CVE Vulnerability Database
Search and browse 424,847 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108866 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows authenticated users to read any accou... |
| CVE-2026-108684 | MEDIUM | 6.3 | 0.3% | Oct 11, 2026 | A vulnerability was detected in erzhongxmu Jeewms up to 3.7. This affects the function getTreeData of the file src/main/... |
| CVE-2026-108683 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknown function... |
| CVE-2026-108682 | MEDIUM | 5.4 | 0.4% | Oct 11, 2026 | A weakness has been identified in zhayujie CowAgent up to 2.1.6. The affected element is the function read of the file /... |
| CVE-2026-108865 | HIGH | 8.2 | 0.3% | Oct 11, 2026 | AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obt... |
| CVE-2026-108864 | MEDIUM | 4.2 | 0.2% | Oct 11, 2026 | iFlytek Astron Agent through 1.1.2 contains an insecure direct object reference vulnerability that allows authenticated ... |
| CVE-2026-108863 | HIGH | 7.5 | 0.5% | Oct 11, 2026 | Katanemo Plano through 0.4.37 contains a missing authentication vulnerability that allows unauthenticated network attack... |
| CVE-2026-108862 | MEDIUM | 5.3 | 0.2% | Oct 11, 2026 | APIPark through 1.9.7-beta contains an insecure direct object reference vulnerability that allows authenticated users to... |
| CVE-2026-108861 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | Odoo MCP 1.0.0 through 1.3.2 contains an information disclosure vulnerability that allows MCP clients to bypass the fiel... |
| CVE-2026-108860 | CRITICAL | 9.1 | 0.5% | Oct 11, 2026 | BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to f... |
| CVE-2026-108859 | HIGH | 7.5 | 0.5% | Oct 11, 2026 | mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows remote una... |
| CVE-2026-108858 | MEDIUM | 5.5 | 0.1% | Oct 11, 2026 | Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-supplied a... |
| CVE-2026-108857 | LOW | 3.3 | 0.1% | Oct 11, 2026 | Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes the configu... |
| CVE-2026-108856 | MEDIUM | 4.2 | 0.2% | Oct 11, 2026 | UnicomAI Wanwu through 0.6.5 contains an authorization bypass vulnerability that allows authenticated users to mint AppK... |
| CVE-2026-108855 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | UnicomAI Wanwu through 0.6.5 contains a missing authorization vulnerability that allows any authenticated enabled user t... |
| CVE-2026-108854 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows any authenticated enabled user... |
| CVE-2026-108853 | HIGH | 8.1 | 0.3% | Oct 11, 2026 | UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-pri... |
| CVE-2026-108852 | MEDIUM | 4.7 | 0.2% | Oct 11, 2026 | Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links ... |
| CVE-2026-108851 | LOW | 3.3 | 0.1% | Oct 11, 2026 | phpMyFAQ through 4.1.10 contains a missing authorization vulnerability in the MCP server faq_search tool that allows MCP... |
| CVE-2026-108850 | MEDIUM | 5.3 | 0.2% | Oct 11, 2026 | Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated at... |
| CVE-2026-108839 | MEDIUM | 4.2 | 0.3% | Oct 11, 2026 | thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs... |
| CVE-2026-108699 | MEDIUM | 6.5 | 0.1% | Oct 11, 2026 | hyper-mcp through 0.8.3 contains an improper signature verification vulnerability that allows attackers to load maliciou... |
| CVE-2026-108698 | MEDIUM | 6.5 | 0.2% | Oct 11, 2026 | hyper-mcp through 0.8.3 contains a signature verification bypass vulnerability in load_wasm in src/wasm/oci.rs that veri... |
| CVE-2026-108697 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | CoreShop through 2026.2.2 contains a missing authorization vulnerability that allows low-privileged backend users to lis... |
| CVE-2026-108681 | MEDIUM | 4.3 | 0.5% | Oct 11, 2026 | A security flaw has been discovered in zhayujie CowAgent up to 2.1.7. Impacted is an unknown function of the file channe... |