CVE Vulnerability Database
Search and browse 425,099 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-54710 | HIGH | 8.8 | 0.4% | Sep 28, 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution (RCE) vulnerabi... |
| CVE-2026-54708 | HIGH | 8.8 | 0.4% | Sep 28, 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX b... |
| CVE-2026-54675 | HIGH | 8.8 | 0.6% | Sep 28, 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound lan... |
| CVE-2026-54674 | HIGH | 8.8 | 0.6% | Sep 28, 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel (UCP)... |
| CVE-2026-49994 | CRITICAL | 9.1 | 0.3% | Sep 28, 2026 | Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when auth_enabled is set in Bluehood, only the HTML ... |
| CVE-2026-45562 | HIGH | 7.2 | 0.3% | Sep 28, 2026 | FreePBX is an open source IP PBX. Prior to versions 16.0.4 and 17.0.6, the FreePBX Music on Hold (MoH) module contains a... |
| CVE-2026-101913 | MEDIUM | 6.3 | 0.4% | Sep 28, 2026 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, the Address... |
| CVE-2026-101912 | MEDIUM | 6.3 | 0.4% | Sep 28, 2026 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSub... |
| CVE-2026-101911 | MEDIUM | 6.3 | 0.3% | Sep 28, 2026 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the Address... |
| CVE-2026-101910 | MEDIUM | 6.9 | 0.4% | Sep 28, 2026 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, th... |
| CVE-2026-101909 | HIGH | 8.3 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFo... |
| CVE-2026-101908 | MEDIUM | 6.9 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.7.0 until 1.20.0, the fetch adapter constructs ... |
| CVE-2026-101907 | HIGH | 7 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses t... |
| CVE-2026-101906 | HIGH | 8.2 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy appl... |
| CVE-2026-101905 | HIGH | 7.6 | 0.3% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib... |
| CVE-2026-101904 | MEDIUM | 6.9 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.0.0 until 1.20.0, the dispatchRequest function ... |
| CVE-2026-101903 | HIGH | 8.2 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular express... |
| CVE-2026-101902 | MEDIUM | 6.9 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 0.27.2 until 0.34.0 and 1.20.0, Axios default-ins... |
| CVE-2026-101901 | HIGH | 8.2 | 0.4% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not insta... |
| CVE-2026-101900 | MEDIUM | 6.9 | 0.5% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.12.0 until 1.20.0, ResolveConfig reads inherite... |
| CVE-2026-101898 | HIGH | 7 | 0.5% | Sep 28, 2026 | Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup d... |
| CVE-2026-101102 | MEDIUM | 6.3 | 0.2% | Sep 28, 2026 | A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the com... |
| CVE-2026-101101 | MEDIUM | 4.3 | — | Sep 28, 2026 | A vulnerability has been found in ag-ui-protocol ag-ui up to 2026-09-07. This issue affects the function JSON.parse of t... |
| CVE-2026-101100 | MEDIUM | 5.4 | — | Sep 28, 2026 | A flaw has been found in ag-ui-protocol ag-ui up to 2026-09-07. This vulnerability affects the function FilterToolCallsM... |
| CVE-2026-101099 | MEDIUM | 4.3 | 0.5% | Sep 28, 2026 | A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the file SseParse... |