CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-101008 | CRITICAL | 9.1 | A vulnerability was found in aaPanel BaoTa up to 11.8.0. Impacted is the function merge_split_file o… | — |
|
2026-09-28 |
| CVE-2026-101002 | CRITICAL | 9.9 | A security flaw has been discovered in Netcore NBR200V2 1.3.241127.071246. Affected is the function … | — |
|
2026-09-28 |
| CVE-2026-101001 | CRITICAL | 10.0 | A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval… | — |
|
2026-09-28 |
| CVE-2026-101000 | CRITICAL | 10.0 | A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. This affects the function uci.… | — |
|
2026-09-28 |
| CVE-2026-100896 | CRITICAL | 9.9 | A weakness has been identified in TOTOLINK N150RT 3.4.0-B20201030. The affected element is the funct… | — |
|
2026-09-28 |
| CVE-2026-100886 | CRITICAL | 10.0 | A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. … | — |
|
2026-09-27 |
| CVE-2026-101090 | CRITICAL | 9.8 | Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the ne… | — |
|
2026-09-27 |
| CVE-2026-101084 | CRITICAL | 9.6 | obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allo… |
T1190
T1059
+1
|
|
2026-09-27 |
| CVE-2026-101065 | CRITICAL | 9.8 | Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, th… | — |
|
2026-09-27 |
| CVE-2026-88777 | CRITICAL | 9.8 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. T… | — |
|
2026-09-27 |
| CVE-2026-88776 | CRITICAL | 9.8 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. Th… | — |
|
2026-09-27 |
| CVE-2026-88775 | CRITICAL | 9.8 | Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affe… | — |
|
2026-09-27 |
| CVE-2026-88773 | CRITICAL | 10.0 | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Ci… | — |
|
2026-09-27 |
| CVE-2026-88771 | CRITICAL | 9.8 | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This … | — |
|
2026-09-27 |
| CVE-2026-100741 | CRITICAL | 9.8 | Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versio… | — |
|
2026-09-27 |
| CVE-2026-100721 | CRITICAL | 9.0 | vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an e… | — |
|
2026-09-27 |
| CVE-2026-100740 | CRITICAL | 9.9 | A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_param… | — |
|
2026-09-27 |
| CVE-2026-82901 | CRITICAL | 9.8 | The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Arbitrary File Upload due … | — |
|
2026-09-26 |
| CVE-2026-85984 | CRITICAL | 9.8 | The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to A… | — |
|
2026-09-26 |
| CVE-2026-100717 | CRITICAL | 9.9 | froxlor is a server administration panel. In versions 2.3.10 and earlier, Validate::validateUrl reje… | — |
|
2026-09-26 |