CVE Vulnerability Database
Search and browse 423,865 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-105034 | HIGH | 8.2 | 0.6% | Oct 15, 2026 | The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without authentication... |
| CVE-2026-105033 | HIGH | 8.8 | 0.4% | Oct 15, 2026 | The EnergizeLab AI Station (RK3562) firmware image ships with default root credentials and SSH enabled. An attacker with... |
| CVE-2026-105032 | CRITICAL | 9.1 | 0.9% | Oct 15, 2026 | The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, do... |
| CVE-2026-102764 | CRITICAL | 9.8 | 0.6% | Oct 15, 2026 | The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adeq... |
| CVE-2026-106708 | HIGH | 8.8 | 0.3% | Oct 15, 2026 | XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management con... |
| CVE-2026-106700 | HIGH | 8.8 | 0.3% | Oct 15, 2026 | ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/user... |
| CVE-2026-104198 | MEDIUM | 5.3 | — | Oct 15, 2026 | ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, th... |
| CVE-2026-103910 | — | — | — | Oct 15, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-101335. Reason: This candidate is a... |
| CVE-2026-97370 | HIGH | 7.5 | 0.4% | Oct 15, 2026 | Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/github/junrar/... |
| CVE-2026-96449 | MEDIUM | 5.3 | 0.2% | Oct 15, 2026 | Missing Authorization vulnerability in WPExperts WP EasyPay wp-easy-pay allows Exploiting Incorrectly Configured Access ... |
| CVE-2026-94621 | MEDIUM | 6.3 | 0.2% | Oct 15, 2026 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.30.3, the AliasVault server API ... |
| CVE-2026-92707 | MEDIUM | 5.3 | 0.6% | Oct 15, 2026 | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled Mes... |
| CVE-2026-87029 | HIGH | 7.5 | 0.3% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress... |
| CVE-2026-87018 | HIGH | 7.5 | 0.2% | Oct 15, 2026 | undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through ... |
| CVE-2026-63430 | MEDIUM | 6.3 | 0.6% | Oct 15, 2026 | ammonia is a Rust library for repairing and securing untrusted HTML. Prior to 3.3.2, 4.0.2, and 4.1.3, applications that... |
| CVE-2026-62322 | MEDIUM | 6.5 | 0.2% | Oct 15, 2026 | Python Social Auth is a social authentication/registration mechanism. Prior to 5.0.2, the LINE backend exchanges an auth... |
| CVE-2026-57496 | CRITICAL | 9.6 | 0.4% | Oct 15, 2026 | NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensi... |
| CVE-2026-57183 | MEDIUM | 6.1 | 0.2% | Oct 15, 2026 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth() in src/main/java/com/erudika... |
| CVE-2026-55872 | HIGH | 8.7 | 0.2% | Oct 15, 2026 | GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1,... |
| CVE-2026-55871 | MEDIUM | 6.5 | 0.3% | Oct 15, 2026 | GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs. Prior to 1.4.1,... |
| CVE-2026-55842 | MEDIUM | 5.4 | 0.1% | Oct 15, 2026 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the apiCorsConfiguration() method in src/ma... |
| CVE-2026-55840 | MEDIUM | 5.4 | — | Oct 15, 2026 | Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/... |
| CVE-2026-55587 | HIGH | 8.1 | 0.1% | Oct 15, 2026 | AliasVault is a privacy-first password manager with built-in email aliasing. Prior to 0.29.4, the AliasVault browser ext... |
| CVE-2026-55240 | CRITICAL | 9.1 | 0.6% | Oct 15, 2026 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, formatString() in s... |
| CVE-2026-55239 | HIGH | 8.8 | 0.3% | Oct 15, 2026 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() ... |