Publikacje w kolejności czasu
Wszystkie technologie
| Oprogramowanie | Podatność i krótki opis | Zapisz | |||
|---|---|---|---|---|---|
| Splunk SOAR | CVE-2026-76527 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76528 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk SOAR | CVE-2026-76529 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,39 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise | CVE-2026-76301 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,8 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise | CVE-2026-76302 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,9 | 0,4 % | Brak wpisu w KEV nie wyklucza ataków | |
| Splunk Enterprise | CVE-2026-76299 As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The vulnerabilities tracked by… |
9,9 | 0,33 % | Brak wpisu w KEV nie wyklucza ataków | |
| Oracle Java SE / Oracle GraalVM for JDK / Oracle GraalVM Enterprise Edition | CVE-2026-91403 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and… |
9,1 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| Rex | CVE-2026-94140 Rex versions through 1.16.1 for Perl accept an unknown SSH host key for remote rsync transfers because sync hardcodes StrictHostKeyChecking=no. Every remote branch of sync builds its ssh command with that option, for password authentication, for private-key authentication and for the fallback.… |
9,1 | 0,43 % | Brak wpisu w KEV nie wyklucza ataków | |
| Net-LibSSH | CVE-2026-94423 Net::LibSSH versions before 0.004 for Perl authenticate to an unverified server because connect never checks the host key against known_hosts. connect reports success as soon as ssh_connect returns SSH_OK. libssh leaves the known-hosts check to the application, and this binding never makes it, so… |
9,1 | 0,44 % | Brak wpisu w KEV nie wyklucza ataków | |
| EX200 | CVE-2026-114383 A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The… |
9,3 | 0,65 % | Brak wpisu w KEV nie wyklucza ataków | |
| framework | CVE-2026-114509 Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can match an unintended existing user, allowing… |
9,2 | 1,84 % | Brak wpisu w KEV nie wyklucza ataków | |
| EX200 | CVE-2026-114382 A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi of the component lan.so. The manipulation of the argument Comment results in stack-based buffer overflow. It is possible to launch the attack remotely.… |
9,3 | 0,67 % | Brak wpisu w KEV nie wyklucza ataków | |
| Pillow | CVE-2026-96639 Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created for a narrow frame mode while a later frame of the same dimensions changes the logical mode and decoder tiles to wider RGB or CMYK data. ImageFile.load_prepare() reuses… |
9,8 | 0,66 % | Brak wpisu w KEV nie wyklucza ataków | |
| sentry-javascript | CVE-2026-114139 Sentry-Javascript is an official Sentry SDKs for JavaScript. From 9.36.0 until 9.47.2, 10.75.2, and 11.0.0-rc.1, the webpack integration for @sentry/nextjs skips application middleware for every request path under a configured tunnelRoute, while the tunnel rewrite serves only the exact tunnel path… |
9,1 | 0,51 % | Brak wpisu w KEV nie wyklucza ataków | |
| Amazon SageMaker Python SDK | CVE-2026-112408 Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow remote actors to achieve code execution in the target SageMaker execution environment and obtain IAM credentials via… |
9,4 | 0,74 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Traffic Server | CVE-2026-111811 Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4, 10.2.0. Users are recommended… |
9,4 | 0,36 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Traffic Server | CVE-2026-111813 Apache Traffic Server's experimental magick plugin lets an unauthenticated client control ImageMagick convert arguments in its default (unsigned) configuration. This issue affects Apache Traffic Server: from 8.0.1 through 8.1.11, from 9.0.0 through 9.2.15, from 10.0.0 through 10.1.4,… |
10,0 | 0,49 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Traffic Server | CVE-2026-111816 Apache Traffic Server forwarded a malformed 302 response that should have been rejected as a parse error, because the Transfer-Encoding: chunked carve-out bypassed the rejection path. A response that two peers can read differently is then stored and served, allowing cache poisoning and… |
9,2 | 0,31 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Pulsar Manager | CVE-2026-105944 Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and it can be configured with an HTTP authentication credential, such as a token, that it uses to call the Pulsar admin API on behalf of its users. Pulsar Manager has the… |
10,0 | 0,7 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Traffic Server | CVE-2025-31699 Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully sent, including when the client used Expect: 100-continue. The origin then reads a later request on that connection as leftover body… |
9,1 | 0,35 % | Brak wpisu w KEV nie wyklucza ataków | |
| RouterOS | CVE-2026-89035 MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured session tokens across new ECDH sessions. The makeSessionKey function in libucrypto.so generates tokens using fixed salts… |
9,1 | 0,27 % | Brak wpisu w KEV nie wyklucza ataków | |
| LocalAI | CVE-2026-114493 LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers can submit a config URL through POST /models/apply that redirects to internal or cloud metadata addresses, receiving those… |
9,2 | 0,38 % | Brak wpisu w KEV nie wyklucza ataków | |
| GStreamer | CVE-2026-111183 GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary… |
9,8 | 0,7 % | Brak wpisu w KEV nie wyklucza ataków | |
| Apache Pulsar | CVE-2026-105869 Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON Web Token (JWT). The provider is intended for use with token authentication, which verifies the token before authorization. The provider did not verify the token itself: it parsed… |
9,2 | 0,3 % | Brak wpisu w KEV nie wyklucza ataków | |
| Cisco Emergency Responder / Cisco Unified Communications Manager / Cisco Unified Communications Manager IM and Presence Service (+1 produktów) | CVE-2026-76474 As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM & Presence Service (Unified CM… |
9,8 | 0,48 % | Brak wpisu w KEV nie wyklucza ataków |
Źródła i pokrycie danych
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.
Ostatnio zakończone okno publikacji NVD: 15.11.2026, 03:02 UTC – 15.11.2026, 08:02 UTC. To pojedyncze okno importu, nie granica pokrycia katalogu.