|
cve-2026-67279
|
CVE-2026-67279 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2026-67277
|
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability |
HIGH
|
8.8
|
N/A
|
cvelistv5 |
2026-09-10 |
|
cve-2026-67276
|
MikroTik RouterOS Improper Verification of Cryptographic Signature |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-05 |
|
cve-2025-60698
|
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi... |
HIGH
|
7.3
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2026-58457
|
Improper Neutralization of Special Elements used in an OS Command |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-09-04 |
|
cve-2024-11080
|
pickplugins comboblocks Improper Control of Generation of Code |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-04 |
|
cve-2026-85046
|
SUSE CVE CVE-2026-85046 |
UNKNOWN
|
N/A
|
N/A
|
cvelistv5 |
2026-09-12 |
|
cve-2026-84755
|
Missing Authorization |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-71362
|
Adobe Commerce and Magento Incorrect Authorization Vulnerability |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-09-24 |
|
cve-2026-63219
|
OSGeo geonetwork Missing Authorization |
HIGH
|
8.6
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-58400
|
OSGeo geonetwork Improper Control of Generation of Code |
CRITICAL
|
9.1
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-19490
|
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-09-09 |
|
cve-2024-4956
|
Sonatype nexus_repository_manager Improper Limitation of a Pathname to a Restricted Directory |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-03 |
|
cve-2026-84813
|
ayecode geodirectory Improper Neutralization of Special Elements used in an SQL Command |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-9586
|
Sangoma Switchvox SQL Injection Vulnerability |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-9055
|
Improper Privilege Management |
CRITICAL
|
9.8
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-83549
|
SonicWall SMA1000 Appliances OS Command Injection Vulnerability |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-02 |
|
cve-2026-83548
|
CVE-2026-83548 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2026-82329
|
CVE-2026-82329 |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
|
|
cve-2026-78141
|
Tenda ch22_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component |
LOW
|
2.1
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-5153
|
Tenda ch22_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-41948
|
Dify version 1.14.1 and prior contain a path traversal vulnerability that allows authenticated users to manipulate re... |
CRITICAL
|
9.3
|
N/A
|
cvelistv5 |
2026-10-14 |
|
cve-2026-1547
|
TOTOLINK a7000r_firmware Improper Neutralization of Special Elements in Output Used by a Downstream Component |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2025-60702
|
A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `... |
MEDIUM
|
6.5
|
N/A
|
cvelistv5 |
2026-11-05 |
|
cve-2025-40553
|
SolarWinds web_help_desk Deserialization of Untrusted Data |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2024-0250
|
deconf analytics_insights URL Redirection to Untrusted Site |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2023-54391
|
proxmox virtual_environment Missing Critical Step in Authentication |
CRITICAL
|
N/A
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2023-39470
|
PaperCut papercut_ng Exposed Dangerous Method or Function |
HIGH
|
N/A
|
N/A
|
cvelistv5 |
2026-09-01 |
|
cve-2026-82970
|
Unrestricted Upload of File with Dangerous Type |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-08-31 |
|
cve-2026-82222
|
GiveWP GiveWP Deserialization of Untrusted Data |
CRITICAL
|
10.0
|
N/A
|
cvelistv5 |
2026-08-31 |
ndaal KEV