CVE Vulnerability Database

Search and browse 423,337 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.

CVE IDSeverityCVSSDescription
CVE-2026-97406CRITICAL9.1XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token ...
CVE-2026-75997——Rejected reason: this CVE was issued in error.
CVE-2026-75751——Rejected reason: this CVE was issued in error.
CVE-2026-75747——Rejected reason: this CVE was issued in error.
CVE-2026-48279——Rejected reason: this CVE was issued in error.
CVE-2026-21356——Rejected reason: this CVE was issued in error.
CVE-2026-21270——Rejected reason: this CVE was issued in error.
CVE-2026-21266——Rejected reason: this CVE was issued in error.
CVE-2026-113810HIGH7A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack...
CVE-2026-113808HIGH7.1A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attack...
CVE-2026-113714LOW2.3virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, download_wheel() writes packag...
CVE-2026-113713MEDIUM4.4virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder...
CVE-2026-113712MEDIUM4.8Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnera...
CVE-2026-113709CRITICAL9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.1.0 until 3.3.15, 3.4.10, 3.5.4, and 3....
CVE-2026-113708CRITICAL9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3....
CVE-2026-113643MEDIUM4.3A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get of the fil...
CVE-2026-111767HIGH8.6MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients. From version 1.24.0 to...
CVE-2026-111088MEDIUM6.5A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.
CVE-2026-100134HIGH8.8Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th...
CVE-2026-100132MEDIUM4.3Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A...
CVE-2026-113802CRITICAL9.8Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 fu...
CVE-2026-113711HIGH7.5ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 of the imp...
CVE-2026-113710MEDIUM5.9ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the self-service password-change end...
CVE-2026-113672CRITICAL9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3....
CVE-2026-113671MEDIUM4.3ApostropheCMS is an open-source Node.js content management system. From 1.0.0-beta.10 until 1.0.0-beta.13 of the AI help...