CVE Vulnerability Database
Search and browse 420,973 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109444 | CRITICAL | 9.8 | 0.5% | Oct 20, 2026 | OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run... |
| CVE-2026-109443 | HIGH | 8.8 | 0.7% | Oct 20, 2026 | JoySafeter through 1.0.0 contains a remote code execution vulnerability that allows authenticated users to run operating... |
| CVE-2026-109442 | CRITICAL | 9.8 | 0.7% | Oct 20, 2026 | piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat... |
| CVE-2026-109441 | MEDIUM | 5.8 | 0.4% | Oct 20, 2026 | LangAlpha through 2026.09.07 contains an improper isolation vulnerability that places all tenants' sandbox containers on... |
| CVE-2026-109440 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to execute... |
| CVE-2026-109395 | CRITICAL | 9.1 | 0.4% | Oct 20, 2026 | Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based Unsafe... |
| CVE-2026-105298 | MEDIUM | 6.3 | 0.4% | Oct 20, 2026 | Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority pseudo-... |
| CVE-2026-105297 | HIGH | 7.5 | 0.3% | Oct 20, 2026 | Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set i... |
| CVE-2026-8355 | MEDIUM | 5.4 | 0.2% | Oct 20, 2026 | IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows authe... |
| CVE-2026-112373 | MEDIUM | 6.5 | 0.4% | Oct 20, 2026 | A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the f... |
| CVE-2026-109126 | HIGH | 8.8 | 0.2% | Oct 20, 2026 | IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate... |
| CVE-2026-107400 | HIGH | 8.8 | 0.4% | Oct 20, 2026 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary co... |
| CVE-2026-107366 | HIGH | 8.3 | 0.3% | Oct 20, 2026 | IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authe... |
| CVE-2026-105453 | HIGH | 8.4 | 0.1% | Oct 20, 2026 | IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker to... |
| CVE-2026-77684 | MEDIUM | 5.7 | 0.3% | Oct 19, 2026 | The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT comma... |
| CVE-2026-19595 | MEDIUM | 6.1 | 0.1% | Oct 19, 2026 | The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two out... |
| CVE-2026-19178 | MEDIUM | 6.8 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized adm... |
| CVE-2026-112991 | MEDIUM | 6.3 | 0.3% | Oct 19, 2026 | The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its... |
| CVE-2026-112372 | MEDIUM | 6.6 | 0.4% | Oct 19, 2026 | A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/uplo... |
| CVE-2026-112371 | CRITICAL | 9.9 | 0.4% | Oct 19, 2026 | A vulnerability was determined in H3C Magic NX15 NX15V100R017. Impacted is the function write of the file /api/esps of t... |
| CVE-2026-112370 | CRITICAL | 9.9 | 1.7% | Oct 19, 2026 | A vulnerability was found in H3C Magic NX15 100R017. This issue affects the function sub_416874 of the file /usr/bin/usr... |
| CVE-2025-36252 | MEDIUM | 6.3 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate... |
| CVE-2025-36069 | MEDIUM | 5.5 | 0.2% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an auth... |
| CVE-2025-36061 | MEDIUM | 6.5 | 0.3% | Oct 19, 2026 | IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could al... |
| CVE-2026-57529 | — | — | — | Oct 19, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |