CVE Vulnerability Database
Search and browse 425,069 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-84682 | HIGH | 7.7 | 1.0% | Oct 1, 2026 | A command injection vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Archer AX90 V1. An unauthenticated adj... |
| CVE-2026-63724 | — | — | — | Oct 1, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-63721 | — | — | — | Oct 1, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-55232 | HIGH | 7.6 | 0.3% | Oct 1, 2026 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version... |
| CVE-2026-55231 | HIGH | 7.2 | — | Oct 1, 2026 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version... |
| CVE-2026-55230 | HIGH | 8.7 | — | Oct 1, 2026 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version... |
| CVE-2026-55083 | CRITICAL | 9.1 | 0.6% | Oct 1, 2026 | DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versi... |
| CVE-2026-27872 | MEDIUM | 5.6 | 0.1% | Oct 1, 2026 | - Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects E... |
| CVE-2026-15911 | HIGH | 7.4 | 0.2% | Oct 1, 2026 | Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive inform... |
| CVE-2026-104059 | HIGH | 8.1 | 0.1% | Oct 1, 2026 | Lektor 3.3.14 and 3.4.0b15 contains a cross-site request forgery vulnerability in the admin API blueprint that allows un... |
| CVE-2026-104058 | MEDIUM | 5.3 | 0.2% | Oct 1, 2026 | Podgrab contains a missing authentication vulnerability in which the /ws WebSocket route is registered on the root gin e... |
| CVE-2026-104057 | HIGH | 7.5 | 0.3% | Oct 1, 2026 | Podgrab contains an unauthenticated denial-of-service vulnerability caused by unsynchronized concurrent access to shared... |
| CVE-2026-104056 | CRITICAL | 9.8 | 0.1% | Oct 1, 2026 | Authlib version 1.7.2 and below contains a vulnerability where discovery JSON metadata is cached without validation or i... |
| CVE-2026-9032 | HIGH | 7.1 | 0.1% | Oct 1, 2026 | Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interfa... |
| CVE-2026-97662 | HIGH | 8.2 | — | Oct 1, 2026 | An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow... |
| CVE-2026-78578 | HIGH | 7.1 | — | Oct 1, 2026 | Tapo C120 v1 and C200 v5 do not enforce authentication for do method HTTPS onboarding connect actions after initial setu... |
| CVE-2026-78577 | MEDIUM | 5.3 | — | Oct 1, 2026 | Tapo C120 v1 and C200 V5 contain a vulnerability in the HTTPS onboarding scan function due to missing authentication. Af... |
| CVE-2026-73976 | HIGH | 7.1 | 0.4% | Oct 1, 2026 | djehuty is a research data repository system developed by 4TU.ResearchData. Prior to version 26.3.2, An unauthenticated ... |
| CVE-2026-68496 | HIGH | 7.5 | 0.7% | Oct 1, 2026 | The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when d... |
| CVE-2026-68495 | HIGH | 7.5 | 0.7% | Oct 1, 2026 | The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength() when de... |
| CVE-2026-56098 | MEDIUM | 4.3 | 0.3% | Oct 1, 2026 | A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass vulnerabi... |
| CVE-2026-56097 | MEDIUM | 6.5 | 0.3% | Oct 1, 2026 | A flaw was found in rubygem-katello. An SQL injection vulnerability exists in the Red Hat Satellite Katello Registry Pro... |
| CVE-2026-12545 | MEDIUM | 6.7 | 0.5% | Oct 1, 2026 | A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in Hammer CLI and the Railties (Ruby on... |
| CVE-2026-12542 | HIGH | 7.8 | 0.6% | Oct 1, 2026 | A flaw was found in Foreman. The foreman-tail utility is vulnerable to OS command injection due to the unsafe use of the... |
| CVE-2026-104018 | HIGH | 8.8 | 0.6% | Oct 1, 2026 | An improper privilege management vulnerability (CWE-269) exists in the command shell of Wind River VxWorks 7 when config... |