- HIGH7.5CVE-2026-47717FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
- CRITICAL9.1CVE-2026-46621Yamcs Vulnerable to Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection
- CRITICAL9.8CVE-2026-46562Yamcs Vulnerable to Remote Code Execution via Mission Database algorithm override
- CRITICAL10.0CVE-2026-45618LiquidJS is Vulnerable to Remote Code Execution
- HIGH7.5CVE-2026-45617LiquidJS Vulnerable to ReDoS via Quadratic Backtracking in `strip_html` Filter Regex
- HIGH7.5CVE-2026-45357LiquidJS has a memory and render limit bypass via unbounded width padding in `date` filter (strftime)
- HIGH7.1CVE-2026-1933EPSS 0.06%A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes.
- HIGH8.0CVE-2026-3012EPSS 0.01%A flaw was found in Samba’s certificate auto-enrollment Group Policy handling.
- CRITICAL9.1CVE-2026-44632Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
- HIGH7.0CVE-2026-42462Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring
- HIGH8.6CVE-2026-42089yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
- HIGH8.2CVE-2026-5260EPSS 0.23%A flaw was found in libgnutls.
- HIGH8.2CVE-2026-42013EPSS 0.05%A flaw was found in gnutls.
- HIGH7.1CVE-2026-42012EPSS 0.04%A flaw was found in gnutls.
- HIGH7.5CVE-2026-48048XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests
- HIGH8.7CVE-2026-28445EPSS 0.03%Typebot has Stored XSS via Rating Block Custom Icon that Bypasses isUnsafe Sandbox in Builder Preview
- HIGH8.5CVE-2026-4480EPSS 0.39%A flaw was found in the Samba printing subsystem.
- CRITICAL9.0CVE-2026-4408EPSS 0.39%A flaw was found in Samba.
- HIGH7.6CVE-2026-46701Network-AI: Unauthenticated Cross-Origin MCP Tool Invocation via Empty Default Secret
- CRITICAL9.6CVE-2026-46703OCI layer symlink escape → arbitrary host write
- CRITICAL10.0CVE-2026-46695Read-only volume remount bypass via guest CAP_SYS_ADMIN
- HIGH7.5CVE-2026-46679js-libp2p: Memory DoS via subscription flood of unique topics
- HIGH7.5CVE-2026-46625JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection
- HIGH8.8CVE-2026-46519MCP Server Kubernetes: Tool Access Control Bypass via Presentation-Layer Filtering Without Execution-Layer Enforcement
- HIGH7.2CVE-2026-46492md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed)
← PrevPage 2 of 303Next →