CVE Database
10583 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-117601 | HIGH | 7.5 | Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool trans… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117573 | HIGH | 7.8 | hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117569 | HIGH | 7.8 | Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117568 | HIGH | 7.0 | mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117567 | HIGH | 7.8 | esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117561 | HIGH | 7.8 | Codefriar sf-mcp through 1.3.2 contains an OS command injection vulnerability that allows attackers … |
T1190
T1059
+1
|
|
2026-10-27 |
| CVE-2026-117560 | HIGH | 7.8 | ATXP Gemini CLI extension through 1.0.0 contains an OS command injection vulnerability in runAtxp() … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117559 | HIGH | 7.8 | DroidMind through 0.4.0 contains a command injection vulnerability that allows MCP clients to bypass… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117558 | HIGH | 7.8 | The ai-sdlc plugin MCP server through 0.31.2 contains an OS command injection vulnerability that all… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-117553 | HIGH | 7.5 | Umbraco CMS before 17.7.2 and 18.2.2 contains an authentication bypass vulnerability that allows una… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-92546 | HIGH | 7.5 | Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc. Agentic AI / Agen… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-65151 | HIGH | 8.4 | NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue… |
T1190
T1005
+1
|
|
2026-10-27 |
| CVE-2026-65120 | HIGH | 7.1 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request for… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-65119 | HIGH | 8.4 | NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loadin… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-47486 | HIGH | 7.8 | NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-boun… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-24269 | HIGH | 7.1 | NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request for… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-100164 | HIGH | 7.5 | Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry … |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-41021 | HIGH | 7.5 | Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash,… |
T1190
T1203
|
|
2026-10-27 |
| CVE-2026-41020 | HIGH | 7.5 | Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacke… |
T1078
T1548
|
|
2026-10-27 |
| CVE-2026-109995 | HIGH | 7.2 | The Advanced Views – Display Framework for Gutenberg & Elementor plugin for WordPress is vulnerable … |
T1078
T1548
|
|
2026-10-27 |