CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-82435 | CRITICAL | 9.8 | Description The worker's Netty message decoder is installed ahead of the SASL authentication handle… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-82431 | CRITICAL | 9.8 | Description `SimpleACLAuthorizer` evaluated the user-level command set by returning early when `nim… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-57125 | CRITICAL | 9.8 | PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.59 and praisonaiagents 1.6.59, the u… |
T1078
T1548
|
|
2026-09-14 |
| CVE-2026-57123 | CRITICAL | 9.8 | PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-82441 | CRITICAL | 9.1 | Description A submitted topology carries two lists of blobstore keys, `dependency_jars` and `depend… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-82439 | CRITICAL | 9.8 | Description The DRPC server kept a map from function name to request queue and created an entry the… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-73370 | CRITICAL | 9.8 | Incorrect Authorization vulnerability in Apache Syncope. Delegated administration security checks… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-90937 | CRITICAL | 9.9 | froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowi… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-78330 | CRITICAL | 9.8 | Incorrect privilege assignment vulnerability in Apache Syncope. When the configured JWKS settings f… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-78299 | CRITICAL | 9.1 | In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS p… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-77181 | CRITICAL | 9.8 | Incorrect Authorization vulnerability in Apache Syncope. An administrator with ClientApp's update… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-77051 | CRITICAL | 9.8 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… |
T1190
T1005
+1
|
|
2026-09-14 |
| CVE-2026-75030 | CRITICAL | 9.8 | Missing Authorization vulnerability in Apache Syncope. An administrator with task execution entit… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-73668 | CRITICAL | 9.8 | Incorrect Authorization vulnerability in Apache Syncope. An administrator with adequate entitle… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-73579 | CRITICAL | 9.8 | Incorrect Authorization vulnerability in Apache Syncope. Any search requests are transformed into… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-73470 | CRITICAL | 9.8 | Improper Privilege Management vulnerability in Apache Syncope. Delegations can be created or up… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-90919 | CRITICAL | 9.8 | LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthe… |
T1190
T1059
+1
|
|
2026-09-14 |
| CVE-2026-90898 | CRITICAL | 9.8 | Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bif… |
T1078
T1548
|
|
2026-09-14 |
| CVE-2026-87802 | CRITICAL | 9.1 | Improper verification of cryptographic signature vulnerability in Apache Syncope. When SRA is con… |
T1190
T1203
|
|
2026-09-14 |
| CVE-2026-87785 | CRITICAL | 9.1 | Authentication bypass by spoofing vulnerability in Apache Syncope. When the configured JWKS setti… |
T1078
T1548
|
|
2026-09-14 |