112,666 indexed
CVECVE vulnerabilities
112,666 CVEs indexed — newest first. Filter by CVSS severity or CISA KEV listing; KEV-flagged entries surface a rose pill. Authored by Adam Lundqvist.
Showing 13,401–13,450 of 112,666 · page 269 of 2254
| ID | Title | Summary |
|---|---|---|
| CVE-2026-81101 | CVE-2026-81101 CVSS 6.5 | The configure command accepted any endpoint URL and stored it beside the user's access token. ConfigureCommand.execute in src/cli.ts persisted the value given … |
| CVE-2026-81100 | CVE-2026-81100 CVSS 6.8 | tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpSe… |
| CVE-2026-81099 | CVE-2026-81099 CVSS 6.8 | tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. mcp/src/httpServer.ts called the shared httpServer… |
| CVE-2026-81098 | CVE-2026-81098 CVSS 9.1 | The Telnyx MCP server exposed its HTTP transport on every interface and did not require a caller credential. packages/mcp-server/src/http.ts served MCP on the … |
| CVE-2026-81097 | CVE-2026-81097 CVSS 8.4 | The execute_ruby tool is documented as a read-only Ruby sandbox and is enforced by a pattern denylist together with replacements for the process-spawning metho… |
| CVE-2026-81096 | CVE-2026-81096 CVSS 10.0 | ToolUniverse ran caller-supplied Python inside a sandbox that could be escaped, on a server that required no authentication. The executor behind the python_cod… |
| CVE-2026-81095 | CVE-2026-81095 CVSS 6.8 | pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides. src/httpServer.ts called the shared httpServerFacto… |
| CVE-2026-81094 | CVE-2026-81094 CVSS 9.1 | The mcp-router CLI served its MCP aggregator on every interface and enforced authentication only when the operator asked for it. The serve command in apps/cli/… |
| CVE-2026-81093 | CVE-2026-81093 CVSS 8.6 | The get-html-skeleton tool fetched a URL the caller supplied after checking only its syntax. The handler in src/tools/common/get_html_skeleton.ts validated the… |
| CVE-2026-81092 | CVE-2026-81092 CVSS 6.8 | mcp-go accepted requests on its HTTP transports without checking the Host header. StreamableHTTPServer.ServeHTTP in server/streamable_http.go and SSEServer.Ser… |
| CVE-2026-81091 | CVE-2026-81091 CVSS 8.6 | The proxy middleware in mcp-use's inspector forwards requests to a destination the caller names. mountMcpProxy in libraries/typescript/packages/inspector/src/s… |
| CVE-2026-81090 | CVE-2026-81090 CVSS 7.2 | The Gpx2Graphics WordPress plugin through 0.3 does not perform a CSRF check when handling file uploads, nor validate the type of the uploaded file, allowing at… |
| CVE-2026-8108 | CVE-2026-8108 CVSS 7.8fujielectric | The installation of Fuji Tellus adds a driver to the kernel which grants all users read and write permissions. |
| CVE-2026-81052 | CVE-2026-81052 CVSS 6.8dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with physical acc… |
| CVE-2026-81051 | CVE-2026-81051 CVSS 6.6dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Security Version Number Mutable to Older Versions vulnerability. A low privileged attacker with physi… |
| CVE-2026-81049 | CVE-2026-81049 CVSS 4.4dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could… |
| CVE-2026-81048 | CVE-2026-81048 CVSS 9.6dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A… |
| CVE-2026-81046 | CVE-2026-81046 CVSS 9.4dell | Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism Failure vulnerability. An unauthenticated attacker with remote access could pote… |
| CVE-2026-81036 | CVE-2026-81036 CVSS 8.1 | Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crate… |
| CVE-2026-81035 | CVE-2026-81035 CVSS 8.1 | Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, w… |
| CVE-2026-81034 | CVE-2026-81034 CVSS 6.5 | Netmaker disables certificate verification on the connection to the configured mail server. The sender in pro/email/smtp.go assigns a TLS configuration whose s… |
| CVE-2026-81033 | CVE-2026-81033 CVSS 5.3 | Automatisch reveals whether an address is registered through the response to its forgot-password request. The controller at packages/backend/src/controllers/in… |
| CVE-2026-81032 | CVE-2026-81032 CVSS 9.8 | NebulaGraph exposes its runtime configuration over an unauthenticated HTTP service. Each daemon starts the web service defined in src/webservice/WebService.cpp… |
| CVE-2026-81031 | CVE-2026-81031 CVSS 7.2 | IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The update handler in backend/src/controll… |
| CVE-2026-81030 | CVE-2026-81030 CVSS 6.5 | Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mage_ai/api/resources/BrowserItemResource… |
| CVE-2026-81029 | CVE-2026-81029 CVSS 8.1 | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServlet reads the callback request para… |
| CVE-2026-81028 | CVE-2026-81028 CVSS 4.9 | ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The c… |
| CVE-2026-81027 | CVE-2026-81027 CVSS 8.5 | one-api gates one of its two channel-pinning paths and not the other. middleware/auth.go permits a request to name a specific channel either through a suffix o… |
| CVE-2026-81026 | CVE-2026-81026 CVSS 4.8 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.40 does not verify the amount, receiver, currency or status of a payment notification before … |
| CVE-2026-81022 | CVE-2026-81022 CVSS 5.3 | The SupportCandy WordPress plugin before 3.5.3 does not validate a submitted per-ticket authorization code before disclosing the real code to the requester, a… |
| CVE-2026-81021 | CVE-2026-81021 CVSS 5.3 | The SupportCandy WordPress plugin before 3.5.3 does not perform an authorization check on one of its support-ticket attachment download paths, allowing unauth… |
| CVE-2026-81020 | CVE-2026-81020 CVSS 7.4wolfssl | wolfEngine before 1.4.1 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TL… |
| CVE-2026-81019 | CVE-2026-81019 CVSS 7.4wolfssl | wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every … |
| CVE-2026-81018 | CVE-2026-81018 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: think-lmi: Free system certificate signatures Multi-certificate support als… |
| CVE-2026-81017 | CVE-2026-81017 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carrie… |
| CVE-2026-81016 | CVE-2026-81016 CVSS 7.7 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Propagate SMU errors and validate S2D address amd_stb_s2d_init() di… |
| CVE-2026-81015 | CVE-2026-81015 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd_pmc_probe() regi… |
| CVE-2026-81014 | CVE-2026-81014 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store() sk_store() and … |
| CVE-2026-81013 | CVE-2026-81013 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix heap OOB read on empty password write validate_password_inp… |
| CVE-2026-81012 | CVE-2026-81012 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer() hp_get_stri… |
| CVE-2026-81011 | CVE-2026-81011 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: platform/x86: hp-bioscfg: pass validated element count to package parsers The per-type pa… |
| CVE-2026-81010 | CVE-2026-81010 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: honor task_work cancellation io_waitid_cb() may run through the fallback… |
| CVE-2026-81009 | CVE-2026-81009 | In the Linux kernel, the following vulnerability has been resolved: io_uring/query: cap user size passed to copy_struct_to_user io_handle_query_entry() clamp… |
| CVE-2026-81008 | CVE-2026-81008 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: interconnect: Fix use after free in icc_get() and of_icc_get_by_index() In of_icc_get_by_… |
| CVE-2026-81007 | CVE-2026-81007 CVSS 7.1 | In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmb_write() read message fields before validat… |
| CVE-2026-81006 | CVE-2026-81006 CVSS 7.8 | In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi_add_smi() creates the nr_users … |
| CVE-2026-81005 | CVE-2026-81005 | In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try_smi_init() allocates… |
| CVE-2026-81004 | CVE-2026-81004 CVSS 8.4 | In the Linux kernel, the following vulnerability has been resolved: ipmi:msghandler: Cancel work cleanly on an error If an error occurs during startup of an … |
| CVE-2026-81003 | CVE-2026-81003 CVSS 8.1 | In the Linux kernel, the following vulnerability has been resolved: net/iucv: filter frames in afiucv_hs_rcv() by ingress device afiucv_hs_rcv() selects a so… |
| CVE-2026-81002 | CVE-2026-81002 CVSS 9.8 | In the Linux kernel, the following vulnerability has been resolved: xdp: fix zero-copy frame layout xdp_convert_zc_to_xdp_frame() clones an XSK packet into a… |