CVE Vulnerability Database
Search and browse 425,092 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102842 | MEDIUM | 6.3 | — | Sep 30, 2026 | A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Affecte... |
| CVE-2026-102805 | MEDIUM | 6.5 | 0.3% | Sep 30, 2026 | A flaw has been found in Nothings stb up to 1.16. This affects the function stbi_write_png_to_mem/stbi_write_jpg_core/st... |
| CVE-2026-102804 | MEDIUM | 6.5 | 0.3% | Sep 30, 2026 | A vulnerability was detected in Nothings stb up to 2c980bb59875b0d32144a71867fbdebb2f77cd20. The impacted element is the... |
| CVE-2026-90441 | HIGH | 8.1 | 0.2% | Sep 30, 2026 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe... |
| CVE-2026-86136 | HIGH | 8.1 | 0.3% | Sep 30, 2026 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authe... |
| CVE-2026-86133 | HIGH | 7.5 | 0.3% | Sep 30, 2026 | An integer underflow vulnerability in the WatchGuard Fireware OS IKE daemon (iked) allows a remote attacker who has comp... |
| CVE-2026-86132 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | An integer underflow vulnerability in the WatchGuard Fireware OS IKEv2 daemon (iked) allows a remote, unauthenticated at... |
| CVE-2026-86131 | CRITICAL | 9.8 | 0.4% | Sep 30, 2026 | A code injection vulnerability in WatchGuard Fireware OS's BOVPN Over TLS client configuration handling allows an attack... |
| CVE-2026-86128 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthentic... |
| CVE-2026-86105 | HIGH | 7.1 | 0.4% | Sep 30, 2026 | An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, low-privil... |
| CVE-2026-86104 | HIGH | 7.5 | 0.4% | Sep 30, 2026 | An uncontrolled resource consumption vulnerability in the Fireware OS login process (wgagent) allows a remote, unauthent... |
| CVE-2026-86101 | MEDIUM | 6.5 | 0.2% | Sep 30, 2026 | An improper authorization vulnerability in WatchGuard Fireware OS's SAML login process allows a remote, authenticated SA... |
| CVE-2026-81433 | HIGH | 8.7 | — | Sep 30, 2026 | A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an u... |
| CVE-2026-18145 | HIGH | 7.2 | 0.3% | Sep 30, 2026 | A stack-based buffer overflow vulnerability in the spamBlocker (spamd) service of WatchGuard Fireware OS allows an authe... |
| CVE-2026-18105 | MEDIUM | 6.5 | 0.2% | Sep 30, 2026 | An uncontrolled resource consumption vulnerability in Fireware OS's diagnostic tasks feature allows a low-privileged, au... |
| CVE-2026-13224 | MEDIUM | 4.9 | 0.4% | Sep 30, 2026 | A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read o... |
| CVE-2026-13046 | HIGH | 7.2 | 0.3% | Sep 30, 2026 | A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SAML single sign-on session handling (saml... |
| CVE-2026-103051 | MEDIUM | 6.1 | — | Sep 30, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun... |
| CVE-2026-103050 | MEDIUM | 6.1 | — | Sep 30, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun... |
| CVE-2026-103049 | MEDIUM | 6.1 | — | Sep 30, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun... |
| CVE-2026-103048 | MEDIUM | 6.1 | 0.1% | Sep 30, 2026 | URL redirection to untrusted site ('open redirect') vulnerability in The Wikimedia Foundation Mediawiki - Collection ext... |
| CVE-2026-102794 | CRITICAL | 9.1 | — | Sep 30, 2026 | A vulnerability has been found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file /ap... |
| CVE-2026-102793 | CRITICAL | 9.1 | 2.5% | Sep 30, 2026 | A flaw has been found in Ziroom ZHOME A0101 1.0.1.0. This vulnerability affects the function set_time_zone of the file /... |
| CVE-2026-15278 | — | — | — | Sep 29, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-103047 | MEDIUM | 6.1 | — | Sep 29, 2026 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in The Wikimedia Foun... |