CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-70756 | CRITICAL | 9.8 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). … |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-70748 | CRITICAL | 9.8 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). … |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-56960 | CRITICAL | 9.8 | In multiple locations, there is a possible use-after-free due to a logic error in the code. This cou… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-55366 | CRITICAL | 9.8 | In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the co… |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-19773 | CRITICAL | 9.8 | libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabili… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-61667 | CRITICAL | 9.9 | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-45579 | CRITICAL | 9.9 | DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-12351 | CRITICAL | 9.8 | IBM MQ 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-89026 | CRITICAL | 9.8 | The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf cont… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-53710 | CRITICAL | 10.0 | MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to … |
T1190
T1203
|
|
2026-09-15 |
| CVE-2024-58385 | CRITICAL | 9.8 | Yonyou U8 CRM contains an unauthenticated SQL injection vulnerability in the fillbacksettingedit.php… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2023-54398 | CRITICAL | 9.8 | Yonyou U8 Cloud contains an unauthenticated Java deserialization vulnerability in the nc.impl.pub.fi… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-91949 | CRITICAL | 9.3 | FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allow… |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-55211 | CRITICAL | 9.8 | Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctl… |
T1190
T1059
+1
|
|
2026-09-15 |
| CVE-2026-37152 | CRITICAL | 9.8 | TOTOLINK X5000R V9.1.0cu.2415_B20250515 was discovered to contain a hardcoded password for root acce… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-88617 | CRITICAL | 9.8 | SmartAdmin v3.30.0 contains an authorization flaw in the configuration query endpoint. This allows a… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-63696 | CRITICAL | 9.1 | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Inte… |
T1190
T1203
|
|
2026-09-15 |
| CVE-2026-63695 | CRITICAL | 9.8 | Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerabilit… |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-59971 | CRITICAL | 10.0 | MySQL MCP Server is a Model Context Protocol server that enables secure interaction with MySQL datab… |
T1078
T1548
|
|
2026-09-15 |
| CVE-2026-55158 | CRITICAL | 9.1 | Conflibot warns in advance when merging a pull request will cause conflicts in other open pull reque… |
T1190
T1059
+1
|
|
2026-09-15 |