CVE Vulnerability Database
Search and browse 420,576 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-115996 | LOW | 3.7 | 0.2% | Oct 24, 2026 | A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1. This affects the function W... |
| CVE-2026-115995 | CRITICAL | 9.6 | 1.4% | Oct 24, 2026 | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. The impacted element is the f... |
| CVE-2026-111326 | — | — | — | Oct 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-109111 | — | — | — | Oct 24, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-115982 | MEDIUM | 4.3 | 0.3% | Oct 24, 2026 | A vulnerability was detected in phpIPAM up to 1.8.3. Affected by this issue is the function create_rack_link of the file... |
| CVE-2026-115981 | LOW | 2.4 | 0.3% | Oct 24, 2026 | A security vulnerability has been detected in phpIPAM up to 1.8.3. Affected by this vulnerability is an unknown function... |
| CVE-2026-115973 | HIGH | 7.3 | 0.3% | Oct 24, 2026 | A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3. Affected by this issue is the function ForgotPassword... |
| CVE-2026-114820 | CRITICAL | 9.1 | 0.3% | Oct 24, 2026 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE... |
| CVE-2026-115972 | MEDIUM | 5.3 | 0.3% | Oct 24, 2026 | A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3. Affected by this vulnerability is the function ... |
| CVE-2026-115971 | MEDIUM | 5.3 | 0.4% | Oct 24, 2026 | A vulnerability was found in Travisun Opptrix 0.4.0. Affected is the function Buffer.concat of the file /api/channels/we... |
| CVE-2026-115970 | HIGH | 7.3 | 0.3% | Oct 24, 2026 | A vulnerability has been found in Travisun Opptrix 0.4.0. This impacts an unknown function of the file /api/system-updat... |
| CVE-2026-115969 | HIGH | 7.3 | 1.3% | Oct 24, 2026 | A flaw has been found in Travisun Opptrix 0.4.0. This affects an unknown function of the file /api/auth/setup of the com... |
| CVE-2026-115933 | CRITICAL | 9.9 | 0.2% | Oct 24, 2026 | Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a t... |
| CVE-2026-115557 | CRITICAL | 9.4 | 0.5% | Oct 24, 2026 | Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without ce... |
| CVE-2026-114704 | HIGH | 7.2 | 0.4% | Oct 24, 2026 | Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object Injection.T... |
| CVE-2026-114629 | HIGH | 7.5 | 0.3% | Oct 24, 2026 | Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded body para... |
| CVE-2026-114192 | MEDIUM | 6.5 | 0.2% | Oct 24, 2026 | Missing Authorization vulnerability in Magepeople inc. WpEvently mage-eventpress allows Exploiting Incorrectly Configure... |
| CVE-2026-114191 | HIGH | 7.5 | 0.3% | Oct 24, 2026 | Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce upi-qr-code-payment-for-wooc... |
| CVE-2026-115932 | CRITICAL | 9.6 | 0.4% | Oct 24, 2026 | When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it do... |
| CVE-2026-116020 | MEDIUM | 5.4 | 0.2% | Oct 24, 2026 | BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authentic... |
| CVE-2026-116019 | HIGH | 8.8 | 0.3% | Oct 24, 2026 | Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary public... |
| CVE-2026-116018 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authent... |
| CVE-2026-116017 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api DeviceCo... |
| CVE-2026-116016 | HIGH | 7.1 | 0.3% | Oct 24, 2026 | yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-... |
| CVE-2026-116015 | MEDIUM | 4.3 | 0.2% | Oct 24, 2026 | yudao-cloud through 2026.09 contains an insecure direct object reference vulnerability in the mall trade module that all... |