CVE Vulnerability Database
Search and browse 420,244 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-117656 | CRITICAL | 9.3 | 0.2% | Oct 31, 2026 | Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth A... |
| CVE-2026-63414 | HIGH | 7.6 | 0.5% | Oct 30, 2026 | Shopify App is a Rails engine for building Shopify applications. From 22.1.0 until 23.0.3, `token-exchange` authenticate... |
| CVE-2026-63410 | MEDIUM | 5.9 | 0.3% | Oct 30, 2026 | secp256k1-native is a native C secp256k1 implementation for Ruby. In affected native builds, native constant-time scalar... |
| CVE-2026-63402 | MEDIUM | 5.9 | 0.3% | Oct 30, 2026 | i18next is an internationalization framework for JavaScript. Prior to version 26.3.4, `deepExtend` in `src/utils.js` che... |
| CVE-2026-63401 | MEDIUM | 5.3 | 0.3% | Oct 30, 2026 | Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and `removeAc... |
| CVE-2026-63400 | LOW | 2.3 | 0.3% | Oct 30, 2026 | Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the passwo... |
| CVE-2026-63399 | MEDIUM | 6.9 | 0.3% | Oct 30, 2026 | Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operati... |
| CVE-2026-63398 | HIGH | 7.4 | 0.2% | Oct 30, 2026 | Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolv... |
| CVE-2026-63396 | HIGH | 8.7 | 0.3% | Oct 30, 2026 | Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.... |
| CVE-2026-63393 | HIGH | 8.7 | 0.5% | Oct 30, 2026 | OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing Language. In the 2.x line from 2.8.0.0 u... |
| CVE-2026-63378 | HIGH | 8.8 | 0.4% | Oct 30, 2026 | TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language... |
| CVE-2026-63377 | CRITICAL | 9.8 | 0.4% | Oct 30, 2026 | TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language... |
| CVE-2026-63346 | HIGH | 8.6 | 0.4% | Oct 30, 2026 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, the header parameter nam... |
| CVE-2026-63345 | HIGH | 8.6 | 0.4% | Oct 30, 2026 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, OpenAPI `paths`-object k... |
| CVE-2026-63344 | HIGH | 8.6 | 0.4% | Oct 30, 2026 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.2, content-type keys in the... |
| CVE-2026-63341 | HIGH | 7.5 | 0.4% | Oct 30, 2026 | Aedes is an MQTT broker that can run on any stream server. Prior to 1.1.1, the MQTT broker does not bound topic depth or... |
| CVE-2026-63339 | HIGH | 8.8 | 0.3% | Oct 30, 2026 | IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica... |
| CVE-2026-63338 | HIGH | 8.3 | 0.3% | Oct 30, 2026 | IXP Manager is a full-stack web application for managing Internet Exchange Points. Prior to version 7.3.0, an authentica... |
| CVE-2026-61725 | MEDIUM | 6.1 | 0.1% | Oct 30, 2026 | sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior to 0.21.1, extracting an attacker-supplied 7z arch... |
| CVE-2026-111477 | — | — | — | Oct 30, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-63224 | HIGH | 7.2 | 0.3% | Oct 30, 2026 | OpenRemote is an open-source internet-of-things platform. Prior to 1.26.0, the `datapoint export` API constructs `CSV cr... |
| CVE-2026-63201 | HIGH | 7.1 | 0.4% | Oct 30, 2026 | Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected ver... |
| CVE-2026-63184 | HIGH | 7.1 | 0.4% | Oct 30, 2026 | Refitter is a tool for generating a C# REST API client using the Refit library. Prior to 2.1.1, the `refitter` dotnet to... |
| CVE-2026-63182 | HIGH | 8.1 | 0.2% | Oct 30, 2026 | LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate suppo... |
| CVE-2026-63121 | MEDIUM | 6.3 | 0.2% | Oct 30, 2026 | Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters. For versions... |