CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-84411 | CRITICAL | 9.8 | The web management service in affected RouterOS versions contains an integer underflow in its HTTP r… |
T1078
T1548
|
|
2026-10-02 |
| CVE-2026-95102 | CRITICAL | 9.4 | WebSocket endpoints lack proper authentication mechanisms, enabling attackers to impersonate chargin… |
T1068
T1134
|
|
2026-10-02 |
| CVE-2026-82042 | CRITICAL | 9.8 | UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers… | — |
|
2026-10-02 |
| CVE-2026-82041 | CRITICAL | 9.9 | UTMStack before 11.2.16 contains a missing authorization vulnerability in UTMIncidentCommandWebsocke… | — |
|
2026-10-02 |
| CVE-2026-104019 | CRITICAL | 9.0 | OS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution … | — |
|
2026-10-02 |
| CVE-2026-103956 | CRITICAL | 10.0 | Missing authentication for critical function in the authentication dependency in Loom for AWS before… | — |
|
2026-10-02 |
| CVE-2023-54405 | CRITICAL | 9.8 | H3C CVM, the Cloud Virtualization Management component of the H3C CAS cloud platform, contains an un… | — |
|
2026-10-02 |
| CVE-2026-102795 | CRITICAL | 9.3 | Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache Traffic… | — |
|
2026-10-02 |
| CVE-2026-104846 | CRITICAL | 9.8 | Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify cap… | — |
|
2026-10-02 |
| CVE-2026-103648 | CRITICAL | 9.1 | Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to caus… |
T1190
T1203
|
|
2026-10-02 |
| CVE-2026-103628 | CRITICAL | 9.6 | Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to ex… |
T1190
T1059
+1
|
|
2026-10-02 |
| CVE-2026-103626 | CRITICAL | 9.6 | Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed … | — |
|
2026-10-02 |
| CVE-2026-90970 | CRITICAL | 9.9 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of t… | — |
|
2026-10-02 |
| CVE-2026-19652 | CRITICAL | 9.8 | The Divi Membership plugin for WordPress is vulnerable to Privilege Escalation in versions up to, an… | — |
|
2026-10-02 |
| CVE-2026-104611 | CRITICAL | 9.1 | A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /… | — |
|
2026-10-02 |
| CVE-2026-104610 | CRITICAL | 10.0 | A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138_en_xpon. This impact… | — |
|
2026-10-02 |
| CVE-2026-94541 | CRITICAL | 9.8 | The WPMobile.App – Android and iOS App Builder plugin for WordPress is vulnerable to authorization b… | — |
|
2026-10-02 |
| CVE-2026-97637 | CRITICAL | 9.8 | The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Coo… | — |
|
2026-10-02 |
| CVE-2026-93698 | CRITICAL | 9.9 | Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin. | — |
|
2026-10-02 |
| CVE-2026-93697 | CRITICAL | 9.0 | There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Account… | — |
|
2026-10-02 |