CVE Database
29323 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-76418 | HIGH | 8.6 | A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appl… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-6647 | HIGH | 7.4 | In deployments of WSO2 Identity Server configured with a case-insensitive user store and a case-sens… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-63190 | CRITICAL | 9.4 | FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-61542 | HIGH | 8.6 | Gearboy is a Game Boy, Game Boy Color, and Super Game Boy emulator and debugger with an embedded MCP… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-61529 | MEDIUM | 4.7 | Endatix is a self-hosted form and survey management platform with a headless API. Prior to 0.7.0, th… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-54162 | MEDIUM | 4.7 | Ember is a real-time terminal dashboard for Caddy servers with FrankenPHP support. Prior to 1.4.2, i… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-3583 | LOW | 3.1 | When the `allowed_scopes` configuration is enabled, the OAuth2 token introspection mechanism does no… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-13451 | HIGH | 7.7 | A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceServi… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-11854 | MEDIUM | 6.1 | The authentication endpoint generates an error message that includes reflected data directly from th… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118655 | MEDIUM | 5.9 | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, middleware.Static can decode an already decod… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118654 | MEDIUM | 5.9 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot… |
T1078
T1548
|
|
2026-10-28 |
| CVE-2026-118653 | MEDIUM | 5.3 | Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP falls back to client-supplied X-F… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118652 | MEDIUM | 6.1 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.JSONP and Context.JSONPBlob concatena… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118651 | MEDIUM | 5.3 | Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middleware can preserve an attacker-su… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-118650 | HIGH | 7.5 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-118266 | MEDIUM | 5.3 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOverride middleware accepts a sa… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-117574 | CRITICAL | 9.1 | A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this… |
T1190
T1059
+1
|
|
2026-10-28 |
| CVE-2026-115415 | MEDIUM | 6.5 | Improper neutralization of input used for LLM prompting in the environment tool in Strands Agents To… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2026-109411 | HIGH | 8.1 | An access control bypass flaw was identified in Samba's vfs_ceph_rgw module in it's openat() functio… |
T1190
T1203
|
|
2026-10-28 |
| CVE-2025-14260 | HIGH | 8.3 | Due to the improper implementation of access control rules, the WSO2 product accepts user-supplied i… |
T1190
T1059
+1
|
|
2026-10-28 |