CVE Vulnerability Database
Search and browse 420,802 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-41223 | CRITICAL | 9.1 | 0.7% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s... |
| CVE-2026-41222 | CRITICAL | 9.1 | 0.7% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s):... |
| CVE-2026-40627 | CRITICAL | 9.1 | 1.0% | Oct 20, 2026 | An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X... |
| CVE-2026-40615 | CRITICAL | 9.1 | 0.7% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (vers... |
| CVE-2026-35499 | CRITICAL | 9.1 | 1.0% | Oct 20, 2026 | An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X20... |
| CVE-2026-33568 | CRITICAL | 9.1 | 1.0% | Oct 20, 2026 | A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTO... |
| CVE-2026-28763 | CRITICAL | 9.1 | 0.7% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version... |
| CVE-2026-112712 | CRITICAL | 9.1 | 0.3% | Oct 20, 2026 | @fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 through 9.3.5, the use() func... |
| CVE-2026-112407 | HIGH | 8.8 | 0.5% | Oct 20, 2026 | Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 ... |
| CVE-2026-111758 | HIGH | 7.5 | 0.5% | Oct 20, 2026 | markdown-it is a Markdown parser. From versions 14.1.0 to before 14.3.3, and 15.0.0 to before 15.0.3, a link reference d... |
| CVE-2026-110322 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferenci... |
| CVE-2026-10141 | CRITICAL | 9.1 | 0.4% | Oct 20, 2026 | A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s): TOTOLINK-X2000R... |
| CVE-2026-10139 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V... |
| CVE-2026-10138 | CRITICAL | 9.1 | 1.2% | Oct 20, 2026 | A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-X2000R... |
| CVE-2026-10137 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK... |
| CVE-2026-10136 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s): TOTOLINK-... |
| CVE-2026-10135 | CRITICAL | 9.1 | 1.2% | Oct 20, 2026 | A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0... |
| CVE-2026-10133 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s): TOTOLINK-X2000R-... |
| CVE-2026-10132 | CRITICAL | 9.1 | 0.9% | Oct 20, 2026 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s): TOTOLIN... |
| CVE-2026-10131 | CRITICAL | 9.1 | 1.2% | Oct 20, 2026 | An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s): TOTOLINK-... |
| CVE-2026-109576 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list ad... |
| CVE-2026-107929 | HIGH | 8.1 | 0.2% | Oct 20, 2026 | When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes (`... |
| CVE-2026-107928 | HIGH | 8.1 | 0.3% | Oct 20, 2026 | When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due... |
| CVE-2026-105960 | MEDIUM | 5.5 | 0.1% | Oct 20, 2026 | PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver uses a requ... |
| CVE-2026-103672 | HIGH | 7.1 | 0.1% | Oct 20, 2026 | The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then cop... |