CVE Vulnerability Database
Search and browse 420,407 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-117601 | HIGH | 7.5 | 0.2% | Oct 27, 2026 | Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing ma... |
| CVE-2026-117573 | HIGH | 7.8 | 0.7% | Oct 27, 2026 | hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell co... |
| CVE-2026-117570 | MEDIUM | 5.2 | 0.2% | Oct 27, 2026 | Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the scan_vulnerabil... |
| CVE-2026-117569 | HIGH | 7.8 | 0.7% | Oct 27, 2026 | Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_s... |
| CVE-2026-117568 | HIGH | 7 | 0.6% | Oct 27, 2026 | mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by s... |
| CVE-2026-117567 | HIGH | 7.8 | 0.7% | Oct 27, 2026 | esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary com... |
| CVE-2026-117566 | MEDIUM | 5.3 | 0.4% | Oct 27, 2026 | EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and ... |
| CVE-2026-117565 | MEDIUM | 5.3 | 0.4% | Oct 27, 2026 | Artalk before 2.10.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers ... |
| CVE-2026-117564 | CRITICAL | 9.8 | 0.6% | Oct 27, 2026 | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge a... |
| CVE-2026-117563 | MEDIUM | 5.4 | 0.2% | Oct 27, 2026 | MrDoc through 1.1.1 contains a broken access control vulnerability in the manage_doc_share type 3 branch that allows aut... |
| CVE-2026-117562 | MEDIUM | 5.3 | 0.3% | Oct 27, 2026 | rssant 1.9.0 through 1.9.1 contains an authorization bypass vulnerability that allows unauthenticated attackers to read ... |
| CVE-2026-117561 | HIGH | 7.8 | 0.7% | Oct 27, 2026 | Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers to execute shell com... |
| CVE-2026-117560 | HIGH | 7.8 | 0.7% | Oct 27, 2026 | ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() that allows attacker... |
| CVE-2026-117559 | HIGH | 7.8 | 0.7% | Oct 27, 2026 | DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass the shell command a... |
| CVE-2026-117558 | HIGH | 7.8 | 0.7% | Oct 27, 2026 | The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that allows attackers to exe... |
| CVE-2026-117557 | MEDIUM | 6.1 | 0.1% | Oct 27, 2026 | SDL_image through 3.4.8 and through 2.8.12 contains a stack out-of-bounds read vulnerability in IMG_LoadLBM_IO() in src/... |
| CVE-2026-117556 | MEDIUM | 4.3 | 0.3% | Oct 27, 2026 | zchunk before 1.5.5 contains a heap out-of-bounds read vulnerability in read_preface() in src/lib/header.c that passes t... |
| CVE-2026-117555 | MEDIUM | 6.1 | 0.1% | Oct 27, 2026 | CImg through 4.0.6 contains a heap out-of-bounds read vulnerability in the _load_bmp() function of CImg.h caused by an i... |
| CVE-2026-117554 | MEDIUM | 4.3 | 0.3% | Oct 27, 2026 | Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register ev... |
| CVE-2026-117553 | HIGH | 7.5 | 0.5% | Oct 27, 2026 | Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows unauthenticated attacke... |
| CVE-2026-117504 | MEDIUM | 5.3 | 0.6% | Oct 27, 2026 | A vulnerability was identified in a2aproject a2a-go up to 2.4.0. The affected element is the function Cancel of the file... |
| CVE-2026-117503 | MEDIUM | 5.3 | 0.7% | Oct 27, 2026 | A vulnerability was determined in a2aproject a2a-go up to 2.4.0. Impacted is an unknown function of the file a2asrv/rest... |
| CVE-2026-10537 | MEDIUM | 5.3 | 0.3% | Oct 27, 2026 | A misconfiguration issue in the affected service in Control-M/Enterprise Manager and Control-M/Server may allow unauthen... |
| CVE-2026-107067 | MEDIUM | 6.2 | 0.2% | Oct 27, 2026 | An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information |
| CVE-2026-92546 | HIGH | 7.5 | 0.3% | Oct 27, 2026 | Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally allows Auth... |