … |
Control Web Panel |
Control Web Panel |
2026-11-13T21:43:00.963Z | 2026-11-13T21:43:00.963Z |
| CVE-2026-128886 |
6.2 (3.1)
|
Dbus: server accept watch can be stalled by blocking n… |
Red Hat |
Red Hat Enterprise Linux 10 |
2026-11-13T21:42:20.482Z | 2026-11-13T21:42:20.482Z |
| CVE-2026-95379 |
7 (4.0)
|
Path traversal in Zenitel turbineweb certificate delet… |
Zenitel |
VSFF6 |
2026-11-13T15:43:32.974Z | 2026-11-13T21:42:12.008Z |
| CVE-2025-53697 |
8.4 (4.0)
|
Use of default credentials vulnerability in Johns… |
Johnson Controls |
iSTAR Ultra |
2026-11-13T21:37:44.321Z | 2026-11-13T21:41:47.141Z |
| CVE-2026-9661 |
7.3 (4.0)
7 (3.1)
|
Postecert FIRMAOK! 1.6.29 Local Privilege Escalation v… |
Poste Italiane |
Postecert FIRMAOK! |
2026-11-13T21:40:35.827Z | 2026-11-13T21:41:13.780Z |
| CVE-2026-9870 |
6.1 (3.1)
|
IBM Cyber Fraud includes components with multiple know… |
IBM |
Cyber Fraud |
2026-11-13T21:35:56.221Z | 2026-11-13T21:35:56.221Z |