CVE Vulnerability Database
Search and browse 425,022 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-101152 | HIGH | 8 | — | Oct 6, 2026 | Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a... |
| CVE-2026-101151 | MEDIUM | 4.3 | — | Oct 6, 2026 | Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, whe... |
| CVE-2026-101150 | MEDIUM | 4.1 | — | Oct 6, 2026 | Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct re... |
| CVE-2026-101149 | MEDIUM | 4.1 | — | Oct 6, 2026 | Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct re... |
| CVE-2026-101029 | MEDIUM | 4.3 | 0.2% | Oct 6, 2026 | Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS a... |
| CVE-2026-101027 | HIGH | 7.7 | 0.2% | Oct 6, 2026 | When `[migrations] ALLOWED_DOMAINS` was configured, a hostname matching the allow list was accepted without checking its... |
| CVE-2026-9226 | MEDIUM | 6.8 | 0.2% | Oct 6, 2026 | Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote a... |
| CVE-2026-96890 | HIGH | 8.8 | 0.4% | Oct 6, 2026 | A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository ... |
| CVE-2026-86362 | HIGH | 8.2 | 0.1% | Oct 6, 2026 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attac... |
| CVE-2026-86361 | HIGH | 8.2 | 0.1% | Oct 6, 2026 | Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnera... |
| CVE-2026-86360 | CRITICAL | 9.6 | 0.6% | Oct 6, 2026 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (... |
| CVE-2026-83550 | HIGH | 7.1 | 0.2% | Oct 6, 2026 | A flaw was found in postgres-exporter. Due to the blank import of `net/http/pprof`, debug endpoints are exposed on the u... |
| CVE-2026-82162 | CRITICAL | 9.8 | 0.3% | Oct 6, 2026 | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability... |
| CVE-2026-71168 | HIGH | 7.8 | 0.2% | Oct 6, 2026 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory (... |
| CVE-2026-70414 | MEDIUM | 5.5 | 0.1% | Oct 6, 2026 | Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low... |
| CVE-2026-63697 | HIGH | 7.2 | 0.3% | Oct 6, 2026 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Certificate Validation vulnerability. A high privile... |
| CVE-2026-56952 | MEDIUM | 6.7 | — | Oct 6, 2026 | In platform_msg_handler_init of default_msg_handlers.c, there is a possible permission bypass due to a missing permissio... |
| CVE-2026-56936 | MEDIUM | 6.8 | — | Oct 6, 2026 | In wacom_hid_set_device_mode of wacom_sys.c, there is a possible out-of-bounds write due to a missing bounds check. This... |
| CVE-2026-56906 | HIGH | 7 | — | Oct 6, 2026 | In ep_free of eventpoll.c, there is a possible use-after-free due to a race condition. This could lead to local escalati... |
| CVE-2026-55330 | CRITICAL | 9.8 | — | Oct 6, 2026 | In BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to a logic error in the c... |
| CVE-2026-55307 | MEDIUM | 4.4 | — | Oct 6, 2026 | In kdn_set_sysregs_prot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. ... |
| CVE-2026-106513 | MEDIUM | 6.9 | 0.6% | Oct 6, 2026 | MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core application, the Ze... |
| CVE-2026-106512 | HIGH | 8.4 | 0.3% | Oct 6, 2026 | The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Disposition header by dire... |
| CVE-2026-106511 | CRITICAL | 9.8 | 0.1% | Oct 6, 2026 | MultiversX's multisig-improved (repository: mx-multisig-and-modules) reference implementation of their on-chain multisig... |
| CVE-2026-106443 | HIGH | 8.8 | — | Oct 6, 2026 | WeasyPrint helps web developers to create PDF documents. Prior to 70.0, the image-loading path in weasyprint/images.py p... |