CVE Vulnerability Database
Search and browse 424,660 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-109570 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaire... |
| CVE-2026-109569 | HIGH | 8.8 | 0.1% | Oct 12, 2026 | sandboxed.sh through 1.3.0 contains a container escape vulnerability that allows code in container workspaces to access ... |
| CVE-2026-109568 | HIGH | 7.1 | 0.2% | Oct 12, 2026 | Shaark 1.2.13 through 1.2.44 contains a missing authorization vulnerability in the Link, Story, Chest and Album API cont... |
| CVE-2026-109567 | HIGH | 7.2 | 0.3% | Oct 12, 2026 | Rapyd Admin from 9.0.0 before 9.20.0 contains an improper privilege management vulnerability in the UsersEdit Livewire c... |
| CVE-2026-109566 | CRITICAL | 9.8 | 0.4% | Oct 12, 2026 | Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that allows remote unauthenticated ... |
| CVE-2026-109565 | MEDIUM | 6.1 | 0.2% | Oct 12, 2026 | Rapyd Admin from 9.4.0 before 9.20.0 contains a stored cross-site scripting vulnerability that allows unauthenticated at... |
| CVE-2026-109564 | LOW | 3.1 | 0.2% | Oct 12, 2026 | LearnHouse before 1.4.0 contains a missing authorization vulnerability in POST /api/v1/playgrounds/{uuid}/duplicate that... |
| CVE-2026-109563 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | N3.js before 2.11.1 contains a regular expression denial of service vulnerability in the N3Lexer number pattern that bac... |
| CVE-2026-109562 | MEDIUM | 5.4 | 0.2% | Oct 12, 2026 | SnapOtter 1.15.10 through 2.2.0 contains a missing authorization vulnerability that allows any authenticated principal t... |
| CVE-2026-109561 | MEDIUM | 4.2 | 0.2% | Oct 12, 2026 | goose from 1.28.0 before 1.44.0 contains an authorization bypass vulnerability that allows tools to run without user app... |
| CVE-2026-109560 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | Continue CLI (@continuedev/cli) through 1.5.47 contains a permission bypass vulnerability that allows attackers to run u... |
| CVE-2026-109559 | HIGH | 8.7 | 0.3% | Oct 12, 2026 | EdgeEver Desktop 1.6.26 through 1.112.0 contains a navigation allowlist bypass that lets attackers load arbitrary origin... |
| CVE-2026-109558 | HIGH | 8.7 | 0.3% | Oct 12, 2026 | EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders te... |
| CVE-2026-109557 | HIGH | 8.7 | 0.3% | Oct 12, 2026 | EdgeEver through 1.112.0 contains a stored cross-site scripting vulnerability in setMemoDragPreview that allows attacker... |
| CVE-2026-109556 | HIGH | 8 | 0.5% | Oct 12, 2026 | EdgeEver Desktop 1.92.0 through 1.112.0 contains a remote code execution vulnerability in the desktop:acp-probe IPC hand... |
| CVE-2026-109427 | MEDIUM | 6.5 | 0.2% | Oct 12, 2026 | Telegram-Stremio through 5.1.0 contains a broken object-level authorization vulnerability that allows authenticated toke... |
| CVE-2026-109426 | HIGH | 7.5 | 0.1% | Oct 12, 2026 | Telegram-Stremio through 5.1.0 contains an insecure storage vulnerability that allows attackers with access to the Mongo... |
| CVE-2026-109380 | HIGH | 7.5 | 0.4% | Oct 12, 2026 | modern-tar 0.3.5 through 0.8.5 contains a memory exhaustion vulnerability that allows attackers to produce negative entr... |
| CVE-2026-109379 | MEDIUM | 5.3 | 0.3% | Oct 12, 2026 | Cockpit CMS 2.14.1 contains an observable timing discrepancy vulnerability that allows unauthenticated attackers to enum... |
| CVE-2026-109378 | MEDIUM | 4.3 | 0.2% | Oct 12, 2026 | SPIP before 4.4.18 contains a server-side request forgery vulnerability in recuperer_url() in ecrire/inc/distant.php tha... |
| CVE-2026-109377 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | ERPNext 9.0.0 through 16.50.0 contains a missing authorization vulnerability that allows authenticated users to view sto... |
| CVE-2026-109376 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | ERPNext 15.55.0 through 16.50.0 contains an incorrect authorization vulnerability in the get_timesheet_html method that ... |
| CVE-2026-109375 | MEDIUM | 6.1 | 0.3% | Oct 12, 2026 | Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows san... |
| CVE-2026-108931 | MEDIUM | 4.3 | 0.3% | Oct 12, 2026 | A vulnerability was found in Netcore NR268 1.7.121109. This affects the function eval of the file dhcp_dynamicip_show.cg... |
| CVE-2026-108930 | LOW | 2.7 | 0.3% | Oct 12, 2026 | A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of t... |