CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-62253 | CRITICAL | 9.8 | Homer is open source telecom observability software. Prior to version 11.0.283, both JWT middleware … | — |
|
2026-10-07 |
| CVE-2026-62252 | CRITICAL | 9.8 | Homer is open source telecom observability software. Prior to version 11.0.283, on every fresh Homer… | — |
|
2026-10-07 |
| CVE-2026-62176 | CRITICAL | 9.1 | PraisonAI is a multi-agent teams system. Prior to version 4.6.78, the `deploy/api.py` module generat… | — |
|
2026-10-07 |
| CVE-2026-20328 | CRITICAL | 9.1 | A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart… | — |
|
2026-10-07 |
| CVE-2026-107206 | CRITICAL | 9.4 | LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP … | — |
|
2026-10-07 |
| CVE-2026-107204 | CRITICAL | 9.8 | LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows re… | — |
|
2026-10-07 |
| CVE-2026-107202 | CRITICAL | 9.1 | A command injection vulnerability exists in the h-ui (version v0.0.25 and below) administrative API … | — |
|
2026-10-07 |
| CVE-2025-70521 | CRITICAL | 9.8 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not hand… | — |
|
2026-10-07 |
| CVE-2025-70518 | CRITICAL | 10.0 | The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not hand… | — |
|
2026-10-07 |
| CVE-2025-70516 | CRITICAL | 9.1 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authenticati… | — |
|
2026-10-07 |
| CVE-2026-102255 | CRITICAL | 10.0 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to … | — |
|
2026-10-07 |
| CVE-2026-96408 | CRITICAL | 9.4 | A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unau… | — |
|
2026-10-07 |
| CVE-2026-105192 | CRITICAL | 9.8 | LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so w… | — |
|
2026-10-07 |
| CVE-2026-97720 | CRITICAL | 9.1 | Incorrect implementation of JWT/OAuth authentication in Impala executors in Apache Impala versions u… | — |
|
2026-10-07 |
| CVE-2026-59346 | CRITICAL | 9.3 | VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with loca… | — |
|
2026-10-07 |
| CVE-2026-93674 | CRITICAL | 9.8 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to… | — |
|
2026-10-07 |
| CVE-2026-104334 | CRITICAL | 9.8 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to… | — |
|
2026-10-07 |
| CVE-2026-106501 | CRITICAL | 9.6 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.… | — |
|
2026-10-06 |
| CVE-2026-101023 | CRITICAL | 9.1 | Gitea's OAuth2 token endpoint verified the signature and grant of a token submitted with the `refres… | — |
|
2026-10-06 |
| CVE-2026-105812 | CRITICAL | 9.0 | Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore St… | — |
|
2026-10-06 |