CVE Vulnerability Database
Search and browse 420,515 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-116214 | CRITICAL | 9.1 | 0.5% | Oct 26, 2026 | MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers t... |
| CVE-2026-116213 | MEDIUM | 4.9 | — | Oct 26, 2026 | Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem() that creates... |
| CVE-2026-116212 | MEDIUM | 5.4 | 0.2% | Oct 26, 2026 | Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows auth... |
| CVE-2026-116210 | MEDIUM | 6.5 | 0.2% | Oct 26, 2026 | Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remot... |
| CVE-2026-115700 | MEDIUM | 6.9 | 0.1% | Oct 26, 2026 | Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a percent... |
| CVE-2026-115693 | CRITICAL | 9.1 | 0.3% | Oct 26, 2026 | Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to impersonat... |
| CVE-2026-115269 | HIGH | 8.7 | — | Oct 26, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit a... |
| CVE-2026-115196 | MEDIUM | 5.4 | — | Oct 26, 2026 | An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is s... |
| CVE-2026-115195 | MEDIUM | 6.5 | — | Oct 26, 2026 | A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce ... |
| CVE-2026-115194 | MEDIUM | 6.5 | — | Oct 26, 2026 | A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied... |
| CVE-2026-115193 | HIGH | 8.2 | — | Oct 26, 2026 | A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type cus... |
| CVE-2026-115192 | HIGH | 7.1 | — | Oct 26, 2026 | An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). Chart filter paramet... |
| CVE-2026-115191 | HIGH | 7.1 | — | Oct 26, 2026 | A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax).... |
| CVE-2026-115190 | HIGH | 8 | — | Oct 26, 2026 | An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and cust... |
| CVE-2026-115189 | HIGH | 8.8 | — | Oct 26, 2026 | A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introdu... |
| CVE-2026-115188 | CRITICAL | 9.9 | — | Oct 26, 2026 | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded... |
| CVE-2026-114216 | MEDIUM | 6.3 | — | Oct 26, 2026 | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in the HTTP/1.1 chunked b... |
| CVE-2026-114213 | HIGH | 8.7 | — | Oct 26, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel bandi... |
| CVE-2026-113440 | MEDIUM | 6 | 0.3% | Oct 26, 2026 | Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain t... |
| CVE-2026-113436 | HIGH | 8.7 | — | Oct 26, 2026 | Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an unauthenticate... |
| CVE-2026-112880 | LOW | 2.1 | — | Oct 26, 2026 | Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in hackney_h... |
| CVE-2026-111590 | — | — | — | Oct 26, 2026 | A wide range of Harbor versions allow SSRF via its webhook delivery component which does not properly validate web hook ... |
| CVE-2026-111103 | HIGH | 8.2 | — | Oct 26, 2026 | Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an unauthenticated rem... |
| CVE-2026-111101 | HIGH | 8.7 | — | Oct 26, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel bandit... |
| CVE-2026-110499 | HIGH | 8.7 | — | Oct 26, 2026 | Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit allows... |