110,684 indexed
CVECVE vulnerabilities
110,684 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 12,251–12,300 of 110,684 · page 246 of 2214
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81885 | CVE-2026-81885 CVSS 5.5radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable becaus… |
| CVE-2026-81884 | CVE-2026-81884 CVSS 2.5radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_IN_CODE parser was vulnerable because t… |
| CVE-2026-81883 | CVE-2026-81883 CVSS 3.3radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable becaus… |
| CVE-2026-81882 | CVE-2026-81882 CVSS 3.3radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable bec… |
| CVE-2026-81881 | CVE-2026-81881 CVSS 3.3radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable beca… |
| CVE-2026-81880 | CVE-2026-81880 CVSS 5.5radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerabl… |
| CVE-2026-8188 | CVE-2026-8188 CVSS 6.3wavlink | A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation o… |
| CVE-2026-81879 | CVE-2026-81879 CVSS 5.5radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM handling was vulnerable because the ELF pa… |
| CVE-2026-81878 | CVE-2026-81878 CVSS 5.5radare | radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable be… |
| CVE-2026-81876 | CVE-2026-81876 CVSS 7.5 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/… |
| CVE-2026-81875 | CVE-2026-81875 CVSS 7.5 | HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to version 6.9.12, SHCParser in org.hl7.fhir.r5/… |
| CVE-2026-81872 | CVE-2026-81872 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the go.opentelemetry.io/otel/sdk/log BatchingProcessor can enter a tight C… |
| CVE-2026-81871 | CVE-2026-81871 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. Prior to version 0.21.0, the exporters/otlp/otlplog/otlploggrpc package loads OTEL_EXPORTER_OTLP_LO… |
| CVE-2026-81870 | CVE-2026-81870 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal I… |
| CVE-2026-8187 | CVE-2026-8187 CVSS 5.3open5gs | A flaw has been found in Open5GS up to 2.7.7. This impacts the function _gtpv1_u_recv_cb of the file src/upf/gtp-path.c of the component UPF. Executing a manip… |
| CVE-2026-81869 | CVE-2026-81869 | OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.10.0 until 1.33.0, the sdk/trace/span.go attribute truncation path can fail to enfor… |
| CVE-2026-81868 | CVE-2026-81868 CVSS 6.5 | Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native applications. Prior to 4.3.0, Steeltoe.Security.… |
| CVE-2026-81867 | CVE-2026-81867 | A Deserialization of Untrusted Data vulnerability in the JavaScript Task in Google Cloud Application Integration versions prior to 2026-06-28 on Google Cloud P… |
| CVE-2026-81866 | CVE-2026-81866 CVSS 4.3apache | Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets … |
| CVE-2026-81862 | CVE-2026-81862 CVSS 6.5apache | Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTeradataOperator` and `AzureBlobStorageToTeradataOpera… |
| CVE-2026-81861 | CVE-2026-81861 | CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized access to RTU function… |
| CVE-2026-8186 | CVE-2026-8186 CVSS 5.3open5gs | A vulnerability was detected in Open5GS up to 2.7.7. This affects the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c of the compo… |
| CVE-2026-81859 | CVE-2026-81859 CVSS 6.2 | CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm. |
| CVE-2026-81858 | CVE-2026-81858 CVSS 5.4ibm | IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain information due to an out-of-bounds read in th… |
| CVE-2026-81856 | CVE-2026-81856 | Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in hexpm hex allows a malicious package publisher or a hostile repository server to… |
| CVE-2026-81855 | CVE-2026-81855 CVSS 9.1 | A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framework component of Wärtsilä FOS-Onboard. |
| CVE-2026-81853 | CVE-2026-81853 | Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash_admin turns a record-lookup URL into an equality oracle over sensitive attrib… |
| CVE-2026-81852 | CVE-2026-81852 | Use of Insufficiently Random Values vulnerability in ash-project ash_admin ships a hardcoded, publicly known CSP nonce, defeating nonce-based Content-Security-… |
| CVE-2026-81851 | CVE-2026-81851 | A heap-based buffer overflow vulnerability in Fireware OS's iked process allows an authenticated administrator to crash the IKE daemon (iked), resulting in a d… |
| CVE-2026-8185 | CVE-2026-8185 CVSS 6.3 | A security vulnerability has been detected in UGREEN CM933 1.1.59.4319. The impacted element is an unknown function of the component Administrative Interface. … |
| CVE-2026-81849 | CVE-2026-81849 CVSS 8.8 | Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin in amazon-ssm-agent before 3.3.4515.0 might allow an authenticate… |
| CVE-2026-81848 | CVE-2026-81848 CVSS 3.5 | A vulnerability was determined in cyberchitta scrapling-fetch-mcp up to 0.2.2. The impacted element is the function s_fetch_page/s_fetch_pattern of the file sr… |
| CVE-2026-81847 | CVE-2026-81847 CVSS 5.5 | A vulnerability was found in MAA-AI MaaMCP up to 1.1.1.dev6+g2e4a41287. The affected element is the function save_pipeline/load_pipeline of the file pipeline_t… |
| CVE-2026-81846 | CVE-2026-81846 CVSS 3.5 | An authorization bypass in the runZero Platform MCP service has been resolved in version 5.1.260826.0. This issue is an instance of CWE-639: Authorization Bypa… |
| CVE-2026-81845 | CVE-2026-81845 CVSS 6.3 | A vulnerability has been found in arben-adm mcp-sequential-thinking up to 0.5.0. Impacted is the function import_session/export_session of the file mcp_sequent… |
| CVE-2026-81842 | CVE-2026-81842 CVSS 4.3 | An authenticated user with edit permission on one folder can move a library panel into another folder where they only have view permission, through the library… |
| CVE-2026-81841 | CVE-2026-81841 CVSS 5.3 | Pausing a shared (public) dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused s… |
| CVE-2026-81839 | CVE-2026-81839 CVSS 7.7gitlab | GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain cond… |
| CVE-2026-81838 | CVE-2026-81838 CVSS 7.1amazon | A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 through 0.23 can allow a third party to wr… |
| CVE-2026-81837 | CVE-2026-81837 CVSS 6.3 | A flaw has been found in RooCodeInc Roo-Code up to 3.51.1. This issue affects the function path.resolve of the file src/core/tools/ApplyPatchTool.ts of the com… |
| CVE-2026-81836 | CVE-2026-81836 CVSS 3.7 | A vulnerability was detected in RooCodeInc Roo-Code up to 3.51.1. This vulnerability affects unknown code of the file src/integrations/claude-code/oauth.ts of … |
| CVE-2026-81835 | CVE-2026-81835 CVSS 5.5 | A security vulnerability has been detected in RooCodeInc Roo-Code up to 3.51.1. This affects the function fetch_instructions of the file malicious_mcp_server.p… |
| CVE-2026-81834 | CVE-2026-81834 CVSS 6.3 | A weakness has been identified in RooCodeInc Roo-Code up to 3.51.1. Affected by this issue is the function ExecaTerminalProcess of the component README File Ha… |
| CVE-2026-81833 | CVE-2026-81833 CVSS 5.5 | A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/hel… |
| CVE-2026-81832 | CVE-2026-81832 CVSS 7.7ibm | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 SAP Adapter is… |
| CVE-2026-81830 | CVE-2026-81830 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via i… |
| CVE-2026-8183 | CVE-2026-8183 CVSS 7.7langflow | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could a… |
| CVE-2026-81829 | CVE-2026-81829 CVSS 5.3 | A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When th… |
| CVE-2026-81827 | CVE-2026-81827 | Affected versions of Flowintel incorrectly attempted to validate login email addresses by calling Email(email). That does not perform WTForms field validation;… |
| CVE-2026-81826 | CVE-2026-81826 | Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already posses… |