CVE Vulnerability Database
Search and browse 423,806 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-111674 | MEDIUM | 4.3 | 0.2% | Oct 16, 2026 | Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other ... |
| CVE-2026-111673 | CRITICAL | 9.8 | — | Oct 16, 2026 | IceCMS through 4.1.5 contains a missing authentication vulnerability that allows unauthenticated attackers to modify, de... |
| CVE-2026-111672 | MEDIUM | 4.3 | — | Oct 16, 2026 | Cube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allow... |
| CVE-2026-111671 | HIGH | 7.1 | — | Oct 16, 2026 | Cube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated user... |
| CVE-2026-111670 | MEDIUM | 4.3 | 0.3% | Oct 16, 2026 | ClickVisual through 1.1.2 contains a missing authorization vulnerability in the /api/v2/reports handlers that allows aut... |
| CVE-2026-111669 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | ZR.Admin.NET through 3.8.2 contains an sql injection vulnerability that allows authenticated attackers to manipulate the... |
| CVE-2026-111668 | MEDIUM | 5.4 | 0.2% | Oct 16, 2026 | AIHelms through 0.1.25 contains a missing authorization vulnerability in apps/api/v1/efficiency.py that allows authentic... |
| CVE-2026-111667 | MEDIUM | 4.3 | — | Oct 16, 2026 | REBUILD through 4.5.0 contains a missing authorization vulnerability in TaskCommentController.commentList that allows au... |
| CVE-2026-111666 | MEDIUM | 4.3 | — | Oct 16, 2026 | Steedos Platform through 3.0.15-beta.51 contains an authorization bypass vulnerability that allows authenticated users t... |
| CVE-2026-111665 | MEDIUM | 5.4 | 0.3% | Oct 16, 2026 | Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController tha... |
| CVE-2026-111664 | MEDIUM | 4.4 | 0.1% | Oct 16, 2026 | Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes t... |
| CVE-2026-111663 | HIGH | 8.6 | 0.3% | Oct 16, 2026 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetc... |
| CVE-2026-111662 | MEDIUM | 5.8 | — | Oct 16, 2026 | Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make... |
| CVE-2026-111661 | MEDIUM | 5.3 | — | Oct 16, 2026 | waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to sen... |
| CVE-2026-111660 | MEDIUM | 6.5 | 0.4% | Oct 16, 2026 | waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to can... |
| CVE-2026-111659 | MEDIUM | 6.5 | 0.3% | Oct 16, 2026 | Waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to for... |
| CVE-2026-111658 | LOW | 3.8 | 0.3% | Oct 16, 2026 | SiteServer SSCMS through 7.4.0 contains an authorization bypass vulnerability in ChannelsController that allows site-sco... |
| CVE-2026-111657 | MEDIUM | 4.3 | — | Oct 16, 2026 | BeikeShop through 2.0.0.31 contains an insecure direct object reference vulnerability in the markAsShipped handler of Rm... |
| CVE-2026-111656 | MEDIUM | 5.4 | — | Oct 16, 2026 | ChatWiki through 2.9.6 contains an insecure direct object reference vulnerability that allows authenticated users to acc... |
| CVE-2026-111655 | LOW | 3.8 | 0.2% | Oct 16, 2026 | ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows non-s... |
| CVE-2026-111654 | MEDIUM | 6.3 | 0.3% | Oct 16, 2026 | FastBee through 2.1.0 contains an insecure direct object reference vulnerability that allows authenticated low-privilege... |
| CVE-2026-111653 | MEDIUM | 5.3 | 0.4% | Oct 16, 2026 | 53AIHub through 0.5.3 contains a missing authentication vulnerability that allows unauthenticated attackers to overwrite... |
| CVE-2026-111652 | MEDIUM | 5.3 | — | Oct 16, 2026 | Engineercms through 2.0.5 contains a missing authorization vulnerability in AttachController.Attachment that allows unau... |
| CVE-2026-111651 | MEDIUM | 6.5 | — | Oct 16, 2026 | Risesoft Digital-Infrastructure through 9.6.11 contains a missing authorization vulnerability in the log module Download... |
| CVE-2026-111650 | HIGH | 8.6 | 0.3% | Oct 16, 2026 | ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that allows... |