CVE Vulnerability Database
Search and browse 423,806 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-80092 | MEDIUM | 5.3 | 0.6% | Oct 16, 2026 | Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privi... |
| CVE-2026-111723 | HIGH | 8.8 | 0.3% | Oct 16, 2026 | LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to m... |
| CVE-2026-111722 | HIGH | 8.1 | — | Oct 16, 2026 | LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered u... |
| CVE-2026-111721 | MEDIUM | 5.4 | — | Oct 16, 2026 | Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other wa... |
| CVE-2026-111720 | MEDIUM | 5.3 | 0.3% | Oct 16, 2026 | fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that al... |
| CVE-2026-111719 | MEDIUM | 5.9 | 0.3% | Oct 16, 2026 | Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that all... |
| CVE-2026-111718 | MEDIUM | 6.5 | — | Oct 16, 2026 | AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the ... |
| CVE-2026-111717 | MEDIUM | 4.3 | — | Oct 16, 2026 | Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated empl... |
| CVE-2026-111716 | MEDIUM | 5.4 | — | Oct 16, 2026 | Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and modif... |
| CVE-2026-111715 | MEDIUM | 4.3 | 0.2% | Oct 16, 2026 | Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated employ... |
| CVE-2026-111714 | LOW | 3.1 | 0.2% | Oct 16, 2026 | tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to bl... |
| CVE-2026-111713 | MEDIUM | 5.4 | 0.2% | Oct 16, 2026 | tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr resolves 'data-' prefix... |
| CVE-2026-111712 | MEDIUM | 6.5 | — | Oct 16, 2026 | Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated attackers... |
| CVE-2026-111711 | CRITICAL | 9.8 | — | Oct 16, 2026 | Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's us... |
| CVE-2026-111710 | HIGH | 7.5 | 0.3% | Oct 16, 2026 | Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user_auth()... |
| CVE-2026-111709 | MEDIUM | 5.4 | 0.2% | Oct 16, 2026 | WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows authen... |
| CVE-2026-111708 | CRITICAL | 9.8 | — | Oct 16, 2026 | WhaTicket Community through commit cf04795 contains an authentication bypass vulnerability that allows unauthenticated a... |
| CVE-2026-111707 | MEDIUM | 5.3 | — | Oct 16, 2026 | 99AI through 4.3.0 contains an insecure direct object reference vulnerability that allows unauthenticated attackers to r... |
| CVE-2026-111706 | HIGH | 7.5 | — | Oct 16, 2026 | 99AI through 4.3.0 contains a missing authentication vulnerability in the POST /api/chatLog/exportExcel route that allow... |
| CVE-2026-111705 | MEDIUM | 4.3 | 0.2% | Oct 16, 2026 | Fuint through commit 57ec018 contains an insecure direct object reference vulnerability that allows authenticated member... |
| CVE-2026-111704 | CRITICAL | 9.8 | 0.5% | Oct 16, 2026 | LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attac... |
| CVE-2026-111703 | MEDIUM | 6.3 | — | Oct 16, 2026 | yshop-crm through 2.1.3 contains an insecure direct object reference vulnerability that allows authenticated sales users... |
| CVE-2026-111702 | HIGH | 7.5 | — | Oct 16, 2026 | ChatOllama through commit 96c3ce5 contains an insecure direct object reference vulnerability that allows remote attacker... |
| CVE-2026-111701 | HIGH | 7 | — | Oct 16, 2026 | OtterMind Nubase through 0.1.4 contains a missing authentication vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-111700 | HIGH | 7.1 | 0.2% | Oct 16, 2026 | WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL thro... |