CVE Vulnerability Database
Search and browse 425,099 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-88816 | HIGH | 7.5 | 0.2% | Sep 28, 2026 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrow_hashref us... |
| CVE-2026-88815 | MEDIUM | 6.2 | 0.2% | Sep 28, 2026 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to S... |
| CVE-2026-87969 | HIGH | 8.6 | — | Sep 28, 2026 | An OS command injection vulnerability in the WatchGuard AP diagnostic CLI allows an authenticated administrator to execu... |
| CVE-2026-87114 | HIGH | 7.1 | 0.2% | Sep 28, 2026 | A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untr... |
| CVE-2026-86102 | CRITICAL | 9.3 | — | Sep 28, 2026 | An OS command injection vulnerability in the WatchGuard AP internal API service allows an attacker with network access t... |
| CVE-2026-85644 | HIGH | 7.5 | 0.2% | Sep 28, 2026 | XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference. The wrapper function XS... |
| CVE-2026-58464 | — | — | — | Sep 28, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-58463 | — | — | — | Sep 28, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-55096 | HIGH | 7.1 | 0.2% | Sep 28, 2026 | fast-mcp-telegram is a Telegram MCP Server. Prior to version 30.1, the send_message/send_message_to_phone MCP tools acce... |
| CVE-2026-54160 | HIGH | 8.2 | 0.2% | Sep 28, 2026 | Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU... |
| CVE-2026-48100 | HIGH | 8.7 | 0.2% | Sep 28, 2026 | Payy is an Ethereum L2 zk-rollup for privacy preserving and regulatory compliant transactions. Prior to version 1.3.0, a... |
| CVE-2026-101894 | CRITICAL | 9.1 | 0.8% | Sep 28, 2026 | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) ... |
| CVE-2026-101891 | CRITICAL | 9.3 | — | Sep 28, 2026 | An improper access control vulnerability in an internal API service on WatchGuard Access Points allows an unauthenticate... |
| CVE-2026-101098 | MEDIUM | 4.3 | — | Sep 28, 2026 | A security vulnerability has been detected in ag-ui-protocol ag-ui up to 2026-09-23. Affected by this issue is the funct... |
| CVE-2026-101083 | MEDIUM | 5.3 | — | Sep 28, 2026 | A security vulnerability has been detected in PMWeb v7.x/v8.x/v2025.x. Impacted is an unknown function in the library en... |
| CVE-2026-101082 | MEDIUM | 5.3 | 0.5% | Sep 28, 2026 | A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloade... |
| CVE-2026-101081 | CRITICAL | 9.1 | — | Sep 28, 2026 | A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menu_nat_more_asp o... |
| CVE-2026-97399 | LOW | 3.7 | 0.3% | Sep 28, 2026 | The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte bey... |
| CVE-2026-93348 | HIGH | 8.1 | 0.4% | Sep 28, 2026 | Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code in... |
| CVE-2026-91154 | MEDIUM | 6.9 | 0.4% | Sep 28, 2026 | Missing Authentication for Critical Function (CWE-306) in the product cache revalidation Server Action (src/app/actions.... |
| CVE-2026-88808 | HIGH | 8.8 | 0.3% | Sep 28, 2026 | A vulnerability has been identified within Rancher Manager where the Fleet agent wrote resources to downstream clusters ... |
| CVE-2026-88805 | HIGH | 8.1 | 0.3% | Sep 28, 2026 | Incorrect credential cleaning on logout could be used by remote attackers to keep access credentials even after the acco... |
| CVE-2026-88804 | CRITICAL | 9.6 | 0.5% | Sep 28, 2026 | An unauthenticated update of public UI settings could be used by remote attackers to execute a stored cross-site scripti... |
| CVE-2026-12342 | CRITICAL | 9.6 | 0.2% | Sep 28, 2026 | This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated user remote code execution on the Id... |
| CVE-2026-101861 | MEDIUM | 4.1 | 0.2% | Sep 28, 2026 | Langflow 1.0.16 before 1.12.0 and 0.0.94 before 1.12.0 contain an unsafe eval() vulnerability in schema.py that allows a... |