CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-81855 | CRITICAL | 9.1 | A hardcoded cryptographic client authentication key vulnerability exists in the robot testing framew… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-78225 | CRITICAL | 9.0 | A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller compo… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-73807 | CRITICAL | 9.8 | The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functi… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-73437 | CRITICAL | 9.6 | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay confi… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-61560 | CRITICAL | 9.8 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Prior to version 2.1.27, the S… |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-91939 | CRITICAL | 9.8 | Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes r… |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-91749 | CRITICAL | 9.6 | Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to poten… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-91738 | CRITICAL | 9.6 | Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-91729 | CRITICAL | 9.6 | Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attack… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-91728 | CRITICAL | 9.6 | Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute … |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-91718 | CRITICAL | 9.6 | Use after free in Core in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute … |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-91716 | CRITICAL | 9.6 | Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute … |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-91710 | CRITICAL | 9.6 | Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker t… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-66890 | CRITICAL | 9.6 | The affected products use hard-coded credentials, which could allow remote access to files with root… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-66887 | CRITICAL | 9.6 | The affected products are missing authorization on state-changing CGIs and session checks are not pe… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-61568 | CRITICAL | 9.6 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expos… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-61559 | CRITICAL | 9.6 | `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Starting in version 0.0.1 and … |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-54337 | CRITICAL | 9.8 | Fireshare facilitates self-hosted media and link sharing. Prior to version 1.6.14, an argument Injec… |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-89040 | CRITICAL | 9.8 | Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated attacker to send a cr… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-87230 | CRITICAL | 10.0 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Sec… |
T1078
T1548
|
|
2026-09-15 |