CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-61542 | HIGH | 8.6 | Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-13451 | HIGH | 7.7 | A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceServi… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118650 | HIGH | 7.5 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-109411 | HIGH | 8.1 | An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() functio… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2025-14260 | HIGH | 8.3 | Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied i… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118688 | HIGH | 7.9 | wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends … |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118686 | HIGH | 7.5 | EspoCRM before 9.3.11 and 10.x before 10.0.8 contains a denial of service vulnerability in which the… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118683 | HIGH | 8.8 | MONAI from 1.2.0 before 1.6.1 contains a remote code execution vulnerability in ConfigWorkflow.__ini… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118679 | HIGH | 7.5 | n8n before 1.123.83, 2.41.4, and 2.42.1 contains a server-side request forgery vulnerability in the … |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118678 | HIGH | 7.1 | n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability that allows … |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118676 | HIGH | 7.1 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows m… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118675 | HIGH | 7.1 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains a credential guard bypass vulnerability that allows… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118649 | HIGH | 8.3 | n8n before 2.43.5 and 2.44.x before 2.44.1 accepts a client-supplied workflow ID and caches each wor… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118648 | HIGH | 7.3 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a stored cross-site script… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118647 | HIGH | 8.2 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's A… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118645 | HIGH | 8.7 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains a filter injection vulnera… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118644 | HIGH | 7.7 | n8n before 2.41.5 and 2.42.x before 2.42.2 passes a failed workflow's full execution context, includ… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118643 | HIGH | 8.2 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execut… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118642 | HIGH | 7.1 | n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows a… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118641 | HIGH | 7.5 | n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection… |
T1190
T1203
|
|
2026-10-28 |