CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-57203 | MEDIUM | 6.9 | 0.1% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57199 | LOW | 2.3 | 0.5% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57192 | MEDIUM | 6 | 0.7% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57191 | HIGH | 8.2 | 0.6% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57190 | HIGH | 7 | 0.7% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57186 | HIGH | 7.5 | 0.6% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. From 21.0.0-pre1 until Asterisk 21.12.3, 22.10... |
| CVE-2026-85898 | HIGH | 8.8 | 0.8% | Oct 27, 2026 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized ... |
| CVE-2026-83831 | HIGH | 8.8 | 0.8% | Oct 27, 2026 | Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. |
| CVE-2026-57200 | HIGH | 7.5 | 0.9% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-57195 | HIGH | 7.5 | 0.6% | Oct 27, 2026 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2... |
| CVE-2026-39928 | — | — | — | Oct 27, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-116775 | LOW | 2.3 | 0.3% | Oct 27, 2026 | pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate wit... |
| CVE-2026-116774 | MEDIUM | 4.3 | 0.3% | Oct 27, 2026 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65... |
| CVE-2026-116773 | MEDIUM | 4.3 | 0.3% | Oct 27, 2026 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, the c... |
| CVE-2026-116696 | LOW | 3.3 | 0.1% | Oct 27, 2026 | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. Prior to 0.65.0, russh... |
| CVE-2026-116695 | MEDIUM | 5.3 | 0.4% | Oct 27, 2026 | Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectl... |
| CVE-2026-116694 | MEDIUM | 6.3 | 0.4% | Oct 27, 2026 | OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.0, JaegerPropagator.extract() in o... |
| CVE-2026-116693 | HIGH | 8.7 | 0.4% | Oct 27, 2026 | dd-trace is the Datadog APM client for Node.js. From 2.0.0 until 5.131.1 and 6.20.1, the default DD_TRACE_OBFUSCATION_QU... |
| CVE-2026-116692 | CRITICAL | 9.8 | 0.7% | Oct 27, 2026 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.... |
| CVE-2026-116691 | MEDIUM | 6.5 | 0.2% | Oct 27, 2026 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 2.... |
| CVE-2026-116690 | HIGH | 7.5 | 0.6% | Oct 27, 2026 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.... |
| CVE-2026-116689 | MEDIUM | 5.9 | 0.3% | Oct 27, 2026 | follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 until 1.16... |
| CVE-2026-116688 | HIGH | 8.1 | 0.5% | Oct 27, 2026 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 45.0.0 until 47.7.4 and 48.5.1, the en... |
| CVE-2026-116687 | LOW | 3.1 | 0.3% | Oct 27, 2026 | CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specia... |
| CVE-2026-116686 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. From 1.... |