CVE Vulnerability Database
Search and browse 424,847 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108760 | HIGH | 7.6 | 0.2% | Oct 11, 2026 | LlamaFarm through 0.0.34 contains an insecure default configuration that binds its unauthenticated FastAPI server to 0.0... |
| CVE-2026-108759 | MEDIUM | 6.8 | 0.3% | Oct 11, 2026 | mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shel... |
| CVE-2026-108758 | HIGH | 8.2 | 0.3% | Oct 11, 2026 | Easy!Appointments through 1.6.0 contains an authorization bypass vulnerability in Booking::register() that allows unauth... |
| CVE-2026-108757 | MEDIUM | 6.5 | 0.2% | Oct 11, 2026 | Nexting pinclaw OpenClaw channel plugin through 0.3.0 contains a missing authentication vulnerability in src/core/http-r... |
| CVE-2026-108756 | MEDIUM | 5.4 | 0.2% | Oct 11, 2026 | Abilityai Trinity through 0.9.5 contains a missing authorization vulnerability in the Telegram router that allows agent-... |
| CVE-2026-108755 | MEDIUM | 5.3 | 0.3% | Oct 11, 2026 | Hatchet through 0.110.5 contains an allocation of resources without limits vulnerability that allows unauthenticated att... |
| CVE-2026-108754 | LOW | 3.3 | 0.1% | Oct 11, 2026 | GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the Gin Logger... |
| CVE-2026-108753 | CRITICAL | 9.4 | 0.3% | Oct 11, 2026 | Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which s... |
| CVE-2026-108752 | MEDIUM | 4.2 | 0.2% | Oct 11, 2026 | JupyterHub through 6.0.1 contains an identifier collision vulnerability that allows authenticated users to overwrite ano... |
| CVE-2026-108751 | MEDIUM | 4.4 | 0.1% | Oct 11, 2026 | MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows... |
| CVE-2026-108750 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | OpenDocMan 2.4.0 through 2.10.0 contains a decompression bomb vulnerability that allows authenticated users to exhaust P... |
| CVE-2026-108749 | — | — | — | Oct 11, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-108748 | MEDIUM | 5.3 | 0.3% | Oct 11, 2026 | Quarkus LangChain4j 1.9.0 through 1.14.1 contains a missing release of memory vulnerability in the chat-scopes WebSocket... |
| CVE-2026-108747 | MEDIUM | 4.2 | 0.2% | Oct 11, 2026 | Lightdash through 2.556.0 contains an authorization bypass vulnerability that allows authenticated organization members ... |
| CVE-2026-108746 | HIGH | 8.8 | 0.3% | Oct 11, 2026 | Vearch 3.5.2 through 3.5.9 contains an incorrect authorization vulnerability in Role.HasPermissionForResources that igno... |
| CVE-2026-108745 | LOW | 3.1 | 0.2% | Oct 11, 2026 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in WebSQLResultServlet that allows any web ses... |
| CVE-2026-108744 | HIGH | 7 | 0.5% | Oct 11, 2026 | pbi-cli 3.10.1 through 3.12.0 contains an OS command injection vulnerability in desktop_sync.py that passes unquoted .pb... |
| CVE-2026-108742 | MEDIUM | 4.3 | 0.2% | Oct 11, 2026 | CloudBeaver through 25.3.5 contains a missing authorization vulnerability in the initConnection GraphQL mutation that le... |
| CVE-2026-108741 | LOW | 3.1 | 0.2% | Oct 11, 2026 | Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra b... |
| CVE-2026-108740 | HIGH | 8.3 | 0.3% | Oct 11, 2026 | GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave handler that... |
| CVE-2026-108739 | HIGH | 7.5 | 0.3% | Oct 11, 2026 | OpenAgents Workspace backend through launcher-v1.0.17 contains an information disclosure vulnerability that allows unaut... |
| CVE-2026-108738 | MEDIUM | 4.2 | 0.1% | Oct 11, 2026 | Traccar 5.7 through 6.16.0 contains a cross-site request forgery vulnerability that allows attackers to log victims into... |
| CVE-2026-108737 | MEDIUM | 6.8 | 0.3% | Oct 11, 2026 | Traccar through 6.16.0 contains a weak password recovery vulnerability that allows attackers to reuse password reset tok... |
| CVE-2026-108736 | LOW | 3.7 | 0.2% | Oct 11, 2026 | Speedtest Tracker through 1.15.0 contains an IP allowlist bypass vulnerability that allows unauthenticated remote attack... |
| CVE-2026-108735 | MEDIUM | 4.3 | 0.3% | Oct 11, 2026 | Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to rea... |