CVE alerts
60 alerts in this category.
Threat alerts that map to a registered CVE entry. Each carries severity, exploitation status, affected products, and a direct path to the vendor patch.
Critical Vulnerability: CVE-2026-39892 — cryptography.io — cryptography
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Pytho
cryptography.ioCVE-2026-39892Critical Vulnerability: CVE-2026-121803
In UFS Field Firmware Update (FFU) functionality, there is a possible out-of-bounds write due to missing bounds checking on the PRDT table size. This could lead to local code execution or denial of se
CVE-2026-121803Critical Vulnerability: CVE-2026-121802
@better-auth/expo before 1.7.16 allows certain account-takeover outcomes (e.g., unauthenticated changes of any account's email address), because it signs a caller-supplied state value without checking
CVE-2026-121802Critical Vulnerability: CVE-2026-121615
A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/mesh_login.cgi of the component Login Handler. Executing a manipulation can lead to impro
CVE-2026-121615Critical Vulnerability: CVE-2025-49602
An issue was discovered in Keyfactor EJBCA 9. When an administrator is removed from its administrator role while having a valid TLS session, EJBCA may, in certain circumstances, cache authentication f
CVE-2025-49602Critical Vulnerability: CVE-2026-121609
A vulnerability was identified in Qihoo 360 Whole Home Router M5 4.0.17.1566. This issue affects the function Home of the file /etc/init.d/mpt of the component Boot Script. The manipulation leads to h
CVE-2026-121609Critical Vulnerability: CVE-2026-121607
A vulnerability was found in Qihoo 360 D603-2, D600-2, D606-6 and D706 up to 6.4.9. This affects the function testspeed_command of the file /fs2/bin/iscm. Performing a manipulation of the argument hos
CVE-2026-121607Critical Vulnerability: CVE-2026-107040
Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of data flow.
CVE-2026-107040Critical Vulnerability: CVE-2026-107045
Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized attackers to arbitrarily read another's Nostr event database.
CVE-2026-107045Critical Vulnerability: CVE-2026-107050
An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in their uid, leading to arbitrary code execution.
CVE-2026-107050Critical Vulnerability: CVE-2026-107056
Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows unauthorized attackers to inject crafted tracking data into the victim's location database v
CVE-2026-107056Critical Vulnerability: CVE-2026-51912
OpenBMB XAgent v1.0.0 contains directory traversal vulnerability in main-upload_file-the-preserved-live-upload-file-witness-directly-reaches (ToolServer/ToolServerNode/main.py:46).
CVE-2026-51912Critical Vulnerability: CVE-2026-121598
A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Ha
CVE-2026-121598Critical Vulnerability: CVE-2026-121599
A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSI
CVE-2026-121599Critical Vulnerability: CVE-2026-121606
A vulnerability has been found in Qihoo 360 D621-2, D603-2, D600-2, D619, D606-6 and D706 up to 6.4.9. Affected by this issue is the function verify_sign of the file fs2/bin/iscm of the component Firm
CVE-2026-121606Critical Vulnerability: CVE-2026-121600
A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler.
CVE-2026-121600Critical Vulnerability: CVE-2026-92189
Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec
CVE-2026-92189Critical Vulnerability: CVE-2026-114549
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authe
CVE-2026-114549Critical Vulnerability: CVE-2026-121597
A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler.
CVE-2026-121597Critical Vulnerability: CVE-2026-92190
Quest Foglight for Databases baseRmiServiceExporter Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affec
CVE-2026-92190Critical Vulnerability: CVE-2026-92188
Quest Foglight for Databases ForgeMBeanServerSupport Missing Authentication Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected instal
CVE-2026-92188Critical Vulnerability: CVE-2026-27876 — grafana — grafana
A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always
grafanaCVE-2026-27876Critical Vulnerability: CVE-2026-30871 — openwrt — openwrt
OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6 and 25.12.1, the mdns daemon has a Stack-based Buffer Overflow vulnerability in the parse_question
openwrtCVE-2026-30871Critical Vulnerability: CVE-2026-30872 — openwrt — openwrt
OpenWrt Project is a Linux operating system targeting embedded devices. In versions prior to 24.10.6 and 25.12.1, the mdns daemon has a Stack-based Buffer Overflow vulnerability in the match_ipv6_addr
openwrtCVE-2026-30872Critical Vulnerability: CVE-2026-79624
Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session invalidation allowed revoked users to continue accessing kno
CVE-2026-79624Critical Vulnerability: CVE-2022-29966
Emerson Ovation has several protocols that have no authentication, which could allow an attacker to change controller configuration or cause a denial-of-service condition.
CVE-2022-29966Critical Vulnerability: CVE-2026-38600
A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive.
CVE-2026-38600Critical Vulnerability: CVE-2024-23472 — solarwinds — access_rights_manager
SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability. This vulnerability allows an authenticated user to arbitrary read and delete files in ARM.
solarwindsCVE-2024-23472Critical Vulnerability: CVE-2024-29847 — ivanti — endpoint_manager
Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.
ivantiCVE-2024-29847Critical Vulnerability: CVE-2024-12108 — progress, microsoft — whatsup_gold, windows
In WhatsUp Gold versions released before 2024.0.2, an attacker can gain access to the WhatsUp Gold server via the public API.
progressCVE-2024-12108Critical Vulnerability: CVE-2024-3863 — mozilla — firefox, thunderbird
The executable file warning was not presented when downloading .xrm-ms files. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.* This vulnerability a
mozillaCVE-2024-3863Critical Vulnerability: CVE-2026-112354
Etrel INCH AC charging station management web interface prior to firmware versions 7.1.2 and 8.0.1 contains a hard-coded default credentials vulnerability that allows remote attackers to gain full Adm
CVE-2026-112354Critical Vulnerability: CVE-2024-23467 — solarwinds — access_rights_manager
The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability. This vulnerability allows an unauthenticated user to perform remote code executi
solarwindsCVE-2024-23467Critical Vulnerability: CVE-2024-37385 — roundcube, microsoft — webmail, windows
Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 on Windows allows command injection via im_convert_path and im_identify_path. NOTE: this issue exists because of an incomplete fix for CVE-2020-12
roundcubeCVE-2024-37385Critical Vulnerability: CVE-2024-50330 — ivanti — endpoint_manager
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution.
ivantiCVE-2024-50330Critical Vulnerability: CVE-2024-49368 — nginxui — nginx_ui
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, when Nginx UI configures logrotate, it does not verify the input and directly passes it to exec.Command, caus
nginxuiCVE-2024-49368Critical Vulnerability: CVE-2024-3912
Certain models of ASUS routers have an arbitrary firmware upload vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands on the device.
CVE-2024-3912Critical Vulnerability: CVE-2024-39331 — gnu — emacs
In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expands a %(...) link abbrev even when it specifies an unsafe function, such as shell-command-to-string. This affects Org Mode before 9.7.5.
gnuCVE-2024-39331Critical Vulnerability: CVE-2024-23471 — solarwinds — access_rights_manager
The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service r
solarwindsCVE-2024-23471Critical Vulnerability: CVE-2024-41730 — sap — business_objects_business_intelligence_platform
In SAP BusinessObjects Business Intelligence Platform, if Single Signed On is enabled on Enterprise authentication, an unauthorized user can get a logon token using a REST endpoint. The attacker can f
sapCVE-2024-41730Critical Vulnerability: CVE-2024-23466 — solarwinds — access_rights_manager
SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actio
solarwindsCVE-2024-23466Critical Vulnerability: CVE-2024-53677 — apache — struts
File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which can
apacheCVE-2024-53677Critical Vulnerability: CVE-2024-20419 — cisco — smart_software_manager_on-prem
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including adminis
ciscoCVE-2024-20419Critical Vulnerability: CVE-2024-6800 — github — enterprise_server
An XML signature wrapping vulnerability was present in GitHub Enterprise Server (GHES) when using SAML authentication with specific identity providers utilizing publicly exposed signed federation meta
githubCVE-2024-6800Critical Vulnerability: CVE-2024-6671 — progress — whatsup_gold
In WhatsUp Gold versions released before 2024.0.0, if the application is configured with only a single user, a SQL Injection vulnerability allows an unauthenticated attacker to retrieve the users encr
progressCVE-2024-6671Critical Vulnerability: CVE-2025-0107 — paloaltonetworks — expedition
An OS command injection vulnerability in Palo Alto Networks Expedition enables an unauthenticated attacker to run arbitrary OS commands as the www-data user in Expedition, which results in the disclos
paloaltonetworksCVE-2025-0107Critical Vulnerability: CVE-2024-36104 — apache — ofbiz
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.14. Users are recommended to upgrade to ver
apacheCVE-2024-36104Critical Vulnerability: CVE-2024-54465 — apple — macos
A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.
appleCVE-2024-54465Critical Vulnerability: CVE-2022-34718 — microsoft — windows_10, windows_11
Windows TCP/IP Remote Code Execution Vulnerability
microsoftCVE-2022-34718Critical Vulnerability: CVE-2024-35286 — mitel — micollab
A vulnerability in NuPoint Messenger (NPM) of Mitel MiCollab through 9.8.0.33 allows an unauthenticated attacker to conduct a SQL injection attack due to insufficient sanitization of user input. A suc
mitelCVE-2024-35286Critical Vulnerability: CVE-2024-9264 — grafana — grafana
The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, lea
grafanaCVE-2024-9264Critical Vulnerability: CVE-2024-27903 — openvpn — openvpn
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged O
openvpnCVE-2024-27903Critical Vulnerability: CVE-2024-49112 — microsoft — windows_10_1507, windows_10_1607
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
microsoftCVE-2024-49112Critical Vulnerability: CVE-2024-20017 — mediatek, openwrt — software_development_kit, mt7622
In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is
mediatekCVE-2024-20017Critical Vulnerability: CVE-2024-45409 — onelogin, omniauth — ruby-saml, omniauth_saml
The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthentic
oneloginCVE-2024-45409Critical Vulnerability: CVE-2024-37051 — jetbrains — aqua, clion
GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion
jetbrainsCVE-2024-37051Critical Vulnerability: CVE-2024-5805 — progress — moveit_gateway
Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.
progressCVE-2024-5805Critical Vulnerability: CVE-2024-28074 — solarwinds — access_rights_manager
It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were implemented the researcher was able to bypass these and use a d
solarwindsCVE-2024-28074Critical Vulnerability: CVE-2024-39700 — jupyter — jupyterlab
JupyterLab extension template is a `copier` template for JupyterLab extensions. Repositories created using this template with `test` option include `update-integration-tests.yml` workflow which has a
jupyterCVE-2024-39700Critical Vulnerability: CVE-2024-50379 — apache, netapp — tomcat, bootstrap_os
Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (n
apacheCVE-2024-50379
Get alerts that match YOUR environment
This page shows everything in the category. Vulnios narrows it down to alerts that affect your actual asset inventory — only the CVEs you need to act on.
Start a free scan