CRITICAL9.1CVE-2026-8450EPSS 0.23%HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file().
CRITICAL9.1CVE-2026-44632Yamcs Vulnerable to Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`
CRITICAL9.8CVE-2026-48689EPSS 0.03%FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamic_binary_buffer_t class (src/dyna…
CRITICAL9.8CVE-2026-48691EPSS 0.06%FastNetMon Community Edition through 1.2.9 contains an integer overflow in the BGP AS_PATH attribute encoder.
CRITICAL9.8CVE-2026-48687EPSS 0.53%FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the Juniper router integration plugin.
CRITICAL9.8CVE-2026-48686EPSS 0.03%FastNetMon Community Edition through 1.2.9 contains a stack-based buffer overflow in the BGP NLRI (Network Layer Reachability Information)…
CRITICAL9.0CVE-2026-4408EPSS 0.39%A flaw was found in Samba.
CRITICAL9.1CVE-2026-42496EPSS 0.05%Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.
CRITICAL9.8CVE-2026-8376EPSS 0.05%Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.
CRITICAL9.6CVE-2026-39821EPSS 0.05%Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CRITICAL10.0CVE-2026-46595EPSS 0.05%Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
CRITICAL9.1CVE-2026-42508EPSS 0.04%Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
CRITICAL9.1CVE-2026-39834EPSS 0.05%Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
CRITICAL9.1CVE-2026-39833EPSS 0.04%Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent
CRITICAL9.1CVE-2026-39832EPSS 0.07%Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
CRITICAL9.1CVE-2026-39831EPSS 0.03%Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
CRITICAL9.1CVE-2026-39830EPSS 0.05%Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
CRITICAL9.8CVE-2026-43501EPSS 0.07%In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompressed SRH grows ipv6_rp…
CRITICAL9.9CVE-2026-44050EPSS 0.15%A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker…
CRITICAL9.1CVE-2026-47372EPSS 0.01%Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts.
CRITICAL9.8CVE-2026-8631EPSS 0.02%A potential security vulnerability has been identified in the HP Linux Imaging and Printing Software.
CRITICAL9.8CVE-2026-3593EPSS 0.04%A use-after-free vulnerability exists within the DNS-over-HTTPS implementation.
CRITICAL10.0CVE-2026-42960EPSS 0.03%NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.
CRITICAL9.8CVE-2026-33278EPSS 0.32%NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and…
CRITICAL9.8CVE-2026-33642EPSS 0.06%Kitty is a cross-platform GPU based terminal.