CVE Vulnerability Database
Search and browse 424,993 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-108266 | CRITICAL | 9.1 | 0.1% | Oct 9, 2026 | Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. P... |
| CVE-2026-108265 | CRITICAL | 9.1 | 0.1% | Oct 9, 2026 | Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, ... |
| CVE-2026-108264 | CRITICAL | 9.1 | 0.4% | Oct 9, 2026 | Wizarr is an advanced user invitation and management system for Jellyfin, Plex, Emby, and other media servers. Prior to ... |
| CVE-2026-108263 | CRITICAL | 9.9 | 0.4% | Oct 9, 2026 | Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow co... |
| CVE-2026-108261 | CRITICAL | 9.3 | 0.2% | Oct 9, 2026 | Tina is a headless content management system. Prior to tinacms 3.14.0 and @tinacms/app 2.5.14, the /~/* admin preview ro... |
| CVE-2026-108260 | HIGH | 7.6 | 0.2% | Oct 9, 2026 | Tina is a headless content management system. Prior to 0.2.1, the tina-markdown element in packages/@tinacms/web-compone... |
| CVE-2026-108259 | HIGH | 8.2 | 0.3% | Oct 9, 2026 | Tina is a headless content management system. Prior to 3.0.0, @tinacms/cli reads Git branch values from VERCEL_GIT_COMMI... |
| CVE-2026-108258 | MEDIUM | 6.9 | 0.4% | Oct 9, 2026 | Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark re... |
| CVE-2026-107857 | MEDIUM | 4.4 | 0.1% | Oct 9, 2026 | Mindwtr is a free offline-first task management application for desktop and mobile. Prior to 1.1.5, the mobile applicati... |
| CVE-2026-107856 | MEDIUM | 4.5 | 0.2% | Oct 9, 2026 | CiviForm simplifies applications for government benefits programs by reusing applicant data across multiple benefit appl... |
| CVE-2026-107854 | MEDIUM | 5.4 | 0.2% | Oct 9, 2026 | Jexactyl is a customisable game management panel and billing system. From 4.0.0 until 4.0.5, the POST /api/client/billin... |
| CVE-2026-107852 | HIGH | 7.1 | 0.2% | Oct 9, 2026 | Jexactyl is a customisable game management panel and billing system. Prior to 4.0.5, the POST /api/client/billing/stripe... |
| CVE-2026-107851 | MEDIUM | 4.3 | 0.2% | Oct 9, 2026 | Contao is an Open Source CMS. From version 5.7.0 until 5.7.12, TableAccessVoter::hasAccessToModule() in core-bundle/src/... |
| CVE-2026-107850 | MEDIUM | 4.3 | 0.2% | Oct 9, 2026 | Contao is an Open Source CMS. From version 5.7.1 until 5.7.12, core-bundle/config/services.yaml registers the preview ac... |
| CVE-2026-107848 | LOW | 3.5 | 0.1% | Oct 9, 2026 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, RequestTokenListener validates REQUEST_TOKEN o... |
| CVE-2026-78797 | CRITICAL | 9.8 | 0.6% | Oct 9, 2026 | An issue in iStoreOS istoreos-24.10.7 and before allows a remote attacker to execute arbitrary code via the task_id in t... |
| CVE-2026-107845 | CRITICAL | 9.3 | 0.3% | Oct 9, 2026 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, an unauthenticated visitor can submit a commen... |
| CVE-2026-107844 | MEDIUM | 5.3 | 0.3% | Oct 9, 2026 | Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {pa... |
| CVE-2026-107843 | MEDIUM | 5.3 | 0.3% | Oct 9, 2026 | Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile() enters its follo... |
| CVE-2026-107842 | MEDIUM | 5.3 | 0.3% | Oct 9, 2026 | Contao is an Open Source CMS. From version 4.0.0 until 5.3.50 and 5.7.12, ModuleSearch can disclose protected page title... |
| CVE-2026-104758 | — | — | — | Oct 9, 2026 | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-73364. Reason: This candidate is a ... |
| CVE-2025-8457 | — | — | — | Oct 9, 2026 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| CVE-2026-78835 | CRITICAL | 9.8 | 0.3% | Oct 9, 2026 | Rocket Software Rocket Remote Desktop 18.0.8583.1 is vulnerable to Insufficiently Protected Credentials. |
| CVE-2026-75353 | HIGH | 7.5 | 0.1% | Oct 9, 2026 | OpENer v2.3/ commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path p... |
| CVE-2026-75352 | HIGH | 7.5 | 0.3% | Oct 9, 2026 | OpENer v2.3/commit 76b95cf, contains an integer underflow in the server-side EtherNet/IP ForwardOpen connection-path par... |