CVE Vulnerability Database
Search and browse 425,131 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-96279 | MEDIUM | 6.5 | 0.4% | Sep 27, 2026 | A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates... |
| CVE-2026-100876 | MEDIUM | 6.3 | 0.3% | Sep 27, 2026 | A vulnerability was found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Aff... |
| CVE-2026-100875 | HIGH | 7.3 | — | Sep 27, 2026 | A vulnerability has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be... |
| CVE-2026-100874 | HIGH | 7.3 | — | Sep 27, 2026 | A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This af... |
| CVE-2026-100873 | MEDIUM | 4.3 | 0.2% | Sep 27, 2026 | A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. ... |
| CVE-2026-101061 | MEDIUM | 4.7 | 0.2% | Sep 27, 2026 | utcp-gql before 1.1.1 and utcp-websocket before 1.1.1 contain server-side request forgery vulnerabilities due to incompl... |
| CVE-2026-101060 | HIGH | 8.2 | 0.2% | Sep 27, 2026 | python-utcp versions before 1.1.4 contain a server-side request forgery vulnerability in HttpCommunicationProtocol.call_... |
| CVE-2026-101059 | HIGH | 7.1 | 0.2% | Sep 27, 2026 | utcp-http before 1.1.4 fails to validate the OAuth2 tokenUrl field from remote OpenAPI specifications, allowing attacker... |
| CVE-2026-101058 | MEDIUM | 6.9 | 0.2% | Sep 27, 2026 | python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool URLs declared in a hand-written UTCP manu... |
| CVE-2026-101057 | LOW | 3.1 | 0.1% | Sep 27, 2026 | utcp-mcp (the MCP plugin of python-utcp) through 1.1.2 connects to the HTTP and WebSocket MCP server URLs given in a cal... |
| CVE-2026-101056 | MEDIUM | 5.3 | 0.2% | Sep 27, 2026 | Cloudreve before 4.16.1 fails to revalidate share access when restoring cached navigator state from a context_hint UUID.... |
| CVE-2026-101051 | LOW | 3.1 | — | Sep 27, 2026 | Cloudreve before 4.16.1 fails to properly sanitize file paths returned by remote downloaders, allowing authenticated use... |
| CVE-2026-101048 | MEDIUM | 5.4 | 0.2% | Sep 27, 2026 | Cloudreve before 4.17.0 registers the administrative node test endpoints (POST /api/v4/admin/node/test and POST /api/v4/... |
| CVE-2026-101047 | MEDIUM | 5.3 | 0.2% | Sep 27, 2026 | Fleet before 4.87.0 does not protect the two endpoints that serve in-house iOS application packages and manifests (enter... |
| CVE-2026-101046 | MEDIUM | 4.3 | 0.2% | Sep 27, 2026 | Fleet before 4.89.0 contains an SQL injection vulnerability in the activity list endpoints (GET /api/v1/fleet/activities... |
| CVE-2026-101045 | HIGH | 8 | 0.8% | Sep 27, 2026 | Fleet-maintained app install and uninstall scripts for macOS are generated from Homebrew cask metadata. In manifests gen... |
| CVE-2026-101044 | HIGH | 7.1 | 0.3% | Sep 27, 2026 | pacquet, the Rust package-manager component shipped in the pnpm npm package versions >=12.0.0-alpha.0 and <12.0.0-alpha.... |
| CVE-2026-101043 | HIGH | 7.4 | 0.2% | Sep 27, 2026 | pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders in the htt... |
| CVE-2026-88778 | HIGH | 7.5 | 0.4% | Sep 27, 2026 | Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This i... |
| CVE-2026-88777 | CRITICAL | 9.8 | 0.4% | Sep 27, 2026 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects AD... |
| CVE-2026-88776 | CRITICAL | 9.8 | 0.4% | Sep 27, 2026 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC... |
| CVE-2026-88775 | CRITICAL | 9.8 | 0.4% | Sep 27, 2026 | Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1... |
| CVE-2026-88774 | HIGH | 7.2 | 0.2% | Sep 27, 2026 | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1... |
| CVE-2026-88773 | CRITICAL | 10 | 0.4% | Sep 27, 2026 | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC a... |
| CVE-2026-88772 | HIGH | 8.1 | — | Sep 27, 2026 | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 1... |