CVE Vulnerability Database
Search and browse 420,405 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-16491 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted ... |
| CVE-2026-118132 | MEDIUM | 6.1 | 0.2% | Oct 27, 2026 | NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsa... |
| CVE-2026-118131 | CRITICAL | 9.8 | 0.2% | Oct 27, 2026 | GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL) inher... |
| CVE-2026-117526 | MEDIUM | 5.3 | 0.1% | Oct 27, 2026 | A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of ... |
| CVE-2026-117516 | HIGH | 7.3 | 0.4% | Oct 27, 2026 | A weakness has been identified in oretnom23 php-travel-agency-system. The affected element is an unknown function of the... |
| CVE-2026-117515 | HIGH | 7.3 | 0.4% | Oct 27, 2026 | A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e0635. Impa... |
| CVE-2026-116682 | HIGH | 8.6 | 0.5% | Oct 27, 2026 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read hand... |
| CVE-2026-116680 | MEDIUM | 6.4 | 0.2% | Oct 27, 2026 | HomeBox is a home inventory and organization system. Prior to version 0.27.0, Homebox validates generic notifier URLs wi... |
| CVE-2026-116679 | MEDIUM | 5.4 | 0.3% | Oct 27, 2026 | Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC. From version 3.0.0 until 3.1.5, Neko deploy... |
| CVE-2026-116678 | MEDIUM | 5.8 | 0.3% | Oct 27, 2026 | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader v... |
| CVE-2026-116677 | MEDIUM | 5.3 | 0.2% | Oct 27, 2026 | OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI manage... |
| CVE-2026-116676 | HIGH | 8.8 | 0.5% | Oct 27, 2026 | Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. From version 0... |
| CVE-2026-116662 | HIGH | 7.5 | 0.4% | Oct 27, 2026 | Tanium addressed a compression bomb vulnerability in Enforce. |
| CVE-2026-116660 | MEDIUM | 4.3 | 0.2% | Oct 27, 2026 | Tanium addressed an improper access controls vulnerability in Enforce. |
| CVE-2026-116659 | MEDIUM | 4.3 | 0.3% | Oct 27, 2026 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. |
| CVE-2026-116658 | MEDIUM | 6.5 | 0.3% | Oct 27, 2026 | Tanium addressed a denial of service vulnerability in Enforce. |
| CVE-2026-116657 | MEDIUM | 5.3 | 0.3% | Oct 27, 2026 | Tanium addressed a denial of service vulnerability in Enforce. |
| CVE-2026-116656 | HIGH | 7.5 | 0.4% | Oct 27, 2026 | Tanium addressed an uncontrolled resource consumption vulnerability in Enforce. |
| CVE-2026-116649 | HIGH | 7.1 | 0.2% | Oct 27, 2026 | Tanium addressed an improper output sanitization vulnerability in Enforce. |
| CVE-2026-116647 | HIGH | 7.1 | 0.2% | Oct 27, 2026 | Tanium addressed an improper output sanitization vulnerability in Comply. |
| CVE-2026-111054 | — | — | — | Oct 27, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-112374. Reason: This candidate is a... |
| CVE-2026-108333 | LOW | 2.5 | 0.1% | Oct 27, 2026 | Tanium addressed a use-after-free vulnerability in Threat Response Client Extension. |
| CVE-2026-108332 | MEDIUM | 6.3 | 0.1% | Oct 27, 2026 | Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension. |
| CVE-2026-108331 | LOW | 3.3 | 0.1% | Oct 27, 2026 | Tanium addressed an infinite loop vulnerability in Threat Response Client Extension. |
| CVE-2026-108330 | LOW | 3.6 | 0.1% | Oct 27, 2026 | Tanium addressed an information disclosure vulnerability in Threat Response Client Extension. |