CVE Vulnerability Database
Search and browse 420,383 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111108 | CRITICAL | 9.1 | 0.3% | Oct 28, 2026 | Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the sen... |
| CVE-2026-111073 | MEDIUM | 6.5 | 0.2% | Oct 28, 2026 | The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against tel... |
| CVE-2026-110985 | CRITICAL | 9.1 | 0.1% | Oct 28, 2026 | A Kafka broker using SASL/OAUTHBEARER with the default validator (sasl.oauthbearer.jwt.validator.class=DefaultJwtValidat... |
| CVE-2026-110952 | MEDIUM | 5.9 | 0.1% | Oct 28, 2026 | A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies ... |
| CVE-2026-106079 | HIGH | 8.8 | 1.2% | Oct 28, 2026 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessMan... |
| CVE-2026-103506 | HIGH | 8.9 | 0.3% | Oct 28, 2026 | An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required ... |
| CVE-2026-103411 | HIGH | 7.1 | 0.2% | Oct 28, 2026 | An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker wit... |
| CVE-2026-103410 | HIGH | 7.5 | — | Oct 28, 2026 | An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an unau... |
| CVE-2026-103409 | CRITICAL | 9.8 | 0.3% | Oct 28, 2026 | A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthen... |
| CVE-2026-103408 | HIGH | 8.8 | 0.3% | Oct 28, 2026 | A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an unauthentica... |
| CVE-2026-103407 | HIGH | 8.8 | — | Oct 28, 2026 | An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Sessi... |
| CVE-2026-103406 | CRITICAL | 9.8 | 0.5% | Oct 28, 2026 | An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Junipe... |
| CVE-2026-103405 | MEDIUM | 5.8 | 0.2% | Oct 28, 2026 | An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in t... |
| CVE-2026-103404 | MEDIUM | 6.8 | 0.2% | Oct 28, 2026 | An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session Sma... |
| CVE-2026-103403 | HIGH | 8.8 | 1.2% | Oct 28, 2026 | An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in AccessMan... |
| CVE-2026-103402 | HIGH | 8.8 | 0.2% | Oct 28, 2026 | An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and Ses... |
| CVE-2026-103401 | HIGH | 8.8 | 0.3% | Oct 28, 2026 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server handle... |
| CVE-2026-103400 | MEDIUM | 5.5 | — | Oct 28, 2026 | An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in t... |
| CVE-2026-103394 | LOW | 3.7 | — | Oct 28, 2026 | An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker... |
| CVE-2026-103393 | MEDIUM | 4.3 | 0.2% | Oct 28, 2026 | An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an L2-adj... |
| CVE-2026-103392 | MEDIUM | 4.8 | 0.2% | Oct 28, 2026 | An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an att... |
| CVE-2026-103391 | MEDIUM | 5.3 | 0.2% | Oct 28, 2026 | An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router all... |
| CVE-2026-103390 | MEDIUM | 5.3 | — | Oct 28, 2026 | An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session Sma... |
| CVE-2026-100105 | HIGH | 7.7 | 0.3% | Oct 28, 2026 | A user with permission to edit contact points but not their protected fields can change protected settings, such as a co... |
| CVE-2026-93522 | HIGH | 7.8 | 0.2% | Oct 28, 2026 | A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and ... |