CVE Vulnerability Database
Search and browse 423,915 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-73261 | HIGH | 7.5 | 0.3% | Oct 14, 2026 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MG_ENABLE_TC... |
| CVE-2026-73260 | HIGH | 7.5 | 0.2% | Oct 14, 2026 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS certificate parser selected by M... |
| CVE-2026-73252 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MG_TLS_BUILTIN... |
| CVE-2026-63626 | HIGH | 8.8 | 0.2% | Oct 14, 2026 | Mongoose is an embedded web server and network library. Prior to 7.23, ppp_handle_ipv6cp() in src/l2_ppp.c trusts the 16... |
| CVE-2026-55787 | HIGH | 7.1 | 0.2% | Oct 14, 2026 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.3, validate_url_ssrf and is_priv... |
| CVE-2026-55786 | HIGH | 8.4 | 0.3% | Oct 14, 2026 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. From 2.26.2 until 2.26.4, the HTTP MCP POST /m... |
| CVE-2026-55167 | MEDIUM | 4.2 | 0.2% | Oct 14, 2026 | LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP d... |
| CVE-2026-54525 | HIGH | 8.8 | 0.4% | Oct 14, 2026 | Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.28, Markdown Preview Enha... |
| CVE-2026-53999 | HIGH | 7.7 | 0.3% | Oct 14, 2026 | Radius is a cloud-native, portable application platform that makes app development easier for teams building cloud-nativ... |
| CVE-2026-110775 | MEDIUM | 6.5 | 0.2% | Oct 14, 2026 | Nexent through 2.7.0 contains a missing authorization vulnerability in check_file_access that allows authenticated users... |
| CVE-2026-110774 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | Blinko through 1.8.8 contains a broken access control vulnerability in the /api/file route that allows authenticated use... |
| CVE-2026-110773 | MEDIUM | 4.3 | 0.2% | Oct 14, 2026 | GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authen... |
| CVE-2026-110772 | MEDIUM | 4.3 | 0.3% | Oct 14, 2026 | Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#c... |
| CVE-2026-110771 | MEDIUM | 4.3 | 0.2% | Oct 14, 2026 | Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post review... |
| CVE-2026-110770 | HIGH | 8.1 | 0.5% | Oct 14, 2026 | Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to ... |
| CVE-2026-110769 | HIGH | 8.6 | 0.3% | Oct 14, 2026 | holaOS through 2026.822.1 contains a missing authorization vulnerability in channel-gateway connectors that allows any m... |
| CVE-2026-110768 | MEDIUM | 4.8 | 0.2% | Oct 14, 2026 | holaOS through 2026.822.1 contains an authorization bypass vulnerability in the channel-gateway Telegram connector that ... |
| CVE-2026-110767 | HIGH | 7.5 | 0.4% | Oct 14, 2026 | Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allow... |
| CVE-2026-110766 | MEDIUM | 4.3 | 0.3% | Oct 14, 2026 | Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary ... |
| CVE-2026-110765 | MEDIUM | 5.9 | 0.2% | Oct 14, 2026 | FlexPrice through 2.1.38 contains an authentication bypass vulnerability in HandleQuickBooksWebhook that skips signature... |
| CVE-2026-110764 | MEDIUM | 5.3 | 0.2% | Oct 14, 2026 | AstronRPA through 1.1.6 contains an insecure direct object reference vulnerability in the resource-service /file/downloa... |
| CVE-2026-110763 | MEDIUM | 4.3 | 0.2% | Oct 14, 2026 | lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth mo... |
| CVE-2026-110762 | LOW | 3.7 | 0.2% | Oct 14, 2026 | bbPress before 2.6.19 contains an information disclosure vulnerability that allows unauthenticated visitors to view rest... |
| CVE-2026-110761 | HIGH | 8.8 | — | Oct 14, 2026 | ILIAS before 9.24, 10.12, and 11.5 contains a PHP object injection vulnerability that allows authenticated users with Te... |
| CVE-2026-110667 | HIGH | 7.3 | 0.3% | Oct 14, 2026 | A security flaw has been discovered in cemtan sar2html 4.0.0. Affected by this vulnerability is an unknown functionality... |